last executing test programs: 2.664822906s ago: executing program 1 (id=2873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r5 = socket$kcm(0x2, 0x0, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r6 = socket$kcm(0xa, 0x3, 0x3a) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYRESHEX=r6], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x65, 0xfcd66a900070b049, 0x0, 0x3, {0x0, 0x0, 0x0, r11, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x0) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f00000001c0)={r13, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x10) setsockopt$packet_drop_memb(r12, 0x107, 0x2, &(0x7f0000000200)={r13, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x13, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x43, &(0x7f00000005c0)=""/67, 0x41000, 0x44, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x3, 0x9, 0x5}, 0x10, 0xffffffffffffffff, r7, 0x5, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x2, 0x1, 0x9, 0x6}, {0x0, 0x2, 0x0, 0x2}, {0x2, 0x4, 0xf, 0xc}, {0x5, 0x4, 0x3, 0xc}, {0x4, 0x2, 0x1, 0x2}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0x7, &(0x7f0000000a40)=ANY=[@ANYBLOB="2dbb40000000000018120000", @ANYRES32=r14, @ANYBLOB="0000000000000000b703200000000000850000000c000000000005100000"], &(0x7f0000000140)='GPL\x00', 0x2b8, 0xb4, &(0x7f00000002c0)=""/180, 0x41000, 0x20, '\x00', r13, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0xd, 0x3, 0x6}, 0x10, 0x0, r15, 0x7, 0x0, &(0x7f0000000900)=[{0x5, 0x1, 0xf, 0x5}, {0x1, 0x2, 0x40010, 0x3}, {0x1, 0x3, 0x8, 0x7}, {0x2, 0x1, 0x4}, {0x5, 0x4, 0x10, 0x1}, {0x5, 0x2, 0xd, 0xb}, {0x4, 0x100005, 0xa, 0x5}], 0x10, 0x905}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @timestamp, @window={0x3, 0x0, 0x401}, @window={0x3, 0x0, 0x4000}], 0x6) 2.213338536s ago: executing program 4 (id=2879): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008035"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x24048004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56d45, 0x70b9a3, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0x5}, {0x2, 0xd}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x1000c844) 1.951474913s ago: executing program 1 (id=2882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}]}, 0x3c}}, 0x840) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)="c2", 0x1, 0x4050, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff2}, {0x2, 0x5}, {0xfff3, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x10}, @TCA_CHAIN={0x8, 0xb, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44080}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}}, 0x10) 1.665222193s ago: executing program 4 (id=2886): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100001000000000000000000fc010000000000000000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000001d000004d532000000fc0100000000000000000000000000000000000000000000000000000000001a000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000018bfffff0000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}}, 0x0) 1.604666047s ago: executing program 3 (id=2887): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000140)=0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x101}, &(0x7f0000001200)=0x10) r7 = socket$kcm(0x2, 0xa, 0x2) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000001c0)={0x29, @private=0xa010102, 0x4e24, 0x2, 'wlc\x00', 0x8, 0x8, 0x43}, 0x2c) unshare(0x6a040000) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000840)={@val={0x8, 0x4305}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce) 1.565112234s ago: executing program 0 (id=2888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080029006267060008001b000000499d"], 0x30}}, 0x0) close(0x3) 1.460939808s ago: executing program 2 (id=2889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b0f318158d07ef0631d5e1451d9f080f86802753aafa5e6f103d07369f4302cb91b72a0dfb062a5011f997479c404e3f68db3d7a35f816c1099ad8386a00d60c71bda3a237791acd3baed2ecf4c3fc07f78d3121d03280d2b4c2684e9f7b10d347d91a4463cba2a350c4dab9379a0f4dac25d0fcc7f45b52af7c0fc016107cc1b474191173d5d80d1accaba5ac9755c32e8971a18bb3a3", @ANYRES16=r1, @ANYBLOB="07002bbd70000000800005000000180001801400020073797a5f74756e0000000000000000000800090001000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) (async) accept$nfc_llcp(r4, 0x0, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0xd1, &(0x7f0000003a00)=0x710f955b, 0x4) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}}, &(0x7f0000000480)=0x84) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x5c}}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r6, 0x89e7, &(0x7f0000000180)={0xfffffffd}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={r9, 0x808000}, 0x8) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000200)=r9, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_gstrings={0x3d, 0x4}}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f00000000c0)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) 1.384723655s ago: executing program 2 (id=2890): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000e9ff71113700000000008510000002000000850000000500180095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.350888592s ago: executing program 0 (id=2891): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) (async) close(r0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="baccbc8d220f86c5525f5709e195e57ff5f0", 0x12}], 0x100002e2, 0xd) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000380)={{r4}, 0x2, &(0x7f0000000340)=[0x7, 0x7ff], 0xf, 0xc, 0x1}) (async) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffc80, &(0x7f0000000400)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000a2e155702253675a9f0000000000000000000000000061104000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x3c, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000009500000000000000fde1400de55ddc099591989119f3e5a8a6"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000010905000000002dc3a0576400000000000ad700060c0004804e00014000000061080003"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) 1.208985559s ago: executing program 2 (id=2892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a00010000000000000000000a00000000e1ff"], 0x18}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL]}, 0x4c}}, 0x4050) r2 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r2, 0x28, 0x3, 0xfffffffffffffffe, 0x41584fc00e997fc4) r3 = socket$netlink(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r11, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40e00}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r5, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r14 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r14, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r14, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r15, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 1.200678433s ago: executing program 0 (id=2893): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003006f56053021e3db5e31a40955c600d35da9e6ac400166db480a0001"], 0xc8}}, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000380)) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) shutdown(r4, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000200)=""/22, &(0x7f0000000340)=0x16) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @local}, 0xfffffffffffffffa, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x6}, {0x0}, &(0x7f0000004080)=[{&(0x7f0000004040)=""/44, 0x2c}], 0x1, 0x1e}}], 0x48}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000180)}}], 0x2, 0x20004086) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x9, 0xfff1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x30, 0x0, 0x400, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffd}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000100)) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 1.002367194s ago: executing program 1 (id=2894): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18ab566883df"], 0x10b8}, 0x0) readv(r0, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) 933.005584ms ago: executing program 3 (id=2895): getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x20) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES8=r0], 0x74}}, 0x4000010) 931.531533ms ago: executing program 4 (id=2896): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'vlan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x10, 0x2, 0x17f9, 0x7, 0x8, 0xc4, 0x1, 0x5, 0x9, 0x8, 0x3f4d3730, 0x2000008, 0x3, 0x4, 0x1, 0x7, [0x8000, 0x8]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x64040000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r1], 0x44}}, 0x8000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r6, 0x0, 0xcf, &(0x7f00000000c0)=0x4, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="44d5050000000000140003006e657464657673696d3000000000000014001680100001800c0003"], 0x50}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044000) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r13) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 898.893137ms ago: executing program 1 (id=2897): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd7fd24001613802b}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x3ffffffffffffe) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000040)=0x20140, 0x4) close(0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) 783.409007ms ago: executing program 2 (id=2898): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x100000}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="1d48596337f0225e98307cfde1427af492ec5704db671715d6615c92e5147ea45c467d2f248befae01bf434d4e63f0c0d1683d31969b3156ca80620f26da957e3e38a1e1814ab3875d3a49c66a69430afb884bf747212162b64a88a279f7942fe5ec0c7a2d322b1fedeca061a4578103", 0x70}, {&(0x7f0000000140)="bde21d162abed8edac3a7961421fa50ccd4c874284", 0x15}], 0x2, &(0x7f0000000200)=[{0xf8, 0x0, 0xda, "b0b56e9b32aa8b543f4ce0621ea7774c47f26c497b9451dd70cdd46a09534d7dacb5a6088dd4c5d763723a642627ea8014a6a6ec43021ee09de76cbaa2d7787eec7b674131e12c3eb27658801d217693efb173f0e618eb7d26d25bd16998536a310a909fce48b413fd835bcdf1483aec876edf1dbb06e6fbc78bce8786747fdad7da7773450b90dcc9285dc2ad9e3d07c3e8403155d0fcc668b9a45288ffc49a100add4a52db1f845b021af060a144279dcd24b9e76c77514af5d6b950938cb1f50d457093ed927fda230045de0a4f4360e1bf15565ca3e9084d8a69a90f9942ab8a0e89e92fae"}, {0x110, 0x111, 0x2, "e7c0f59c65ca53a0f375d67ab541fb576074989d32745319652e2a07c6245a6ad942dfa7ac287b72d63b26957453b91460eeecb44c4e84b94f134e6b89417dd401b619345b992a209a214498bca4552e40c08446d53853bb05531e5d41a57b51b3b0e1aa6bafd360e3db8046ca1baccfd8494ffbdf4b15b2d145adc84168c3ac912e62c7d191dc94c5f5f197aa06b0950fd279bc08405af85b97c8e5a945fa2f952013e4f8ecc2a28eb15ce075842fd770377b37f79a2221baa89d5f62a9d2b7d4ce6fa04ea6adf9ecb560a41d5856685148be659be0e86e934e39f041b6ea49268a4351d6688612c67a05204522641ac23e52fb6ada47454fcab98d34fe47"}, {0x60, 0x10e, 0x0, "d01b77fb4891d9955658c568c85991aa3b0306767e4ea2b0257228e88710b462e5599e4058615ee3b653c7a073a601014f900bcd51e5ef65d03188a06c3cadef6353aebddb4ac5a7ef"}, {0x28, 0x118, 0x10000, "2401c7562526295530bf4fe28c35c0ee1f4146fa27be"}, {0x50, 0x88, 0xaab, "4e0015bf15785399bb378da8f44ece291b18812a1b563bfc157bdae9de416516399f5d27327597d752f510379e39fb0fcf7e570974e04a611e9423"}, {0xf0, 0xff, 0x0, "dc48739db85461a33054b9a6a9df0adfc5486f04c44c97a7743d1ad4ae6f1b8dc5c199d04ee2b331ae6f8827a35e4de54c5bf39422f7304300eaa252b951ce0f5121b62037f7d07c7187eea43cdbf843f06a39313d93c8453e6892e5e9e5765ed69f023e28958650a14fe78f30c16c4869d0c9b841fd8749a5ebc78cc6ec0a4bfdb58aea7f3fa862574fef9945fd049f53fda28bc81e025dcfbf9c22a4d21c56898486fc1d95f8977b532bce1c4981942f729ef68eb5b132c45a67db6f7b772cc38d28d51032d1760bf6d6a6d8429393162f6dce17d0b7c98f7012"}], 0x3d0}, 0x24000040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x30, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x4, 0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x30}}, 0x0) 713.107692ms ago: executing program 3 (id=2899): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) 660.080854ms ago: executing program 1 (id=2900): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1a, 0x6, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYRESOCT=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r6, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xe0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @bcast]}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="20cd161b7eb9689979a0e155747c69433fe4aa5fb10ada44e3b6671b7f692d0f36a09e9cb44694b88ff60afb3cc2a2a43b970711fa68f99170ec57dbb9d485cf652ddac5f372d535a1178aba90ab0425591c8cac5f86913d01ef1aa34ce9c77da98e55cac372b3403247f5e058197bf8949453d1973bc2038db16826bec0307cd8ae69cf0424bc215fa257fce165d0aff2bcaad19dccc83141a2f2afe9ca7b6bab551e7ce6f6556b30d66e76b14d183a9c8af1dc42063dcf8f3cd507398129ad7404c00de72693a6535899124b45c25044a6011c13f0a7b024cf09d13c1e5bcc9b3eb0617260f3", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf257b00000008000300", @ANYRES32=r8, @ANYBLOB="14000201b5886858bb8cba4baaa0248d9a0080b30a000600ffffffffffff00000a000600ffffffffffff0000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffff, 0x9}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x21, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010027000000000000000800000008000300", @ANYRES32=r15, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8850}, 0x20008090) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000088d905b3cd47e643c0d1892d87418e0efe43a95990378dc6ca5000000000000", @ANYRES16=0x0, @ANYBLOB="000909000000ffdbdf251f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060000000000000000000c00060001000000010000000c00060002000000020000000c000600020000000200000008000300", @ANYRES32=r15, @ANYBLOB="0c0006000200000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x10020020}, 0x40) r16 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), r11) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00676add2d7c5640b0bfadc0976ca02803b55dcd5d8f1c8e2e63805d988f5d6b11842d124d1aee814ac734e20daf6d9afe4a7543f50cc61e81d70fc19e574ff4093e3e3356807f5d", @ANYRES16=r16, @ANYBLOB="01002dbd7000fddbdf2501000000080008000000000006000a004e2100000800060000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$netlink(0x10, 0x3, 0x0) 296.099521ms ago: executing program 4 (id=2901): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt(r0, 0x8, 0x8, &(0x7f0000000000)="0ca9155097ae0e826ee1508a21a6a74ead", 0x11) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 295.894186ms ago: executing program 3 (id=2902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x38, r1, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000069000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x38, r1, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000069000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) (async) 295.617354ms ago: executing program 0 (id=2903): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xefffffffffffffff}]}, 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 295.065796ms ago: executing program 2 (id=2904): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20008044) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/94, 0x5e}], 0x1}, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendfile(r3, r4, 0x0, 0x0) r5 = socket(0xb, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="0c92fcffffffffff9b800c0008000000850000008d00000085100000f9ffffff95000000000000005c324000fcffffff9550070000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000dc9cffff639e245701"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r8, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r9}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r9}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r8, &(0x7f0000000380), 0x0}, 0x20) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f07c60000000000000081"], 0x1c}}, 0x0) 293.574891ms ago: executing program 3 (id=2905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x4000000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x74, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r7, 0x29, 0x38, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x81}]}}}]}, 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r8) sendmmsg$alg(r8, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c400)=ANY=[@ANYBLOB], 0x8dec}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c0a0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb4e2080004e2200000200000011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r8], 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 292.374543ms ago: executing program 2 (id=2906): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100001000000000000000000fc010000000000000000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000001d000004d532000000fc0100000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000018bfffff0000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}}, 0x0) 292.029731ms ago: executing program 0 (id=2907): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x33, 0x300, 0x70bd29, 0x25dfdbff, {0x14}, [@generic="ee9371c0e9daa54e335d3cf17d457cc75553f8bf4ece98c4cf7cb660f0b1c08c17a66b6d465dece3fc2d71a7a0b89882198313fc953f9d26d9bc2945164454022fc46ef3ff9d7f3773c0acfdbad247f30e7b8258615d0303e838d205dcc5d2397b9f835629695391a25c3896fe6ce6d030ff067880c2b177c649e9fb4bb052e754fb2a1b959e06360ce7563ab46aa7091e87cc8f68e6de08b58d2c51c69ed7394903c6204a80cbf16dbee416670478bee628b2214bf61df73a6e1373657bb459aa52", @typed={0x8, 0x47, 0x0, 0x0, @u32=0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x400c890}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0xffffff44}], 0x10}}], 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 288.282085ms ago: executing program 4 (id=2908): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xff80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xe) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a5058240c34f786574f25447e6392f58000082a7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r4 = gettid() r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x800) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) syz_open_procfs$namespace(r4, &(0x7f00000000c0)='ns/user\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x11dc, r8, 0x10, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_OURS={0x11a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x9a\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%%-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$#*)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&$\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x4}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'\x8f\'\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x63c5}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '^@-.].:]]\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[[!^#\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ns/user\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x1c{(*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')%\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}\xab-@./\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ',-{]*/[&:+\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}]}, 0x11dc}, 0x1, 0x0, 0x0, 0x2000c015}, 0x4008001) 249.605966ms ago: executing program 1 (id=2909): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9383, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="28005080140001004abee33957edf8aaae14574df404000005000200020000000800030008ac0f"], 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000013c0)={'team0\x00', &(0x7f00000012c0)=@ethtool_drvinfo={0x3, "b1015904849180e9a33bba5c09d84bcfaaf125ea71d525c3ca8d29f38ca7de3d", "3e905dc5345719d6c26ae7d6869eafe1308fbe9ec3937a088353ecc234c1b270", "e27209058368b97e07c6a36bd71bf50faaaa4cc459b461563d96fcf43cef9556", "cb2da74058cb8d204d1fcfe6817205000000000000007bc66b6ca749fc4f6aba", "942b254fd347c27ba8eac26cb159a5d6fca9f2ebd5f690c7d1aae8c50669cfb9", "5fc03157508709b83ecd0a7b"}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x4, 0x1, @remote}]}, 0x44}}, 0x0) 136.71135ms ago: executing program 0 (id=2910): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000000000000000000b589b197766c45727a8ffd83b86a520205ffba36766882b975adbe23d8bd2901160bf4dbeaef3baa890341f1db9d5e1bbd0918a4ec7b8467bfd8e012b5abb5ed68c24c0e1c65fbf20b2187317957e176e12c5caf788df2ffb46027374af65806c773c371f08ca0281c5211aa94ce2784f6107753cf2ce25d5610cb233284025999418426194d0634ea733c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xd, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f00000002c0)=0x5f53, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1ff, 0x2) syz_emit_ethernet(0xe6, &(0x7f0000000700)={@broadcast, @empty, @void, {@mpls_mc={0x8848, {[{0x1cd, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xfe00}, {0x1ff, 0x0, 0x1}, {0x6}, {0xd86, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xe15}, {0x80, 0x0, 0x1}], @ipv6=@tcp={0x4, 0x6, "423f06", 0x88, 0x6, 0x1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e20, 0x4e21, r5, 0x41424344, 0x0, 0x0, 0x22, 0x4, 0x400, 0x0, 0x3, {[@nop, @md5sig={0x13, 0x12, "31d2d1e791b18078f484ee87c84526b6"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x1a, [0x95, 0x3, 0x3, 0x9, 0x4, 0x7]}, @timestamp={0x8, 0xa, 0x8}, @nop, @timestamp={0x8, 0xa, 0xc5f, 0x800}, @sack={0x5, 0x6, [0x0]}, @mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x8, @remote, 0xc8, "25429b75167cfdbd"}, @md5sig={0x13, 0x12, "fd57adc7d696d08b70a66a3643aa9130"}]}}}}}}}}}, &(0x7f0000000140)={0x1, 0x2, [0x51f, 0x84, 0xd86, 0xb56]}) gettid() r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c0, 0x2b, 0xb, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0x1a4, 0x1, 0x0, 0x1, [@nested={0x1a0, 0xcc, 0x0, 0x1, [@nested={0x12c, 0x61, 0x0, 0x1, [@nested={0x109, 0xa2, 0x0, 0x1, [@generic="0b91ef4f30cd5affa255eb3089fedba0bd305ee351890cfaaef134c41d7efadabdeb16f6a2386ebb9a05241a794a9568b3b034fe29aad1eb959b49f77fca3c298edbae50eb8373efeee03493dbe88dec981e426cf95b28c55777c27c2a3ddbcfe89abd41947ce733a17a34c67343272501b11ca9aeec56b2a1dee05fbe0699f3981fc375dbf6e6d488a09a8b40ee2f56c1ffc51be1d4376ffb6787c10a3bec997fa1ec1786568a4afacc8cfabc834d89fe369f5e3e85671c65fdffa6598bebf975c7d097e939ca5fc0ce3abd18d6a2527f64ae92ac6af7cece12629b129ec924609f2ebd5f4f32755798d4878511a3798abeea2c0ece614283", @typed={0x8, 0xc6, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x51}]}, @nested={0x1c, 0x88, 0x0, 0x1, [@nested={0x4, 0x26}, @nested={0x4, 0xc4}, @typed={0x8, 0x144, 0x0, 0x0, @uid=r8}, @typed={0x4, 0xdc}, @nested={0x4, 0xae}]}]}, @generic="d8664c74be7bcb8aeec60738bc90", @typed={0x8, 0xee, 0x0, 0x0, @fd=r4}, @generic="d2649b61caf477ab897aed8d76197e298175771eefca72c5cdc18545c5a513c9f07f5682b064c50d63356d1277d55b095a7509347c82be3813c99ad2322b805cc1bd1a8abb49f366a5aeeb80217fd36e8ccc761cdf1709e1667c"]}]}]}, 0x1c0}}, 0x8000) bind$inet6(r3, 0x0, 0x60) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket(0xa, 0x8000a, 0xd) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000000000000000000b589b197766c45727a8ffd83b86a520205ffba36766882b975adbe23d8bd2901160bf4dbeaef3baa890341f1db9d5e1bbd0918a4ec7b8467bfd8e012b5abb5ed68c24c0e1c65fbf20b2187317957e176e12c5caf788df2ffb46027374af65806c773c371f08ca0281c5211aa94ce2784f6107753cf2ce25d5610cb233284025999418426194d0634ea733c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xd, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f00000002c0)=0x5f53, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_extract_tcp_res(&(0x7f0000000100), 0x1ff, 0x2) (async) syz_emit_ethernet(0xe6, &(0x7f0000000700)={@broadcast, @empty, @void, {@mpls_mc={0x8848, {[{0x1cd, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xfe00}, {0x1ff, 0x0, 0x1}, {0x6}, {0xd86, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xe15}, {0x80, 0x0, 0x1}], @ipv6=@tcp={0x4, 0x6, "423f06", 0x88, 0x6, 0x1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e20, 0x4e21, r5, 0x41424344, 0x0, 0x0, 0x22, 0x4, 0x400, 0x0, 0x3, {[@nop, @md5sig={0x13, 0x12, "31d2d1e791b18078f484ee87c84526b6"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x1a, [0x95, 0x3, 0x3, 0x9, 0x4, 0x7]}, @timestamp={0x8, 0xa, 0x8}, @nop, @timestamp={0x8, 0xa, 0xc5f, 0x800}, @sack={0x5, 0x6, [0x0]}, @mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x8, @remote, 0xc8, "25429b75167cfdbd"}, @md5sig={0x13, 0x12, "fd57adc7d696d08b70a66a3643aa9130"}]}}}}}}}}}, &(0x7f0000000140)={0x1, 0x2, [0x51f, 0x84, 0xd86, 0xb56]}) (async) gettid() (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x0) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c0, 0x2b, 0xb, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0x1a4, 0x1, 0x0, 0x1, [@nested={0x1a0, 0xcc, 0x0, 0x1, [@nested={0x12c, 0x61, 0x0, 0x1, [@nested={0x109, 0xa2, 0x0, 0x1, [@generic="0b91ef4f30cd5affa255eb3089fedba0bd305ee351890cfaaef134c41d7efadabdeb16f6a2386ebb9a05241a794a9568b3b034fe29aad1eb959b49f77fca3c298edbae50eb8373efeee03493dbe88dec981e426cf95b28c55777c27c2a3ddbcfe89abd41947ce733a17a34c67343272501b11ca9aeec56b2a1dee05fbe0699f3981fc375dbf6e6d488a09a8b40ee2f56c1ffc51be1d4376ffb6787c10a3bec997fa1ec1786568a4afacc8cfabc834d89fe369f5e3e85671c65fdffa6598bebf975c7d097e939ca5fc0ce3abd18d6a2527f64ae92ac6af7cece12629b129ec924609f2ebd5f4f32755798d4878511a3798abeea2c0ece614283", @typed={0x8, 0xc6, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x51}]}, @nested={0x1c, 0x88, 0x0, 0x1, [@nested={0x4, 0x26}, @nested={0x4, 0xc4}, @typed={0x8, 0x144, 0x0, 0x0, @uid=r8}, @typed={0x4, 0xdc}, @nested={0x4, 0xae}]}]}, @generic="d8664c74be7bcb8aeec60738bc90", @typed={0x8, 0xee, 0x0, 0x0, @fd=r4}, @generic="d2649b61caf477ab897aed8d76197e298175771eefca72c5cdc18545c5a513c9f07f5682b064c50d63356d1277d55b095a7509347c82be3813c99ad2322b805cc1bd1a8abb49f366a5aeeb80217fd36e8ccc761cdf1709e1667c"]}]}]}, 0x1c0}}, 0x8000) (async) bind$inet6(r3, 0x0, 0x60) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) socket(0xa, 0x8000a, 0xd) (async) 131.163636ms ago: executing program 3 (id=2911): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) 0s ago: executing program 4 (id=2912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x4e23, 0x2000000, @mcast1, 0x20000000}}}, 0x88) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB='@\x00', @ANYRES32=0x0, @ANYBLOB="c1900000a1540000180012800e0001007769", @ANYRES32, @ANYBLOB], 0x40}}, 0x24008810) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0xe, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000020605000000000000000000000000000500ca00000000000900020073797a3000000000050005000a00000005000100060000000d000300686173683a6d616300000000ddec69120f61c1dde4b4fc97f857c40a2eddfd2bb4ccbf357a60411c4b18178662e41e1af00fc18b17ae3b7efdb4503ba9ac763184f80d8d471cf072b81b11dfefefa4ca39279a9b4e6a8a826c66"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): yscall_64+0xfa/0x3b0 [ 171.909736][ T8224] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.909764][ T8224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.909783][ T8224] ? clear_bhb_loop+0x60/0xb0 [ 171.909807][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.909826][ T8224] RIP: 0033:0x7f5000f8eba9 [ 171.909844][ T8224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.909860][ T8224] RSP: 002b:00007f5001ea3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 171.909881][ T8224] RAX: ffffffffffffffda RBX: 00007f50011d5fa0 RCX: 00007f5000f8eba9 [ 171.909895][ T8224] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 171.909908][ T8224] RBP: 00007f5001ea3090 R08: 0000000000000000 R09: 0000000000000000 [ 171.909920][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.909931][ T8224] R13: 00007f50011d6038 R14: 00007f50011d5fa0 R15: 00007ffddfda0fd8 [ 171.909964][ T8224] [ 172.298816][ T8224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 172.381309][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.619'. [ 172.399043][ T8238] netlink: 'syz.3.618': attribute type 18 has an invalid length. [ 172.692040][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 172.713573][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 172.911231][ T8254] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 173.348689][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 173.371965][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 173.404237][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 173.511945][ T8277] team1: entered promiscuous mode [ 173.530927][ T8277] team1: entered allmulticast mode [ 173.609140][ T8286] tipc: Enabled bearer , priority 0 [ 173.649096][ T8286] syzkaller0: entered promiscuous mode [ 173.654629][ T8286] syzkaller0: entered allmulticast mode [ 173.670063][ T8289] netlink: 'syz.4.636': attribute type 11 has an invalid length. [ 173.707461][ T8286] tipc: Resetting bearer [ 173.745565][ T8285] tipc: Resetting bearer [ 173.821411][ T8285] tipc: Disabling bearer [ 174.524711][ T8333] tipc: Enabled bearer , priority 0 [ 174.716675][ T8333] syzkaller0: entered promiscuous mode [ 174.734156][ T8333] syzkaller0: entered allmulticast mode [ 174.799212][ T8346] tipc: Resetting bearer [ 175.048579][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 175.058193][ T8330] tipc: Resetting bearer [ 176.337847][ T8378] netlink: 'syz.1.661': attribute type 1 has an invalid length. [ 176.506261][ T8330] tipc: Disabling bearer [ 176.516275][ T8362] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 176.721146][ T8378] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 176.986420][ T8396] syzkaller0: entered promiscuous mode [ 177.078720][ T8396] syzkaller0: entered allmulticast mode [ 177.168800][ T8393] tipc: Enabled bearer , priority 0 [ 177.246353][ T8410] tipc: Enabling of bearer rejected, failed to enable media [ 177.346740][ T8393] tipc: Resetting bearer [ 177.446606][ T8393] tipc: Disabling bearer [ 177.578906][ T8427] __nla_validate_parse: 6 callbacks suppressed [ 177.578926][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.672'. [ 177.703013][ T8432] tipc: Enabling of bearer rejected, failed to enable media [ 177.755153][ T8435] netlink: 244 bytes leftover after parsing attributes in process `syz.2.675'. [ 178.153169][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 178.457792][ T8458] netlink: 248 bytes leftover after parsing attributes in process `syz.3.684'. [ 178.533933][ T8463] FAULT_INJECTION: forcing a failure. [ 178.533933][ T8463] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 178.555549][ T8467] netlink: 44 bytes leftover after parsing attributes in process `syz.1.685'. [ 178.582416][ T8463] CPU: 0 UID: 0 PID: 8463 Comm: syz.2.686 Not tainted syzkaller #0 PREEMPT(full) [ 178.582443][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.582453][ T8463] Call Trace: [ 178.582461][ T8463] [ 178.582469][ T8463] dump_stack_lvl+0x189/0x250 [ 178.582498][ T8463] ? __pfx____ratelimit+0x10/0x10 [ 178.582525][ T8463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.582548][ T8463] ? __pfx__printk+0x10/0x10 [ 178.582573][ T8463] ? __might_fault+0xb0/0x130 [ 178.582612][ T8463] should_fail_ex+0x414/0x560 [ 178.582643][ T8463] _copy_from_iter+0x1de/0x1790 [ 178.582671][ T8463] ? rcu_is_watching+0x15/0xb0 [ 178.582692][ T8463] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 178.582720][ T8463] ? __pfx__copy_from_iter+0x10/0x10 [ 178.582741][ T8463] ? __build_skb_around+0x257/0x3e0 [ 178.582764][ T8463] ? netlink_sendmsg+0x642/0xb30 [ 178.582780][ T8463] ? skb_put+0x11b/0x210 [ 178.582802][ T8463] netlink_sendmsg+0x6b2/0xb30 [ 178.582831][ T8463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.582853][ T8463] ? aa_sock_msg_perm+0xf1/0x1d0 [ 178.582873][ T8463] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.582893][ T8463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.582912][ T8463] __sock_sendmsg+0x21c/0x270 [ 178.582942][ T8463] ____sys_sendmsg+0x52d/0x830 [ 178.582970][ T8463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.583001][ T8463] ? import_iovec+0x74/0xa0 [ 178.583027][ T8463] ___sys_sendmsg+0x21f/0x2a0 [ 178.583051][ T8463] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.583133][ T8463] ? __might_fault+0xb0/0x130 [ 178.583163][ T8463] __sys_sendmmsg+0x227/0x430 [ 178.583196][ T8463] ? __pfx___sys_sendmmsg+0x10/0x10 [ 178.583214][ T8463] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 178.583262][ T8463] ? ksys_write+0x22a/0x250 [ 178.583290][ T8463] ? __pfx_ksys_write+0x10/0x10 [ 178.583311][ T8463] ? rcu_is_watching+0x15/0xb0 [ 178.583336][ T8463] __x64_sys_sendmmsg+0xa0/0xc0 [ 178.583359][ T8463] do_syscall_64+0xfa/0x3b0 [ 178.583375][ T8463] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.583401][ T8463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.583419][ T8463] ? clear_bhb_loop+0x60/0xb0 [ 178.583443][ T8463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.583458][ T8463] RIP: 0033:0x7f5000f8eba9 [ 178.583475][ T8463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.583489][ T8463] RSP: 002b:00007f5001ea3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 178.583510][ T8463] RAX: ffffffffffffffda RBX: 00007f50011d5fa0 RCX: 00007f5000f8eba9 [ 178.583524][ T8463] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 178.583536][ T8463] RBP: 00007f5001ea3090 R08: 0000000000000000 R09: 0000000000000000 [ 178.583546][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.583557][ T8463] R13: 00007f50011d6038 R14: 00007f50011d5fa0 R15: 00007ffddfda0fd8 [ 178.583589][ T8463] [ 179.342042][ T8486] Bluetooth: MGMT ver 1.23 [ 179.420054][ T8490] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.511928][ T8489] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 179.622732][ T8496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.677623][ T8499] netlink: 256 bytes leftover after parsing attributes in process `syz.3.698'. [ 179.697988][ T8503] netlink: 256 bytes leftover after parsing attributes in process `syz.3.698'. [ 179.709519][ T8505] netlink: 84 bytes leftover after parsing attributes in process `syz.2.699'. [ 179.882635][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 179.898171][ T8516] FAULT_INJECTION: forcing a failure. [ 179.898171][ T8516] name failslab, interval 1, probability 0, space 0, times 0 [ 179.925240][ T8514] netlink: 'syz.1.700': attribute type 8 has an invalid length. [ 179.950456][ T8516] CPU: 1 UID: 0 PID: 8516 Comm: syz.0.701 Not tainted syzkaller #0 PREEMPT(full) [ 179.950480][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.950491][ T8516] Call Trace: [ 179.950498][ T8516] [ 179.950505][ T8516] dump_stack_lvl+0x189/0x250 [ 179.950533][ T8516] ? __pfx____ratelimit+0x10/0x10 [ 179.950562][ T8516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.950584][ T8516] ? __pfx__printk+0x10/0x10 [ 179.950611][ T8516] ? __lock_acquire+0xab9/0xd20 [ 179.950647][ T8516] should_fail_ex+0x414/0x560 [ 179.950679][ T8516] should_failslab+0xa8/0x100 [ 179.950706][ T8516] kmem_cache_alloc_noprof+0x73/0x3c0 [ 179.950729][ T8516] ? skb_clone+0x212/0x3a0 [ 179.950756][ T8516] skb_clone+0x212/0x3a0 [ 179.950781][ T8516] __netlink_deliver_tap+0x404/0x850 [ 179.950824][ T8516] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.950855][ T8516] netlink_deliver_tap+0x19c/0x1b0 [ 179.950884][ T8516] netlink_unicast+0x7fa/0x9e0 [ 179.950920][ T8516] ? __pfx_netlink_unicast+0x10/0x10 [ 179.950947][ T8516] ? netlink_sendmsg+0x642/0xb30 [ 179.950962][ T8516] ? skb_put+0x11b/0x210 [ 179.950986][ T8516] netlink_sendmsg+0x805/0xb30 [ 179.951012][ T8516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.951033][ T8516] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.951052][ T8516] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.951070][ T8516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.951088][ T8516] __sock_sendmsg+0x21c/0x270 [ 179.951117][ T8516] ____sys_sendmsg+0x52d/0x830 [ 179.951145][ T8516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.951175][ T8516] ? import_iovec+0x74/0xa0 [ 179.951202][ T8516] ___sys_sendmsg+0x21f/0x2a0 [ 179.951225][ T8516] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.951311][ T8516] ? __might_fault+0xb0/0x130 [ 179.951342][ T8516] __sys_sendmmsg+0x227/0x430 [ 179.951370][ T8516] ? __pfx___sys_sendmmsg+0x10/0x10 [ 179.951387][ T8516] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 179.951437][ T8516] ? ksys_write+0x22a/0x250 [ 179.951464][ T8516] ? __pfx_ksys_write+0x10/0x10 [ 179.951489][ T8516] ? rcu_is_watching+0x15/0xb0 [ 179.951514][ T8516] __x64_sys_sendmmsg+0xa0/0xc0 [ 179.951537][ T8516] do_syscall_64+0xfa/0x3b0 [ 179.951553][ T8516] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.951577][ T8516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.951595][ T8516] ? clear_bhb_loop+0x60/0xb0 [ 179.951619][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.951635][ T8516] RIP: 0033:0x7f959d38eba9 [ 179.951652][ T8516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.951667][ T8516] RSP: 002b:00007f959e235038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 179.951688][ T8516] RAX: ffffffffffffffda RBX: 00007f959d5d5fa0 RCX: 00007f959d38eba9 [ 179.951701][ T8516] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 179.951713][ T8516] RBP: 00007f959e235090 R08: 0000000000000000 R09: 0000000000000000 [ 179.951723][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.951734][ T8516] R13: 00007f959d5d6038 R14: 00007f959d5d5fa0 R15: 00007fff7761ff48 [ 179.951766][ T8516] [ 179.955433][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'. [ 180.361633][ T8520] vlan2: entered promiscuous mode [ 180.648271][ T8529] vlan3: entered allmulticast mode [ 180.670060][ T8529] bridge0: entered allmulticast mode [ 180.689795][ T8529] bridge2: port 1(vlan3) entered blocking state [ 180.696455][ T8529] bridge2: port 1(vlan3) entered disabled state [ 180.727417][ T8529] vlan3: entered promiscuous mode [ 180.757893][ T8529] bridge0: entered promiscuous mode [ 181.344949][ T8553] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 181.362844][ T8553] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 181.418696][ T8553] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 181.655176][ T8558] syz_tun: entered promiscuous mode [ 181.689451][ T8558] batadv_slave_1: entered promiscuous mode [ 182.355900][ T8587] nbd0: detected capacity change from 0 to 127 [ 182.366492][ T8593] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 182.398914][ T5184] block nbd0: Receive control failed (result -32) [ 182.411861][ T7630] block nbd0: Send control failed (result -32) [ 182.429646][ T8594] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 182.444448][ T7630] block nbd0: Request send failed, requeueing [ 182.455244][ T55] block nbd0: Dead connection, failed to find a fallback [ 182.463449][ T55] block nbd0: shutting down sockets [ 182.470027][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.480135][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 182.480337][ T8593] bond0: (slave dummy0): Releasing backup interface [ 182.495093][ T7630] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.505194][ T7630] Buffer I/O error on dev nbd0, logical block 1, async page read [ 182.514408][ T7630] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.524250][ T7630] Buffer I/O error on dev nbd0, logical block 2, async page read [ 182.532359][ T7630] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.542135][ T7630] Buffer I/O error on dev nbd0, logical block 3, async page read [ 182.550265][ T7630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.567107][ T7630] Buffer I/O error on dev nbd0, logical block 0, async page read [ 182.575364][ T7630] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.584613][ T7630] Buffer I/O error on dev nbd0, logical block 1, async page read [ 182.592803][ T7630] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.602321][ T7630] Buffer I/O error on dev nbd0, logical block 2, async page read [ 182.611419][ T7630] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.621265][ T7630] Buffer I/O error on dev nbd0, logical block 3, async page read [ 182.637087][ T8593] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.646801][ T7630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.665668][ T8593] team0: Failed to send options change via netlink (err -105) [ 182.676655][ T8593] team0: Port device dummy0 added [ 182.684667][ T7630] Buffer I/O error on dev nbd0, logical block 0, async page read [ 182.705188][ T7630] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.718907][ T7630] Buffer I/O error on dev nbd0, logical block 1, async page read [ 182.735269][ T7630] ldm_validate_partition_table(): Disk read failed. [ 182.742887][ T8594] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.760673][ T7630] Dev nbd0: unable to read RDB block 0 [ 182.788280][ T7630] nbd0: unable to read partition table [ 182.816962][ T8594] team0: Failed to send options change via netlink (err -105) [ 182.855976][ T8594] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.862451][ T7630] ldm_validate_partition_table(): Disk read failed. [ 182.882048][ T7630] Dev nbd0: unable to read RDB block 0 [ 182.890138][ T8594] team0: Port device dummy0 removed [ 182.900514][ T8594] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.921012][ T7630] nbd0: unable to read partition table [ 183.017357][ T8614] __nla_validate_parse: 14 callbacks suppressed [ 183.017377][ T8614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.731'. [ 183.146694][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 183.371298][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.733'. [ 183.380464][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.733'. [ 183.409296][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.733'. [ 183.540507][ T8626] netlink: 'syz.0.735': attribute type 8 has an invalid length. [ 183.847288][ T8651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.742'. [ 184.143363][ T8667] netlink: 'syz.0.746': attribute type 3 has an invalid length. [ 184.249258][ T8667] syzkaller1: entered promiscuous mode [ 184.262692][ T8667] syzkaller1: entered allmulticast mode [ 184.268018][ T8675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.642722][ T8685] netlink: 2 bytes leftover after parsing attributes in process `syz.0.751'. [ 184.715661][ T8693] netlink: 68 bytes leftover after parsing attributes in process `syz.3.754'. [ 184.748823][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.754'. [ 184.895536][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 184.912161][ T8703] chnl_net:caif_netlink_parms(): no params data found [ 185.162327][ T8713] netlink: 'syz.2.762': attribute type 10 has an invalid length. [ 185.524165][ T8734] bridge1: entered promiscuous mode [ 185.534920][ T8734] bridge1: entered allmulticast mode [ 185.590867][ T8738] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 187.583882][ T8750] syz.2.771: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 187.623509][ T8750] CPU: 1 UID: 0 PID: 8750 Comm: syz.2.771 Not tainted syzkaller #0 PREEMPT(full) [ 187.623537][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.623548][ T8750] Call Trace: [ 187.623556][ T8750] [ 187.623565][ T8750] dump_stack_lvl+0x189/0x250 [ 187.623596][ T8750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.623620][ T8750] ? __pfx__printk+0x10/0x10 [ 187.623648][ T8750] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 187.623671][ T8750] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 187.623696][ T8750] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 187.623721][ T8750] warn_alloc+0x214/0x310 [ 187.623758][ T8750] ? __pfx_warn_alloc+0x10/0x10 [ 187.623798][ T8750] ? __get_vm_area_node+0x28f/0x300 [ 187.623825][ T8750] ? hash_netport4_resize+0x235/0x1b60 [ 187.623851][ T8750] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 187.623910][ T8750] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 187.623944][ T8750] ? rcu_is_watching+0x15/0xb0 [ 187.623974][ T8750] ? hash_netport4_resize+0x235/0x1b60 [ 187.623994][ T8750] ? hash_netport4_resize+0x235/0x1b60 [ 187.624011][ T8750] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 187.624039][ T8750] ? hash_netport4_resize+0x235/0x1b60 [ 187.624069][ T8750] hash_netport4_resize+0x235/0x1b60 [ 187.624090][ T8750] ? hash_netport4_uadt+0xc97/0xf30 [ 187.624117][ T8750] ? __pfx_hash_netport4_add+0x10/0x10 [ 187.624139][ T8750] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 187.624171][ T8750] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 187.624204][ T8750] call_ad+0x44b/0xb00 [ 187.624238][ T8750] ? __pfx_call_ad+0x10/0x10 [ 187.624287][ T8750] ? __nla_parse+0x40/0x60 [ 187.624322][ T8750] ip_set_ad+0x791/0x930 [ 187.624359][ T8750] ? __pfx_ip_set_ad+0x10/0x10 [ 187.624434][ T8750] nfnetlink_rcv_msg+0xb4d/0x1130 [ 187.624464][ T8750] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 187.624514][ T8750] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 187.624538][ T8750] ? kasan_save_free_info+0x46/0x50 [ 187.624620][ T8750] netlink_rcv_skb+0x205/0x470 [ 187.624651][ T8750] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 187.624680][ T8750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.624725][ T8750] ? bpf_lsm_capable+0x9/0x20 [ 187.624751][ T8750] ? security_capable+0x7e/0x2e0 [ 187.624785][ T8750] nfnetlink_rcv+0x26a/0x2520 [ 187.624816][ T8750] ? __dev_queue_xmit+0x1d79/0x3b50 [ 187.624853][ T8750] ? __dev_queue_xmit+0x27b/0x3b50 [ 187.624893][ T8750] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 187.624915][ T8750] ? __pfx___dev_queue_xmit+0x10/0x10 [ 187.624955][ T8750] ? ref_tracker_free+0x63a/0x7d0 [ 187.624991][ T8750] ? __asan_memcpy+0x40/0x70 [ 187.625012][ T8750] ? __pfx_ref_tracker_free+0x10/0x10 [ 187.625060][ T8750] ? skb_clone+0x246/0x3a0 [ 187.625088][ T8750] ? __netlink_deliver_tap+0x807/0x850 [ 187.625117][ T8750] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.625156][ T8750] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.625195][ T8750] netlink_unicast+0x82f/0x9e0 [ 187.625232][ T8750] ? __pfx_netlink_unicast+0x10/0x10 [ 187.625263][ T8750] ? netlink_sendmsg+0x642/0xb30 [ 187.625279][ T8750] ? skb_put+0x11b/0x210 [ 187.625303][ T8750] netlink_sendmsg+0x805/0xb30 [ 187.625333][ T8750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.625357][ T8750] ? aa_sock_msg_perm+0xf1/0x1d0 [ 187.625378][ T8750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.625399][ T8750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.625419][ T8750] __sock_sendmsg+0x21c/0x270 [ 187.625451][ T8750] ____sys_sendmsg+0x505/0x830 [ 187.625480][ T8750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.625514][ T8750] ? import_iovec+0x74/0xa0 [ 187.625542][ T8750] ___sys_sendmsg+0x21f/0x2a0 [ 187.625567][ T8750] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.625636][ T8750] ? __fget_files+0x2a/0x420 [ 187.625652][ T8750] ? __fget_files+0x3a0/0x420 [ 187.625683][ T8750] __x64_sys_sendmsg+0x19b/0x260 [ 187.625709][ T8750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.625745][ T8750] ? rcu_is_watching+0x15/0xb0 [ 187.625772][ T8750] ? do_syscall_64+0xbe/0x3b0 [ 187.625797][ T8750] do_syscall_64+0xfa/0x3b0 [ 187.625813][ T8750] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.625839][ T8750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.625859][ T8750] ? clear_bhb_loop+0x60/0xb0 [ 187.625882][ T8750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.625901][ T8750] RIP: 0033:0x7f5000f8eba9 [ 187.625920][ T8750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.625935][ T8750] RSP: 002b:00007f5001ea3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.625955][ T8750] RAX: ffffffffffffffda RBX: 00007f50011d5fa0 RCX: 00007f5000f8eba9 [ 187.625977][ T8750] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 187.625989][ T8750] RBP: 00007f5001011e19 R08: 0000000000000000 R09: 0000000000000000 [ 187.626000][ T8750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.626011][ T8750] R13: 00007f50011d6038 R14: 00007f50011d5fa0 R15: 00007ffddfda0fd8 [ 187.626044][ T8750] [ 187.626915][ T8750] Mem-Info: [ 187.683082][ T8812] geneve2: entered promiscuous mode [ 187.697778][ T8750] active_anon:5064 inactive_anon:0 isolated_anon:0 [ 187.697778][ T8750] active_file:3013 inactive_file:39894 isolated_file:0 [ 187.697778][ T8750] unevictable:768 dirty:12 writeback:0 [ 187.697778][ T8750] slab_reclaimable:10787 slab_unreclaimable:101711 [ 187.697778][ T8750] mapped:29139 shmem:1365 pagetables:1018 [ 187.697778][ T8750] sec_pagetables:0 bounce:0 [ 187.697778][ T8750] kernel_misc_reclaimable:0 [ 187.697778][ T8750] free:1326689 free_pcp:16509 free_cma:0 [ 188.170561][ T8750] Node 0 active_anon:20132kB inactive_anon:0kB active_file:12052kB inactive_file:159380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116584kB dirty:36kB writeback:24kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12084kB pagetables:4072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.216025][ T8750] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.227963][ T8817] netlink: 'syz.0.797': attribute type 27 has an invalid length. [ 188.286215][ T8750] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 188.324583][ T8750] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 188.341816][ T8750] Node 0 DMA32 free:1396348kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20092kB inactive_anon:0kB active_file:12052kB inactive_file:157812kB unevictable:1536kB writepending:44kB present:3129332kB managed:2557428kB mlocked:0kB bounce:0kB free_pcp:50592kB local_pcp:24336kB free_cma:0kB [ 188.407478][ T8750] lowmem_reserve[]: 0 0 1 1 1 [ 188.420874][ T8750] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 188.514502][ T8750] lowmem_reserve[]: 0 0 0 0 0 [ 188.526440][ T8750] Node 1 Normal free:3889932kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22112kB local_pcp:12000kB free_cma:0kB [ 188.579708][ T8750] lowmem_reserve[]: 0 0 0 0 0 [ 188.589607][ T8750] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 188.604461][ T8750] Node 0 DMA32: 950*4kB (UM) 317*8kB (UM) 103*16kB (M) 88*32kB (UM) 130*64kB (UME) 52*128kB (UM) 31*256kB (UM) 13*512kB (UME) 5*1024kB (UM) 8*2048kB (UM) 326*4096kB (M) = 1397168kB [ 188.625259][ T8750] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 188.639223][ T8750] Node 1 Normal: 213*4kB (UE) 61*8kB (UME) 53*16kB (UME) 74*32kB (UME) 23*64kB (UME) 7*128kB (UME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3889932kB [ 188.660715][ T8750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.715583][ T8750] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.735518][ T8750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.751533][ T8750] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.761971][ T8750] 44319 total pagecache pages [ 188.767735][ T8750] 0 pages in swap cache [ 188.772328][ T8750] Free swap = 124996kB [ 188.778679][ T8750] Total swap = 124996kB [ 188.799998][ T8750] 2097051 pages RAM [ 188.806190][ T8750] 0 pages HighMem/MovableOnly [ 188.816091][ T8750] 425668 pages reserved [ 188.820623][ T8750] 0 pages cma reserved [ 189.094716][ T8845] IPv6: addrconf: prefix option has invalid lifetime [ 189.715911][ T8867] __nla_validate_parse: 18 callbacks suppressed [ 189.715934][ T8867] netlink: 224 bytes leftover after parsing attributes in process `syz.2.814'. [ 189.764624][ T8871] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 189.780655][ T8871] netlink: 224 bytes leftover after parsing attributes in process `syz.0.816'. [ 189.871606][ T8876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.817'. [ 190.108872][ T24] IPVS: starting estimator thread 0... [ 190.169734][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 190.218988][ T8889] IPVS: using max 28 ests per chain, 67200 per kthread [ 190.254688][ T8893] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 190.299614][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 190.329351][ T8893] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 190.345975][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 190.710857][ T8915] veth0_to_team: entered promiscuous mode [ 190.725452][ T8915] veth0_to_team: entered allmulticast mode [ 190.909371][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 191.155439][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.831'. [ 191.275831][ T8928] veth11: entered promiscuous mode [ 191.835415][ T8940] netlink: 830 bytes leftover after parsing attributes in process `syz.0.835'. [ 191.846417][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 191.866127][ T8940] bridge_slave_1: left allmulticast mode [ 191.884233][ T8940] bridge_slave_1: left promiscuous mode [ 191.916661][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.004103][ T8940] bridge_slave_0: left allmulticast mode [ 192.011177][ T8940] bridge_slave_0: left promiscuous mode [ 192.027362][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.220538][ T8940] vlan3 (unregistering): left promiscuous mode [ 192.226851][ T8940] bridge0 (unregistering): left promiscuous mode [ 192.270618][ T8940] bridge2: port 1(vlan3) entered disabled state [ 193.545188][ T8985] : entered promiscuous mode [ 193.676871][ T8991] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 193.702140][ T8991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.431493][ T9019] netlink: 'syz.0.860': attribute type 15 has an invalid length. [ 194.432540][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.446012][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.128969][ T9046] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 195.136785][ T9046] netlink: 'syz.2.867': attribute type 11 has an invalid length. [ 195.150592][ T9046] __nla_validate_parse: 7 callbacks suppressed [ 195.150609][ T9046] netlink: 220 bytes leftover after parsing attributes in process `syz.2.867'. [ 195.183402][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.869'. [ 195.217137][ T9048] pim6reg: entered allmulticast mode [ 195.323146][ T9051] bridge5: entered allmulticast mode [ 195.929465][ T9073] blkio.reset_stats is deprecated [ 196.030112][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 196.296247][ T9091] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 196.426792][ T9099] netlink: 'syz.1.886': attribute type 75 has an invalid length. [ 196.627061][ T9109] netlink: 'syz.0.888': attribute type 1 has an invalid length. [ 196.650493][ T9109] netlink: 15958 bytes leftover after parsing attributes in process `syz.0.888'. [ 196.726510][ T9109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.888'. [ 196.882852][ T9121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.892'. [ 196.909924][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.991606][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.004807][ T8796] Set syz1 is full, maxelem 65536 reached [ 197.350725][ T9146] pim6reg: entered allmulticast mode [ 197.361848][ T9141] nbd3: detected capacity change from 0 to 63 [ 197.385848][ T9144] netlink: 'syz.0.899': attribute type 1 has an invalid length. [ 197.395437][ T9144] netlink: 224 bytes leftover after parsing attributes in process `syz.0.899'. [ 197.602037][ T5184] block nbd3: Receive control failed (result -104) [ 197.944339][ T9170] netlink: 'syz.4.905': attribute type 5 has an invalid length. [ 198.026245][ T9179] netlink: 'syz.1.908': attribute type 2 has an invalid length. [ 198.064065][ T9182] netlink: 100 bytes leftover after parsing attributes in process `syz.3.909'. [ 198.433368][ T9195] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.914'. [ 198.505915][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'. [ 198.534435][ T9199] warn_alloc: 1 callbacks suppressed [ 198.534454][ T9199] syz.3.915: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 198.580359][ T9199] CPU: 1 UID: 0 PID: 9199 Comm: syz.3.915 Not tainted syzkaller #0 PREEMPT(full) [ 198.580386][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.580397][ T9199] Call Trace: [ 198.580406][ T9199] [ 198.580414][ T9199] dump_stack_lvl+0x189/0x250 [ 198.580443][ T9199] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 198.580470][ T9199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.580491][ T9199] ? __pfx__printk+0x10/0x10 [ 198.580517][ T9199] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 198.580538][ T9199] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 198.580567][ T9199] warn_alloc+0x214/0x310 [ 198.580596][ T9199] ? stack_depot_save_flags+0x40/0x860 [ 198.580624][ T9199] ? __pfx_warn_alloc+0x10/0x10 [ 198.580660][ T9199] ? kasan_save_track+0x4f/0x80 [ 198.580684][ T9199] ? xskq_create+0x56/0x170 [ 198.580708][ T9199] ? xsk_init_queue+0xb0/0x110 [ 198.580729][ T9199] ? xsk_setsockopt+0x4dc/0x8d0 [ 198.580750][ T9199] ? do_sock_setsockopt+0x17c/0x1b0 [ 198.580767][ T9199] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 198.580784][ T9199] ? do_syscall_64+0xfa/0x3b0 [ 198.580800][ T9199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.580827][ T9199] __vmalloc_node_range_noprof+0x125/0x12f0 [ 198.580892][ T9199] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 198.580927][ T9199] ? __kasan_kmalloc+0x93/0xb0 [ 198.580955][ T9199] vmalloc_user_noprof+0xad/0xf0 [ 198.580981][ T9199] ? xskq_create+0xbf/0x170 [ 198.581006][ T9199] xskq_create+0xbf/0x170 [ 198.581035][ T9199] xsk_init_queue+0xb0/0x110 [ 198.581064][ T9199] xsk_setsockopt+0x4dc/0x8d0 [ 198.581102][ T9199] ? __pfx_xsk_setsockopt+0x10/0x10 [ 198.581124][ T9199] ? __pfx_aa_sk_perm+0x10/0x10 [ 198.581155][ T9199] ? aa_sock_opt_perm+0xff/0x1b0 [ 198.581175][ T9199] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 198.581193][ T9199] ? __pfx_xsk_setsockopt+0x10/0x10 [ 198.581218][ T9199] do_sock_setsockopt+0x17c/0x1b0 [ 198.581244][ T9199] __x64_sys_setsockopt+0x13f/0x1b0 [ 198.581271][ T9199] do_syscall_64+0xfa/0x3b0 [ 198.581287][ T9199] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.581313][ T9199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.581331][ T9199] ? clear_bhb_loop+0x60/0xb0 [ 198.581355][ T9199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.581373][ T9199] RIP: 0033:0x7f32d8d8eba9 [ 198.581392][ T9199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.581408][ T9199] RSP: 002b:00007f32d9c11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 198.581429][ T9199] RAX: ffffffffffffffda RBX: 00007f32d8fd5fa0 RCX: 00007f32d8d8eba9 [ 198.581443][ T9199] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 198.581454][ T9199] RBP: 00007f32d8e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 198.581465][ T9199] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.581477][ T9199] R13: 00007f32d8fd6038 R14: 00007f32d8fd5fa0 R15: 00007ffc859e8e88 [ 198.581510][ T9199] [ 198.591238][ T9199] Mem-Info: [ 198.894483][ T9199] active_anon:5040 inactive_anon:0 isolated_anon:0 [ 198.894483][ T9199] active_file:3013 inactive_file:39901 isolated_file:0 [ 198.894483][ T9199] unevictable:768 dirty:68 writeback:0 [ 198.894483][ T9199] slab_reclaimable:10863 slab_unreclaimable:103155 [ 198.894483][ T9199] mapped:30186 shmem:1364 pagetables:1025 [ 198.894483][ T9199] sec_pagetables:0 bounce:0 [ 198.894483][ T9199] kernel_misc_reclaimable:0 [ 198.894483][ T9199] free:1327076 free_pcp:15147 free_cma:0 [ 198.949804][ T9199] Node 0 active_anon:20160kB inactive_anon:0kB active_file:12052kB inactive_file:159404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120744kB dirty:272kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12344kB pagetables:3948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 199.002758][ T9199] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 199.054207][ T9199] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 199.091764][ T9199] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 199.103106][ T9199] Node 0 DMA32 free:1402788kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20108kB inactive_anon:0kB active_file:12052kB inactive_file:157836kB unevictable:1536kB writepending:276kB present:3129332kB managed:2557428kB mlocked:0kB bounce:0kB free_pcp:39848kB local_pcp:20308kB free_cma:0kB [ 199.137129][ T9199] lowmem_reserve[]: 0 0 1 1 1 [ 199.142712][ T9199] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 199.172745][ T9199] lowmem_reserve[]: 0 0 0 0 0 [ 199.177586][ T9199] Node 1 Normal free:3889932kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22144kB local_pcp:10144kB free_cma:0kB [ 199.211451][ T9199] lowmem_reserve[]: 0 0 0 0 0 [ 199.216704][ T9199] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 199.231274][ T9199] Node 0 DMA32: 896*4kB (M) 390*8kB (ME) 156*16kB (M) 412*32kB (UME) 168*64kB (UM) 60*128kB (UME) 14*256kB (UME) 7*512kB (M) 5*1024kB (UM) 7*2048kB (UM) 326*4096kB (M) = 1402736kB [ 199.324924][ T9199] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 199.398471][ T9199] Node 1 Normal: 213*4kB (UE) 61*8kB (UME) 53*16kB (UME) 74*32kB (UME) 23*64kB (UME) 7*128kB (UME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3889932kB [ 199.472209][ T9199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.528249][ T9199] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.568683][ T9199] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 199.626127][ T9199] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 199.684169][ T9199] 44275 total pagecache pages [ 199.713527][ T9199] 0 pages in swap cache [ 199.718600][ T9199] Free swap = 124996kB [ 199.722803][ T9199] Total swap = 124996kB [ 199.727152][ T9199] 2097051 pages RAM [ 199.777069][ T9199] 0 pages HighMem/MovableOnly [ 199.797125][ T9199] 425668 pages reserved [ 199.802075][ T9199] 0 pages cma reserved [ 200.156793][ T9246] netlink: 'syz.0.931': attribute type 5 has an invalid length. [ 200.181069][ T9246] __nla_validate_parse: 10 callbacks suppressed [ 200.181089][ T9246] netlink: 43 bytes leftover after parsing attributes in process `syz.0.931'. [ 200.265306][ T9235] syzkaller0: entered promiscuous mode [ 200.273227][ T9235] syzkaller0: entered allmulticast mode [ 200.284411][ T9249] veth0: entered promiscuous mode [ 200.297858][ T9247] veth0: left promiscuous mode [ 200.529770][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.936'. [ 200.591093][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 200.661112][ T9263] wireguard: wg2: Could not create IPv4 socket [ 200.974186][ T7475] udevd[7475]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 200.981875][ T9282] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 201.304713][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'. [ 202.354529][ T9290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.942'. [ 202.366785][ T9290] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 202.627553][ T9302] team0: Device vti0 is of different type [ 202.809096][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.949'. [ 203.089012][ T9318] tipc: Started in network mode [ 203.099000][ T9318] tipc: Node identity c279eaee686d, cluster identity 4711 [ 203.147103][ T9318] tipc: Enabled bearer , priority 0 [ 203.398050][ T9344] netlink: 'syz.0.959': attribute type 11 has an invalid length. [ 203.411088][ T9344] netlink: 224 bytes leftover after parsing attributes in process `syz.0.959'. [ 203.434295][ T9326] tipc: Resetting bearer [ 203.500424][ T9335] team0: Device gtp0 is of different type [ 203.557851][ T9353] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.961'. [ 203.578210][ T9357] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.961'. [ 203.685798][ T8162] tipc: Resetting bearer [ 203.719639][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 203.874969][ T9317] tipc: Resetting bearer [ 204.163418][ T24] tipc: Node number set to 2853497582 [ 205.161828][ T9317] tipc: Disabling bearer [ 205.486239][ T9385] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 205.528743][ T9385] __nla_validate_parse: 2 callbacks suppressed [ 205.528762][ T9385] netlink: 224 bytes leftover after parsing attributes in process `syz.2.970'. [ 205.584810][ T9392] netlink: 'syz.4.973': attribute type 1 has an invalid length. [ 205.740087][ T9392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.796778][ T9396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.849251][ T5184] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 205.857237][ T5865] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.013960][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.977'. [ 206.023854][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 206.446561][ T9431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.983'. [ 206.463073][ T9431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.983'. [ 206.929943][ T9451] netlink: 'syz.4.988': attribute type 1 has an invalid length. [ 206.952450][ T9454] netlink: 72 bytes leftover after parsing attributes in process `syz.3.987'. [ 206.961949][ T9451] nbd: error processing sock list [ 206.983313][ T9451] block nbd1: shutting down sockets [ 207.191674][ T9467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.993'. [ 207.241113][ T9467] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 207.684879][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.997'. [ 207.783490][ T9491] bond0: entered promiscuous mode [ 207.807193][ T9491] bond_slave_0: entered promiscuous mode [ 207.828927][ T9491] bond_slave_1: entered promiscuous mode [ 207.902151][ T9491] bond0: left promiscuous mode [ 207.927358][ T9491] bond_slave_0: left promiscuous mode [ 207.975372][ T9491] bond_slave_1: left promiscuous mode [ 208.008294][ T9504] netlink: 'syz.4.1000': attribute type 1 has an invalid length. [ 208.032385][ T9506] netlink: 'syz.4.1000': attribute type 1 has an invalid length. [ 208.051109][ T9504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.084016][ T9506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.708164][ T9532] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 208.997594][ T9546] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 209.085932][ T9533] mpoa:mpoad_close: () going down [ 209.388609][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 209.403324][ T9559] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 209.419612][ T9559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.467904][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'. [ 209.697798][ T9575] netlink: 'syz.0.1022': attribute type 1 has an invalid length. [ 210.028505][ T9593] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 210.554182][ T9623] tls_set_device_offload_rx: netdev not found [ 210.787168][ T9632] __nla_validate_parse: 3 callbacks suppressed [ 210.787187][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1039'. [ 210.838053][ T9635] sctp: [Deprecated]: syz.4.1040 (pid 9635) Use of int in maxseg socket option. [ 210.838053][ T9635] Use struct sctp_assoc_value instead [ 211.253204][ T9666] Unsupported ieee802154 address type: 0 [ 211.319274][ T8177] nci: nci_rsp_packet: unsupported rsp opcode 0xf21 [ 211.852443][ T9586] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.854558][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 211.859301][ T9586] Bluetooth: hci2: command 0x0406 tx timeout [ 211.865054][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 212.305894][ T9684] syzkaller0: create flow: hash 3088044169 index 1 [ 212.390287][ T9697] openvswitch: netlink: IPv6 tunnel dst address is zero [ 212.436046][ T9698] openvswitch: netlink: Missing key (keys=40, expected=100) [ 212.561075][ T9679] syzkaller0: delete flow: hash 3088044169 index 1 [ 212.593709][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'. [ 212.623077][ T9702] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1059'. [ 214.076112][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'. [ 214.495574][ T9730] batadv1: left allmulticast mode [ 214.509441][ T9730] batadv1: left promiscuous mode [ 214.517025][ T9730] bridge0: port 3(batadv1) entered disabled state [ 214.590688][ T9730] bridge_slave_1: left allmulticast mode [ 214.614929][ T9730] bridge_slave_1: left promiscuous mode [ 214.647162][ T9730] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.680441][ T9736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1071'. [ 214.714296][ T9730] bridge_slave_0: left allmulticast mode [ 214.743546][ T9730] bridge_slave_0: left promiscuous mode [ 214.760488][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.131811][ T9752] netlink: 'syz.1.1076': attribute type 1 has an invalid length. [ 215.154528][ T9757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1077'. [ 215.279135][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'. [ 215.355795][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'. [ 215.500528][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 215.652889][ T9780] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 215.802620][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 215.852153][ T9785] netlink: 'syz.1.1087': attribute type 1 has an invalid length. [ 215.875615][ T9785] netlink: 'syz.1.1087': attribute type 1 has an invalid length. [ 215.962138][ T9790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1088'. [ 216.130585][ T9800] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1091'. [ 216.205448][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 216.265747][ T9809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1094'. [ 216.369845][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 216.640166][ T9827] netlink: 'syz.1.1098': attribute type 10 has an invalid length. [ 216.717228][ T9827] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 216.827472][ T9839] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 217.610972][ T9876] netlink: 'syz.0.1113': attribute type 5 has an invalid length. [ 217.910234][ T9888] macvlan2: entered allmulticast mode [ 217.916289][ T9888] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 219.135386][ T9918] batadv_slave_0: entered promiscuous mode [ 219.240951][ T9917] batadv_slave_0: left promiscuous mode [ 219.356537][ T9934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.443497][ T9937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1131'. [ 219.560241][ T9942] netlink: 'syz.2.1132': attribute type 13 has an invalid length. [ 219.849291][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1137'. [ 219.981709][ T9942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.075786][ T9969] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 220.815109][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1146'. [ 220.940748][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'. [ 221.322729][T10026] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1155'. [ 221.573807][T10041] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 221.609956][T10041] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 221.646917][T10041] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 221.762105][T10048] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1162'. [ 222.285688][T10076] netlink: 'syz.4.1172': attribute type 1 has an invalid length. [ 222.304934][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 222.314170][T10076] netlink: 'syz.4.1172': attribute type 3 has an invalid length. [ 222.332420][T10076] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1172'. [ 222.539506][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 222.581282][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1175'. [ 222.808078][T10097] gretap0: entered promiscuous mode [ 222.831229][T10097] vlan2: entered promiscuous mode [ 222.932692][T10096] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 224.476312][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 224.823743][T10196] netlink: 'syz.3.1210': attribute type 39 has an invalid length. [ 225.437743][T10226] tipc: Enabled bearer , priority 0 [ 225.460501][T10226] syzkaller0: entered promiscuous mode [ 225.471411][T10226] syzkaller0: entered allmulticast mode [ 225.507574][T10226] netlink: 'syz.3.1214': attribute type 1 has an invalid length. [ 225.531110][T10226] netlink: 'syz.3.1214': attribute type 1 has an invalid length. [ 225.588482][T10232] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1218'. [ 225.643199][T10226] tipc: Resetting bearer [ 225.730012][T10223] tipc: Resetting bearer [ 225.835721][T10223] tipc: Disabling bearer [ 225.927281][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 226.199427][T10258] syzkaller1: entered promiscuous mode [ 226.228599][T10258] syzkaller1: entered allmulticast mode [ 226.281205][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'. [ 226.373183][T10276] netlink: 'syz.3.1228': attribute type 1 has an invalid length. [ 226.505905][T10273] ve: renamed from ipvlan1 [ 226.541149][T10276] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.572822][T10280] bond5: (slave veth5): Enslaving as an active interface with a down link [ 226.841907][T10290] macsec0: entered promiscuous mode [ 226.849556][T10290] macsec0: entered allmulticast mode [ 226.855010][T10290] veth1_macvtap: entered allmulticast mode [ 226.862035][T10290] bridge0: port 3(macsec0) entered blocking state [ 226.871756][T10290] bridge0: port 3(macsec0) entered disabled state [ 226.885560][T10290] bridge0: port 3(macsec0) entered blocking state [ 226.892499][T10290] bridge0: port 3(macsec0) entered forwarding state [ 226.906996][T10290] bridge0: mtu less than device minimum [ 226.957591][T10295] netlink: 'syz.2.1234': attribute type 1 has an invalid length. [ 227.045105][T10295] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.114580][T10299] bond3: (slave ip6erspan0): making interface the new active one [ 227.140669][T10299] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 227.598626][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 227.692728][ T55] block nbd3: Possible stuck request ffff888025a1e000: control (read@0,1024B). Runtime 30 seconds [ 227.704968][ T55] block nbd3: Possible stuck request ffff888025a1e1c0: control (read@1024,1024B). Runtime 30 seconds [ 227.716868][ T55] block nbd3: Possible stuck request ffff888025a1e380: control (read@2048,1024B). Runtime 30 seconds [ 227.729432][ T55] block nbd3: Possible stuck request ffff888025a1e540: control (read@3072,1024B). Runtime 30 seconds [ 227.755547][T10318] vlan1: entered allmulticast mode [ 227.797977][T10318] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 227.885127][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'. [ 227.910454][T10335] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1249'. [ 228.186907][T10353] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1254'. [ 228.355709][T10364] netlink: 'syz.3.1259': attribute type 21 has an invalid length. [ 228.380107][T10364] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1259'. [ 228.441760][T10370] netlink: 'syz.2.1260': attribute type 17 has an invalid length. [ 228.479805][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1260'. [ 228.518083][T10370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1260'. [ 228.647146][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'. [ 228.990385][T10392] tipc: Enabled bearer , priority 0 [ 229.025745][T10392] syzkaller0: entered promiscuous mode [ 229.043741][T10392] syzkaller0: entered allmulticast mode [ 229.112189][T10392] tipc: Resetting bearer [ 229.142418][T10391] tipc: Resetting bearer [ 229.219786][T10391] tipc: Disabling bearer [ 230.302600][T10450] netlink: 'syz.0.1279': attribute type 1 has an invalid length. [ 230.323982][T10427] syzkaller1: entered promiscuous mode [ 230.348792][T10427] syzkaller1: entered allmulticast mode [ 230.484476][T10459] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 231.256387][T10489] syzkaller1: entered promiscuous mode [ 231.276246][T10489] syzkaller1: entered allmulticast mode [ 231.435435][T10499] syzkaller1: entered promiscuous mode [ 231.441711][T10499] syzkaller1: entered allmulticast mode [ 231.654089][T10513] __nla_validate_parse: 6 callbacks suppressed [ 231.654108][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1298'. [ 231.899243][T10530] tipc: Enabled bearer , priority 0 [ 231.962689][T10534] netlink: 'syz.4.1306': attribute type 13 has an invalid length. [ 232.044653][T10530] syzkaller0: entered promiscuous mode [ 232.063698][T10530] syzkaller0: entered allmulticast mode [ 232.092485][T10530] tipc: Resetting bearer [ 232.106779][T10534] veth0_macvtap: left promiscuous mode [ 232.113669][T10534] macvtap0: entered allmulticast mode [ 232.136374][T10534] macvtap0: refused to change device tx_queue_len [ 232.166104][T10529] tipc: Resetting bearer [ 232.235386][T10546] netlink: 'syz.3.1308': attribute type 2 has an invalid length. [ 232.249179][T10546] netlink: 'syz.3.1308': attribute type 8 has an invalid length. [ 232.270278][T10546] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1308'. [ 232.911912][ T5928] tipc: Node number set to 857715724 [ 233.772697][T10529] tipc: Disabling bearer [ 233.961683][T10572] sit3: entered promiscuous mode [ 233.966699][T10572] sit3: entered allmulticast mode [ 233.987921][T10573] tipc: Started in network mode [ 233.993461][T10573] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 234.004271][T10573] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 234.015473][T10573] tipc: Enabled bearer , priority 10 [ 234.051745][T10575] tipc: Enabling of bearer rejected, failed to enable media [ 234.124014][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 234.204900][T10586] netlink: 'syz.2.1320': attribute type 1 has an invalid length. [ 234.241284][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1319'. [ 234.343788][T10586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1320'. [ 234.363941][T10596] netlink: 'syz.3.1322': attribute type 1 has an invalid length. [ 234.372065][T10596] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1322'. [ 234.586614][T10591] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.604997][T10591] bond4: (slave bond5): making interface the new active one [ 234.617985][T10591] bond4: (slave bond5): Enslaving as an active interface with an up link [ 234.637253][T10586] bond4: entered promiscuous mode [ 234.643775][T10586] bond5: entered promiscuous mode [ 234.649364][T10586] bond4: entered allmulticast mode [ 234.654606][T10586] bond5: entered allmulticast mode [ 234.661493][T10586] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.802389][T10615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1325'. [ 234.855599][T10620] netlink: 'syz.4.1329': attribute type 21 has an invalid length. [ 234.872864][T10620] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1329'. [ 234.885799][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 234.900758][T10620] gre0: left promiscuous mode [ 235.047359][T10625] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1328'. [ 235.130880][ T24] tipc: Node number set to 1 [ 235.256661][T10626] syzkaller1: entered promiscuous mode [ 235.286747][T10626] syzkaller1: entered allmulticast mode [ 235.516466][T10648] syzkaller1: left promiscuous mode [ 235.522658][T10648] syzkaller1: left allmulticast mode [ 236.035316][T10669] netlink: 'syz.1.1337': attribute type 2 has an invalid length. [ 236.072428][T10669] netlink: 'syz.1.1337': attribute type 2 has an invalid length. [ 236.143038][T10681] netlink: 'syz.4.1340': attribute type 24 has an invalid length. [ 236.363658][T10687] hsr_slave_0: left promiscuous mode [ 236.373682][T10687] hsr_slave_1: left promiscuous mode [ 236.572790][T10695] netlink: 'syz.3.1344': attribute type 23 has an invalid length. [ 236.750385][T10699] __nla_validate_parse: 5 callbacks suppressed [ 236.750404][T10699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1345'. [ 237.233552][T10723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1352'. [ 237.425351][T10726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1353'. [ 237.990339][T10759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.039001][T10797] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 239.100631][T10797] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1368'. [ 239.129037][T10797] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.1368'. [ 239.398185][T10823] syzkaller1: entered promiscuous mode [ 239.404245][T10823] syzkaller1: entered allmulticast mode [ 239.412655][T10823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1375'. [ 239.442468][T10824] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 239.515110][T10807] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1371'. [ 239.981638][ T10] IPVS: starting estimator thread 0... [ 240.032740][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1385'. [ 240.080294][T10856] IPVS: using max 30 ests per chain, 72000 per kthread [ 240.162462][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1385'. [ 240.175622][T10870] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1388'. [ 240.966224][T10910] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 241.105871][T10919] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 241.153718][T10926] netlink: 'syz.0.1401': attribute type 1 has an invalid length. [ 241.153840][T10924] veth1_to_bond: entered allmulticast mode [ 241.196093][T10927] veth1_to_bond: left allmulticast mode [ 241.357074][T10939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.911233][T10963] ve: renamed from ipvlan1 [ 242.183699][T10984] __nla_validate_parse: 5 callbacks suppressed [ 242.183719][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1416'. [ 242.203497][T10985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1417'. [ 242.223247][T10985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1417'. [ 243.071098][T11044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1436'. [ 243.466621][T11065] netlink: 'syz.0.1441': attribute type 10 has an invalid length. [ 243.893379][T11093] sctp: [Deprecated]: syz.3.1449 (pid 11093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.893379][T11093] Use struct sctp_sack_info instead [ 244.100603][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'. [ 244.105801][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'. [ 244.129970][T11099] block nbd1: server does not support multiple connections per device. [ 244.141819][T11099] block nbd1: shutting down sockets [ 244.587602][T11134] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1460'. [ 244.670115][T11136] netlink: 'syz.2.1462': attribute type 11 has an invalid length. [ 244.686768][T11136] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1462'. [ 244.760269][T11138] geneve2: entered promiscuous mode [ 244.778683][T11138] geneve2: entered allmulticast mode [ 244.791050][ T8174] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 244.820886][ T8174] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 244.851334][T11141] netlink: 'syz.3.1464': attribute type 4 has an invalid length. [ 244.868485][ T8174] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 244.897787][ T8174] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 245.189406][T11157] netlink: 'syz.4.1468': attribute type 11 has an invalid length. [ 245.238117][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1470'. [ 245.593107][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1470'. [ 245.924131][T11156] tipc: Trying to set illegal importance in message [ 246.282826][T11210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.399161][T11210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.622283][T11229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.630210][T11229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.641367][T11229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.658140][T11229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.797922][T11237] netlink: 'syz.1.1490': attribute type 1 has an invalid length. [ 246.892104][T11237] 8021q: adding VLAN 0 to HW filter on device bond5 [ 247.007710][T11241] bond5: (slave geneve3): making interface the new active one [ 247.036823][T11241] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 247.382527][T11268] __nla_validate_parse: 9 callbacks suppressed [ 247.382546][T11268] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1499'. [ 247.704763][T11285] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1504'. [ 247.728162][T11289] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 247.751788][T11292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1506'. [ 247.779042][T11295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1506'. [ 247.973567][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'. [ 248.163582][T11313] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1513'. [ 248.343964][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1516'. [ 248.590445][T11331] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1518'. [ 248.830111][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'. [ 248.845857][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1522'. [ 249.159537][T11364] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 249.244731][T11364] syzkaller1: entered promiscuous mode [ 249.258586][T11364] syzkaller1: entered allmulticast mode [ 249.349185][T11372] netlink: 'syz.2.1532': attribute type 1 has an invalid length. [ 249.526260][T11388] dvmrp1: entered allmulticast mode [ 249.695643][T11401] openvswitch: netlink: Flow actions attr not present in new flow. [ 249.875496][T11413] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 249.946595][T11413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.980416][T11421] veth3: entered promiscuous mode [ 250.003695][T11421] bond2: (slave veth3): Enslaving as an active interface with a down link [ 250.739629][T11475] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 251.365459][T11508] pimreg3: entered allmulticast mode [ 251.546994][T11512] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 251.670602][T11526] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 252.026695][T11543] tipc: Enabling of bearer rejected, already enabled [ 252.087472][T11543] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 252.427733][T11553] netlink: 'syz.3.1579': attribute type 5 has an invalid length. [ 252.439563][T11559] __nla_validate_parse: 16 callbacks suppressed [ 252.439584][T11559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1580'. [ 252.512999][T11559] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1580'. [ 252.513883][T11563] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1581'. [ 252.553630][T11564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.562673][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 252.575213][T11565] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 252.743396][T11561] team0: Port device team_slave_1 removed [ 252.897783][T11577] tipc: Enabling of bearer rejected, failed to enable media [ 253.197665][T11598] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1594'. [ 253.220220][T11598] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1594'. [ 253.344105][T11603] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1597'. [ 253.499698][T11615] tipc: Enabling of bearer rejected, failed to enable media [ 253.637469][T11618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1602'. [ 253.859296][T11641] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 253.958227][T11652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1610'. [ 254.301802][T11669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1612'. [ 254.349779][T11671] netlink: zone id is out of range [ 254.420643][T11671] netlink: zone id is out of range [ 254.426316][T11671] netlink: zone id is out of range [ 254.447242][T11671] netlink: zone id is out of range [ 254.455375][T11671] netlink: zone id is out of range [ 254.464155][T11671] netlink: get zone limit has 8 unknown bytes [ 254.646352][T11686] veth0_to_team: entered promiscuous mode [ 254.654200][T11686] veth0_to_team: entered allmulticast mode [ 254.853105][ T8177] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.869643][ T8177] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.897008][ T8177] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.915979][ T8177] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.020164][T11699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.199112][T11723] netlink: 'syz.4.1627': attribute type 1 has an invalid length. [ 255.345181][T11732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.375178][T11725] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.375916][T11730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.515771][T11735] netlink: 'syz.4.1632': attribute type 10 has an invalid length. [ 255.856796][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.883708][T11814] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 257.587592][T11855] netlink: 'syz.0.1662': attribute type 1 has an invalid length. [ 257.598144][T11855] __nla_validate_parse: 12 callbacks suppressed [ 257.598166][T11855] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1662'. [ 257.772896][ T55] block nbd3: Possible stuck request ffff888025a1e000: control (read@0,1024B). Runtime 60 seconds [ 257.784074][ T55] block nbd3: Possible stuck request ffff888025a1e1c0: control (read@1024,1024B). Runtime 60 seconds [ 257.795289][ T55] block nbd3: Possible stuck request ffff888025a1e380: control (read@2048,1024B). Runtime 60 seconds [ 257.806496][ T55] block nbd3: Possible stuck request ffff888025a1e540: control (read@3072,1024B). Runtime 60 seconds [ 257.904181][T11862] netlink: 'syz.3.1664': attribute type 5 has an invalid length. [ 257.912535][T11862] netlink: 'syz.3.1664': attribute type 3 has an invalid length. [ 257.920396][T11862] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1664'. [ 257.955131][T11861] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 257.977548][T11861] netlink: 'syz.2.1665': attribute type 11 has an invalid length. [ 257.997384][T11861] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1665'. [ 258.102683][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'. [ 258.129522][T11865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1666'. [ 258.242568][T11880] tipc: Enabled bearer , priority 0 [ 258.287935][T11874] syzkaller0: entered promiscuous mode [ 258.329284][T11874] syzkaller0: entered allmulticast mode [ 258.407268][T11874] tipc: Resetting bearer [ 258.458752][T11871] tipc: Resetting bearer [ 258.532109][T11871] tipc: Disabling bearer [ 259.032532][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1675'. [ 259.207875][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1678'. [ 259.352442][T11930] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1680'. [ 259.564185][T11938] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1683'. [ 259.667087][T11944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 259.702461][T11913] syz.3.1675 (11913) used greatest stack depth: 16920 bytes left [ 259.804597][T11949] netlink: zone id is out of range [ 259.841853][T11949] netlink: zone id is out of range [ 259.859868][T11949] netlink: zone id is out of range [ 259.865802][T11949] netlink: zone id is out of range [ 259.871367][T11949] netlink: zone id is out of range [ 259.876631][T11949] netlink: zone id is out of range [ 259.882390][T11949] netlink: zone id is out of range [ 259.887823][T11949] netlink: zone id is out of range [ 259.896598][T11949] netlink: get zone limit has 8 unknown bytes [ 260.419390][T11984] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 260.648105][T11994] lo: entered promiscuous mode [ 260.674113][T11994] netlink: 'syz.4.1701': attribute type 2 has an invalid length. [ 260.955504][T12010] delete_channel: no stack [ 262.923134][T12125] v: renamed from veth0_virt_wifi [ 263.127919][T12140] __nla_validate_parse: 18 callbacks suppressed [ 263.127941][T12140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1743'. [ 263.305268][T12144] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1744'. [ 263.837757][T12174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1752'. [ 264.166686][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1756'. [ 264.272752][T12194] raw_sendmsg: syz.2.1757 forgot to set AF_INET. Fix it! [ 264.307483][ T8180] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 264.985889][T12208] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1762'. [ 265.333843][T12240] netlink: 'syz.2.1770': attribute type 1 has an invalid length. [ 265.341912][T12240] netlink: 784 bytes leftover after parsing attributes in process `syz.2.1770'. [ 265.502613][T12248] net_ratelimit: 1 callbacks suppressed [ 265.502633][T12248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.717875][T12252] xt_policy: too many policy elements [ 265.885170][T12259] netlink: 'syz.2.1777': attribute type 1 has an invalid length. [ 266.299457][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1783'. [ 266.336851][T12286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1785'. [ 268.586177][T12310] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1791'. [ 268.769516][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 268.842904][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1795'. [ 268.914824][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'. [ 268.926895][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'. [ 268.955540][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'. [ 268.982630][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'. [ 269.093615][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'. [ 269.103192][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'. [ 269.119501][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'. [ 270.343800][T12421] netlink: 'syz.1.1817': attribute type 21 has an invalid length. [ 270.352671][T12421] netlink: 'syz.1.1817': attribute type 1 has an invalid length. [ 270.656046][T12445] netlink: 'syz.1.1826': attribute type 9 has an invalid length. [ 270.678014][T12445] netlink: 'syz.1.1826': attribute type 9 has an invalid length. [ 271.041834][T12467] netlink: 'syz.0.1829': attribute type 1 has an invalid length. [ 271.100691][T12467] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.173199][T12478] ieee802154 phy1 wpan1: encryption failed: -126 [ 271.204809][T12477] netlink: 'syz.0.1832': attribute type 1 has an invalid length. [ 271.434847][T12488] netlink: 'syz.0.1836': attribute type 9 has an invalid length. [ 271.713824][T12500] netlink: 'syz.2.1838': attribute type 1 has an invalid length. [ 272.163011][T12519] openvswitch: netlink: EtherType 0 is less than min 600 [ 274.026370][T12618] __nla_validate_parse: 151 callbacks suppressed [ 274.026391][T12618] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1875'. [ 274.027322][T12616] openvswitch: netlink: Missing key (keys=40, expected=80) [ 274.329682][T12626] : entered promiscuous mode [ 274.426243][T12639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1882'. [ 274.522654][T12643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'. [ 274.587216][T12643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'. [ 274.633554][T12654] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1886'. [ 274.923766][T12667] tipc: Enabled bearer , priority 0 [ 274.947330][T12667] syzkaller0: entered promiscuous mode [ 274.955535][T12667] syzkaller0: entered allmulticast mode [ 275.005478][T12667] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 275.057475][T12667] tipc: Resetting bearer [ 275.067571][T12666] tipc: Resetting bearer [ 275.091339][T12677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1893'. [ 275.103173][T12666] tipc: Disabling bearer [ 275.696482][T12703] sctp: [Deprecated]: syz.4.1904 (pid 12703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.696482][T12703] Use struct sctp_sack_info instead [ 275.738958][T12703] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1904'. [ 275.979803][T12715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.237499][T12726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.349886][T12729] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1911'. [ 276.416142][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 276.438186][T12737] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1917'. [ 277.004593][T12769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.323753][T12780] netlink: 'syz.4.1928': attribute type 1 has an invalid length. [ 277.626184][T12811] openvswitch: netlink: IP tunnel dst address not specified [ 278.259132][T12841] netlink: 'syz.2.1943': attribute type 44 has an invalid length. [ 278.586513][T12859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.625395][T12860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.173992][T12884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.186359][T12884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.335266][T12884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.351040][T12884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.372673][T12893] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 279.472201][T12895] __nla_validate_parse: 5 callbacks suppressed [ 279.472222][T12895] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1961'. [ 279.526208][T12884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.558092][T12884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.577001][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1964'. [ 279.577000][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1964'. [ 279.610805][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'. [ 279.744914][T12884] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.762672][T12884] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.953297][T12925] tls_set_device_offload: netdev not found [ 279.981895][T12915] syzkaller1: entered promiscuous mode [ 279.993124][T12915] syzkaller1: entered allmulticast mode [ 280.113709][ T1154] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.133780][ T1154] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.155282][T12930] syzkaller0: entered promiscuous mode [ 280.164839][T12930] syzkaller0: entered allmulticast mode [ 280.222962][ T8180] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.250587][ T8180] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.286277][ T8180] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.303000][ T8180] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.343760][ T8175] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.355438][ T8175] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.510471][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'. [ 281.060678][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1986'. [ 281.276687][T12990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.533559][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'. [ 281.549240][T13012] netlink: 'syz.2.1990': attribute type 10 has an invalid length. [ 281.583288][T13012] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.614105][T13012] bridge_slave_1: left allmulticast mode [ 281.654121][T13012] bridge_slave_1: left promiscuous mode [ 281.677692][T13012] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.716435][T13012] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 281.982683][T13034] tipc: Enabling of bearer rejected, failed to enable media [ 282.123061][T13042] tipc: Enabled bearer , priority 0 [ 282.136347][T13042] syzkaller0: entered promiscuous mode [ 282.144452][T13042] syzkaller0: entered allmulticast mode [ 282.203513][T13042] tipc: Resetting bearer [ 282.336385][T13052] netlink: 'syz.4.2005': attribute type 1 has an invalid length. [ 282.435996][T13052] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.233825][T13107] netlink: 'syz.1.2023': attribute type 13 has an invalid length. [ 283.438593][T13107] lo: entered promiscuous mode [ 283.443957][T13107] lo: entered allmulticast mode [ 283.453623][T13107] tunl0: entered promiscuous mode [ 283.458885][T13107] tunl0: entered allmulticast mode [ 283.467641][T13107] gre0: entered promiscuous mode [ 283.493625][T13107] gre0: entered allmulticast mode [ 283.516087][T13107] gretap0: entered promiscuous mode [ 283.521561][T13107] gretap0: entered allmulticast mode [ 283.534760][T13107] gretap0: refused to change device tx_queue_len [ 283.542915][T13107] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 283.658917][T13122] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2027'. [ 283.797506][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2030'. [ 283.850311][ T5184] Bluetooth: hci4: link tx timeout [ 283.856643][ T5184] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.868031][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2033'. [ 284.115525][T13145] netlink: 'syz.2.2038': attribute type 1 has an invalid length. [ 284.146019][T13150] gretap1: entered promiscuous mode [ 284.612618][T13168] pimreg3: entered allmulticast mode [ 284.649832][T13175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2042'. [ 284.670075][T13174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2042'. [ 284.867547][T13189] netlink: 'syz.4.2048': attribute type 1 has an invalid length. [ 284.897678][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2047'. [ 285.484631][T13228] team0: Device vti0 is of different type [ 285.499427][T13232] netlink: 'syz.2.2058': attribute type 1 has an invalid length. [ 285.630868][T13244] bridge_slave_1: entered allmulticast mode [ 285.647093][ T6052] IPVS: starting estimator thread 0... [ 285.767987][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'. [ 285.799388][T13245] IPVS: using max 27 ests per chain, 64800 per kthread [ 285.906371][T13260] tipc: Enabled bearer , priority 0 [ 285.928651][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 285.937167][T13260] syzkaller0: entered promiscuous mode [ 285.957823][T13260] syzkaller0: entered allmulticast mode [ 286.115173][T13260] tipc: Resetting bearer [ 286.129689][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 286.142016][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2067'. [ 286.229872][T13279] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2066'. [ 286.367982][T13259] tipc: Resetting bearer [ 286.391907][T13259] tipc: Disabling bearer [ 286.441408][T13282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2068'. [ 286.492661][T13290] netlink: 'syz.2.2069': attribute type 21 has an invalid length. [ 286.500826][T13290] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2069'. [ 286.752223][T13290] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2069'. [ 287.484494][T13342] netlink: 'syz.4.2083': attribute type 7 has an invalid length. [ 287.774228][T13350] netlink: 'syz.4.2086': attribute type 1 has an invalid length. [ 287.803068][T13350] netlink: 'syz.4.2086': attribute type 4 has an invalid length. [ 287.824198][T13350] netlink: 'syz.4.2086': attribute type 1 has an invalid length. [ 287.850887][ T55] block nbd3: Possible stuck request ffff888025a1e000: control (read@0,1024B). Runtime 90 seconds [ 287.856292][T13350] netlink: 'syz.4.2086': attribute type 4 has an invalid length. [ 287.862215][ T55] block nbd3: Possible stuck request ffff888025a1e1c0: control (read@1024,1024B). Runtime 90 seconds [ 287.880989][ T55] block nbd3: Possible stuck request ffff888025a1e380: control (read@2048,1024B). Runtime 90 seconds [ 287.892091][ T55] block nbd3: Possible stuck request ffff888025a1e540: control (read@3072,1024B). Runtime 90 seconds [ 288.104934][T13376] geneve2: entered promiscuous mode [ 288.404510][T13395] bond0: entered promiscuous mode [ 288.423270][T13395] bond_slave_0: entered promiscuous mode [ 288.430213][T13395] bond_slave_1: entered promiscuous mode [ 288.438208][T13395] batadv0: entered promiscuous mode [ 288.466111][T13395] hsr0: entered allmulticast mode [ 288.474761][T13395] bond0: entered allmulticast mode [ 288.499416][T13395] bond_slave_0: entered allmulticast mode [ 288.505204][T13395] bond_slave_1: entered allmulticast mode [ 288.527581][T13395] batadv0: entered allmulticast mode [ 288.539231][T13395] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 288.557826][T13395] bond0: left promiscuous mode [ 288.563015][T13395] bond_slave_0: left promiscuous mode [ 288.569225][T13395] bond_slave_1: left promiscuous mode [ 288.580497][T13395] batadv0: left promiscuous mode [ 288.767050][T13415] dvmrp0: entered allmulticast mode [ 289.092094][T13436] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 289.736606][T13468] netlink: 'syz.2.2122': attribute type 1 has an invalid length. [ 289.758805][T13468] netlink: 'syz.2.2122': attribute type 3 has an invalid length. [ 289.766585][T13468] __nla_validate_parse: 14 callbacks suppressed [ 289.766602][T13468] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2122'. [ 289.800926][T13468] NCSI netlink: No device for ifindex 813332851 [ 289.858214][T13470] netlink: 'syz.0.2121': attribute type 1 has an invalid length. [ 289.867100][T13470] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2121'. [ 289.883438][T13478] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.915834][T13470] sctp: [Deprecated]: syz.0.2121 (pid 13470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.915834][T13470] Use struct sctp_sack_info instead [ 290.104883][T13494] netlink: 'syz.1.2128': attribute type 1 has an invalid length. [ 290.171986][T13501] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2129'. [ 290.321438][T13494] bond8: entered promiscuous mode [ 290.349176][T13494] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.413156][T13499] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.433268][T13499] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 290.448809][T13499] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 290.466830][T13499] bond8: (slave wireguard0): making interface the new active one [ 290.476186][T13499] wireguard0: entered promiscuous mode [ 290.483594][T13499] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 290.487006][T13519] netlink: 'syz.0.2134': attribute type 11 has an invalid length. [ 290.798179][T13533] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2139'. [ 290.828224][T13533] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2139'. [ 290.939249][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2142'. [ 291.135375][T13549] veth0_to_hsr: mtu less than device minimum [ 291.185751][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 291.225801][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2148'. [ 291.264422][T13552] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 291.282072][T13560] tipc: Enabling of bearer rejected, already enabled [ 291.448982][T13571] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 291.712744][T13575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2154'. [ 291.733700][T13584] bridge0: port 1(veth0_to_bridge) entered blocking state [ 291.789450][T13584] bridge0: port 1(veth0_to_bridge) entered disabled state [ 291.815199][T13584] veth0_to_bridge: entered allmulticast mode [ 291.842846][T13584] veth0_to_bridge: entered promiscuous mode [ 291.865419][T13584] bridge0: port 1(veth0_to_bridge) entered blocking state [ 291.873005][T13584] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 292.080839][T13608] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2166'. [ 292.767441][T13643] validate_nla: 5 callbacks suppressed [ 292.767461][T13643] netlink: 'syz.1.2172': attribute type 2 has an invalid length. [ 292.884097][T13646] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 292.972900][T13646] bond8: entered promiscuous mode [ 292.980035][T13646] bond8: entered allmulticast mode [ 292.991199][T13646] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.340393][T13674] tipc: Enabled bearer , priority 0 [ 293.369967][T13674] syzkaller0: entered promiscuous mode [ 293.375486][T13674] syzkaller0: entered allmulticast mode [ 294.099931][T13671] tipc: Resetting bearer [ 294.171941][T13671] tipc: Disabling bearer [ 294.405803][T13745] tls_set_device_offload_rx: netdev not found [ 294.591677][T13754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.939952][T13778] __nla_validate_parse: 11 callbacks suppressed [ 294.939974][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2210'. [ 294.967526][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2210'. [ 295.041054][T13782] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2213'. [ 295.051409][T13763] 8021q: VLANs not supported on wg1 [ 295.320787][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2215'. [ 295.886217][T13822] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 295.977843][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 296.168143][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2228'. [ 296.410495][T13836] team0: Port device vlan0 removed [ 296.438257][T13841] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2229'. [ 296.467589][T13840] wg1: entered promiscuous mode [ 296.827609][T13863] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2236'. [ 296.877046][T13865] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2237'. [ 296.912574][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2238'. [ 297.100885][T13879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.128793][T13880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.353033][T13895] pim6reg1: entered promiscuous mode [ 297.367191][T13895] pim6reg1: entered allmulticast mode [ 297.384651][T13896] netlink: 'syz.4.2246': attribute type 1 has an invalid length. [ 297.517970][T13896] bond5 (unregistering): Released all slaves [ 297.568496][T13899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.657265][T13905] bridge9: entered promiscuous mode [ 297.671244][T13905] bridge9: entered allmulticast mode [ 297.727578][T13906] ip6erspan0: entered promiscuous mode [ 298.048977][T13928] bridge7: entered promiscuous mode [ 298.054456][T13928] bridge7: entered allmulticast mode [ 298.630866][T13967] syzkaller0: entered promiscuous mode [ 298.636534][T13967] syzkaller0: entered allmulticast mode [ 298.788891][T13980] netlink: 'syz.1.2268': attribute type 4 has an invalid length. [ 299.071470][T13986] bond9: entered allmulticast mode [ 299.077323][T13986] 8021q: adding VLAN 0 to HW filter on device bond9 [ 299.084937][T13986] bridge0: port 2(bond9) entered blocking state [ 299.091699][T13986] bridge0: port 2(bond9) entered disabled state [ 299.101960][T13986] bond9: entered promiscuous mode [ 299.108577][T13986] bridge0: port 2(bond9) entered blocking state [ 299.115253][T13986] bridge0: port 2(bond9) entered forwarding state [ 299.124268][T13983] team0: Cannot enslave team device to itself [ 299.134270][T13984] team0: Cannot enslave team device to itself [ 299.214382][T14003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.614481][T14023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.666032][T14019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.713417][T14019] netlink: 'syz.3.2282': attribute type 39 has an invalid length. [ 299.720140][ T13] bridge0: port 2(bond9) entered disabled state [ 299.960724][T14044] __nla_validate_parse: 5 callbacks suppressed [ 299.960744][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'. [ 300.055656][T14044] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 300.111029][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2290'. [ 300.179295][T14051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2290'. [ 300.714410][T14083] tipc: Enabled bearer , priority 0 [ 300.727674][T14083] syzkaller0: entered promiscuous mode [ 300.736824][T14083] syzkaller0: entered allmulticast mode [ 300.747126][ T5949] IPVS: starting estimator thread 0... [ 300.780199][T14092] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 300.802958][T14083] IPVS: stopping backup sync thread 14092 ... [ 300.851194][T14090] IPVS: using max 32 ests per chain, 76800 per kthread [ 300.873967][T14096] netlink: 3512 bytes leftover after parsing attributes in process `syz.2.2298'. [ 300.901625][T14083] tipc: Resetting bearer [ 300.922521][T14082] tipc: Resetting bearer [ 300.946646][T14099] netlink: 'syz.3.2301': attribute type 1 has an invalid length. [ 300.984978][T14082] tipc: Disabling bearer [ 301.155584][T14102] 8021q: adding VLAN 0 to HW filter on device bond9 [ 301.173015][T14102] bond8: (slave bond9): making interface the new active one [ 301.185198][T14102] bond8: (slave bond9): Enslaving as an active interface with an up link [ 301.244642][T14106] bond8: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 301.279042][T14106] bond8: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 301.408722][T14124] 8021q: VLANs not supported on wg2 [ 301.827099][T14143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2311'. [ 301.859782][T14143] netlink: 'syz.2.2311': attribute type 1 has an invalid length. [ 301.880444][T14143] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2311'. [ 302.164650][T14163] netlink: 'syz.0.2317': attribute type 11 has an invalid length. [ 302.275490][T14167] netlink: 'syz.1.2319': attribute type 1 has an invalid length. [ 302.284101][T14167] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 302.405789][T14175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2321'. [ 302.727583][T14194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2328'. [ 302.756822][T14194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2328'. [ 303.009728][T14209] batman_adv: batadv0: Removing interface: team0 [ 303.170059][T14209] veth0_to_bridge: left allmulticast mode [ 303.175920][T14209] veth0_to_bridge: left promiscuous mode [ 303.194716][T14209] bridge0: port 1(veth0_to_bridge) entered disabled state [ 303.220633][T14209] bond0: (slave bond_slave_0): Releasing backup interface [ 303.228129][T14215] netlink: 'syz.2.2333': attribute type 5 has an invalid length. [ 303.254626][T14209] bond0: (slave bond_slave_1): Releasing backup interface [ 303.286349][T14209] team0: Port device C removed [ 303.307097][T14209] team0: Port device team_slave_1 removed [ 303.315892][T14209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.328127][T14209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.340245][T14209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.357856][T14209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.383736][T14209] bond0: (slave geneve1): Releasing backup interface [ 303.404566][T14209] bond0: (slave netdevsim0): Releasing backup interface [ 303.433678][T14209] bond0: (slave wlan1): Releasing backup interface [ 303.509718][T14209] bond1: (slave veth5): Releasing active interface [ 303.559535][T14209] bond2: (slave geneve2): Releasing active interface [ 303.622661][T14209] bond5: (slave geneve3): Releasing active interface [ 303.650581][T14243] netlink: 'syz.3.2336': attribute type 4 has an invalid length. [ 303.659989][T14209] bond8: (slave wireguard0): Releasing backup interface [ 303.667060][T14209] wireguard0: left promiscuous mode [ 303.676461][T14209] bond9: left promiscuous mode [ 303.682984][T14209] bridge0: port 2(bond9) entered disabled state [ 303.707531][T14246] netlink: 'syz.3.2336': attribute type 4 has an invalid length. [ 303.886953][T14253] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20003 [ 304.910644][T14323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2354'. [ 305.136730][T14335] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2358'. [ 305.605413][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2363'. [ 305.634780][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2363'. [ 305.669428][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2363'. [ 306.285631][T14392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2370'. [ 306.296455][T14392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2370'. [ 306.331814][T14396] pim6reg1: entered promiscuous mode [ 306.337312][T14396] pim6reg1: entered allmulticast mode [ 306.473208][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2374'. [ 306.518518][T14404] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 307.488850][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2387'. [ 307.717624][T14477] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2393'. [ 308.174222][T14506] FAULT_INJECTION: forcing a failure. [ 308.174222][T14506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.192906][T14506] CPU: 1 UID: 0 PID: 14506 Comm: syz.4.2401 Not tainted syzkaller #0 PREEMPT(full) [ 308.192935][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 308.192946][T14506] Call Trace: [ 308.192954][T14506] [ 308.192962][T14506] dump_stack_lvl+0x189/0x250 [ 308.192990][T14506] ? __pfx____ratelimit+0x10/0x10 [ 308.193016][T14506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.193037][T14506] ? __pfx__printk+0x10/0x10 [ 308.193061][T14506] ? __might_fault+0xb0/0x130 [ 308.193108][T14506] should_fail_ex+0x414/0x560 [ 308.193138][T14506] _copy_to_iter+0x1de/0x1790 [ 308.193158][T14506] ? pipe_wait_readable+0x350/0x410 [ 308.193194][T14506] ? __pfx_autoremove_wake_function+0x10/0x10 [ 308.193217][T14506] ? __pfx__copy_to_iter+0x10/0x10 [ 308.193239][T14506] ? rcu_is_watching+0x15/0xb0 [ 308.193263][T14506] ? splice_from_pipe_next+0x608/0x660 [ 308.193286][T14506] ? page_copy_sane+0x4e/0x280 [ 308.193307][T14506] copy_page_to_iter+0x10c/0x1c0 [ 308.193332][T14506] pipe_to_user+0xa8/0x140 [ 308.193352][T14506] __splice_from_pipe+0x34a/0x920 [ 308.193394][T14506] ? __pfx_pipe_to_user+0x10/0x10 [ 308.193416][T14506] __se_sys_vmsplice+0x316/0x10d0 [ 308.193439][T14506] ? get_pid_task+0x20/0x1f0 [ 308.193482][T14506] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 308.193522][T14506] ? ksys_write+0x1cb/0x250 [ 308.193550][T14506] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 308.193568][T14506] ? __pfx_vfs_write+0x10/0x10 [ 308.193594][T14506] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.193628][T14506] ? fput+0xa0/0xd0 [ 308.193647][T14506] ? ksys_write+0x22a/0x250 [ 308.193673][T14506] ? rcu_is_watching+0x15/0xb0 [ 308.193697][T14506] ? do_syscall_64+0xbe/0x3b0 [ 308.193720][T14506] do_syscall_64+0xfa/0x3b0 [ 308.193735][T14506] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.193767][T14506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.193785][T14506] ? clear_bhb_loop+0x60/0xb0 [ 308.193806][T14506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.193823][T14506] RIP: 0033:0x7fd5a938eba9 [ 308.193842][T14506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.193857][T14506] RSP: 002b:00007fd5aa1ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 308.193878][T14506] RAX: ffffffffffffffda RBX: 00007fd5a95d5fa0 RCX: 00007fd5a938eba9 [ 308.193892][T14506] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 308.193904][T14506] RBP: 00007fd5aa1ce090 R08: 0000000000000000 R09: 0000000000000000 [ 308.193915][T14506] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 308.193926][T14506] R13: 00007fd5a95d6038 R14: 00007fd5a95d5fa0 R15: 00007ffe01920e58 [ 308.193959][T14506] [ 308.632523][T14517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2404'. [ 310.171440][T14548] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2412'. [ 310.505641][T14552] Set syz1 is full, maxelem 65536 reached [ 310.595537][T14561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.758956][T14573] netlink: 'syz.3.2420': attribute type 1 has an invalid length. [ 310.910985][T14577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2421'. [ 311.008481][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2424'. [ 311.049673][T14588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2426'. [ 311.346802][T14590] netlink: 'syz.4.2425': attribute type 3 has an invalid length. [ 311.357177][T14590] netlink: 'syz.4.2425': attribute type 3 has an invalid length. [ 311.372260][T14590] netlink: 'syz.4.2425': attribute type 3 has an invalid length. [ 311.385104][T14590] netlink: 'syz.4.2425': attribute type 3 has an invalid length. [ 311.397605][T14590] netlink: 'syz.4.2425': attribute type 3 has an invalid length. [ 311.406968][T14590] netlink: 'syz.4.2425': attribute type 3 has an invalid length. [ 311.416284][T14590] netlink: 'syz.4.2425': attribute type 3 has an invalid length. [ 311.438976][T14590] netlink: 'syz.4.2425': attribute type 3 has an invalid length. [ 311.446958][T14590] netlink: 'syz.4.2425': attribute type 3 has an invalid length. [ 311.482666][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2429'. [ 312.032703][T14635] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2437'. [ 312.382280][T14664] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2443'. [ 312.517085][T14675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2445'. [ 312.526895][T14675] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2445'. [ 312.629697][T14681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2445'. [ 313.045536][T14697] sctp: [Deprecated]: syz.3.2452 (pid 14697) Use of int in maxseg socket option. [ 313.045536][T14697] Use struct sctp_assoc_value instead [ 313.507185][T14733] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 313.532037][T14733] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 313.745376][T14747] unsupported nlmsg_type 40 [ 314.289378][T14776] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001 [ 315.137757][T14812] macvtap1: entered promiscuous mode [ 315.209536][T14812] vlan0: entered promiscuous mode [ 315.237054][T14814] __nla_validate_parse: 9 callbacks suppressed [ 315.237076][T14814] netlink: 73 bytes leftover after parsing attributes in process `syz.2.2482'. [ 315.237105][T14812] macvtap1: entered allmulticast mode [ 315.259195][T14812] vlan0: entered allmulticast mode [ 315.267252][T14812] veth0_vlan: entered allmulticast mode [ 315.284984][T14815] macvlan0: entered promiscuous mode [ 315.298802][T14815] macvlan0: entered allmulticast mode [ 315.734609][T14834] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2489'. [ 316.079205][T14856] validate_nla: 31 callbacks suppressed [ 316.079226][T14856] netlink: 'syz.4.2496': attribute type 10 has an invalid length. [ 316.233213][T14856] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 316.281186][T14860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2497'. [ 316.282026][T14856] netlink: 'syz.4.2496': attribute type 21 has an invalid length. [ 316.304827][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'. [ 316.341285][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 316.440217][T14856] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 316.713517][T14870] bond6: entered promiscuous mode [ 316.724199][T14870] bond6: entered allmulticast mode [ 316.732780][T14870] 8021q: adding VLAN 0 to HW filter on device bond6 [ 316.810775][T14891] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2505'. [ 317.215507][T14870] bond6 (unregistering): Released all slaves [ 317.306724][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.445789][T14912] netlink: 'syz.2.2508': attribute type 1 has an invalid length. [ 317.491431][T14912] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2508'. [ 317.639913][T14921] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20002 [ 317.676279][T14924] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2513'. [ 317.904838][T14937] netlink: 'syz.3.2515': attribute type 2 has an invalid length. [ 317.930610][ T55] block nbd3: Possible stuck request ffff888025a1e000: control (read@0,1024B). Runtime 120 seconds [ 317.941997][ T55] block nbd3: Possible stuck request ffff888025a1e1c0: control (read@1024,1024B). Runtime 120 seconds [ 317.954073][ T55] block nbd3: Possible stuck request ffff888025a1e380: control (read@2048,1024B). Runtime 120 seconds [ 317.963297][T14937] veth0: entered allmulticast mode [ 317.965454][ T55] block nbd3: Possible stuck request ffff888025a1e540: control (read@3072,1024B). Runtime 120 seconds [ 317.977470][T14937] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 318.287702][T14954] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2519'. [ 318.301470][T14954] openvswitch: netlink: Flow key attr not present in new flow. [ 318.648699][ T5184] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 318.655298][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout [ 318.911632][T14992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2527'. [ 319.050944][T14999] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 319.285108][ T5958] IPVS: starting estimator thread 0... [ 319.398687][T15011] IPVS: using max 23 ests per chain, 55200 per kthread [ 320.079752][T15054] tipc: Enabling of bearer rejected, already enabled [ 320.482003][T15074] netlink: 'syz.4.2552': attribute type 11 has an invalid length. [ 320.502235][T15074] __nla_validate_parse: 1 callbacks suppressed [ 320.502255][T15074] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2552'. [ 320.787016][T15089] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2556'. [ 321.268257][T15122] netlink: 'syz.4.2567': attribute type 21 has an invalid length. [ 321.296446][T15122] netlink: 'syz.4.2567': attribute type 1 has an invalid length. [ 321.555617][T15140] sctp: [Deprecated]: syz.2.2571 (pid 15140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.555617][T15140] Use struct sctp_sack_info instead [ 321.604734][T15140] delete_channel: no stack [ 321.612515][T15140] sctp: [Deprecated]: syz.2.2571 (pid 15140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.612515][T15140] Use struct sctp_sack_info instead [ 321.865248][T15156] tipc: Enabled bearer , priority 0 [ 321.887644][T15156] syzkaller0: entered promiscuous mode [ 321.905854][T15156] syzkaller0: entered allmulticast mode [ 321.952711][T15156] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 322.004254][T15156] tipc: Resetting bearer [ 322.032268][T15154] tipc: Resetting bearer [ 322.106641][T15154] tipc: Disabling bearer [ 322.814466][T15220] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 322.890913][T15227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2594'. [ 323.092806][T15233] syzkaller0: refused to change device tx_queue_len [ 323.224549][T15250] netlink: 'syz.1.2600': attribute type 1 has an invalid length. [ 323.239170][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2600'. [ 323.581308][T15267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2606'. [ 323.863579][T15288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2609'. [ 323.921285][T15290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2611'. [ 323.927864][T15293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2612'. [ 323.969401][T15293] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2612'. [ 324.026693][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2612'. [ 324.472601][T15310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.901888][T15346] netlink: 'syz.2.2626': attribute type 1 has an invalid length. [ 324.924940][T15350] bridge0: port 3(vlan0) entered blocking state [ 324.935098][T15350] bridge0: port 3(vlan0) entered disabled state [ 324.946211][T15350] vlan0: entered allmulticast mode [ 324.958451][T15350] bridge0: entered allmulticast mode [ 324.974693][T15350] vlan0: left allmulticast mode [ 324.988260][T15350] bridge0: left allmulticast mode [ 325.025417][T15346] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 325.681513][T15392] __nla_validate_parse: 7 callbacks suppressed [ 325.681534][T15392] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2640'. [ 325.793007][T15393] netlink: 'syz.0.2640': attribute type 11 has an invalid length. [ 326.070547][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2648'. [ 326.128759][T15425] netlink: 'syz.3.2649': attribute type 10 has an invalid length. [ 326.160424][T15425] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 326.174583][T15425] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 326.457309][T15448] netlink: 'syz.2.2655': attribute type 1 has an invalid length. [ 326.496778][T15448] netlink: 'syz.2.2655': attribute type 1 has an invalid length. [ 326.549751][T15442] can: request_module (can-proto-0) failed. [ 326.553149][T15448] netlink: 'syz.2.2655': attribute type 1 has an invalid length. [ 326.581361][T15452] nbd: must specify a device to reconfigure [ 326.586258][T15448] netlink: 'syz.2.2655': attribute type 2 has an invalid length. [ 326.649599][T15448] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2655'. [ 326.939268][T15471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.027629][T15481] nbd: must specify a device to reconfigure [ 327.057102][T15482] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2665'. [ 327.132274][T15484] netlink: 'syz.1.2666': attribute type 2 has an invalid length. [ 327.167262][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 327.338254][T15503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2672'. [ 327.441811][T15510] tipc: Enabling of bearer rejected, failed to enable media [ 327.499302][T15517] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2676'. [ 327.509024][T15517] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2676'. [ 327.527666][T15517] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2676'. [ 327.556917][T15517] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2676'. [ 327.653979][T15522] sctp: [Deprecated]: syz.1.2678 (pid 15522) Use of int in max_burst socket option deprecated. [ 327.653979][T15522] Use struct sctp_assoc_value instead [ 327.691367][T15522] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 330.818360][T15534] __nla_validate_parse: 29 callbacks suppressed [ 330.818380][T15534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2680'. [ 330.822003][T15541] xt_limit: Overflow, try lower: 604147548/4200216962 [ 331.020609][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2685'. [ 331.036604][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2685'. [ 331.050900][T15550] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 331.061188][T15550] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 331.177259][T15561] tipc: Enabled bearer , priority 0 [ 331.190470][T15561] syzkaller0: entered promiscuous mode [ 331.203018][T15561] syzkaller0: entered allmulticast mode [ 331.231905][T15564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'. [ 331.248913][T15559] tipc: Resetting bearer [ 331.284179][T15559] tipc: Disabling bearer [ 331.440505][T15575] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2693'. [ 331.697890][T15590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2696'. [ 331.721116][T15592] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.015157][T15605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2700'. [ 333.134217][T15614] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 333.144414][T15618] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 333.191554][T15632] tipc: Enabling of bearer rejected, failed to enable media [ 333.275869][T15633] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2705'. [ 333.309826][T15633] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2705'. [ 333.361845][T15632] tipc: Enabled bearer , priority 0 [ 333.385576][T15638] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2707'. [ 333.425109][T15616] syzkaller0: entered promiscuous mode [ 333.460099][T15616] syzkaller0: entered allmulticast mode [ 333.578249][T15616] tipc: Resetting bearer [ 333.619033][T15615] tipc: Resetting bearer [ 333.779790][T15615] tipc: Disabling bearer [ 334.919518][T15710] tipc: Enabling of bearer rejected, already enabled [ 335.842026][T15769] __nla_validate_parse: 10 callbacks suppressed [ 335.842048][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2737'. [ 335.881850][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2737'. [ 336.124559][T15781] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2741'. [ 336.368160][T15798] netlink: 'syz.0.2745': attribute type 2 has an invalid length. [ 336.802339][T15820] netlink: 'syz.4.2750': attribute type 1 has an invalid length. [ 336.837557][T15820] netlink: 'syz.4.2750': attribute type 11 has an invalid length. [ 336.863746][T15820] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2750'. [ 337.013395][T15830] netlink: 'syz.4.2754': attribute type 1 has an invalid length. [ 337.037169][T15830] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2754'. [ 337.488488][T15861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2767'. [ 337.505679][T15861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2767'. [ 337.863114][T15881] netlink: zone id is out of range [ 337.875671][T15881] netlink: zone id is out of range [ 337.885821][T15881] netlink: zone id is out of range [ 337.897748][T15881] netlink: zone id is out of range [ 337.919588][T15881] netlink: zone id is out of range [ 337.935153][T15881] netlink: zone id is out of range [ 337.949225][T15881] netlink: del zone limit has 4 unknown bytes [ 338.397288][T15917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2782'. [ 338.450961][T15921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2783'. [ 338.479477][T15921] bridge_slave_0: left allmulticast mode [ 338.505676][T15921] bridge_slave_0: left promiscuous mode [ 338.525955][T15921] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.681296][T15932] 8021q: VLANs not supported on wg0 [ 338.859810][T15943] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 339.225658][T15965] tipc: Enabled bearer , priority 0 [ 339.235873][T15969] syzkaller0: entered promiscuous mode [ 339.242835][T15969] syzkaller0: entered allmulticast mode [ 339.327309][T15969] tipc: Resetting bearer [ 339.388424][T15969] tipc: Disabling bearer [ 339.423128][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2798'. [ 339.434924][T15977] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 339.529281][T15990] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.785413][T16008] netlink: 'syz.4.2804': attribute type 11 has an invalid length. [ 339.809557][T16008] netlink: 'syz.4.2804': attribute type 11 has an invalid length. [ 339.892592][T16013] netlink: 'syz.2.2807': attribute type 2 has an invalid length. [ 339.922371][T16017] netlink: 'syz.0.2809': attribute type 1 has an invalid length. [ 340.243178][T16026] veth5: entered promiscuous mode [ 340.274954][T16026] bond6: (slave veth5): Enslaving as a backup interface with a down link [ 340.296589][T16031] 8021q: adding VLAN 0 to HW filter on device bond6 [ 340.329567][T16047] netlink: 'syz.2.2815': attribute type 1 has an invalid length. [ 340.347564][T16049] netlink: 'syz.2.2815': attribute type 1 has an invalid length. [ 340.513767][T16049] veth9: entered promiscuous mode [ 340.543701][T16049] bond10: (slave veth9): Enslaving as a backup interface with a down link [ 340.623881][T16047] veth11: entered promiscuous mode [ 340.633223][T16047] bond10: (slave veth11): Enslaving as a backup interface with a down link [ 341.386936][ T8172] tipc: Subscription rejected, illegal request [ 341.431667][T16104] __nla_validate_parse: 9 callbacks suppressed [ 341.431689][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2830'. [ 341.585622][T16116] bridge: RTM_NEWNEIGH with invalid ether address [ 341.628989][T16116] netlink: 'syz.3.2834': attribute type 29 has an invalid length. [ 341.659547][T16116] netlink: 'syz.3.2834': attribute type 29 has an invalid length. [ 341.689002][T16116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2834'. [ 341.690912][T16121] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2835'. [ 341.825891][T16128] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 341.887787][T16130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.902388][T16130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.086559][T16145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2844'. [ 342.127815][T16149] netlink: 'syz.2.2845': attribute type 21 has an invalid length. [ 342.141737][T16145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2844'. [ 342.151736][T16149] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2845'. [ 342.164285][T16145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2844'. [ 342.181144][T16153] netlink: 'syz.1.2846': attribute type 12 has an invalid length. [ 342.473634][T16169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.589837][T16177] netlink: 'syz.2.2853': attribute type 39 has an invalid length. [ 342.701920][T16187] netlink: 'syz.3.2856': attribute type 1 has an invalid length. [ 342.836944][T16192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.933729][T16190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.206544][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2864'. [ 343.336141][T16224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2867'. [ 343.360012][T16223] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2866'. [ 343.555979][T16230] syzkaller1: entered promiscuous mode [ 343.582441][T16230] syzkaller1: entered allmulticast mode [ 343.620141][T16230] netlink: 'syz.2.2869': attribute type 15 has an invalid length. [ 343.983760][T16244] veth0: entered promiscuous mode [ 344.047411][T16254] netlink: 'syz.0.2874': attribute type 1 has an invalid length. [ 344.075044][T16242] veth0: left promiscuous mode [ 344.167577][T16270] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 344.222289][T16263] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 344.512056][T16286] sctp: [Deprecated]: syz.1.2882 (pid 16286) Use of int in maxseg socket option. [ 344.512056][T16286] Use struct sctp_assoc_value instead [ 344.577417][T16291] delete_channel: no stack [ 344.671378][T16291] delete_channel: no stack [ 344.797148][T16297] IPVS: set_ctl: invalid protocol: 41 10.1.1.2:20004 [ 345.625681][T16343] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 345.986383][T16363] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 346.170340][T16376] netlink: 'syz.0.2910': attribute type 1 has an invalid length. [ 346.193891][T16376] netlink: 'syz.0.2910': attribute type 1 has an invalid length. [ 346.228196][T16376] bond0: entered allmulticast mode [ 346.262320][T16376] bond_slave_0: entered allmulticast mode [ 346.283021][T16376] bond_slave_1: entered allmulticast mode [ 346.301069][T16376] dummy0: entered allmulticast mode [ 346.400581][T16380] [ 346.403059][T16380] ====================================================== [ 346.410096][T16380] WARNING: possible circular locking dependency detected [ 346.417154][T16380] syzkaller #0 Not tainted [ 346.421589][T16380] ------------------------------------------------------ [ 346.428618][T16380] syz.3.2911/16380 is trying to acquire lock: [ 346.434777][T16380] ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 346.444362][T16380] [ 346.444362][T16380] but task is already holding lock: [ 346.451838][T16380] ffff888143334f28 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 346.462292][T16380] [ 346.462292][T16380] which lock already depends on the new lock. [ 346.462292][T16380] [ 346.472692][T16380] [ 346.472692][T16380] the existing dependency chain (in reverse order) is: [ 346.481705][T16380] [ 346.481705][T16380] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 346.490313][T16380] lock_acquire+0x120/0x360 [ 346.495346][T16380] blk_alloc_queue+0x538/0x620 [ 346.500632][T16380] __blk_mq_alloc_disk+0x15c/0x340 [ 346.506264][T16380] nbd_dev_add+0x46c/0xae0 [ 346.511206][T16380] nbd_init+0x168/0x1f0 [ 346.515886][T16380] do_one_initcall+0x233/0x820 [ 346.521175][T16380] do_initcall_level+0x104/0x190 [ 346.526639][T16380] do_initcalls+0x59/0xa0 [ 346.531488][T16380] kernel_init_freeable+0x334/0x4b0 [ 346.537212][T16380] kernel_init+0x1d/0x1d0 [ 346.542062][T16380] ret_from_fork+0x3fc/0x770 [ 346.547173][T16380] ret_from_fork_asm+0x1a/0x30 [ 346.552462][T16380] [ 346.552462][T16380] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 346.559672][T16380] lock_acquire+0x120/0x360 [ 346.564701][T16380] fs_reclaim_acquire+0x72/0x100 [ 346.570173][T16380] prepare_alloc_pages+0x153/0x610 [ 346.575799][T16380] __alloc_frozen_pages_noprof+0x123/0x370 [ 346.582124][T16380] __alloc_pages_noprof+0xa/0x30 [ 346.587581][T16380] pcpu_populate_chunk+0x182/0xb30 [ 346.593214][T16380] pcpu_alloc_noprof+0xcbf/0x16b0 [ 346.598772][T16380] bpf_map_alloc_percpu+0xbc/0x1b0 [ 346.604406][T16380] array_map_alloc+0x385/0x700 [ 346.609684][T16380] map_create+0xaa0/0x14d0 [ 346.614622][T16380] __sys_bpf+0x60f/0x870 [ 346.619389][T16380] __x64_sys_bpf+0x7c/0x90 [ 346.624325][T16380] do_syscall_64+0xfa/0x3b0 [ 346.629347][T16380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.635758][T16380] [ 346.635758][T16380] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 346.643491][T16380] validate_chain+0xb9b/0x2140 [ 346.648775][T16380] __lock_acquire+0xab9/0xd20 [ 346.653978][T16380] lock_acquire+0x120/0x360 [ 346.659009][T16380] __mutex_lock+0x187/0x1350 [ 346.664116][T16380] pcpu_alloc_noprof+0x286/0x16b0 [ 346.669665][T16380] sbitmap_init_node+0x1e1/0x630 [ 346.675133][T16380] sbitmap_queue_init_node+0x3e/0x4d0 [ 346.681056][T16380] blk_mq_init_tags+0x110/0x280 [ 346.686971][T16380] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 346.692970][T16380] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 346.699303][T16380] nbd_start_device+0x17f/0xb10 [ 346.704683][T16380] nbd_genl_connect+0x135b/0x18f0 [ 346.710231][T16380] genl_family_rcv_msg_doit+0x215/0x300 [ 346.716302][T16380] genl_rcv_msg+0x60e/0x790 [ 346.721326][T16380] netlink_rcv_skb+0x205/0x470 [ 346.726616][T16380] genl_rcv+0x28/0x40 [ 346.731120][T16380] netlink_unicast+0x82f/0x9e0 [ 346.736408][T16380] netlink_sendmsg+0x805/0xb30 [ 346.741688][T16380] __sock_sendmsg+0x21c/0x270 [ 346.746899][T16380] ____sys_sendmsg+0x505/0x830 [ 346.752269][T16380] ___sys_sendmsg+0x21f/0x2a0 [ 346.757467][T16380] __x64_sys_sendmsg+0x19b/0x260 [ 346.762923][T16380] do_syscall_64+0xfa/0x3b0 [ 346.768401][T16380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.774823][T16380] [ 346.774823][T16380] other info that might help us debug this: [ 346.774823][T16380] [ 346.785045][T16380] Chain exists of: [ 346.785045][T16380] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 346.785045][T16380] [ 346.798696][T16380] Possible unsafe locking scenario: [ 346.798696][T16380] [ 346.806140][T16380] CPU0 CPU1 [ 346.811500][T16380] ---- ---- [ 346.816951][T16380] lock(&q->q_usage_counter(io)#50); [ 346.822331][T16380] lock(fs_reclaim); [ 346.828833][T16380] lock(&q->q_usage_counter(io)#50); [ 346.836732][T16380] lock(pcpu_alloc_mutex); [ 346.841240][T16380] [ 346.841240][T16380] *** DEADLOCK *** [ 346.841240][T16380] [ 346.849378][T16380] 6 locks held by syz.3.2911/16380: [ 346.854566][T16380] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 346.862754][T16380] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 346.871720][T16380] #2: ffff888025831188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 346.883122][T16380] #3: ffff8880258310d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 346.894080][T16380] #4: ffff888143334f28 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 346.904795][T16380] #5: ffff888143334f60 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 346.915768][T16380] [ 346.915768][T16380] stack backtrace: [ 346.921653][T16380] CPU: 0 UID: 0 PID: 16380 Comm: syz.3.2911 Not tainted syzkaller #0 PREEMPT(full) [ 346.921672][T16380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.921683][T16380] Call Trace: [ 346.921690][T16380] [ 346.921697][T16380] dump_stack_lvl+0x189/0x250 [ 346.921717][T16380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.921733][T16380] ? __pfx__printk+0x10/0x10 [ 346.921754][T16380] ? print_lock_name+0xde/0x100 [ 346.921773][T16380] print_circular_bug+0x2ee/0x310 [ 346.921791][T16380] check_noncircular+0x134/0x160 [ 346.921808][T16380] validate_chain+0xb9b/0x2140 [ 346.921830][T16380] __lock_acquire+0xab9/0xd20 [ 346.921852][T16380] ? pcpu_alloc_noprof+0x286/0x16b0 [ 346.921873][T16380] lock_acquire+0x120/0x360 [ 346.921892][T16380] ? pcpu_alloc_noprof+0x286/0x16b0 [ 346.921916][T16380] __mutex_lock+0x187/0x1350 [ 346.921930][T16380] ? pcpu_alloc_noprof+0x286/0x16b0 [ 346.921950][T16380] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 346.921971][T16380] ? kasan_save_track+0x4f/0x80 [ 346.921988][T16380] ? kasan_save_track+0x3e/0x80 [ 346.922004][T16380] ? __kasan_kmalloc+0x93/0xb0 [ 346.922021][T16380] ? blk_mq_init_tags+0x85/0x280 [ 346.922044][T16380] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 346.922064][T16380] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 346.922078][T16380] ? pcpu_alloc_noprof+0x286/0x16b0 [ 346.922097][T16380] ? nbd_genl_connect+0x135b/0x18f0 [ 346.922116][T16380] ? genl_family_rcv_msg_doit+0x215/0x300 [ 346.922133][T16380] ? genl_rcv_msg+0x60e/0x790 [ 346.922149][T16380] ? __pfx___mutex_lock+0x10/0x10 [ 346.922161][T16380] ? ____sys_sendmsg+0x505/0x830 [ 346.922177][T16380] ? do_syscall_64+0xfa/0x3b0 [ 346.922189][T16380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.922209][T16380] pcpu_alloc_noprof+0x286/0x16b0 [ 346.922234][T16380] sbitmap_init_node+0x1e1/0x630 [ 346.922249][T16380] ? __kasan_kmalloc+0x93/0xb0 [ 346.922268][T16380] sbitmap_queue_init_node+0x3e/0x4d0 [ 346.922285][T16380] blk_mq_init_tags+0x110/0x280 [ 346.922303][T16380] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 346.922326][T16380] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 346.922340][T16380] ? kfree+0x18e/0x440 [ 346.922359][T16380] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 346.922380][T16380] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 346.922400][T16380] ? sysfs_add_file_mode_ns+0x259/0x300 [ 346.922425][T16380] nbd_start_device+0x17f/0xb10 [ 346.922448][T16380] ? device_create_file+0xf4/0x1c0 [ 346.922463][T16380] nbd_genl_connect+0x135b/0x18f0 [ 346.922486][T16380] ? __pfx_nbd_genl_connect+0x10/0x10 [ 346.922510][T16380] ? __nla_parse+0x40/0x60 [ 346.922533][T16380] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 346.922554][T16380] genl_family_rcv_msg_doit+0x215/0x300 [ 346.922573][T16380] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 346.922595][T16380] ? stack_trace_save+0x9c/0xe0 [ 346.922614][T16380] genl_rcv_msg+0x60e/0x790 [ 346.922633][T16380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.922648][T16380] ? __pfx_nbd_genl_connect+0x10/0x10 [ 346.922672][T16380] netlink_rcv_skb+0x205/0x470 [ 346.922692][T16380] ? __lock_acquire+0xab9/0xd20 [ 346.922712][T16380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.922729][T16380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.922755][T16380] ? down_read+0x1ad/0x2e0 [ 346.922771][T16380] genl_rcv+0x28/0x40 [ 346.922786][T16380] netlink_unicast+0x82f/0x9e0 [ 346.922807][T16380] ? __pfx_netlink_unicast+0x10/0x10 [ 346.922826][T16380] ? netlink_sendmsg+0x642/0xb30 [ 346.922839][T16380] ? skb_put+0x11b/0x210 [ 346.922854][T16380] netlink_sendmsg+0x805/0xb30 [ 346.922870][T16380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.922883][T16380] ? aa_sock_msg_perm+0xf1/0x1d0 [ 346.922898][T16380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.922913][T16380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.922926][T16380] __sock_sendmsg+0x21c/0x270 [ 346.922946][T16380] ____sys_sendmsg+0x505/0x830 [ 346.922964][T16380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.922982][T16380] ? import_iovec+0x74/0xa0 [ 346.922999][T16380] ___sys_sendmsg+0x21f/0x2a0 [ 346.923014][T16380] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.923047][T16380] ? __fget_files+0x2a/0x420 [ 346.923059][T16380] ? __fget_files+0x3a0/0x420 [ 346.923075][T16380] __x64_sys_sendmsg+0x19b/0x260 [ 346.923091][T16380] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.923110][T16380] ? rcu_is_watching+0x15/0xb0 [ 346.923126][T16380] ? do_syscall_64+0xbe/0x3b0 [ 346.923139][T16380] do_syscall_64+0xfa/0x3b0 [ 346.923152][T16380] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.923172][T16380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.923186][T16380] ? clear_bhb_loop+0x60/0xb0 [ 346.923201][T16380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.923216][T16380] RIP: 0033:0x7f32d8d8eba9 [ 346.923230][T16380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.923243][T16380] RSP: 002b:00007f32d9c11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.923259][T16380] RAX: ffffffffffffffda RBX: 00007f32d8fd5fa0 RCX: 00007f32d8d8eba9 [ 346.923269][T16380] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 346.923280][T16380] RBP: 00007f32d8e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 346.923289][T16380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.923298][T16380] R13: 00007f32d8fd6038 R14: 00007f32d8fd5fa0 R15: 00007ffc859e8e88 [ 346.923314][T16380] [ 347.501526][ T5869] block nbd1: Receive control failed (result -32) [ 347.501560][ T5184] block nbd1: Receive control failed (result -32) [ 347.529632][T16380] nbd1: detected capacity change from 0 to 127 [ 348.012531][ T55] block nbd3: Possible stuck request ffff888025a1e000: control (read@0,1024B). Runtime 150 seconds [ 348.023410][ T55] block nbd3: Possible stuck request ffff888025a1e1c0: control (read@1024,1024B). Runtime 150 seconds [ 348.034717][ T55] block nbd3: Possible stuck request ffff888025a1e380: control (read@2048,1024B). Runtime 150 seconds [ 348.045718][ T55] block nbd3: Possible stuck request ffff888025a1e540: control (read@3072,1024B). Runtime 150 seconds