last executing test programs: 46.333291968s ago: executing program 0 (id=2282): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@llc={0x4, {@llc={0xaa, 0x0, 'c', "88a6a1f49f"}}}}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) 46.331550832s ago: executing program 0 (id=2284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0xbc, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_NAME={0x8, 0x1, 'TOS\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0xb, 0x1, 'TPROXY\x00'}, @NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}]}]}], {0x14}}, 0xe4}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000080)={0x34, r4, 0x2986b594068de4d5, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 44.646581463s ago: executing program 0 (id=2289): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) (async) socket(0x1d, 0x2, 0x6) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x22}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x34, r6, 0x431, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xfe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 42.087655945s ago: executing program 0 (id=2300): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) sendmmsg$inet(r0, &(0x7f0000002e40)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="c1f4e68ab361fc3e4bae2666e9cc8573cb64fa93662698d91d403e7be4f7e8f57e712248b92f115aed49eb53a9d2a9d0f5c3a9655c4b15ed0c6654c821ba732014d3c48f8058d6025df46e2b5d01bff9a4fe2b7fa17200c1046b6807e198940b2bc2a28648283c5f48d79baa332ac9ee07a5a9c450d560f2d1cb7adb2533873ea692c9281f526132dde760b73731c1ff8d6c2097d67e577a7ec8e7f7ca7e6ae0cf7e6264f24a7fa51d4fd7bb29df6c85cd29b7765e9488920e9cbb96baeb6f7d5c5b61c04a6a8e2ed3759b78b21fed7ce6ee71c38c34c9ad49", 0xd9}, {&(0x7f00000001c0)="30d0687da0cf9cb1493567878555eb25af0cfee2df3ef81c218992e1f23f31e182109ce0610c92e7d51c29b5a83e67e1ca9445e4a32a9b6bf1a187b8ba61382205ea90da57ceb1b92015", 0x4a}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="28000000000000000000000007000000941e8e4d800c880bdbad248ec84586d70a00"/47], 0x28}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="3ac6407971c467efbaaef759b91166544f5bf1e8abb992356d2bc6bb2f3da980d5559e13091db440057e934e33acc19ec9dc36f924a8c4c85d3c6c0255147b17007b90b32dc7f5fef60770c1f1a189aa1da8332fbb44d4f224cd69bdd2dfef3e84078d86a3c5bd4e48d862660234bba19bb39622ea932e4aaf14b10c6db4357335e2c3725736a43e14ffda8048b9ee3e71ba449a2be0e4237dfc1acb0cf0f7a47b7b05c4f47eabc27ba78bf2597789e3fd5b7016310781bf8305d593ce62a391525740ed2bbf5df07cd5803fc18c2655746cc9c3c32b44ee3f4618ab3a6c88c6e1cd1d4c13439cdd28e37be47e2037a6f39797", 0xf3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)="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", 0x361}], 0x1}}], 0x3, 0x4008000) (async) bind(r0, &(0x7f0000000440)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80) 42.058552329s ago: executing program 0 (id=2301): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd70000700000004000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="05000a0000000000555c4ede476fe35a7dc428fdbe3937facf78e9b974d0fb32108edffeeadbb5f91773f3bd64f1c6f7a6bb82826be022966078e4fe68ea05bc42e412759ad23bbfccaf30554ed027e9021621017654e37f61a252bcad1911652a707338c71ec126afef4ffc4ecf289d9015626ec838a2de2622ccdb25f70ffd5219ed1e109e632d8e1ddf8bbbbdfc6aee5cc12241cbaa65a1281f1769cd2a234c5c99c57e8ade4d1e780a0000000000001648ff95e6260938688d1414ec8272cfb8703afc7a359c270c683f064ae52469e7df0426220118f5e3c17292251e5f0d451b12269b00d64c0d1aacad9e80ec4728b5f8ff2f6b58fc26143da57d0abf456458c5326fa2334182a36899fbe77b5d1eedee8f6291e189c08b1409bd99e5a89e807ccfbe79b648b8418a06f777f59721ce2646d1fca57cd3f9d21099745d5cc00b21db03f7caca6bb242ce70a3fab99dc3bb63b0d286840a2156aeac61469479ae151939de8340"], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 38.237878072s ago: executing program 0 (id=2319): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r11, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) recvmsg(r7, &(0x7f0000000640)={&(0x7f0000000200)=@caif=@util, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/146, 0x92}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000540)}], 0x6, &(0x7f0000000600)=""/64, 0x40}, 0x43) (async) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r12], 0x4) 26.052217546s ago: executing program 2 (id=2384): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x8, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 26.051588969s ago: executing program 2 (id=2385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x54}}, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0xa, 0x0, &(0x7f0000000100)) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x5, 0x1, {0x2, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 23.956858801s ago: executing program 2 (id=2390): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r0, 0x0, 0x53, 0x0, &(0x7f0000002e40)=0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES64=r3]) (async) pread64(r1, &(0x7f0000000240)=""/144, 0x90, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x24004800) sendto$inet(r5, &(0x7f00000000c0)="126183000000", 0x6, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r7, 0x101, 0x6, 0x0, &(0x7f0000000000)) r8 = socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0xdd86, 0x41}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="623bed114d421d8b1c60ea4388a8", 0x12}], 0x1}, 0x20044001) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xffffffffffffff23) 23.9502066s ago: executing program 1 (id=2391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@local}, @in=@multicast2, {@in6=@mcast2, @in6=@private2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@offload={0xc}]}, 0x134}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x2, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4008064) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, r8, 0x1, 0xffffff81, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xc0c0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r13, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r8, 0x619, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xffffffff, 0x3c}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffff00}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x53b1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27a}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd0}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xee}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x25}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe0}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c884}, 0x20048000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x577801, 0x100408) 23.922477065s ago: executing program 4 (id=2392): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012030b000100804b7656fa84850004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x9c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_COMMENT={0x6, 0x1a, ']\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c084}, 0x20004040) (async) syz_emit_ethernet(0x5e, &(0x7f00000008c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x24}}, 0x0) 22.953762747s ago: executing program 32 (id=2319): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r11, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) recvmsg(r7, &(0x7f0000000640)={&(0x7f0000000200)=@caif=@util, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/146, 0x92}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000540)}], 0x6, &(0x7f0000000600)=""/64, 0x40}, 0x43) (async) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r12], 0x4) 22.953558751s ago: executing program 4 (id=2396): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000a80)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0x11, 0x0, &(0x7f0000000140)) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[], 0xd4}}, 0x4004000) 22.952028747s ago: executing program 1 (id=2397): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006000600800a0000100007"], 0x34}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044885}, 0x2040) r3 = epoll_create1(0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000040)={0x80000017}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000000000006111900000000000c6000000ffff00009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 22.331920518s ago: executing program 1 (id=2399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x39, 0x988}}, &(0x7f0000000480)='GPL\x00', 0x0, 0xffffffffffffff22, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa3}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x16, 0x0, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}, 0x108) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x16, 0x0, 0x39, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0}, 0x40) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, r3, 0x34, 0x2000, r0, @value=r6, @void, @void, @void, r5}, 0x20) 22.329680079s ago: executing program 2 (id=2400): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf20}, 0x94) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e21, @private=0xa010101}}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000, 0x484636fb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x15d}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 21.878249213s ago: executing program 1 (id=2401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000000)=0x100000, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0xecc}, 0xffffffffffffffab) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x10) 20.311191455s ago: executing program 4 (id=2402): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=0x64010101, 0xa, 0x5}}) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x0, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4, @broadcast}}, {{0x2, 0x4e20, @empty}}]}, 0x190) 20.310115038s ago: executing program 3 (id=2403): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = socket(0x14, 0x2, 0x4) connect$pppl2tp(r2, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) close(r4) 20.30791379s ago: executing program 4 (id=2404): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000000c0)="2bcfdc02", 0x4}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f00000002c0)="b5f15e72ce5a371cb7518bcd512e3d566ddb0052d52aadbd8ed33a96b0c57f36f6fe83464f7e0fc0aca292c99249480643ea0a9b8b232212d261dedf1544d43dc2e9c15d52e268badecb82f866761e74c8e9c80bb808812f555cd774d77a4fd8a144373ad7de8dc595c245873d33577840d7c26af6bb595cf08d244a7c449556804aedeeca28b1deff87fa8b6692df7294601e92b76c89f2761113798cfd1010815b2ea53f836672f182ae8669e373a2d0c75bcd9652dac0e34cb18a5411abbe49eab2211e64296c7f764f17492185f1173fcee2fb47cfc432d2f7ec", 0xdc}, {&(0x7f0000000400)="c993fd340023071a22fa425c9f8d3063fd6f69cf79c70fa6fd3cbc40dd0e2c60a1aa92528395ed06240e60b28cca11ea33e029b242ceae3961cf8b9ea141221419eecff45d891da38d5ab4380b098cab697e2f9dee71a9d91052b36dd1c7b52c19b0d0778d8fe433a8883a6749c626ee8b88fdf423a0f7b7707913105e4d1b931fa8fa27d968f6572daf0c0f8f39421bf6aa847f34e980b710ca7c44023f5e25fb65b3a700931d6a86a77a762b315da41d68205081cad05def4a11554fb9f2c43cb6f48b84481b4fa4031e24db4d48090e7a13906f45120a2943b5c3c6d8a3abcd2c702e2c01637fd2762de8edc9b86bbbc22d67d1", 0xf5}, {&(0x7f0000000500)="7dc0aed5d49ed7bd9c8c1149b109ecb93d2a75d3db683613ec25e28e65d0c82f31e105284caeded685a818f2c96e5c17a7cdc5a9ae38992f74229a7bff8ae5c233f595031f2599e4ea97b76c37a54ad2a2f617642e53d217fc97b285678ab260a73907487d8011cc9ca2f942203e14b868f823f64e7b5a24ad57b814d17fa16ab7550754", 0x84}, {&(0x7f00000005c0)="02a47ce670c37ed7146ec105e1628d8b7200fba84cfc0315b4e601eaa3c054b87811f42dcaceb2f84063b35c45d74c876569e66f4f3224b62f3de785598b70069b6606297da263328b3bbacd0abbc5d8678d267fff448dca4ba401da93fc569c20aa52b1", 0x64}, {&(0x7f0000000640)="d2d8a0ec883d00fa301beba4efda25e75abf6f5f9a7865325e0eec05af1c31f94c298404bb3a3c677e4a52fdaaa3001d93de304f3eee5fd8784795475387cde8363a20b48f8c912f2280a64d03", 0x4d}], 0x7}, 0x40000) sendto$inet6(r1, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) r2 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x2, 0x8, 0x8}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, &(0x7f0000000000)=0x380000, r3, &(0x7f0000000040)=0xfbde, 0x2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)={0x14, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 20.196373478s ago: executing program 1 (id=2405): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2000000000000070}}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x1) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x1, 0x803, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r12, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r13, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r14, 0xff07, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500020000005661105e00000000030000000000000000002d133e4e21b300000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe33, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r15], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 20.192679952s ago: executing program 2 (id=2406): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x40080) close(r5) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) 19.621804373s ago: executing program 4 (id=2407): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r2, 0x0, 0x0, 0x40002062, 0x0, 0x0) 19.620881425s ago: executing program 3 (id=2408): r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x1800) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x1020703971be172d}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x1f, r2}]}, 0x44}}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r2], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) 17.880783965s ago: executing program 1 (id=2409): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x8000000000000001, 0xfffffffffffffff8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000050) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000040)={0x1a, 0x322, 0xfc, 0xb, 0x3, 0x5, @remote}, 0x10) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) listen(0xffffffffffffffff, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000", 0x55}], 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r8, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x2, 0xd5}, 0x8) 17.879340275s ago: executing program 4 (id=2410): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xd8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x64, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5a, 0x2, "39843dd44563878d5bdb29eaaa27b1173ab8d3fc7fa701500211615643ab927b7d8b49ef6ff37002275ada13cef4f876872aeb42ec3d1b0bf7df2b803329acc5966fb40dcc27cb0aa01a1a1dab13db4204f3cfb77462"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$inet(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r5) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/131, 0x83}], 0x2, 0x0, 0x0, 0x407006}, 0x104) 17.878312497s ago: executing program 3 (id=2411): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x33}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d270a545a3e67b038264f1e488"}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "b2e80568f3ff"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @empty, 0x4}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x33}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d270a545a3e67b038264f1e488"}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "b2e80568f3ff"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @empty, 0x4}, 0x10) (async) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) 17.877717837s ago: executing program 3 (id=2412): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e23}]}}]}, 0x4c}}, 0x24004000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) (async) close(0x3) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) (async) r5 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x1}, 0xfd}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000080)=""/13, 0x2}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10, 0x35288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 17.827218711s ago: executing program 2 (id=2413): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000000064000000640000000300000003"], 0x0, 0x7f, 0x0, 0x1, 0x2}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x4008014) 17.795467418s ago: executing program 3 (id=2414): r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, r0, 0xa7c17000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001240)=@generic={&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="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", 0x137}, {&(0x7f00000007c0)="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", 0xde5}], 0x4}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="fb", 0x1}], 0x1}}], 0x2, 0x4044805) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x8000000000025a5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r8, 0xc040ff0b, 0x2000000000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000013c0)={"00babd06b5f173306e4ea72696fec6a0", 0x0, 0x0, {0x2, 0xfffffdda}, {0x2, 0x4}, 0x7800d7fa, [0x13c0, 0x7fffffff, 0xc, 0x3, 0xfffffffffffffffe, 0x5, 0x1, 0x1, 0x2, 0xc, 0xfffffffffffffff8, 0x3, 0x21d22d15, 0xfffffffffffffffe, 0x1ff, 0x7]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000014c0)={{r2}, r9, 0x0, @inherit={0x68, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000400000000000000fbffffffffffffff07000000000000000000000000000000070000000000000006000000000000000800000000000000fdffffffffffffff7bf8ffffffffffff09000000003df3f8652f000000090d000000000000010000"]}, @subvolid=0xffffffffffff5aee}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x36, "a42aabcb73e750b657cd51fc84e8662e36a7cc5f4abdc0a893907e7add002f9d2f8791ba57ed657045147d76aae3714013221a8c74fb"}, &(0x7f0000001280)=0x3e) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000012c0)={0x3, 0x400, 0x8, 0x5138, 0x29f6, 0x1, 0x0, 0x3a, r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x49}, [@ldst={0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x2f3, &(0x7f000000cf3d)=""/195, 0x0, 0x28}, 0x48) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e0009fffd0000000008000003000000040004"], 0x34}}, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x16, 0x5, &(0x7f0000002f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route_sched(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r12 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r0, &(0x7f0000000040)={0xc000000c}) 15.244367103s ago: executing program 3 (id=2415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xd0, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4001d}, 0x48800) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000080)="e3710f00217d24965647c62556fdfd5a1c8fa69473fa99bc395b70edf18e3d94a3c2d0f4fdf009c830bb0000000000006e37126edf502069303187fde7bf2ad4841bdac1a83d6b8519b298517c", 0x4d, 0x24000884, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 3.212144377s ago: executing program 33 (id=2409): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x8000000000000001, 0xfffffffffffffff8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000050) bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000040)={0x1a, 0x322, 0xfc, 0xb, 0x3, 0x5, @remote}, 0x10) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) listen(0xffffffffffffffff, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000", 0x55}], 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r8, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x2, 0xd5}, 0x8) 3.10060506s ago: executing program 34 (id=2410): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xd8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x64, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5a, 0x2, "39843dd44563878d5bdb29eaaa27b1173ab8d3fc7fa701500211615643ab927b7d8b49ef6ff37002275ada13cef4f876872aeb42ec3d1b0bf7df2b803329acc5966fb40dcc27cb0aa01a1a1dab13db4204f3cfb77462"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$inet(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r5) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/131, 0x83}], 0x2, 0x0, 0x0, 0x407006}, 0x104) 2.045988886s ago: executing program 35 (id=2413): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000000064000000640000000300000003"], 0x0, 0x7f, 0x0, 0x1, 0x2}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x4008014) 0s ago: executing program 36 (id=2415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xd0, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4001d}, 0x48800) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000080)="e3710f00217d24965647c62556fdfd5a1c8fa69473fa99bc395b70edf18e3d94a3c2d0f4fdf009c830bb0000000000006e37126edf502069303187fde7bf2ad4841bdac1a83d6b8519b298517c", 0x4d, 0x24000884, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.1.64'. [ 102.110302][ T6227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.151786][ T6232] netlink: 'syz.3.66': attribute type 10 has an invalid length. [ 102.172379][ T6226] IPVS: using max 24 ests per chain, 57600 per kthread [ 102.231536][ T6225] veth3: entered promiscuous mode [ 102.298371][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 102.321495][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 102.366742][ T6229] gretap1: entered allmulticast mode [ 102.429149][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.456703][ T6232] bridge_slave_1: left allmulticast mode [ 102.481348][ T6232] bridge_slave_1: left promiscuous mode [ 102.505884][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.546972][ T6232] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 102.709626][ T6254] netlink: 'syz.2.72': attribute type 10 has an invalid length. [ 103.818145][ T6307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.86'. [ 103.988149][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.87'. [ 104.038871][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.87'. [ 104.054796][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 104.090892][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.108518][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.131263][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.142106][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.248526][ T6317] sctp: [Deprecated]: syz.0.88 (pid 6317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.248526][ T6317] Use struct sctp_sack_info instead [ 104.825944][ T6343] bridge1: entered allmulticast mode [ 104.872821][ T6353] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 104.910618][ T6353] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 104.953243][ T6351] xfrm1: entered promiscuous mode [ 104.973934][ T6351] xfrm1: entered allmulticast mode [ 106.025375][ T6404] gretap0: entered promiscuous mode [ 106.249633][ T6414] tipc: Started in network mode [ 106.258321][ T6414] tipc: Node identity fffeffff, cluster identity 4711 [ 106.271300][ T6414] tipc: Node number set to 4294901759 [ 106.378039][ T6418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.419536][ T6423] trusted_key: syz.2.118 sent an empty control message without MSG_MORE. [ 106.640802][ T6428] __nla_validate_parse: 5 callbacks suppressed [ 106.640826][ T6428] netlink: 48 bytes leftover after parsing attributes in process `syz.3.116'. [ 106.907215][ T6443] netlink: 576 bytes leftover after parsing attributes in process `syz.0.124'. [ 106.967920][ T6441] netlink: 576 bytes leftover after parsing attributes in process `syz.0.124'. [ 107.393193][ T6463] netlink: 216 bytes leftover after parsing attributes in process `syz.3.130'. [ 107.429629][ T6468] netlink: 216 bytes leftover after parsing attributes in process `syz.3.130'. [ 107.565196][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.134'. [ 107.759920][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 107.939400][ T6496] netlink: 44 bytes leftover after parsing attributes in process `syz.2.140'. [ 108.206584][ T6505] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 108.250437][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 108.387719][ T6517] tipc: Started in network mode [ 108.392666][ T6517] tipc: Node identity 5ea3c177debc, cluster identity 4711 [ 108.419099][ T6517] tipc: Enabled bearer , priority 0 [ 108.419742][ T6519] openvswitch: netlink: Duplicate or invalid key (type 0). [ 108.444872][ T6519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.500257][ T6517] syzkaller0: entered promiscuous mode [ 108.506200][ T6517] syzkaller0: entered allmulticast mode [ 108.512817][ T6517] tipc: Resetting bearer [ 108.521374][ T6520] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.147'. [ 108.710493][ T13] tipc: Resetting bearer [ 108.822524][ T6535] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 109.158388][ T6512] tipc: Resetting bearer [ 109.258867][ T6551] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 109.456290][ T5933] tipc: Node number set to 2149564791 [ 109.601356][ T6572] netlink: zone id is out of range [ 109.608109][ T6572] netlink: zone id is out of range [ 109.618830][ T6572] netlink: zone id is out of range [ 109.624205][ T6572] netlink: zone id is out of range [ 109.629481][ T6572] netlink: zone id is out of range [ 109.637962][ T6572] netlink: zone id is out of range [ 109.643267][ T6572] netlink: zone id is out of range [ 109.767923][ T6574] netlink: 'syz.4.161': attribute type 83 has an invalid length. [ 110.566752][ T6512] tipc: Disabling bearer [ 110.816781][ T6580] netlink: 'syz.4.163': attribute type 21 has an invalid length. [ 110.838105][ T6585] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 110.961943][ T6587] bond2: (slave bridge2): making interface the new active one [ 110.970523][ T6584] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 110.971214][ T6587] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 111.668890][ T6625] __nla_validate_parse: 5 callbacks suppressed [ 111.668919][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'. [ 112.041565][ T6644] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 112.092695][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 112.160700][ T6654] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.187'. [ 112.366811][ T6661] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 112.402235][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.411504][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.454998][ T6667] netlink: 'syz.4.189': attribute type 1 has an invalid length. [ 112.473181][ T6667] nbd: error processing sock list [ 112.487443][ T6667] block nbd0: shutting down sockets [ 112.681422][ T6682] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 112.791949][ T6682] netlink: 'syz.2.195': attribute type 1 has an invalid length. [ 112.898838][ T6688] netlink: 44 bytes leftover after parsing attributes in process `syz.2.195'. [ 112.965439][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 112.967729][ T6698] netlink: 48 bytes leftover after parsing attributes in process `syz.1.201'. [ 112.978703][ T6682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.195'. [ 112.984154][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.201'. [ 113.023795][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 113.092342][ T6682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.660349][ T6735] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.211'. [ 114.086832][ T6767] netlink: 'syz.0.218': attribute type 6 has an invalid length. [ 114.253174][ T6777] netlink: 'syz.0.220': attribute type 18 has an invalid length. [ 114.274895][ T56] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.283991][ T6777] netlink: 'syz.0.220': attribute type 18 has an invalid length. [ 114.286416][ T56] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.302667][ T56] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.314437][ T56] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.314596][ T6777] netlink: 'syz.0.220': attribute type 18 has an invalid length. [ 114.759159][ T6788] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 114.829710][ T6788] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 115.738883][ T6838] validate_nla: 62 callbacks suppressed [ 115.738905][ T6838] netlink: 'syz.3.233': attribute type 1 has an invalid length. [ 116.058099][ T6861] net_ratelimit: 19 callbacks suppressed [ 116.058119][ T6861] openvswitch: netlink: Missing key (keys=40, expected=80) [ 116.774905][ T6895] __nla_validate_parse: 9 callbacks suppressed [ 116.774927][ T6895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.251'. [ 116.794767][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 116.823800][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 116.849806][ T6897] netlink: 'syz.3.253': attribute type 3 has an invalid length. [ 116.895176][ T6905] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.253'. [ 117.480087][ T6933] netlink: 'syz.2.264': attribute type 19 has an invalid length. [ 117.741560][ T6945] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 117.747735][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 117.753844][ T43] IPVS: starting estimator thread 0... [ 117.790244][ T6945] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.267'. [ 117.883491][ T6947] IPVS: using max 27 ests per chain, 64800 per kthread [ 117.949428][ T6951] tipc: Enabled bearer , priority 0 [ 117.986949][ T6951] syzkaller0: entered promiscuous mode [ 117.992501][ T6951] syzkaller0: entered allmulticast mode [ 118.031282][ T6951] tipc: Resetting bearer [ 118.063923][ T6950] tipc: Resetting bearer [ 118.166401][ T6950] tipc: Disabling bearer [ 118.375931][ T6977] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 118.418757][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 118.472438][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 118.511709][ T6978] netlink: 36 bytes leftover after parsing attributes in process `syz.2.276'. [ 118.632699][ T6993] netlink: 'syz.3.280': attribute type 11 has an invalid length. [ 118.771179][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 119.046098][ T7011] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.439613][ T7032] netlink: 'syz.3.292': attribute type 6 has an invalid length. [ 119.782217][ T7055] netlink: 'syz.0.299': attribute type 4 has an invalid length. [ 120.025282][ T7072] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 120.039793][ T7073] netlink: 'syz.0.302': attribute type 2 has an invalid length. [ 120.074163][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 120.403686][ T7094] erspan0: entered promiscuous mode [ 120.420698][ T7094] vlan2: entered promiscuous mode [ 120.881355][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.920950][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.212185][ T7136] netlink: 'syz.0.321': attribute type 10 has an invalid length. [ 121.268718][ T7136] team0: Device ipvlan1 failed to register rx_handler [ 121.651195][ T7160] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 121.775669][ T7165] macvlan2: entered allmulticast mode [ 121.799068][ T7165] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 122.058468][ T7182] __nla_validate_parse: 8 callbacks suppressed [ 122.058492][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 122.082490][ T7183] netlink: 'syz.3.332': attribute type 39 has an invalid length. [ 122.281079][ T7192] bridge_slave_0: invalid flags given to default FDB implementation [ 122.650272][ T7204] tipc: Enabling of bearer rejected, failed to enable media [ 122.879731][ T7218] tipc: Started in network mode [ 122.889941][ T7218] tipc: Node identity 8a1045a7e7e6, cluster identity 4711 [ 122.912770][ T7218] tipc: Enabled bearer , priority 0 [ 122.972715][ T7219] syzkaller0: entered promiscuous mode [ 122.987699][ T7219] syzkaller0: entered allmulticast mode [ 123.069430][ T7218] tipc: Resetting bearer [ 123.123793][ T7234] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 123.142432][ T7217] tipc: Resetting bearer [ 123.207397][ T7217] tipc: Disabling bearer [ 123.502933][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 123.537819][ T7257] team_slave_0: entered promiscuous mode [ 123.543890][ T7257] team_slave_1: entered promiscuous mode [ 123.556065][ T7259] netlink: 14 bytes leftover after parsing attributes in process `syz.1.352'. [ 123.889638][ T7273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.357'. [ 123.988804][ T7259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.017380][ T7259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.035747][ T7259] bond0 (unregistering): Released all slaves [ 124.106541][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'. [ 124.118823][ T7276] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 124.130926][ T7276] tipc: Enabled bearer , priority 10 [ 124.167665][ T7288] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.189337][ T7288] netlink: 'syz.4.360': attribute type 12 has an invalid length. [ 124.259712][ T7291] vlan1: entered promiscuous mode [ 124.476397][ T7301] geneve2: entered promiscuous mode [ 124.481692][ T7301] geneve2: entered allmulticast mode [ 124.485821][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'. [ 124.499607][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'. [ 124.527272][ T7309] openvswitch: netlink: Flow actions attr not present in new flow. [ 124.536660][ T7308] openvswitch: netlink: Flow actions attr not present in new flow. [ 124.890524][ T7320] bond0: entered promiscuous mode [ 124.897435][ T7320] bond0: entered allmulticast mode [ 124.908549][ T7320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.019437][ T7331] netlink: 'syz.2.373': attribute type 13 has an invalid length. [ 125.039431][ T7331] netlink: 'syz.2.373': attribute type 58 has an invalid length. [ 125.047489][ T7331] netlink: 152 bytes leftover after parsing attributes in process `syz.2.373'. [ 125.243697][ T43] tipc: Node number set to 1844856231 [ 125.450386][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 125.473429][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.380'. [ 125.503411][ T1147] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.524000][ T5954] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.532146][ T1147] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.683886][ T5954] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.004806][ T920] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.778996][ T7422] ipvlan0: entered promiscuous mode [ 126.784482][ T7422] ipvlan0: entered allmulticast mode [ 126.789853][ T7422] veth0_vlan: entered allmulticast mode [ 126.869266][ T7428] netlink: 'syz.3.396': attribute type 10 has an invalid length. [ 126.910019][ T7428] team0: Device hsr_slave_0 failed to register rx_handler [ 127.014969][ T7433] tipc: Enabled bearer , priority 0 [ 127.034539][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 127.098376][ T7435] syzkaller0: entered promiscuous mode [ 127.114008][ T7435] syzkaller0: entered allmulticast mode [ 127.219630][ T7445] __nla_validate_parse: 1 callbacks suppressed [ 127.219651][ T7445] netlink: 60 bytes leftover after parsing attributes in process `syz.4.399'. [ 127.399228][ T7448] tipc: Resetting bearer [ 127.487470][ T7430] tipc: Resetting bearer [ 127.555570][ T7430] tipc: Disabling bearer [ 127.663289][ T7464] pim6reg1: entered promiscuous mode [ 127.703910][ T7464] pim6reg1: entered allmulticast mode [ 127.725885][ T7464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 127.787841][ T7469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.408'. [ 127.952247][ T7480] bpq0: entered allmulticast mode [ 128.090175][ T7482] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 128.123367][ T7484] netlink: 'syz.0.412': attribute type 12 has an invalid length. [ 128.131503][ T7484] netlink: 'syz.0.412': attribute type 29 has an invalid length. [ 128.163391][ T7484] netlink: 148 bytes leftover after parsing attributes in process `syz.0.412'. [ 128.193714][ T7484] netlink: 59 bytes leftover after parsing attributes in process `syz.0.412'. [ 128.197638][ T7494] netlink: 6 bytes leftover after parsing attributes in process `syz.0.412'. [ 128.222780][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.415'. [ 128.257362][ T7488] netlink: 56 bytes leftover after parsing attributes in process `syz.4.415'. [ 128.316502][ T7496] netlink: 84 bytes leftover after parsing attributes in process `syz.2.417'. [ 128.340111][ T7496] netlink: 64 bytes leftover after parsing attributes in process `syz.2.417'. [ 129.445270][ T7549] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 129.624392][ T7557] tap0: tun_chr_ioctl cmd 2148553947 [ 129.630715][ T7557] tap0: tun_chr_ioctl cmd 1074025675 [ 129.636226][ T7557] tap0: persist enabled [ 129.753988][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.015393][ T7582] sctp: [Deprecated]: syz.4.444 (pid 7582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.015393][ T7582] Use struct sctp_sack_info instead [ 130.493788][ T7606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.617217][ T7620] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 130.653340][ T7620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.717681][ T7606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.829432][ T7620] pimreg: entered allmulticast mode [ 131.090760][ T7643] netlink: 'syz.0.462': attribute type 15 has an invalid length. [ 131.201040][ T7644] Bluetooth: MGMT ver 1.23 [ 131.262455][ T24] IPVS: starting estimator thread 0... [ 131.354276][ T7652] IPVS: using max 27 ests per chain, 64800 per kthread [ 131.717269][ T7671] netlink: 'syz.1.472': attribute type 4 has an invalid length. [ 131.774334][ T7675] netlink: 'syz.1.472': attribute type 4 has an invalid length. [ 131.869166][ T7677] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.919612][ T7677] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 131.942521][ T7688] tipc: Can't bind to reserved service type 0 [ 132.119654][ T7691] ip6gretap0: entered promiscuous mode [ 132.322207][ T7700] __nla_validate_parse: 18 callbacks suppressed [ 132.322233][ T7700] netlink: 212272 bytes leftover after parsing attributes in process `syz.2.479'. [ 132.325707][ T7703] netlink: 'syz.3.482': attribute type 9 has an invalid length. [ 132.506505][ T7705] tipc: Enabling of bearer rejected, failed to enable media [ 132.511841][ T7711] netlink: 'syz.4.483': attribute type 6 has an invalid length. [ 132.522651][ T7710] netlink: 72 bytes leftover after parsing attributes in process `syz.3.482'. [ 132.533420][ T7710] netlink: 72 bytes leftover after parsing attributes in process `syz.3.482'. [ 132.562787][ T7705] netlink: 'syz.4.483': attribute type 6 has an invalid length. [ 133.038924][ T7725] netlink: 'syz.0.488': attribute type 4 has an invalid length. [ 133.275081][ T5185] Bluetooth: hci2: command 0x0401 tx timeout [ 133.281434][ T5881] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 133.389421][ T7738] netem: change failed [ 133.753995][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 133.785795][ T7743] netlink: 44 bytes leftover after parsing attributes in process `syz.0.494'. [ 133.827216][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 133.911754][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 133.972713][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 134.179704][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 134.225132][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.367396][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 134.399028][ T7757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.422595][ T7757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.731154][ T56] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.762870][ T56] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.795925][ T56] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.912474][ T1096] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.913064][ T7801] netlink: 'syz.2.508': attribute type 4 has an invalid length. [ 134.969256][ T7800] IPv6: sit1: Disabled Multicast RS [ 134.981430][ T7805] netlink: 'syz.2.508': attribute type 4 has an invalid length. [ 134.996715][ T7800] sit1: entered allmulticast mode [ 135.071115][ T7807] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 135.100562][ T7807] netlink: 224 bytes leftover after parsing attributes in process `syz.2.508'. [ 135.300568][ T7822] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 135.471524][ T7814] team0 (unregistering): Port device team_slave_0 removed [ 135.490227][ T7814] team0 (unregistering): Port device team_slave_1 removed [ 135.677819][ T7828] syz.1.513 (7828) used greatest stack depth: 17928 bytes left [ 135.834265][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 135.941026][ T7853] team0: Device vti0 is of different type [ 135.964248][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065002400: rx timeout, send abort [ 136.041451][ T7864] tipc: Enabling of bearer rejected, failed to enable media [ 136.145225][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.166919][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.309985][ T7876] xt_HMARK: spi-set and port-set can't be combined [ 136.355928][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.375342][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.464383][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880576dc000: rx timeout, send abort [ 136.473611][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065002400: abort rx timeout. Force session deactivation [ 136.689384][ T7893] openvswitch: netlink: Missing key (keys=40, expected=80) [ 136.972700][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff8880576dc000: abort rx timeout. Force session deactivation [ 137.024298][ T7910] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 3, id = 0 [ 137.565967][ T7931] netlink: 'syz.3.540': attribute type 83 has an invalid length. [ 137.595804][ T7933] __nla_validate_parse: 83 callbacks suppressed [ 137.595823][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.541'. [ 137.799151][ T7936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.541'. [ 137.822020][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'. [ 137.833353][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.544'. [ 137.853976][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.544'. [ 138.088467][ T7947] vlan0: entered promiscuous mode [ 138.103028][ T7950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.548'. [ 138.113534][ T7947] bridge0: entered promiscuous mode [ 138.156779][ T7953] netlink: 40 bytes leftover after parsing attributes in process `syz.1.548'. [ 138.321345][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.330678][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.965899][ T7987] tipc: Enabled bearer , priority 0 [ 138.975169][ T7987] syzkaller0: entered promiscuous mode [ 138.980697][ T7987] syzkaller0: entered allmulticast mode [ 139.024271][ T7987] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 139.130993][ T7987] tipc: Resetting bearer [ 139.165012][ T7987] tipc: Disabling bearer [ 139.247145][ T8003] netlink: 'syz.4.560': attribute type 64 has an invalid length. [ 139.263859][ T8003] netlink: 5 bytes leftover after parsing attributes in process `syz.4.560'. [ 139.309311][ T8005] netlink: 'syz.0.561': attribute type 3 has an invalid length. [ 139.417116][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 139.586020][ T8018] syz_tun: entered allmulticast mode [ 139.599767][ T8018] tipc: Invalid UDP bearer configuration [ 139.599825][ T8018] tipc: Enabling of bearer rejected, failed to enable media [ 139.631858][ T8017] syz_tun: left allmulticast mode [ 139.784081][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 139.943461][ T8034] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 139.981788][ T8037] netlink: 'syz.2.574': attribute type 1 has an invalid length. [ 140.073217][ T8037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.121716][ T8034] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.132767][ T8034] bond3: (slave bond4): making interface the new active one [ 140.141841][ T8034] bond3: (slave bond4): Enslaving as an active interface with an up link [ 140.172486][ T8040] bond2: (slave veth7): Enslaving as an active interface with a down link [ 140.200601][ T8041] bond2: (slave veth9): Enslaving as an active interface with a down link [ 140.217835][ T8042] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.271655][ T8046] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 140.358699][ T8056] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 140.457219][ T8052] syzkaller0: entered promiscuous mode [ 140.472717][ T8052] syzkaller0: entered allmulticast mode [ 140.967601][ T8080] netlink: 'syz.0.586': attribute type 1 has an invalid length. [ 141.053782][ T8062] infiniband syz!: set active [ 141.073473][ T8062] infiniband syz!: added team_slave_0 [ 141.092712][ T8062] syz!: rxe_create_cq: returned err = -12 [ 141.119477][ T8062] infiniband syz!: Couldn't create ib_mad CQ [ 141.146097][ T8062] infiniband syz!: Couldn't open port 1 [ 141.346388][ T8062] RDS/IB: syz!: added [ 141.384428][ T8062] smc: adding ib device syz! with port count 1 [ 141.390938][ T8062] smc: ib device syz! port 1 has pnetid [ 141.454863][ T8105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.546572][ T8152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.632896][ T8159] netlink: 'syz.2.607': attribute type 3 has an invalid length. [ 142.714225][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 143.409083][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 143.450797][ T8206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.659012][ T8222] IPVS: ip_vs_add_dest(): server weight less than zero [ 144.110844][ T8242] __nla_validate_parse: 10 callbacks suppressed [ 144.110866][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 144.142746][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 144.166665][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 144.240949][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.631'. [ 144.254692][ T8245] netlink: 'syz.1.630': attribute type 1 has an invalid length. [ 144.293270][ T8245] netlink: 'syz.1.630': attribute type 3 has an invalid length. [ 144.317192][ T8245] netlink: 224 bytes leftover after parsing attributes in process `syz.1.630'. [ 144.478822][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 145.145648][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 145.158652][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 145.349688][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 145.372872][ T8283] syz_tun: entered promiscuous mode [ 145.392772][ T8283] batadv_slave_0: entered promiscuous mode [ 145.414067][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 146.052869][ T8306] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 146.538851][ T8320] netlink: 'syz.0.652': attribute type 11 has an invalid length. [ 146.556282][ T8324] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 146.572705][ T8324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.595735][ T8323] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.752996][ T8330] Bluetooth: MGMT ver 1.23 [ 146.779015][ T8330] netlink: 'syz.2.657': attribute type 178 has an invalid length. [ 146.828045][ T8330] netlink: 'syz.2.657': attribute type 10 has an invalid length. [ 146.856746][ T8330] veth0_vlan: entered allmulticast mode [ 146.917945][ T8330] team0: Device veth0_vlan failed to register rx_handler [ 147.252555][ T8364] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 147.864598][ T8374] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 147.892167][ T8377] netlink: 'syz.3.669': attribute type 2 has an invalid length. [ 148.032658][ T8385] netlink: 'syz.1.671': attribute type 3 has an invalid length. [ 148.165677][ T8387] policy can only be matched on NF_INET_PRE_ROUTING [ 148.165700][ T8387] unable to load match [ 148.889112][ T8422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.218985][ T8426] __nla_validate_parse: 10 callbacks suppressed [ 149.219005][ T8426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 149.334673][ T8424] syz.3.682 (8424) used greatest stack depth: 17864 bytes left [ 149.644844][ T8449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.689'. [ 149.664643][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'. [ 149.669321][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 149.727438][ T8452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.732068][ T8450] netlink: 211372 bytes leftover after parsing attributes in process `syz.3.688'. [ 150.126382][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 150.149762][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 150.223530][ T8474] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 150.245171][ T8474] netlink: 168 bytes leftover after parsing attributes in process `syz.1.696'. [ 150.275710][ T8474] IPVS: length: 8 != 1152 [ 150.588597][ T8489] netlink: 'syz.2.702': attribute type 5 has an invalid length. [ 150.835544][ T8507] pimreg: entered allmulticast mode [ 176.858761][ T8515] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 176.891928][ T8523] tipc: Started in network mode [ 176.912097][ T8523] tipc: Node identity , cluster identity 4711 [ 176.954209][ T8523] tipc: Failed to obtain node identity [ 176.959779][ T8523] tipc: Enabling of bearer rejected, failed to enable media [ 177.031776][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 177.091437][ T8533] veth0: entered promiscuous mode [ 177.101404][ T8523] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 177.112901][ T8523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.132562][ T8534] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.714'. [ 177.163368][ T8537] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.713'. [ 177.614300][ T8558] netlink: 40 bytes leftover after parsing attributes in process `syz.0.719'. [ 177.829194][ T8527] veth0: left promiscuous mode [ 178.728806][ T8617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.096363][ T8623] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 179.130796][ T8622] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 179.139733][ T8624] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 179.250885][ T8623] bond1: entered promiscuous mode [ 179.266222][ T8623] bond1: entered allmulticast mode [ 179.272423][ T8623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.364072][ T8645] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 179.425151][ T8652] tipc: Started in network mode [ 179.430731][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 179.454077][ T8652] tipc: Node identity 7e080a99a486, cluster identity 4711 [ 179.473863][ T8652] tipc: Enabled bearer , priority 0 [ 179.484387][ T8646] netlink: 596 bytes leftover after parsing attributes in process `syz.1.744'. [ 179.580720][ T8652] syzkaller0: entered promiscuous mode [ 179.594643][ T8652] syzkaller0: entered allmulticast mode [ 179.767651][ T8669] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.841147][ T8653] tipc: Resetting bearer [ 179.895418][ T8653] tipc: Disabling bearer [ 179.975156][ T8677] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 180.226041][ T8681] bridge1: entered promiscuous mode [ 180.244065][ T8681] bridge1: entered allmulticast mode [ 180.343447][ T8692] syzkaller0: entered promiscuous mode [ 180.349107][ T8692] syzkaller0: entered allmulticast mode [ 180.360224][ T8692] tipc: Enabled bearer , priority 0 [ 180.391914][ T8692] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 180.438616][ T8692] tipc: Resetting bearer [ 180.455713][ T8691] tipc: Resetting bearer [ 180.488732][ T8691] tipc: Disabling bearer [ 180.786428][ T8678] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 181.238172][ T8726] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 181.271022][ T8740] netlink: 84 bytes leftover after parsing attributes in process `syz.1.769'. [ 181.325429][ T8740] netlink: 84 bytes leftover after parsing attributes in process `syz.1.769'. [ 181.337337][ T8740] netlink: 84 bytes leftover after parsing attributes in process `syz.1.769'. [ 181.357660][ T8740] netlink: 84 bytes leftover after parsing attributes in process `syz.1.769'. [ 181.367219][ T8738] net veth1_virt_wifi .: renamed from virt_wifi0 [ 182.480933][ T8812] pimreg3: entered allmulticast mode [ 182.761218][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.772139][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.779789][ T8827] __nla_validate_parse: 30 callbacks suppressed [ 182.779804][ T8827] netlink: 32 bytes leftover after parsing attributes in process `syz.1.789'. [ 182.802399][ T8826] netlink: 212288 bytes leftover after parsing attributes in process `syz.3.788'. [ 183.078129][ T8831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.791'. [ 183.440621][ T8836] netlink: 'syz.4.793': attribute type 15 has an invalid length. [ 183.452543][ T8836] netlink: 232 bytes leftover after parsing attributes in process `syz.4.793'. [ 184.620908][ T8848] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 184.902906][ T8863] openvswitch: netlink: IPv6 tunnel dst address is zero [ 184.975902][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.003932][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.004469][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.183852][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.373064][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.807'. [ 185.411760][ T8887] xfrm2: entered promiscuous mode [ 185.431271][ T8887] xfrm2: entered allmulticast mode [ 185.446390][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.807'. [ 185.728399][ T8902] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.812'. [ 185.754030][ T5954] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.926515][ T8907] netlink: 'syz.3.813': attribute type 2 has an invalid length. [ 185.951351][ T8909] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 185.959334][ T8909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.963369][ T8907] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.813'. [ 186.226118][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'. [ 186.597299][ T8938] netlink: 104 bytes leftover after parsing attributes in process `syz.4.823'. [ 187.499539][ T8947] sctp: [Deprecated]: syz.4.826 (pid 8947) Use of int in max_burst socket option deprecated. [ 187.499539][ T8947] Use struct sctp_assoc_value instead [ 188.092029][ T8963] tipc: Enabling of bearer rejected, media not registered [ 188.177086][ T8971] tipc: Enabling of bearer rejected, media not registered [ 188.212097][ T8975] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 188.217172][ T8968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.244719][ T8974] netlink: 'syz.2.833': attribute type 24 has an invalid length. [ 188.266466][ T8969] __nla_validate_parse: 1 callbacks suppressed [ 188.266485][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.832'. [ 188.337387][ T8981] netlink: 516 bytes leftover after parsing attributes in process `syz.0.834'. [ 188.457569][ T8984] tipc: Enabled bearer , priority 0 [ 188.479960][ T8984] tipc: Resetting bearer [ 188.520906][ T8982] tipc: Disabling bearer [ 188.562701][ T8993] openvswitch: netlink: Message has -1 unknown bytes. [ 188.755728][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.842'. [ 188.755783][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.842'. [ 188.801249][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.842'. [ 188.888518][ T9013] bridge2: entered promiscuous mode [ 188.895253][ T9013] bridge2: entered allmulticast mode [ 188.961764][ T9004] bridge3: entered promiscuous mode [ 188.967454][ T9004] bridge3: entered allmulticast mode [ 188.995922][ T9023] atomic_op ffff888055ccd198 conn xmit_atomic 0000000000000000 [ 189.005511][ T9019] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 189.033279][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 189.069938][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.107511][ T9021] bridge_slave_1 (unregistering): left allmulticast mode [ 189.136160][ T9021] bridge_slave_1 (unregistering): left promiscuous mode [ 189.155244][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.353754][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.797765][ T9044] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 190.420421][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.861'. [ 190.583030][ T9080] netlink: 112 bytes leftover after parsing attributes in process `syz.2.863'. [ 190.590777][ T9078] netlink: 'syz.4.862': attribute type 4 has an invalid length. [ 190.622340][ T9077] netlink: 'syz.4.862': attribute type 4 has an invalid length. [ 190.855098][ T9089] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 190.862519][ T9095] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 191.441982][ T9125] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.878'. [ 191.818913][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'. [ 192.184739][ T9170] netlink: 'syz.3.890': attribute type 21 has an invalid length. [ 192.306961][ T9182] netlink: 'syz.1.893': attribute type 2 has an invalid length. [ 192.400609][ T9186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.653070][ T9197] tipc: Started in network mode [ 192.671595][ T9197] tipc: Node identity 9260dcef482f, cluster identity 4711 [ 192.695319][ T9197] tipc: Enabled bearer , priority 0 [ 192.736006][ T9204] syzkaller0: entered promiscuous mode [ 192.758794][ T9204] syzkaller0: entered allmulticast mode [ 192.836420][ T9197] tipc: Resetting bearer [ 192.877153][ T9207] veth3: entered promiscuous mode [ 192.892405][ T9207] veth3: entered allmulticast mode [ 193.088043][ T9195] tipc: Resetting bearer [ 193.129060][ T9195] tipc: Disabling bearer [ 193.141655][ T9220] netlink: 'syz.4.903': attribute type 1 has an invalid length. [ 193.210903][ T9220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.222200][ T9222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.548207][ T9239] __nla_validate_parse: 3 callbacks suppressed [ 193.548227][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.908'. [ 193.630073][ T9249] netlink: 'syz.2.911': attribute type 6 has an invalid length. [ 193.658255][ T9239] xfrm1: entered promiscuous mode [ 193.663984][ T9239] xfrm1: entered allmulticast mode [ 193.846717][ T9259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.913'. [ 193.949606][ T9268] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 194.399429][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.922'. [ 194.846897][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'. [ 195.132294][ T9320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.927'. [ 195.600356][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 195.663322][ T9336] netlink: 164 bytes leftover after parsing attributes in process `syz.3.930'. [ 195.688653][ T9336] netlink: 164 bytes leftover after parsing attributes in process `syz.3.930'. [ 195.729544][ T9336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.930'. [ 195.878613][ T9345] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 195.917010][ T9345] netlink: 17 bytes leftover after parsing attributes in process `syz.2.932'. [ 196.505212][ T9378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.791230][ T9390] veth0: entered promiscuous mode [ 196.804950][ T9387] veth0: left promiscuous mode [ 197.029027][ T9406] sctp: [Deprecated]: syz.2.948 (pid 9406) Use of int in max_burst socket option. [ 197.029027][ T9406] Use struct sctp_assoc_value instead [ 197.152970][ T9412] netlink: 'syz.0.950': attribute type 1 has an invalid length. [ 197.829529][ T9441] openvswitch: netlink: Flow key attr not present in new flow. [ 198.050815][ T9463] netlink: 'syz.1.960': attribute type 39 has an invalid length. [ 198.082331][ T9466] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 198.473767][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.594086][ T9487] netlink: 'syz.3.965': attribute type 58 has an invalid length. [ 198.631084][ T9487] __nla_validate_parse: 8 callbacks suppressed [ 198.631107][ T9487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.965'. [ 198.817848][ T9501] netlink: 56 bytes leftover after parsing attributes in process `syz.4.972'. [ 198.853277][ T9501] netlink: 'syz.4.972': attribute type 32 has an invalid length. [ 199.225309][ T9528] netlink: 'syz.0.976': attribute type 10 has an invalid length. [ 199.374344][ T9536] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 199.420499][ T9536] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 199.440731][ T9536] netlink: 15 bytes leftover after parsing attributes in process `syz.3.978'. [ 199.654753][ T9542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.980'. [ 199.757979][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.772288][ T9546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.981'. [ 199.821688][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 199.910440][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.985'. [ 200.030209][ T9563] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001 [ 200.290329][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 200.305349][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 200.332787][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 200.433233][ T9584] netlink: 'syz.4.992': attribute type 8 has an invalid length. [ 200.496625][ T9582] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 201.735640][ T9658] ksmbd: Unknown IPC event: 3, ignore. [ 202.434763][ T9691] netlink: 'syz.3.1022': attribute type 23 has an invalid length. [ 202.711899][ T9705] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.718500][ T9705] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.759815][ T9747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.767505][ T9747] IPv6: NLM_F_CREATE should be set when creating new route [ 203.785129][ T9746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.031492][ T9758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.060154][ T9758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.146798][ T9763] __nla_validate_parse: 44 callbacks suppressed [ 204.146822][ T9763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1043'. [ 204.259732][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 204.272750][ T9770] netlink: 'syz.4.1045': attribute type 19 has an invalid length. [ 204.290645][ T9758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.328072][ T9758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.360920][ T9771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1044'. [ 204.504112][ T9758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.524263][ T9758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.757417][ T9758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.868089][ T9758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.016735][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1053'. [ 205.122142][ T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.151438][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.203815][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1054'. [ 205.247379][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.262341][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.281013][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.282188][ T9813] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1054'. [ 205.289774][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.330762][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.339765][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.352689][ T9815] netlink: 'syz.1.1055': attribute type 32 has an invalid length. [ 205.381884][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 205.422767][ T9815] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 205.775057][ T9831] netlink: 'syz.2.1060': attribute type 4 has an invalid length. [ 205.826682][ T9832] netlink: 'syz.2.1060': attribute type 4 has an invalid length. [ 206.020133][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'. [ 206.036246][ T9829] tipc: Enabling of bearer rejected, failed to enable media [ 206.097782][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 206.312174][ T9855] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 206.397912][ T9859] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 207.891833][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 208.478303][ T9915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.716821][ T9931] netlink: 'syz.4.1090': attribute type 1 has an invalid length. [ 208.747662][ T9931] netlink: 'syz.4.1090': attribute type 1 has an invalid length. [ 209.129019][ T9913] netlink: 'syz.3.1085': attribute type 13 has an invalid length. [ 209.171758][ T9913] netlink: 'syz.3.1085': attribute type 17 has an invalid length. [ 209.265992][ T9956] __nla_validate_parse: 2 callbacks suppressed [ 209.266013][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1098'. [ 209.851946][ T9963] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 210.206779][ T9998] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 210.520324][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 210.541796][T10006] bond3: (slave geneve3): making interface the new active one [ 210.595030][T10006] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 210.619178][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 210.695864][ T3471] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 210.712019][ T3471] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 210.765186][ T3471] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 210.801495][ T3471] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 211.415185][T10056] 8021q: VLANs not supported on ip_vti0 [ 211.462044][T10059] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 211.642914][T10072] netlink: 'syz.2.1129': attribute type 4 has an invalid length. [ 211.692348][T10077] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 211.788160][T10080] bond4: (slave gretap1): making interface the new active one [ 211.816582][T10080] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 211.837064][T10083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1131'. [ 212.075420][ T5883] Bluetooth: hci1: command 0x0406 tx timeout [ 212.081634][ T5881] Bluetooth: hci3: command 0x0406 tx timeout [ 212.081681][ T5880] Bluetooth: hci2: command 0x0401 tx timeout [ 212.117743][T10102] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 212.131021][T10053] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.142043][T10053] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 212.173051][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 212.186195][T10053] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.210277][T10053] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 212.248538][T10053] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.271936][T10053] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 212.325745][T10053] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 212.352691][T10053] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 212.401120][T10053] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 212.417120][T10053] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 212.792468][T10133] tipc: Enabling of bearer rejected, failed to enable media [ 212.970891][T10125] tipc: Enabling of bearer rejected, failed to enable media [ 213.151795][T10149] raw_sendmsg: syz.2.1143 forgot to set AF_INET. Fix it! [ 213.172161][T10143] tipc: Enabled bearer , priority 0 [ 213.204643][T10143] syzkaller0: entered promiscuous mode [ 213.252483][T10143] syzkaller0: entered allmulticast mode [ 213.304354][T10151] tipc: Resetting bearer [ 213.586626][T10160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.716436][T10139] tipc: Resetting bearer [ 213.811246][T10176] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.1149'. [ 213.832275][T10139] tipc: Disabling bearer [ 213.856090][T10175] netlink: 'syz.1.1149': attribute type 1 has an invalid length. [ 214.049541][T10189] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 214.107265][T10189] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 214.247418][T10199] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 214.298758][T10202] netlink: 'syz.2.1157': attribute type 6 has an invalid length. [ 214.621366][T10219] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1159'. [ 214.917731][T10225] netlink: 'syz.0.1160': attribute type 11 has an invalid length. [ 214.954564][T10225] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1160'. [ 214.963498][T10231] xt_limit: Overflow, try lower: 271964/0 [ 215.105673][T10237] tipc: Enabling of bearer rejected, failed to enable media [ 215.697918][T10269] team0: Device gtp0 is of different type [ 215.900822][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1176'. [ 216.216784][T10302] syzkaller1: entered promiscuous mode [ 216.222332][T10302] syzkaller1: entered allmulticast mode [ 216.393720][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.930974][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 216.965758][T10349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.089445][T10349] netlink: 'syz.1.1197': attribute type 1 has an invalid length. [ 217.414809][T10379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1203'. [ 217.455632][T10385] netlink: 'syz.4.1206': attribute type 12 has an invalid length. [ 217.514533][T10384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1204'. [ 217.646552][T10397] bond0: entered promiscuous mode [ 217.651845][T10397] bond_slave_0: entered promiscuous mode [ 217.678289][T10397] bond_slave_1: entered promiscuous mode [ 217.712465][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'. [ 217.837434][T10412] netlink: 'syz.3.1211': attribute type 1 has an invalid length. [ 217.871068][T10412] netlink: 'syz.3.1211': attribute type 1 has an invalid length. [ 217.922669][T10414] netlink: 'syz.4.1213': attribute type 9 has an invalid length. [ 217.972666][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 217.981066][T10417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1212'. [ 218.017330][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 218.999017][T10473] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 219.049988][T10473] openvswitch: netlink: Message has 6332 unknown bytes. [ 219.618012][T10503] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 [ 219.856894][T10511] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 219.914252][T10511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.000298][T10517] netlink: 'syz.1.1236': attribute type 1 has an invalid length. [ 220.109632][T10517] bond3: entered promiscuous mode [ 220.135015][T10517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.359014][T10534] netlink: 'syz.2.1239': attribute type 18 has an invalid length. [ 220.616778][T10549] __nla_validate_parse: 4 callbacks suppressed [ 220.616798][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'. [ 220.987182][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1248'. [ 221.148497][T10575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1250'. [ 221.439646][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.468202][T10591] openvswitch: netlink: Actions may not be safe on all matching packets [ 221.823051][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1263'. [ 221.900486][T10617] netlink: 'syz.1.1262': attribute type 11 has an invalid length. [ 222.089894][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 222.154860][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'. [ 222.336164][T10646] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1270'. [ 222.436340][T10653] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1272'. [ 222.679047][T10666] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1276'. [ 222.718427][T10666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1276'. [ 223.277440][ T30] audit: type=1804 audit(1757325344.864:2): pid=10700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1288" name="/newroot/247/cgroup.controllers" dev="tmpfs" ino=1282 res=1 errno=0 [ 223.355110][ T30] audit: type=1800 audit(1757325344.864:3): pid=10700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1288" name="cgroup.controllers" dev="tmpfs" ino=1282 res=0 errno=0 [ 223.462121][ T30] audit: type=1800 audit(1757325344.864:4): pid=10700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1288" name="cgroup.controllers" dev="tmpfs" ino=1282 res=0 errno=0 [ 223.776580][T10731] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 223.839205][T10736] gretap0: left promiscuous mode [ 223.872076][T10736] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 223.941394][T10740] veth0_macvtap: left promiscuous mode [ 223.999681][T10742] 8021q: VLANs not supported on gre0 [ 224.028347][T10746] lo: entered promiscuous mode [ 224.048208][T10746] netlink: 'syz.1.1298': attribute type 2 has an invalid length. [ 224.106565][T10746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.161771][T10749] 8021q: VLANs not supported on gre0 [ 224.369154][T10770] netlink: 'syz.4.1306': attribute type 83 has an invalid length. [ 224.401195][T10770] netlink: 'syz.4.1306': attribute type 7 has an invalid length. [ 224.421557][T10770] netlink: 'syz.4.1306': attribute type 8 has an invalid length. [ 224.722997][T10780] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 224.757259][T10784] netlink: 'syz.3.1309': attribute type 21 has an invalid length. [ 224.771803][T10780] bridge5: entered promiscuous mode [ 224.867085][T10785] veth13: entered promiscuous mode [ 225.115330][T10816] netlink: 'syz.2.1319': attribute type 1 has an invalid length. [ 225.126983][T10816] block nbd1: not configured, cannot reconfigure [ 225.152478][T10818] bridge: RTM_NEWNEIGH with invalid ether address [ 225.460743][T10833] openvswitch: netlink: Missing key (keys=40, expected=100) [ 225.848654][T10856] netlink: 'syz.1.1331': attribute type 21 has an invalid length. [ 225.875207][T10856] __nla_validate_parse: 47 callbacks suppressed [ 225.875227][T10856] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1331'. [ 225.900341][T10853] netlink: 'syz.1.1331': attribute type 21 has an invalid length. [ 225.913715][T10856] netlink: 'syz.1.1331': attribute type 4 has an invalid length. [ 225.934190][T10853] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1331'. [ 225.969720][T10856] netlink: 'syz.1.1331': attribute type 5 has an invalid length. [ 226.013065][T10856] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1331'. [ 226.020355][T10863] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 226.086824][T10853] netlink: 'syz.1.1331': attribute type 4 has an invalid length. [ 226.104904][T10853] netlink: 'syz.1.1331': attribute type 5 has an invalid length. [ 226.112976][T10853] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1331'. [ 226.121863][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 226.166959][T10863] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 226.196543][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 226.256783][T10863] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 226.275363][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 226.326563][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 226.369828][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 226.400945][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 229.226387][T10942] bridge0: port 3(syz_tun) entered blocking state [ 229.249317][T10942] bridge0: port 3(syz_tun) entered disabled state [ 229.271736][T10942] syz_tun: entered allmulticast mode [ 229.293325][T10942] syz_tun: left allmulticast mode [ 229.315444][T10948] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 229.367923][T10945] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.395129][T10945] bridge_slave_1: left allmulticast mode [ 229.407597][T10945] bridge_slave_1: left promiscuous mode [ 229.445414][T10945] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.480311][T10945] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 229.509112][T10945] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 229.836724][T10977] IPVS: length: 131 != 24 [ 229.861813][T10978] sctp: [Deprecated]: syz.1.1364 (pid 10978) Use of int in maxseg socket option. [ 229.861813][T10978] Use struct sctp_assoc_value instead [ 229.992546][T10974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.017109][T10974] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.068749][T10974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.309675][T11001] sctp: [Deprecated]: syz.1.1371 (pid 11001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.309675][T11001] Use struct sctp_sack_info instead [ 230.371509][T11007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.148490][T11048] tipc: Invalid UDP bearer configuration [ 231.148548][T11048] tipc: Enabling of bearer rejected, failed to enable media [ 231.184005][T11048] __nla_validate_parse: 71 callbacks suppressed [ 231.184027][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 231.238161][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.238321][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 231.265535][T11051] validate_nla: 64 callbacks suppressed [ 231.265558][T11051] netlink: 'syz.0.1386': attribute type 1 has an invalid length. [ 231.284323][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.296779][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.359376][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.364327][T11059] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1388'. [ 231.378066][T11054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.482047][T11069] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1390'. [ 231.971155][T11096] geneve2: entered promiscuous mode [ 231.990366][T11096] geneve2: entered allmulticast mode [ 232.200421][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1403'. [ 232.249408][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1403'. [ 232.263381][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1403'. [ 232.282678][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1403'. [ 232.298255][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1403'. [ 232.308087][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1403'. [ 232.502625][T11117] netlink: 'syz.0.1406': attribute type 1 has an invalid length. [ 232.616411][T11118] bond6 (unregistering): Released all slaves [ 232.697367][T11117] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 232.819476][T11141] tipc: Enabled bearer , priority 0 [ 232.838708][T11141] syzkaller0: entered promiscuous mode [ 232.845527][T11141] syzkaller0: entered allmulticast mode [ 232.927746][T11141] tipc: Resetting bearer [ 232.961238][T11152] netlink: 'syz.4.1415': attribute type 29 has an invalid length. [ 232.987842][T11152] netlink: 'syz.4.1415': attribute type 29 has an invalid length. [ 233.008803][T11152] netlink: 'syz.4.1415': attribute type 29 has an invalid length. [ 233.252544][T11139] tipc: Resetting bearer [ 233.276953][T11139] tipc: Disabling bearer [ 233.588557][T11181] syzkaller1: entered promiscuous mode [ 233.612890][T11181] syzkaller1: entered allmulticast mode [ 233.956457][T11203] netlink: 'syz.1.1429': attribute type 10 has an invalid length. [ 234.053249][T11203] dummy0: entered promiscuous mode [ 234.063051][T11203] team0: Port device dummy0 added [ 234.350633][T11215] caif0: mtu less than device minimum [ 234.432448][T11222] netlink: 'syz.0.1435': attribute type 10 has an invalid length. [ 234.513412][T11228] tipc: Enabled bearer , priority 0 [ 234.527987][T11228] syzkaller0: entered promiscuous mode [ 234.534908][T11228] syzkaller0: entered allmulticast mode [ 234.568093][T11193] netlink: 'syz.2.1424': attribute type 17 has an invalid length. [ 234.621653][T11230] syzkaller1: entered promiscuous mode [ 234.627439][T11230] syzkaller1: entered allmulticast mode [ 235.326187][T11245] bpq0: left allmulticast mode [ 235.484774][T11247] ip6gre1: entered allmulticast mode [ 235.506702][T11227] tipc: Resetting bearer [ 235.586140][T11227] tipc: Disabling bearer [ 235.680741][T11260] netlink: 'syz.3.1446': attribute type 1 has an invalid length. [ 235.694296][T11260] netlink: 'syz.3.1446': attribute type 2 has an invalid length. [ 235.760072][T11263] tipc: Enabled bearer , priority 0 [ 235.776503][T11263] syzkaller0: entered promiscuous mode [ 235.791587][T11263] syzkaller0: entered allmulticast mode [ 235.826707][T11263] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 235.937015][T11274] tipc: Resetting bearer [ 235.990472][T11261] tipc: Resetting bearer [ 236.060578][T11261] tipc: Disabling bearer [ 236.344697][T11302] netlink: 'syz.4.1459': attribute type 1 has an invalid length. [ 236.362904][T11302] netlink: 'syz.4.1459': attribute type 11 has an invalid length. [ 236.376914][T11302] __nla_validate_parse: 65 callbacks suppressed [ 236.376938][T11302] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1459'. [ 236.499257][T11306] tipc: Enabled bearer , priority 0 [ 236.521198][T11306] syzkaller0: entered promiscuous mode [ 236.527099][T11306] syzkaller0: entered allmulticast mode [ 238.298998][T11318] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 238.331295][T11305] tipc: Resetting bearer [ 238.360247][T11305] tipc: Disabling bearer [ 238.551788][T11345] 8021q: VLANs not supported on gre0 [ 238.567606][T11340] 8021q: VLANs not supported on gre0 [ 238.636111][T11348] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1470'. [ 239.217878][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 239.239227][T11382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1482'. [ 239.252464][T11386] Bluetooth: MGMT ver 1.23 [ 239.265757][T11388] pim6reg1: entered promiscuous mode [ 239.271245][T11388] pim6reg1: entered allmulticast mode [ 239.537550][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 239.543422][T11399] syzkaller0: entered promiscuous mode [ 239.552440][T11399] syzkaller0: entered allmulticast mode [ 239.733465][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 239.896480][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1496'. [ 240.176374][T11432] netlink: 'syz.4.1501': attribute type 10 has an invalid length. [ 240.269025][T11432] team0: Port device dummy0 added [ 240.487561][T11451] nbd: must specify an index to disconnect [ 240.649215][T11462] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1511'. [ 240.698756][T11465] openvswitch: netlink: Unknown key attributes 2 [ 240.861835][T11477] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 240.878859][T11474] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.1514'. [ 240.911718][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'. [ 240.926723][T11477] netlink: 'syz.2.1516': attribute type 5 has an invalid length. [ 240.958113][T11477] geneve3: entered promiscuous mode [ 240.972409][T11477] geneve3: entered allmulticast mode [ 240.993072][ T1147] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 241.022481][ T1147] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 241.041418][ T1147] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 241.063365][ T1147] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 241.300667][T11497] netlink: 'syz.2.1520': attribute type 4 has an invalid length. [ 241.570205][T11516] __nla_validate_parse: 2 callbacks suppressed [ 241.570228][T11516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1525'. [ 241.618616][T11516] tipc: Enabled bearer , priority 0 [ 241.645397][T11516] syzkaller0: entered promiscuous mode [ 241.657686][T11516] syzkaller0: entered allmulticast mode [ 241.670349][T11516] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 241.713304][T11516] tipc: Resetting bearer [ 241.737823][T11515] tipc: Resetting bearer [ 241.769517][T11515] tipc: Disabling bearer [ 241.787940][T11529] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 241.797845][T11529] netlink: 'syz.4.1529': attribute type 11 has an invalid length. [ 241.808240][T11529] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1529'. [ 241.865594][T11529] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 241.875077][T11529] netlink: 'syz.4.1529': attribute type 3 has an invalid length. [ 241.883039][T11529] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1529'. [ 242.010227][T11536] netlink: 'syz.2.1531': attribute type 12 has an invalid length. [ 242.321349][T11562] netlink: 'syz.0.1536': attribute type 142 has an invalid length. [ 242.386208][T11563] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1536'. [ 242.407708][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 243.120517][T11621] netlink: 'syz.0.1552': attribute type 4 has an invalid length. [ 243.141682][T11621] netlink: 'syz.0.1552': attribute type 4 has an invalid length. [ 243.325972][T11630] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002 [ 243.349274][T11629] ip6erspan0: entered allmulticast mode [ 243.592084][T11643] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1560'. [ 243.665121][T11650] tipc: Enabling of bearer rejected, failed to enable media [ 243.795991][T11655] netlink: 'syz.4.1561': attribute type 32 has an invalid length. [ 243.804441][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1561'. [ 243.820127][T11655] (unnamed net_device) (uninitialized): option coupled_control: invalid value (48) [ 243.888213][T11663] rdma_op ffff8880652919f0 conn xmit_rdma 0000000000000000 [ 244.041712][T11674] dvmrp1: entered allmulticast mode [ 244.093339][T11677] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1572'. [ 244.147088][T11682] netlink: 'syz.2.1573': attribute type 2 has an invalid length. [ 244.274839][T11680] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1574'. [ 244.295283][ T5869] block nbd1: Receive control failed (result -32) [ 244.345693][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1576'. [ 244.460816][T11703] macsec0: entered promiscuous mode [ 244.470688][T11703] macsec0: entered allmulticast mode [ 244.506192][T11706] veth1_macvtap: entered allmulticast mode [ 244.512585][T11706] macsec0: left promiscuous mode [ 244.518114][T11706] macsec0: left allmulticast mode [ 244.525138][T11706] veth1_macvtap: left allmulticast mode [ 244.679420][T11714] pim6reg527: entered allmulticast mode [ 244.808645][T11726] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 244.881680][T11731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.583463][T11768] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.620186][T11770] bond5: (slave gretap2): making interface the new active one [ 245.632481][T11770] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 246.503438][T11839] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.687341][T11839] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.708128][T11839] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 246.735535][T11839] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 246.899314][T11849] veth15: entered promiscuous mode [ 246.916312][T11849] bond6: (slave veth15): Enslaving as an active interface with a down link [ 246.942952][T11867] __nla_validate_parse: 13 callbacks suppressed [ 246.942973][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'. [ 246.991348][T11867] validate_nla: 9 callbacks suppressed [ 246.991372][T11867] netlink: 'syz.2.1622': attribute type 6 has an invalid length. [ 247.011288][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'. [ 247.027928][T11867] netlink: 'syz.2.1622': attribute type 6 has an invalid length. [ 247.082139][T11875] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 247.110953][T11875] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 247.141856][T11875] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 247.156779][T11875] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 247.167445][T11875] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 247.188910][T11875] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 247.219160][T11875] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 247.249402][T11875] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 247.285879][T11875] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 247.309988][T11875] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 247.382435][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 247.519613][T11894] tipc: Enabled bearer , priority 0 [ 247.571344][T11894] syzkaller0: entered promiscuous mode [ 247.598369][T11894] syzkaller0: entered allmulticast mode [ 247.605878][T11900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1632'. [ 247.618988][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1632'. [ 247.757807][T11906] tipc: Resetting bearer [ 247.772588][T11890] tipc: Resetting bearer [ 247.776258][T11909] netlink: 191164 bytes leftover after parsing attributes in process `syz.1.1636'. [ 247.855426][T11890] tipc: Disabling bearer [ 248.076363][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 248.087565][T11919] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 248.097526][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 248.128279][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'. [ 248.229752][T11927] bond0: (slave bridge_slave_1): Releasing backup interface [ 248.581596][T11953] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1648'. [ 248.725990][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'. [ 248.978430][T11976] netlink: 'syz.4.1654': attribute type 13 has an invalid length. [ 248.995698][T11976] veth0_macvtap: left promiscuous mode [ 249.016175][T11976] macvtap0: entered allmulticast mode [ 249.062883][T11976] macvtap0: refused to change device tx_queue_len [ 249.298481][T11999] wlan1 speed is unknown, defaulting to 1000 [ 249.325668][T11999] wlan1 speed is unknown, defaulting to 1000 [ 249.335254][T11999] wlan1 speed is unknown, defaulting to 1000 [ 249.529724][T12001] tipc: Enabling of bearer rejected, failed to enable media [ 250.097736][T11999] infiniband syz0: set down [ 250.107207][T11240] wlan1 speed is unknown, defaulting to 1000 [ 250.118513][T11999] infiniband syz0: added wlan1 [ 250.201837][T11999] RDS/IB: syz0: added [ 250.206719][T11999] smc: adding ib device syz0 with port count 1 [ 250.212998][T11999] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 250.247775][T11238] wlan1 speed is unknown, defaulting to 1000 [ 250.256063][T11999] wlan1 speed is unknown, defaulting to 1000 [ 250.815028][T11999] wlan1 speed is unknown, defaulting to 1000 [ 250.954535][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.316023][T12073] netlink: 'syz.0.1677': attribute type 10 has an invalid length. [ 251.316238][T11999] wlan1 speed is unknown, defaulting to 1000 [ 251.621193][T12078] "syz.0.1680" (12078) uses obsolete ecb(arc4) skcipher [ 251.675542][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804eba6c00: rx timeout, send abort [ 251.756966][T12092] syzkaller0: entered promiscuous mode [ 251.762724][T12092] syzkaller0: entered allmulticast mode [ 251.782129][T11999] wlan1 speed is unknown, defaulting to 1000 [ 251.993786][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 252.084169][T11999] wlan1 speed is unknown, defaulting to 1000 [ 252.184292][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804eba6c00: abort rx timeout. Force session deactivation [ 252.249382][T12100] __nla_validate_parse: 6 callbacks suppressed [ 252.249405][T12100] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1685'. [ 252.324748][T11999] wlan1 speed is unknown, defaulting to 1000 [ 252.976157][T12116] net_ratelimit: 57 callbacks suppressed [ 252.976181][T12116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.121637][T12122] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.155635][T12122] netlink: 'syz.4.1693': attribute type 1 has an invalid length. [ 253.169382][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 253.424999][T12133] nbd: socks must be embedded in a SOCK_ITEM attr [ 253.512216][T12133] tipc: Enabling of bearer rejected, media not registered [ 253.522543][T12133] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1696'. [ 253.553482][T12133] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1696'. [ 253.563428][T12133] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1696'. [ 253.688709][T12142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1698'. [ 253.714888][T12143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1698'. [ 253.886986][T12154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1702'. [ 253.956518][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 254.036143][T12154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1702'. [ 254.122404][T12164] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 255.357241][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e0b800: rx timeout, send abort [ 255.535752][T12241] netlink: 'syz.2.1726': attribute type 1 has an invalid length. [ 255.588147][T12243] netlink: 'syz.0.1728': attribute type 2 has an invalid length. [ 255.596765][T12243] nbd: must specify at least one socket [ 255.865645][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e0b800: abort rx timeout. Force session deactivation [ 256.749247][ T30] audit: type=1800 audit(1757325378.334:5): pid=12302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1744" name="memory.events" dev="tmpfs" ino=1814 res=0 errno=0 [ 257.064710][T12297] wlan1 speed is unknown, defaulting to 1000 [ 257.520391][T12321] __nla_validate_parse: 10 callbacks suppressed [ 257.520414][T12321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1749'. [ 257.638749][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1754'. [ 257.704131][T12340] netlink: 'syz.2.1756': attribute type 10 has an invalid length. [ 257.717758][T12342] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1753'. [ 257.746830][T12340] netlink: 'syz.2.1756': attribute type 1 has an invalid length. [ 258.009587][T12354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1758'. [ 258.059951][T12354] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1758'. [ 258.152598][T12354] gretap1: entered promiscuous mode [ 258.229052][T12354] gretap1: entered allmulticast mode [ 258.707323][T12371] tipc: Enabling of bearer rejected, failed to enable media [ 258.717586][T12373] netem: change failed [ 259.923758][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 260.504968][T12404] syzkaller1: entered promiscuous mode [ 260.510509][T12404] syzkaller1: entered allmulticast mode [ 260.526674][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1771'. [ 260.692541][T12418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1774'. [ 261.018719][T12439] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 261.220164][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.328783][T12459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1785'. [ 261.410534][T12465] netlink: 'syz.4.1784': attribute type 10 has an invalid length. [ 261.479635][T12465] netlink: 'syz.4.1784': attribute type 1 has an invalid length. [ 261.509031][T12465] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1784'. [ 261.768118][T12484] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1791'. [ 261.872325][T12490] tipc: Enabling of bearer rejected, failed to enable media [ 262.047279][T12504] sctp: [Deprecated]: syz.0.1796 (pid 12504) Use of int in max_burst socket option deprecated. [ 262.047279][T12504] Use struct sctp_assoc_value instead [ 262.659878][T12539] __nla_validate_parse: 2 callbacks suppressed [ 262.659899][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1807'. [ 262.678831][T12539] openvswitch: netlink: Duplicate or invalid key (type 0). [ 262.687761][T12539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.845829][T12549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1810'. [ 263.023316][T12559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1813'. [ 263.089818][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 263.123304][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 263.280581][T12583] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 263.801715][T12615] team_slave_0: mtu less than device minimum [ 263.976098][T12628] wireguard: wg2: Could not create IPv4 socket [ 263.986169][T12630] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1835'. [ 264.170513][T12644] tipc: Enabled bearer , priority 0 [ 264.180815][T12644] syzkaller0: entered promiscuous mode [ 264.187522][T12644] syzkaller0: entered allmulticast mode [ 264.269409][T12644] tipc: Resetting bearer [ 264.295755][T12644] IPVS: Unknown mcast interface: vcan0 [ 264.323199][T12643] tipc: Resetting bearer [ 264.370343][T12643] tipc: Disabling bearer [ 264.388763][T12654] veth0_to_bridge: entered promiscuous mode [ 264.402340][T12654] veth0_to_bridge: left promiscuous mode [ 264.459831][T12658] netlink: 'syz.4.1844': attribute type 39 has an invalid length. [ 264.627929][ T5869] block nbd2: Receive control failed (result -32) [ 264.761054][T12676] pim6reg: entered allmulticast mode [ 264.858377][T12684] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1852'. [ 264.869577][T12684] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1852'. [ 264.879293][T12684] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1852'. [ 264.949485][T12688] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 264.975489][T12690] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1855'. [ 265.253160][T12708] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 265.557907][T12719] batadv0: entered promiscuous mode [ 265.567339][T12719] debugfs: 'hsr1' already exists in 'hsr' [ 265.574767][T12719] Cannot create hsr debugfs directory [ 265.581366][T12719] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 265.596779][T12719] hsr1: entered allmulticast mode [ 265.602846][T12719] bond0: entered allmulticast mode [ 265.609896][T12719] bond_slave_0: entered allmulticast mode [ 265.625154][T12719] bond_slave_1: entered allmulticast mode [ 265.631133][T12719] batadv0: entered allmulticast mode [ 265.646961][T12719] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 265.668328][T12719] batadv0: left promiscuous mode [ 265.795198][T12731] veth0_to_batadv: mtu less than device minimum [ 266.142091][T12749] netlink: 'syz.4.1875': attribute type 3 has an invalid length. [ 266.349638][T12764] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 266.384296][T12764] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 266.449326][T12764] bridge0: port 3(batadv1) entered blocking state [ 266.461069][T12764] bridge0: port 3(batadv1) entered disabled state [ 266.472736][T12764] batadv1: entered allmulticast mode [ 266.482270][T12764] batadv1: entered promiscuous mode [ 266.499673][T12771] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 266.531636][T12771] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 266.716257][T12785] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 266.739192][T12785] batadv2: entered promiscuous mode [ 266.747767][T12785] team0: Port device batadv2 added [ 266.886459][ T5954] IPVS: starting estimator thread 0... [ 266.927672][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 266.938155][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 266.950280][T12799] netem: incorrect gi model size [ 266.996865][T12800] IPVS: using max 27 ests per chain, 64800 per kthread [ 267.273112][T12827] netlink: 'syz.4.1898': attribute type 1 has an invalid length. [ 267.297718][T12829] netlink: 'syz.4.1898': attribute type 1 has an invalid length. [ 267.545220][T12827] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.868584][T12865] netlink: zone id is out of range [ 267.874520][T12865] netlink: zone id is out of range [ 267.879781][T12865] netlink: zone id is out of range [ 267.898081][T12868] __nla_validate_parse: 23 callbacks suppressed [ 267.898103][T12868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1904'. [ 267.918477][T12865] netlink: zone id is out of range [ 267.934456][T12865] netlink: zone id is out of range [ 267.940770][T12865] netlink: zone id is out of range [ 267.961654][T12865] netlink: zone id is out of range [ 267.967664][T12865] netlink: zone id is out of range [ 267.975981][T12865] netlink: zone id is out of range [ 267.987688][T12865] netlink: del zone limit has 4 unknown bytes [ 268.013124][T12870] sctp: [Deprecated]: syz.4.1903 (pid 12870) Use of int in max_burst socket option deprecated. [ 268.013124][T12870] Use struct sctp_assoc_value instead [ 268.045359][T12870] netlink: 'syz.4.1903': attribute type 21 has an invalid length. [ 268.250212][T12888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1910'. [ 268.469469][T12898] IPv6: sit1: Disabled Multicast RS [ 268.485688][T12898] sit1: entered allmulticast mode [ 268.707033][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1915'. [ 268.744767][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'. [ 269.039358][T12915] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1918'. [ 269.325599][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'. [ 269.711974][T12957] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1928'. [ 270.326600][T12996] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1940'. [ 272.195807][T13013] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1944'. [ 272.677038][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1952'. [ 272.995812][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 273.092469][T13065] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 273.117762][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 273.250536][T13079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1965'. [ 273.260615][T13079] netlink: 'syz.4.1965': attribute type 7 has an invalid length. [ 273.272487][T13080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1964'. [ 273.290041][T13074] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1961'. [ 273.310326][T13079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1965'. [ 273.467284][T13095] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1968'. [ 274.599612][ T56] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.631770][ T56] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 274.655070][ T56] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.693636][ T56] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 274.756487][ T56] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.780774][ T56] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 274.810264][ T56] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.830527][ T56] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 274.908354][T13124] net_ratelimit: 2 callbacks suppressed [ 274.908376][T13124] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 274.930809][T13124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1976'. [ 275.046575][T13137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.133366][T13144] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 275.152539][T13142] netlink: 'syz.1.1979': attribute type 1 has an invalid length. [ 275.173739][T13142] netlink: 'syz.1.1979': attribute type 1 has an invalid length. [ 275.244994][T13142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1979'. [ 275.273751][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 275.310229][T13152] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20004 [ 275.442975][T13160] bridge0: port 3(batadv0) entered blocking state [ 275.463121][T13160] bridge0: port 3(batadv0) entered disabled state [ 275.473315][T13160] batadv0: entered allmulticast mode [ 275.517685][T13160] batadv0: entered promiscuous mode [ 275.595644][T13169] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 275.845850][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'. [ 276.384209][ T56] batman_adv: batadv0: IGMP Querier appeared [ 276.390286][ T56] batman_adv: batadv0: MLD Querier appeared [ 276.512737][T13185] tipc: Enabling of bearer rejected, failed to enable media [ 276.832144][T13197] netlink: 'syz.3.1992': attribute type 1 has an invalid length. [ 278.356559][T13208] __nla_validate_parse: 2 callbacks suppressed [ 278.356581][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 280.179329][T13236] openvswitch: netlink: Message has 8 unknown bytes. [ 280.188145][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'. [ 282.396095][T13253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2006'. [ 282.540002][T13261] netlink: 'syz.2.2007': attribute type 10 has an invalid length. [ 282.806203][T13277] sctp: [Deprecated]: syz.4.2012 (pid 13277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.806203][T13277] Use struct sctp_sack_info instead [ 283.158816][T13289] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 283.429879][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 283.440397][T13302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2018'. [ 283.455745][T13302] netlink: 'syz.3.2018': attribute type 11 has an invalid length. [ 286.825133][T13344] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2028'. [ 287.139351][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'. [ 287.160426][T13348] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 287.833139][T13365] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2034'. [ 288.416597][T13396] openvswitch: netlink: Geneve opt len 7 is not a multiple of 4. [ 288.587089][T13402] syz.0.2043 uses old SIOCAX25GETINFO [ 289.535038][T13371] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2036'. [ 289.675546][T13410] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 289.727428][T13410] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 289.742893][T13410] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 290.304086][T13428] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.864850][T13451] netlink: 'syz.4.2056': attribute type 1 has an invalid length. [ 290.956369][T13458] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2058'. [ 290.975103][T13458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2058'. [ 290.988382][T13458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2058'. [ 291.407240][T13448] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2057'. [ 291.418056][T13452] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 291.419287][T13455] wg1: entered promiscuous mode [ 291.467214][T13455] wg1: entered allmulticast mode [ 291.571487][T13467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2059'. [ 291.589662][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2060'. [ 291.623329][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2059'. [ 291.670237][T13467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2059'. [ 291.831340][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2064'. [ 291.843422][T13484] netlink: 'syz.3.2065': attribute type 3 has an invalid length. [ 291.937046][T13488] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 291.958336][T13488] bond6: (slave vcan0): Error -95 calling set_mac_address [ 291.982097][T13490] 8021q: VLANs not supported on ip6tnl0 [ 292.323335][T13515] bridge_slave_0: left allmulticast mode [ 292.339431][T13515] bridge_slave_0: left promiscuous mode [ 292.368779][T13515] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.851063][T13512] wlan1 speed is unknown, defaulting to 1000 [ 293.352235][T13544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.328235][T13567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.028122][T13573] bond0: (slave bond_slave_0): Releasing backup interface [ 296.884336][T13573] bond_slave_0: left promiscuous mode [ 296.890016][T13573] bond_slave_0: left allmulticast mode [ 296.902267][T13573] bond0: (slave bond_slave_1): Releasing backup interface [ 296.912280][T13573] bond_slave_1: left promiscuous mode [ 296.920004][T13573] bond_slave_1: left allmulticast mode [ 296.930369][T13573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.938681][T13573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.964907][T13573] bond3: (slave geneve3): Releasing active interface [ 296.986543][T13573] bond4: (slave gretap1): Releasing active interface [ 296.997881][T13598] netlink: 'syz.4.2098': attribute type 10 has an invalid length. [ 297.010092][T13574] !€ÿ: renamed from bond_slave_0 [ 297.845787][T13595] __nla_validate_parse: 8 callbacks suppressed [ 297.845810][T13595] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2097'. [ 297.873137][ T3471] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 297.886941][T13598] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 297.952872][ T3471] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 298.005580][ T3471] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 298.034265][ T3471] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 298.077747][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2101'. [ 298.087611][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2101'. [ 298.345442][T13623] netlink: 'syz.2.2106': attribute type 11 has an invalid length. [ 298.375795][T13623] netlink: 'syz.2.2106': attribute type 1 has an invalid length. [ 298.414289][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2106'. [ 299.002292][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 299.098096][T13645] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2108'. [ 299.331761][T13651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2109'. [ 299.744853][T13635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2104'. [ 300.151695][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2114'. [ 300.226270][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2114'. [ 301.862630][T13704] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 301.878086][T13700] netlink: 'syz.1.2122': attribute type 4 has an invalid length. [ 301.928825][T13702] netlink: 'syz.1.2122': attribute type 4 has an invalid length. [ 303.663335][T13738] netlink: 'syz.0.2130': attribute type 4 has an invalid length. [ 303.898477][T13747] __nla_validate_parse: 2 callbacks suppressed [ 303.898500][T13747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'. [ 304.032612][T13753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2135'. [ 304.071743][T13754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2135'. [ 304.822937][T13763] netlink: 'syz.3.2138': attribute type 1 has an invalid length. [ 305.354100][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 306.370220][T13799] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2145'. [ 306.440740][T13799] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2145'. [ 306.474493][T13799] netlink: 'syz.2.2145': attribute type 5 has an invalid length. [ 306.503586][T13799] netlink: 'syz.2.2145': attribute type 6 has an invalid length. [ 306.522662][T13799] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2145'. [ 315.860292][T13833] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2157'. [ 316.867549][T13856] nbd: must specify a device to reconfigure [ 317.001672][T13866] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2164'. [ 317.012003][T13866] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2164'. [ 317.022807][T13866] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2164'. [ 317.229027][T13877] netlink: 'syz.0.2165': attribute type 7 has an invalid length. [ 317.251785][T13878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2166'. [ 317.458077][T13884] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20003 [ 317.686311][T13856] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 317.794190][T13863] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 317.907454][T13893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2171'. [ 317.949167][T13893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2171'. [ 317.972484][T13895] netlink: 'syz.4.2171': attribute type 9 has an invalid length. [ 318.020814][T13895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2171'. [ 318.243356][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2174'. [ 318.276869][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2174'. [ 319.460981][T13902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.478045][T13908] 8021q: VLANs not supported on gre0 [ 319.673010][T13927] netlink: 'syz.1.2178': attribute type 2 has an invalid length. [ 319.770963][T13927] netlink: 'syz.1.2178': attribute type 2 has an invalid length. [ 319.802686][T13927] netlink: 'syz.1.2178': attribute type 1 has an invalid length. [ 319.835731][T13927] netlink: 'syz.1.2178': attribute type 1 has an invalid length. [ 319.954295][T13940] batman_adv: batadv0: Adding interface: dummy0 [ 319.960771][T13940] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 319.999316][T13940] batman_adv: batadv0: Interface activated: dummy0 [ 320.585543][T13942] batadv0: mtu less than device minimum [ 320.593306][T13942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 320.605849][T13942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 320.618136][T13942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 320.629593][T13942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 320.641599][T13942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 320.653659][T13942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 320.665696][T13942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 320.677761][T13942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 320.843521][T13949] netlink: 'syz.1.2185': attribute type 5 has an invalid length. [ 321.074460][T13958] __nla_validate_parse: 3 callbacks suppressed [ 321.074507][T13958] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2188'. [ 321.125708][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2189'. [ 321.251050][T13968] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 321.886647][T13988] geneve2: entered promiscuous mode [ 321.891921][T13988] geneve2: entered allmulticast mode [ 321.909707][T13992] netlink: 'syz.2.2191': attribute type 1 has an invalid length. [ 321.920733][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 322.016257][T13999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2191'. [ 322.102685][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 322.702985][T13999] bond4: entered promiscuous mode [ 322.722269][T13999] bond4: entered allmulticast mode [ 322.734461][T13999] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.339889][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.404174][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 323.424694][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 324.529878][T14061] netlink: 800 bytes leftover after parsing attributes in process `syz.1.2210'. [ 326.876775][T14050] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 326.931430][T14053] : entered promiscuous mode [ 327.390443][T14101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2218'. [ 327.406368][T14101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2218'. [ 327.443287][T14101] gretap2: entered promiscuous mode [ 327.489062][T14101] gretap2: entered allmulticast mode [ 327.617602][T14111] syzkaller1: entered promiscuous mode [ 327.637813][T14111] syzkaller1: entered allmulticast mode [ 328.090310][T14121] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2223'. [ 328.969887][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2225'. [ 329.606217][T14131] veth0_macvtap: entered promiscuous mode [ 329.612543][T14131] macvtap1: entered allmulticast mode [ 329.624190][T14131] veth0_macvtap: entered allmulticast mode [ 331.228341][T14204] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 331.261166][T14204] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 331.284492][T14204] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2247'. [ 331.398502][T14210] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2248'. [ 331.679062][T14216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2249'. [ 331.695087][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2249'. [ 331.707310][T14216] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 331.752082][T14216] tipc: Enabled bearer , priority 10 [ 331.999502][T14223] netlink: 'syz.0.2251': attribute type 21 has an invalid length. [ 332.008561][T14223] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2251'. [ 332.636253][T14237] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2258'. [ 332.753427][T14240] netlink: 'syz.3.2259': attribute type 10 has an invalid length. [ 332.761888][T14239] netlink: 'syz.3.2259': attribute type 10 has an invalid length. [ 332.775468][T14239] bond0: (slave wlan1): Opening slave failed [ 332.789050][T14240] bond0: (slave wlan1): Opening slave failed [ 332.796389][T13109] wlan1 speed is unknown, defaulting to 1000 [ 336.139240][T14266] netlink: 'syz.0.2268': attribute type 1 has an invalid length. [ 336.161052][T14265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2266'. [ 336.173886][T14265] netlink: 'syz.3.2266': attribute type 5 has an invalid length. [ 336.899428][T14266] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 337.013232][T14277] netlink: 'syz.0.2269': attribute type 3 has an invalid length. [ 337.180797][T14287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2274'. [ 337.636747][T14304] netlink: 'syz.1.2277': attribute type 11 has an invalid length. [ 337.720808][T14304] netlink: 'syz.1.2277': attribute type 11 has an invalid length. [ 337.830878][T14304] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2277'. [ 337.927490][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2277'. [ 338.013520][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2277'. [ 340.014913][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'. [ 340.035527][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2283'. [ 340.079761][T14329] Bluetooth: MGMT ver 1.23 [ 341.040206][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2290'. [ 341.169606][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2290'. [ 342.900540][T14400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2298'. [ 342.932446][T14402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2299'. [ 345.713314][T14471] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2312'. [ 347.296148][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2318'. [ 347.653416][T14505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2321'. [ 347.885622][T14514] netlink: 516 bytes leftover after parsing attributes in process `syz.4.2325'. [ 347.993598][T14516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2326'. [ 350.728254][T14542] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2333'. [ 350.981517][T14559] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 351.021424][T14552] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2338'. [ 351.071727][T14563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2337'. [ 351.645513][T14559] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 351.657909][T14559] gretap1: entered promiscuous mode [ 351.664341][T14559] gretap1: entered allmulticast mode [ 351.683133][T14555] tipc: Enabled bearer , priority 0 [ 351.696564][T14562] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 351.712983][T14562] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 351.806207][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 351.815979][T14569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2341'. [ 351.836285][T14569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2341'. [ 352.654576][T14595] netlink: 'syz.4.2349': attribute type 1 has an invalid length. [ 352.737997][T14596] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 352.762026][T14595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2349'. [ 353.514796][T14597] veth9: entered promiscuous mode [ 353.581768][T14597] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 353.689509][T14601] tipc: Enabled bearer , priority 0 [ 354.293041][T14603] syzkaller0: entered promiscuous mode [ 354.315238][T14603] syzkaller0: entered allmulticast mode [ 354.342098][T14606] tipc: Resetting bearer [ 354.407576][T14600] tipc: Resetting bearer [ 354.445442][T14600] tipc: Disabling bearer [ 354.482998][T14614] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2354'. [ 354.528798][T14617] net_ratelimit: 12 callbacks suppressed [ 354.528822][T14617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.942670][T14627] netlink: 'syz.4.2359': attribute type 1 has an invalid length. [ 354.960890][T14627] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2359'. [ 355.815452][T14661] netlink: 'syz.3.2365': attribute type 1 has an invalid length. [ 357.772327][T14661] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 358.159176][T14687] netlink: 'syz.4.2375': attribute type 3 has an invalid length. [ 358.282779][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 358.304076][T14696] netlink: 'syz.1.2373': attribute type 29 has an invalid length. [ 358.312929][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2377'. [ 358.338443][T14695] macsec4: entered promiscuous mode [ 358.344110][T14695] macsec4: entered allmulticast mode [ 358.349599][T14695] bridge0: entered allmulticast mode [ 358.355929][T14695] bridge0: port 2(macsec4) entered blocking state [ 358.362686][T14695] bridge0: port 2(macsec4) entered disabled state [ 358.427149][T14696] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2373'. [ 358.860492][T14695] bridge0: left allmulticast mode [ 358.890328][T14698] netlink: 'syz.1.2373': attribute type 29 has an invalid length. [ 359.072621][T14709] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2381'. [ 359.100435][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'. [ 359.112767][T14711] tipc: Enabled bearer , priority 0 [ 359.306752][T14718] tipc: Enabled bearer , priority 0 [ 359.318376][T14718] syzkaller0: entered promiscuous mode [ 359.324060][T14718] syzkaller0: entered allmulticast mode [ 359.400354][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2382'. [ 360.050557][T14731] netlink: 'syz.3.2387': attribute type 10 has an invalid length. [ 360.061956][T14731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2387'. [ 360.671390][T13108] tipc: Node number set to 3662666991 [ 361.390743][T14721] tipc: Resetting bearer [ 361.408041][T14731] team0: Port device geneve0 added [ 361.420791][T14717] tipc: Resetting bearer [ 361.476989][T14717] tipc: Disabling bearer [ 361.513679][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.553873][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.562675][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.603645][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.639325][T14775] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 363.231147][T14781] syz.2.2400: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 363.333943][T14781] CPU: 0 UID: 0 PID: 14781 Comm: syz.2.2400 Not tainted syzkaller #0 PREEMPT(full) [ 363.333997][T14781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.334029][T14781] Call Trace: [ 363.334039][T14781] [ 363.334049][T14781] dump_stack_lvl+0x189/0x250 [ 363.334086][T14781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.334112][T14781] ? __pfx__printk+0x10/0x10 [ 363.334142][T14781] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 363.334169][T14781] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 363.334196][T14781] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 363.334224][T14781] warn_alloc+0x214/0x310 [ 363.334258][T14781] ? stack_depot_save_flags+0x40/0x860 [ 363.334290][T14781] ? __pfx_warn_alloc+0x10/0x10 [ 363.334323][T14781] ? kasan_save_track+0x4f/0x80 [ 363.334349][T14781] ? xskq_create+0x56/0x170 [ 363.334377][T14781] ? xsk_init_queue+0xb0/0x110 [ 363.334402][T14781] ? xsk_setsockopt+0x4dc/0x8d0 [ 363.334427][T14781] ? do_sock_setsockopt+0x17c/0x1b0 [ 363.334446][T14781] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 363.334465][T14781] ? do_syscall_64+0xfa/0x3b0 [ 363.334483][T14781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.334513][T14781] __vmalloc_node_range_noprof+0x125/0x12f0 [ 363.334580][T14781] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 363.334618][T14781] ? __kasan_kmalloc+0x93/0xb0 [ 363.334649][T14781] vmalloc_user_noprof+0xad/0xf0 [ 363.334680][T14781] ? xskq_create+0xbf/0x170 [ 363.334720][T14781] xskq_create+0xbf/0x170 [ 363.334753][T14781] xsk_init_queue+0xb0/0x110 [ 363.334788][T14781] xsk_setsockopt+0x4dc/0x8d0 [ 363.334820][T14781] ? __pfx_xsk_setsockopt+0x10/0x10 [ 363.334849][T14781] ? __pfx_aa_sk_perm+0x10/0x10 [ 363.334885][T14781] ? aa_sock_opt_perm+0xff/0x1b0 [ 363.334909][T14781] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 363.334932][T14781] ? __pfx_xsk_setsockopt+0x10/0x10 [ 363.334961][T14781] do_sock_setsockopt+0x17c/0x1b0 [ 363.334989][T14781] __x64_sys_setsockopt+0x13f/0x1b0 [ 363.335024][T14781] do_syscall_64+0xfa/0x3b0 [ 363.335043][T14781] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.335073][T14781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.335094][T14781] ? clear_bhb_loop+0x60/0xb0 [ 363.335119][T14781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.335140][T14781] RIP: 0033:0x7ff54a18ebe9 [ 363.335160][T14781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.335178][T14781] RSP: 002b:00007ff54af9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 363.335200][T14781] RAX: ffffffffffffffda RBX: 00007ff54a3c5fa0 RCX: 00007ff54a18ebe9 [ 363.335215][T14781] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 363.335228][T14781] RBP: 00007ff54a211e19 R08: 0000000000000004 R09: 0000000000000000 [ 363.335241][T14781] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.335254][T14781] R13: 00007ff54a3c6038 R14: 00007ff54a3c5fa0 R15: 00007fff1970aa28 [ 363.335289][T14781] [ 363.335303][T14781] Mem-Info: [ 363.669704][T14781] active_anon:4496 inactive_anon:0 isolated_anon:0 [ 363.669704][T14781] active_file:2695 inactive_file:39937 isolated_file:0 [ 363.669704][T14781] unevictable:768 dirty:41 writeback:0 [ 363.669704][T14781] slab_reclaimable:12134 slab_unreclaimable:107115 [ 363.669704][T14781] mapped:26869 shmem:1361 pagetables:1115 [ 363.669704][T14781] sec_pagetables:0 bounce:0 [ 363.669704][T14781] kernel_misc_reclaimable:0 [ 363.669704][T14781] free:1316923 free_pcp:14695 free_cma:0 [ 364.423578][T14781] Node 0 active_anon:17864kB inactive_anon:0kB active_file:10780kB inactive_file:159544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108964kB dirty:164kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13124kB pagetables:4368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 364.502570][T14781] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 364.533152][T14781] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.562317][T14781] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 364.568491][T14781] Node 0 DMA32 free:1355212kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17820kB inactive_anon:0kB active_file:10780kB inactive_file:157964kB unevictable:1536kB writepending:164kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:35076kB local_pcp:14432kB free_cma:0kB [ 364.610175][T14781] lowmem_reserve[]: 0 0 1 1 1 [ 364.629689][T14781] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 364.708578][T14781] lowmem_reserve[]: 0 0 0 0 0 [ 364.713389][T14781] Node 1 Normal free:3889308kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19680kB local_pcp:14144kB free_cma:0kB [ 364.756136][T14781] lowmem_reserve[]: 0 0 0 0 0 [ 364.773616][T14781] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 364.788962][T14781] Node 0 DMA32: 528*4kB (UM) 428*8kB (ME) 199*16kB (ME) 96*32kB (UME) 198*64kB (UM) 127*128kB (UME) 93*256kB (UM) 31*512kB (UM) 15*1024kB (UME) 7*2048kB (UME) 304*4096kB (M) = 1355280kB [ 364.813532][T14781] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 364.831721][T14781] Node 1 Normal: 215*4kB (UME) 50*8kB (UME) 47*16kB (UME) 156*32kB (UME) 33*64kB (UME) 10*128kB (UME) 4*256kB (UM) 6*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3889308kB [ 364.859097][T14781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.869254][T14781] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 364.891970][T14781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.933428][T14781] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 364.971864][T14781] 43988 total pagecache pages [ 364.999924][T14781] 0 pages in swap cache [ 365.011981][T14781] Free swap = 124996kB [ 365.022566][T14781] Total swap = 124996kB [ 365.244033][T14781] 2097051 pages RAM [ 365.253548][T14781] 0 pages HighMem/MovableOnly [ 365.273694][T14781] 425667 pages reserved [ 365.277930][T14781] 0 pages cma reserved [ 365.599288][T14800] netlink: 'syz.1.2405': attribute type 1 has an invalid length. [ 365.642005][T14800] 8021q: adding VLAN 0 to HW filter on device bond7 [ 365.907030][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2408'. [ 366.926729][T14804] veth1_to_bond: entered allmulticast mode [ 366.952085][T14804] veth1_to_bond: left allmulticast mode [ 367.843150][T14838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2414'. [ 367.854954][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 367.872364][T14836] team0: Port device dummy0 removed [ 367.882531][T14836] bridge_slave_0: left allmulticast mode [ 367.888579][T14836] bridge_slave_0: left promiscuous mode [ 367.894614][T14836] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.910508][T14836] bond0: (slave bridge_slave_1): Releasing backup interface [ 369.323132][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 369.341646][T14836] bond0: (slave bond_slave_0): Releasing backup interface [ 369.994499][T14836] bond0: (slave bond_slave_1): Releasing backup interface [ 370.023125][T14836] team0: Port device team_slave_0 removed [ 370.040131][T14836] team0: Port device team_slave_1 removed [ 370.051235][T14836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.059498][T14836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.069057][T14836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.076996][T14836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.099580][T14836] bond5: (slave ip6gretap1): Releasing backup interface [ 370.107695][T14836] bond5: (slave ip6gretap1): the permanent HWaddr of slave - be:f5:a9:97:3b:f5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 370.137310][T14836] bond5: (slave veth9): Releasing backup interface [ 370.217929][ T920] syz!: Port: 1 Link DOWN [ 384.076977][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.517353][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 491.593654][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 494.258302][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 494.266002][ T31] Not tainted syzkaller #0 [ 494.271058][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.279813][ T31] task:kworker/1:1 state:D stack:24616 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 494.291902][ T31] Workqueue: events rfkill_sync_work [ 494.297270][ T31] Call Trace: [ 494.300556][ T31] [ 494.303572][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 494.308174][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 494.314124][ T31] ? __pfx___schedule+0x10/0x10 [ 494.319016][ T31] ? schedule+0x91/0x360 [ 494.323276][ T31] schedule+0x165/0x360 [ 494.327708][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.333856][ T31] __mutex_lock+0x7e6/0x1350 [ 494.338520][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.343333][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 494.349337][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.355146][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.360451][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 494.366696][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 494.373079][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 494.379169][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 494.384571][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 494.390339][ T31] rfkill_set_block+0x1cf/0x440 [ 494.397691][ T31] rfkill_sync_work+0x114/0x200 [ 494.402642][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 494.409142][ T31] process_scheduled_works+0xae1/0x17b0 [ 494.415433][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 494.421566][ T31] worker_thread+0x8a0/0xda0 [ 494.426883][ T31] kthread+0x70e/0x8a0 [ 494.431001][ T31] ? __pfx_worker_thread+0x10/0x10 [ 494.436815][ T31] ? __pfx_kthread+0x10/0x10 [ 494.441503][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.447470][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.452719][ T31] ? __pfx_kthread+0x10/0x10 [ 494.458071][ T31] ret_from_fork+0x3fc/0x770 [ 494.462713][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 494.468565][ T31] ? __switch_to_asm+0x39/0x70 [ 494.473386][ T31] ? __switch_to_asm+0x33/0x70 [ 494.479040][ T31] ? __pfx_kthread+0x10/0x10 [ 494.484353][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.489218][ T31] [ 494.492463][ T31] INFO: task kworker/1:5:5933 blocked for more than 143 seconds. [ 494.510752][ T31] Not tainted syzkaller #0 [ 494.516480][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.526029][ T31] task:kworker/1:5 state:D stack:22536 pid:5933 tgid:5933 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 494.538781][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 494.546179][ T31] Call Trace: [ 494.549516][ T31] [ 494.552482][ T31] __schedule+0x1798/0x4cc0 [ 494.557506][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 494.562924][ T31] ? __pfx___schedule+0x10/0x10 [ 494.568490][ T31] ? schedule+0x91/0x360 [ 494.572789][ T31] schedule+0x165/0x360 [ 494.577455][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.582937][ T31] __mutex_lock+0x7e6/0x1350 [ 494.588216][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.593011][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 494.599804][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.605772][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 494.611544][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 494.618108][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 494.624805][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 494.630577][ T31] process_scheduled_works+0xae1/0x17b0 [ 494.642828][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 494.649088][ T31] worker_thread+0x8a0/0xda0 [ 494.653846][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 494.660253][ T31] ? __kthread_parkme+0x7b/0x200 [ 494.665266][ T31] kthread+0x70e/0x8a0 [ 494.669374][ T31] ? __pfx_worker_thread+0x10/0x10 [ 494.674652][ T31] ? __pfx_kthread+0x10/0x10 [ 494.679365][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.684702][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.689936][ T31] ? __pfx_kthread+0x10/0x10 [ 494.694756][ T31] ret_from_fork+0x3fc/0x770 [ 494.699388][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 494.704593][ T31] ? __switch_to_asm+0x39/0x70 [ 494.709389][ T31] ? __switch_to_asm+0x33/0x70 [ 494.715633][ T31] ? __pfx_kthread+0x10/0x10 [ 494.720282][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.726610][ T31] [ 494.729753][ T31] INFO: task syz.0.2319:14488 blocked for more than 144 seconds. [ 494.748940][ T31] Not tainted syzkaller #0 [ 494.754089][ T31] Blocked by coredump. [ 494.758694][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.770095][ T31] task:syz.0.2319 state:D stack:25480 pid:14488 tgid:14484 ppid:5862 task_flags:0x40044c flags:0x00004002 [ 494.782217][ T31] Call Trace: [ 494.787090][ T31] [ 494.790058][ T31] __schedule+0x1798/0x4cc0 [ 494.794817][ T31] ? validate_chain+0x897/0x2140 [ 494.799803][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.806355][ T31] ? __pfx___schedule+0x10/0x10 [ 494.811368][ T31] ? schedule+0x91/0x360 [ 494.815853][ T31] schedule+0x165/0x360 [ 494.820053][ T31] schedule_timeout+0x9a/0x270 [ 494.827807][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 494.833247][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.839893][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.846820][ T31] ? wait_for_completion+0x267/0x5d0 [ 494.852175][ T31] wait_for_completion+0x2bf/0x5d0 [ 494.857456][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 494.863134][ T31] ? __flush_work+0xd2/0xbc0 [ 494.869360][ T31] ? __flush_work+0xd2/0xbc0 [ 494.874347][ T31] __flush_work+0x9b9/0xbc0 [ 494.878896][ T31] ? __flush_work+0xd2/0xbc0 [ 494.885186][ T31] ? __pfx___flush_work+0x10/0x10 [ 494.890246][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 494.895713][ T31] ? __pfx___cancel_work+0x10/0x10 [ 494.900855][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 494.908090][ T31] __cancel_work_sync+0xbe/0x110 [ 494.913064][ T31] rfkill_unregister+0x92/0x220 [ 494.918108][ T31] nfc_unregister_device+0x96/0x2a0 [ 494.923339][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 494.930741][ T31] virtual_ncidev_close+0x56/0x90 [ 494.937601][ T31] __fput+0x449/0xa70 [ 494.941644][ T31] task_work_run+0x1d1/0x260 [ 494.949144][ T31] ? __pfx_task_work_run+0x10/0x10 [ 494.954517][ T31] do_exit+0x6b5/0x2300 [ 494.958721][ T31] ? do_raw_spin_lock+0x121/0x290 [ 494.965513][ T31] ? __pfx_do_exit+0x10/0x10 [ 494.970167][ T31] do_group_exit+0x21c/0x2d0 [ 494.974927][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.980170][ T31] get_signal+0x1286/0x1340 [ 494.986319][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 494.991920][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 494.998277][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 495.005505][ T31] exit_to_user_mode_loop+0x75/0x110 [ 495.010837][ T31] do_syscall_64+0x2bd/0x3b0 [ 495.015565][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.020901][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.028577][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.033291][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.039350][ T31] RIP: 0033:0x7fca6cb8ebe9 [ 495.047529][ T31] RSP: 002b:00007fca6d935038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.057419][ T31] RAX: 0000000000000003 RBX: 00007fca6cdc5fa0 RCX: 00007fca6cb8ebe9 [ 495.067037][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 495.075154][ T31] RBP: 00007fca6cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 495.083148][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.092787][ T31] R13: 00007fca6cdc6038 R14: 00007fca6cdc5fa0 R15: 00007ffeca420718 [ 495.100952][ T31] [ 495.105612][ T31] [ 495.105612][ T31] Showing all locks held in the system: [ 495.113348][ T31] 1 lock held by khungtaskd/31: [ 495.118361][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 495.129887][ T31] 4 locks held by kworker/1:1/43: [ 495.135054][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 495.147664][ T31] #1: ffffc90000b37bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 495.162128][ T31] #2: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 495.175297][ T31] #3: ffff888051405100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 495.185197][ T31] 7 locks held by kworker/1:2/121: [ 495.190351][ T31] 2 locks held by getty/5628: [ 495.196670][ T31] #0: ffff8880338100a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 495.206664][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 495.218431][ T31] 1 lock held by syz-executor/5862: [ 495.223745][ T31] #0: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 495.235513][ T31] 3 locks held by kworker/1:5/5933: [ 495.240733][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 495.251896][ T31] #1: ffffc90004877bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 495.268990][ T31] #2: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 495.281443][ T31] 1 lock held by syz.0.2319/14488: [ 495.289577][ T31] #0: ffff888051405100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 495.299490][ T31] 2 locks held by syz-executor/14783: [ 495.306549][ T31] #0: ffff888065324118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 495.316854][ T31] #1: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 495.328574][ T31] 3 locks held by syz.1.2409/14822: [ 495.333950][ T31] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.342212][ T31] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 495.352892][ T31] #2: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 495.368619][ T31] 2 locks held by syz.1.2409/14824: [ 495.375874][ T31] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.385928][ T31] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 495.397212][ T31] 2 locks held by syz.1.2409/14833: [ 495.402454][ T31] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.412415][ T31] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 495.421556][ T31] 2 locks held by syz.4.2410/14825: [ 495.428423][ T31] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.436766][ T31] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 495.447578][ T31] 2 locks held by syz.4.2410/14834: [ 495.452806][ T31] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.461193][ T31] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 495.471859][ T31] 2 locks held by syz.4.2410/14839: [ 495.477266][ T31] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.489082][ T31] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 495.498328][ T31] 2 locks held by syz.2.2413/14830: [ 495.506900][ T31] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.515297][ T31] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 495.526067][ T31] 2 locks held by syz.3.2415/14844: [ 495.531332][ T31] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.539743][ T31] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 495.549507][ T31] 2 locks held by syz-executor/14851: [ 495.556053][ T31] #0: ffff888021386118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 495.566292][ T31] #1: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 495.577978][ T31] 2 locks held by syz-executor/14852: [ 495.583519][ T31] #0: ffff88807cb49118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 495.597275][ T31] #1: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 495.607489][ T31] 2 locks held by syz-executor/14854: [ 495.612936][ T31] #0: ffff88805f71f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 495.625918][ T31] #1: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 495.646241][ T31] 2 locks held by syz-executor/14856: [ 495.651672][ T31] #0: ffff8880323a5118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 495.661978][ T31] #1: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 495.677075][ T31] 2 locks held by syz-executor/14858: [ 495.682499][ T31] #0: ffff88807c58e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 495.697199][ T31] #1: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 495.707870][ T31] 2 locks held by syz-executor/14862: [ 495.713266][ T31] #0: ffff888066e1c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 495.728677][ T31] #1: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 495.739553][ T31] 2 locks held by syz-executor/14864: [ 495.745755][ T31] #0: ffff88807d130118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 495.760987][ T31] #1: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 495.771656][ T31] 2 locks held by syz-executor/14866: [ 495.782262][ T31] #0: ffff8880295c7118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 495.793011][ T31] #1: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 495.808260][ T31] 2 locks held by syz-executor/14868: [ 495.814401][ T31] #0: ffff8880295c1918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 495.825300][ T31] #1: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 495.840589][ T31] 2 locks held by syz-executor/14871: [ 495.846862][ T31] #0: ffff88807b009918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 495.862415][ T31] #1: ffffffff8f812fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 495.873104][ T31] [ 495.880758][ T31] ============================================= [ 495.880758][ T31] [ 495.889924][ T31] NMI backtrace for cpu 1 [ 495.889952][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 495.889975][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 495.889989][ T31] Call Trace: [ 495.890000][ T31] [ 495.890010][ T31] dump_stack_lvl+0x189/0x250 [ 495.890044][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.890068][ T31] ? __pfx__printk+0x10/0x10 [ 495.890119][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 495.890150][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 495.890179][ T31] ? __pfx__printk+0x10/0x10 [ 495.890212][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 495.890247][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 495.890276][ T31] watchdog+0xf93/0xfe0 [ 495.890310][ T31] ? watchdog+0x1de/0xfe0 [ 495.890345][ T31] kthread+0x70e/0x8a0 [ 495.890374][ T31] ? __pfx_watchdog+0x10/0x10 [ 495.890410][ T31] ? __pfx_kthread+0x10/0x10 [ 495.890438][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.890466][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.890495][ T31] ? __pfx_kthread+0x10/0x10 [ 495.890521][ T31] ret_from_fork+0x3fc/0x770 [ 495.890546][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 495.890574][ T31] ? __switch_to_asm+0x39/0x70 [ 495.890599][ T31] ? __switch_to_asm+0x33/0x70 [ 495.890624][ T31] ? __pfx_kthread+0x10/0x10 [ 495.890650][ T31] ret_from_fork_asm+0x1a/0x30 [ 495.890695][ T31] [ 495.890703][ T31] Sending NMI from CPU 1 to CPUs 0: [ 496.044666][ C0] NMI backtrace for cpu 0 [ 496.044686][ C0] CPU: 0 UID: 0 PID: 13100 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 496.044706][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 496.044719][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 496.044751][ C0] RIP: 0010:fq_dequeue+0x866/0x2650 [ 496.044773][ C0] Code: 89 e0 48 c1 e8 03 48 89 44 24 60 42 0f b6 04 28 84 c0 0f 85 3f 08 00 00 41 8b 1c 24 bf 01 00 00 00 89 de e8 3c 55 27 f8 85 db <4c> 89 74 24 10 0f 8e c1 00 00 00 4c 89 64 24 28 4c 89 f7 e8 a2 2b [ 496.044788][ C0] RSP: 0018:ffffc90004647080 EFLAGS: 00000286 [ 496.044802][ C0] RAX: ffffffff89985d54 RBX: 00000000b900da28 RCX: 0000000000000000 [ 496.044815][ C0] RDX: ffff888055da0000 RSI: 00000000b900da28 RDI: 0000000000000001 [ 496.044826][ C0] RBP: ffffc90004647210 R08: ffffffff8fa39737 R09: 1ffffffff1f472e6 [ 496.044846][ C0] R10: dffffc0000000000 R11: ffffffff8167ba50 R12: ffff888031721040 [ 496.044858][ C0] R13: dffffc0000000000 R14: ffff888031721000 R15: 1ffff1100a79ec69 [ 496.044872][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 496.044886][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.044897][ C0] CR2: 0000562b7763f000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 496.044912][ C0] Call Trace: [ 496.044921][ C0] [ 496.044946][ C0] ? __pfx_fq_dequeue+0x10/0x10 [ 496.044972][ C0] __qdisc_run+0x23c/0x15f0 [ 496.044997][ C0] ? __dev_queue_xmit+0xd70/0x3b50 [ 496.045027][ C0] __dev_queue_xmit+0x1056/0x3b50 [ 496.045054][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 496.045082][ C0] ? __pfx_update_balloon_stats+0x10/0x10 [ 496.045104][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 496.045129][ C0] ? __lock_acquire+0xab9/0xd20 [ 496.045157][ C0] ? __lock_acquire+0xab9/0xd20 [ 496.045193][ C0] ? ip6_finish_output2+0xf99/0x16a0 [ 496.045221][ C0] ip6_finish_output2+0x11bc/0x16a0 [ 496.045247][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 496.045275][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 496.045300][ C0] ? ip6_mtu+0x7d/0x3f0 [ 496.045319][ C0] ? ip6_mtu+0x321/0x3f0 [ 496.045340][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 496.045364][ C0] udp_tunnel6_xmit_skb+0x640/0xad0 [ 496.045392][ C0] send6+0x5ac/0x8d0 [ 496.045411][ C0] ? send6+0x220/0x8d0 [ 496.045429][ C0] ? __pfx_send6+0x10/0x10 [ 496.045442][ C0] ? wg_socket_send_skb_to_peer+0x54/0x1d0 [ 496.045481][ C0] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 496.045510][ C0] wg_packet_tx_worker+0x1c8/0x7c0 [ 496.045536][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.045560][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 496.045578][ C0] process_scheduled_works+0xae1/0x17b0 [ 496.045612][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.045639][ C0] worker_thread+0x8a0/0xda0 [ 496.045672][ C0] kthread+0x70e/0x8a0 [ 496.045695][ C0] ? __pfx_worker_thread+0x10/0x10 [ 496.045711][ C0] ? __pfx_kthread+0x10/0x10 [ 496.045733][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.045755][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.045778][ C0] ? __pfx_kthread+0x10/0x10 [ 496.045799][ C0] ret_from_fork+0x3fc/0x770 [ 496.045819][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 496.045846][ C0] ? __switch_to_asm+0x39/0x70 [ 496.045869][ C0] ? __switch_to_asm+0x33/0x70 [ 496.045889][ C0] ? __pfx_kthread+0x10/0x10 [ 496.045910][ C0] ret_from_fork_asm+0x1a/0x30 [ 496.045942][ C0] [ 496.051502][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 496.390760][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 496.399893][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 496.409981][ T31] Call Trace: [ 496.413293][ T31] [ 496.416246][ T31] dump_stack_lvl+0x99/0x250 [ 496.420883][ T31] ? __asan_memcpy+0x40/0x70 [ 496.425495][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.430716][ T31] ? __pfx__printk+0x10/0x10 [ 496.435347][ T31] vpanic+0x281/0x750 [ 496.439366][ T31] ? __pfx_vpanic+0x10/0x10 [ 496.443896][ T31] ? preempt_schedule+0xae/0xc0 [ 496.448777][ T31] ? preempt_schedule_common+0x83/0xd0 [ 496.454286][ T31] panic+0xb9/0xc0 [ 496.458030][ T31] ? __pfx_panic+0x10/0x10 [ 496.462474][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 496.467888][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 496.474088][ T31] watchdog+0xfd2/0xfe0 [ 496.478281][ T31] ? watchdog+0x1de/0xfe0 [ 496.482647][ T31] kthread+0x70e/0x8a0 [ 496.486750][ T31] ? __pfx_watchdog+0x10/0x10 [ 496.491457][ T31] ? __pfx_kthread+0x10/0x10 [ 496.496096][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.501319][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.506548][ T31] ? __pfx_kthread+0x10/0x10 [ 496.511166][ T31] ret_from_fork+0x3fc/0x770 [ 496.515871][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 496.521106][ T31] ? __switch_to_asm+0x39/0x70 [ 496.525892][ T31] ? __switch_to_asm+0x33/0x70 [ 496.530799][ T31] ? __pfx_kthread+0x10/0x10 [ 496.535418][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.540223][ T31] [ 496.543554][ T31] Kernel Offset: disabled [ 496.547969][ T31] Rebooting in 86400 seconds..