last executing test programs: 3.615639384s ago: executing program 1 (id=5935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x800, 0x9, 0x3}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) 3.072474458s ago: executing program 1 (id=5941): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000300", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x840) r2 = socket$netlink(0x10, 0x3, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd"], 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000690003050000000000001c5200000006", @ANYRES64=r2], 0x18}}, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x140f, 0x60ceaae1ef55e4c3, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x2c}}, 0x0) accept(r11, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) 3.038620045s ago: executing program 3 (id=5942): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x3, {0x1, 0x0, 0x1}, {0x0, 0xf0, 0x4}, 0xfd, 0xfe}, {0x2, 0x2, {0x1, 0x0, 0x1}, {}, 0x1}, {0x3, 0x2, {0x2, 0xff, 0x4}, {0x0, 0x0, 0x3}, 0xff, 0xfd}], 0x60) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x74a}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES64=r4], 0xa) close(0x3) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}], 0x1c) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x6, 0xb, 0x81, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r7, 0xcc, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x7}, @in6={0xa, 0x4e23, 0x7ff, @local, 0x8}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7f}, @in6={0xa, 0x4e23, 0x9, @mcast2, 0x1}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x1a, @dev={0xfe, 0x80, '\x00', 0x24}, 0x1000}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r8, 0x2}, &(0x7f00000000c0)=0x8) 2.705125943s ago: executing program 1 (id=5948): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)={0x1c, r4, 0x331, 0x2000, 0x40080000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=@RTM_GETNSID={0x5c, 0x5a, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404480c}, 0x4804) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) bind$netrom(r2, &(0x7f00000003c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@bcast, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r8 = accept(r7, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r8) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x0, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x0, 0x8, "4fbbe662d4776e701e7d6c44706741a6081ebafabdd200f97e336c1cd263b398c4e69ffc9e98b864cfad42cb6b19bd321401d21637a314f0d65318c62beb9da334cd2100e7caba5c0aa6c55ae957010b2e2442515e16221d29712e460b52ca79a24bb3b76064b458648f4a885bbc83ceafa55cdc1f237abad62b2902b85278f29af4c49bb187fda4ea7cf51453e8ccaa85f512a1002132cd480ec8da4e2277556c9a3081184efeef969192d9fe9f7b4bac2612ed3d3468822a207bd79bd8bb71c192a43ca3a82f0bb9b0f9a985c615e1d8dcb936cfad90bf65774ba8cb0c7bb25d8ec1a93575e71ffe175f940b90a872452f"}, @NFTA_OBJ_NAME={0x0, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x1) 2.558393566s ago: executing program 1 (id=5949): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000900)="bada30fbc99b5400040000ea0756", 0xe, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x19, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback, 0x8}, 0x1c) ppoll(&(0x7f0000000080)=[{r9, 0x3000}], 0x1, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r11, &(0x7f0000000400)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r10, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x36}, {0x5, 0x8e, 0x1}}]}, 0x4c}}, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000ee0800020073797a310000000008000a40fffffffc0800084000000001140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2.079383867s ago: executing program 3 (id=5954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x28, 0x10e}, 0x48) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt(r1, 0x7, 0x5, &(0x7f0000000500)="f03403b914f0cf7357cddac9e9f0a4e108816d8fad71b33b4a8711dfa4e4587b0cb824ef", 0x24) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000480), &(0x7f00000004c0)=0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r6, 0xc040ff0b, 0x2000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc/4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) 1.665333915s ago: executing program 3 (id=5960): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) r1 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) r3 = socket(0x27, 0x3, 0xce) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0x2, 0x5, @l2={'eth', 0x3a, 'team_slave_0\x00'}}}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYBLOB="0a0001"], 0x48}}, 0x0) 1.658745999s ago: executing program 2 (id=5962): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b7000000000095f1ff0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r1 = socket$inet(0x2, 0x6, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x22000000}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) 1.576986936s ago: executing program 0 (id=5963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4008080) 1.506218078s ago: executing program 1 (id=5964): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ieee802154={0x24, @long}, &(0x7f0000000180)=0x80) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@buf={0x18, &(0x7f00000001c0)="fa6f839015c526aaf1926086b8bce297a42df5b8291b59b7"}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$kcm(0x2, 0x5, 0x84) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.411542009s ago: executing program 0 (id=5966): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003400000000d1400000011000100000000000000000000000014"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003400000000d1400000011000100000000000000000000000014"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 1.305150296s ago: executing program 2 (id=5967): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) 1.165637512s ago: executing program 4 (id=5968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:', @ANYRESOCT], 0xa) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000040000000aaff020000000000000000000000000001"], 0xffe) syz_emit_ethernet(0x2a, &(0x7f0000001700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @random="c79094b15e35", @local}}}}, 0x0) 1.164900561s ago: executing program 2 (id=5969): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/246, 0xf6}, {&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000280)=""/1, 0x1}, {&(0x7f00000002c0)=""/109, 0x6d}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x6}, 0x2}, {{&(0x7f0000001440)=@nfc, 0x80, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/234, 0xea}, {&(0x7f00000015c0)=""/130, 0x82}], 0x2, &(0x7f00000016c0)=""/154, 0x9a}, 0x3}, {{&(0x7f0000001780)=@alg, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001800)=""/50, 0x32}, {&(0x7f0000001840)=""/167, 0xa7}, {&(0x7f0000001900)=""/206, 0xce}, {&(0x7f0000001a00)=""/19, 0x13}, {&(0x7f0000001a40)=""/117, 0x75}], 0x5, &(0x7f0000001b40)=""/81, 0x51}, 0x1}], 0x3, 0x3, &(0x7f0000001c80)={0x0, 0x3938700}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000001cc0)={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "c2f892d10ae9a6aaafa4f68df6cfd33acf7d0b9f885e31c8436e283e1a2bd368", 0x1, 0x101, 0x3}, 0x3c) pipe(&(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r3, &(0x7f0000001d40)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x38, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040810}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), r3) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000001f00)={0x3ff, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e21, @private=0xa010101}}}, 0x108) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002080), r2) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10002208}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x48080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002280)={'sit0\x00', &(0x7f00000021c0)={'gre0\x00', 0x0, 0x1, 0x7, 0x100, 0x6, {{0x1d, 0x4, 0x2, 0x6, 0x74, 0x66, 0x0, 0x57, 0x93651fb3f03bd6b2, 0x0, @empty, @rand_addr=0x64010100, {[@generic={0x82, 0xa, "d9a679eb8922b16f"}, @timestamp={0x44, 0x14, 0x4a, 0x0, 0x3, [0x0, 0x9, 0x80000000, 0x8]}, @timestamp_addr={0x44, 0xc, 0xfa, 0x1, 0x3, [{@rand_addr=0x64010100, 0x80}]}, @timestamp_prespec={0x44, 0x24, 0x36, 0x3, 0xf, [{@rand_addr=0x64010102, 0x2}, {@loopback, 0x56f}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010100, 0x8000}]}, @generic={0x89, 0xf, "3861b9f0333ec48395d1639fc0"}, @noop]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000002380)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)=@gettfilter={0x6c, 0x2e, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0xfff2}, {0x0, 0xfff1}, {0x7, 0x1}}, [{0x8, 0xb, 0x8000}, {0x8}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2cf4}, {0x8, 0xb, 0x8000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8010) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002400), r2) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x54, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8040) ioctl$sock_netdev_private(r4, 0x89fd, &(0x7f0000002540)="47343ce908a7fa7477ffcc6ea98d49587b9a7e6bc3afe582e4370b250910") bind$can_j1939(r3, &(0x7f0000002580)={0x1d, r8, 0x2, {0x2, 0xf0, 0x6}, 0xff}, 0x18) connect$qrtr(r2, &(0x7f00000025c0)={0x2a, 0xffffffffffffffff, 0x2}, 0xc) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002640), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000002740)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x1c, r10, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x240c8081}, 0x48080) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000028c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002880)={&(0x7f00000027c0)={0x8c, r9, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000000) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002ac0)=@generic={&(0x7f0000002a80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0xf965abb9a4b32ec2, 0x6, &(0x7f0000002900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0x4, 0xb, 0x6, 0x0, 0x10}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}]}, &(0x7f0000002940)='syzkaller\x00', 0x7, 0x63, &(0x7f0000002980)=""/99, 0x41100, 0x12, '\x00', r8, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000002a00)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002a40)={0x1, 0x4, 0x6, 0x739}, 0x10, 0xffffffffffffffff, r12, 0x4, &(0x7f0000002b00)=[r3, r3, r3], &(0x7f0000002b40)=[{0x1, 0x2, 0x1, 0xc}, {0x3, 0x4, 0xd, 0x8}, {0x5, 0x1, 0x8}, {0x5, 0x5, 0x9, 0x4}], 0x10, 0x80000001}, 0x94) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4841) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000002d40)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8, 0x4aca, 0x7fffffffffffffff, 0x4, 0xb, 0x100}, {0x5, 0x4, 0xd, 0x91b8, 0xfe, 0x7f}], ['\x00', '\x00']}) sendmsg$nl_xfrm(r3, &(0x7f0000003200)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000031c0)={&(0x7f0000003000)=@newsa={0x1a8, 0x10, 0x100, 0x70bd2a, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @in6=@private2, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x40, 0x8, r8}, {@in=@multicast2, 0x4d5, 0x33}, @in=@empty, {0x6722ca46, 0x100000000, 0x7ff, 0x770e, 0x4a500000, 0x4, 0x7, 0xb8}, {0x6, 0x1ff, 0xc7, 0x4}, {0x6, 0x9, 0x2}, 0x70bd2d, 0x34ff, 0xa, 0x4, 0x7, 0x81}, [@offload={0xc}, @policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x4e23, 0x5, 0x4e21, 0x101, 0x2, 0x0, 0xa0, 0x32, r8}, {0x5, 0x9, 0x5, 0x5, 0x7ff, 0x5, 0x26, 0x9}, {0x7, 0x7, 0x7ff, 0x8000}, 0x5, 0x6e6bb6, 0x1, 0x1, 0x3, 0x1}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x1000}, 0x20000000) 1.069390317s ago: executing program 0 (id=5970): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f00000001c0)) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'geneve0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000040)=0x3) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}}, 0x40) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000780)={0x0, 0x6}, 0x4) sendmsg$inet6(r1, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000040)="6a939b1d909abd1aa3bcd9d32b99c92ab6661b9bbd8133048e72f6090aac4efd5eb2d635b9b6b72d4ed4a0a7860c3aac88377e0079bbbdc89ee63a9165e157f9165b73c057eb2fee0c80a44496ac826940b3ceba28582e6af3667889d841dafcca39215e09893bde03d9f4f2bde308463ae616f56b5777b97532cde6b7dd182c5bbd92fb6b2a7212597651561e471be3c44468a88ccdecf85314f7f580a0a1651477bbd4c10040c3a3d1661eba4385389e7a108da3b200", 0xb7}, {&(0x7f0000000100)="5fedee887778dc84ee761f9dc6dc0c3533f023910b1fad3ad71aaf1b4040cac00b4203c2921209ce5bc918539d3757ddce7434533f236a6069049ef310e54804327372565346f709ff3992e1728ac44a3f", 0x51}, {&(0x7f00000002c0)="cc62fd7ec726fe4f7cd8d86698e3e7cdba1a498a57ff0400ff4d049ceb5f22b205217f3968af3dd4e86b327846fce51d4ca352e087d287526e8d69935a8aa1f3dddb7d5ededa54d8ced5c7d0f133bd29deeeb3fc00d23b6d5f11fa6aa26f7f0fe23326c9b3a84cdcae0afda40199aae715b7e63b48c2ce87d379a0e1f849c9663a4f4bd02ccfa74ba203f95305dcabb9354e004dd1c18601b4735aff2ba434a431bedbbcd9ff159581cefb8bf3f90c9e0299915210b61e620cb73984bf4ac9e06c160cf7de995e3420b4d8ba2ac0d7618507254ee2", 0xd5}, {&(0x7f0000000180)="cf9934152987d002edb136634862970782462ac0f5e6da7c6db9ef8a", 0x1c}, {&(0x7f00000003c0)="10ea886ea84d262ce93b8cf32ff5801954f10ad0a7d0840dd67f9937da8b6a36af6f15a4b2396b63a3f0bafe0d8347f541bae1a52b3efda07af850b92fb33d838b5f289cb76f88f148e109885888a458bde774784bcaf9a4faab486f197b6f7412f27291a1a41dcd87549554ce98be546f72ed84f173ac1ccd0c40e6fdff6c5f0409fdde9e4c88a6e5939dee653bc17d8b4f725fdb725e2a215f51aabf9084bad739ae849e989b882e227601cf07f91ab46ca8d9d38903e50ea0fcf8fd1be389507485a7f07db1dd15e43c80a7477b0e951b82ea066a7627e10dc8d39ef349c3d0467a2b29", 0xe5}, {&(0x7f00000001c0)="f3444a4c8ef66e", 0x7}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000000800)="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", 0x153}, {&(0x7f0000000580)="934aad096bff7e0fb1cf0d04ce7a9e525909844e814cc6df884b17911f4f204155de82e63d84b117ec243a987c84903a86ff4b9688f450aa48677f5d239605d98abbdc4d4f0ffafdd1e5c0080326999f4a86252aa33ed5165c04d517e2a41ed9cd78b701355bc5ebce2ebf", 0x6b}, {&(0x7f0000000600)="ffaf59ac63890b20a23b37adfafaea42834ce79aa7e2d6de285690abe69f25154f5edd0d3a5657694b75f9390f682e0ac8eb7f514fbfe6c17558f206caaf2f190091c1a727d2ecdf1e8e793d2ee7cf664855f95be04a223a97faf1b0aa342866c4e78369bf97b914ff0224e7db697c4376f17f6cd01e03750df2e74a5756a0ff5ec135d1998cdfc26680568b1b0ba1f5ba41ebed", 0x94}], 0xa}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d0000000000000056080000010000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 959.040526ms ago: executing program 4 (id=5971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63", 0x8}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="110000006a"], 0xfe33) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000100)=0x9, 0x8) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0xff}, [@mark={0xc}]}, 0x34}}, 0x0) 633.292989ms ago: executing program 0 (id=5972): epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124e00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000100)='GPL\x00'}, 0x48) 633.080326ms ago: executing program 4 (id=5973): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000140)=0x81, 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000005ec0), r0) 632.13762ms ago: executing program 2 (id=5974): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg(r1, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x50000) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x20, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0x0, 0xfff1}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000080)={0x53, 0x0, 0x4, 0xa, 0x7ff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x24}}, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000180)={{r2}, {@void, @max}}) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r6, &(0x7f0000000440)='&', 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000003040)=0xfffffffe, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0xff75) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/111, 0x6f}], 0x1}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a1a160a380000000000000100000009000100730300300000000040000000030a01080000000000000000010040000900030073797a320000000002400000000008000140000000a40900010073797a300000000088000000060a010400000000000000000100000008000b400000000009005f0073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608000148000009bdf0ea648b11b3356c49aac3bf", @ANYRES16, @ANYRES32=r1], 0x110}}, 0x40040) 532.458468ms ago: executing program 4 (id=5975): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, 0x0, 0x4000800) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x8094) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x18}, @NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1c}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000a80)={0xa, 0x4e23, 0x11f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x78, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, 'NLBL_MGMT\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c4}, 0x4044000) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x6c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2fee14a5d6b96278, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x84c}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR2={0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x30}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1782}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xa}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008010}, 0x8001) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004045}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 509.273134ms ago: executing program 0 (id=5976): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400000011000100"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000001c0)='ip6gre0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30644200}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x158c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x80}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @broadcast, @from_mac=@device_b, {0x3, 0xaf5}}, 0xa, @val={0x8c, 0x18, {0xbe4, "76e821a00dd7", @long="af6aa6afda26a9ae90c1f1a92cf3b061"}}}}, @NL80211_ATTR_FRAME={0x1520, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @from_mac=@device_b, {0x2, 0xffa}, "", @void, @value=@ver_80211n={0x0, 0x7, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x91, "3bbd7568397474ab2956161354e476e717a9bfff51f61ce9e688e0c556f9bf59ed408ef03a220507e001565b365b66b33b8bfe73b7b1bd622183927a169c06beb417d70054dfb2509f75ec278330a61d6591750a6ac1fb72462beeaf0f9bd391c5f8f6c18f741add3c3586c29672111f37e18fb9b7f2a516b859f10c19cb2dcc091135cb2cd8f345fba89d581fe89c7250"}, {@device_b, @device_a, 0xe6, "afdad06e5528ed4d75c23a144345572d992aec8f1ebb4d1cc1ae3b38e96e64f65edd4f3d05301672ac4d7f506a7374def0e9d34a6695cf94b591a1d797cd1f878105779fb5a3e85393b84c854c7418c7e7622e7ed80e301f9df863d8c2cc13b66ec840e130d07d65d64cca90faaaf932cfbd510acd162e1b138ec4018f0e417596eabc732a805c78f307c483c352fa599ae84a716b6571ea53d4e2fe6687a50e8408b0f4c66e1ee85a54a8e16d043c54b70a24bd18166267e50673e1e555377d04e56c328d5232ac16a2ec7e1ac59f9bef2d8c0e0e2b92a12cbeae962b305a31891f829f731f"}, {@device_b, @device_b, 0x1000, "89842b74c15d478f22c4509eed18a256a9e889235e27ae708ab8fc0a94d23454184acee1ec2ffdfac32ac7d53529046bdf45df7a9d9a3d64201d1ef673311b7564b48999e057652b4b37f30ad358aa5e72d0e48d940b952d3d35f2954730924b32466d393b4fd3e201e9c349c0463b06a98bbe503c7bf31ec0eab6737717015750d6e49d63f9142c20be5818f11e73aec0d8a7e65964d97e9877b47ca6f00cbcbab7b2f100559064e5268bdbb88e167bb65bf45b5275fffb7d2b14c6b9b4934f6769d6ca29745e780387976de54d5ce29af299afa3d8f05c665606eb5066f3774230564e8fabf1af0ec249a0a61723fdb9963d1a1796b7d91314eed4818b6085acef251b6a7d3690ff84f5ce56bf364e7414839e2b731aaab1a657cab4891e600ac1bf8a783edaff0fffa5248dc47852baa9bfd94cae2b6f41ef1977e5d0fd9530d83ca00912b41ba155a3e18de6433bac45434351d3fd7ce3a42900239e8577678305afb96cffda29e5d24bb52fcd049b80b56220ea29a4505612b0963508751aedd1157dd6a6dfaddfa5048f39c63c8f39454893c2d7636a25ef6e8a9d6cf2fe2b4b1bc54a4eacc9fe0d83105c81ae945284d178825b08049ac9742f4c46620003cf0c223ad82d7a553a45e556acf6282a36ea81973c9e5a345815d2bc9a2673949c93e173964267346d350663f4b878d23f97c32596ae233943a519991ee7817ce83773b17e024a7e7a5fbed45f42841376ca2aef85e785c6f314b7b013df2fe219c0f2e27d3f67cabcb93299909242ef17f7077c2346319d52d7d0a46765d0d46f5f743cdcb77e4f1aab18128fab2c5b0897d2933136ba147507b12720ccc0d8b904a098631f4134421618c6f42f60f1a764d768dc899325f0671de984e54f6a62a1921ee5eccf172c47da9aa0e8bbf9676fb0bb3ac6fccbd61936abae2af119d3269ff9ed229b5e2fc2c735fcdec2e3b8e0275a778be1bb9454b4a3a7b3f5018cc0204c645cf1c7e38aba6a52f0eebf540b871658981731c9b15ce7aefdcd0dc799e395c45c5cb24d4934456b5aff1b7bf6f7bbf22eba1cb013251320af702ac33fed548a7bd5ae15fc332f15d54276d83bad72adfb2e5f4433145124c7ac5add9f3f8868896f1d33d9611393aed1c891bd98e33ee3966db50c202610d3c3983da6a2f92b32097b3ef9eef4a120fb0eef86f52c15efcc6c249c3778973b9a51777314092331bbb0e3cbc7e87595e04376e578bb4215c599fef6a03727fff01f7b1fa2b267ec89384a7d2b953c3e8e0f44af50bd8d26dce88f1118d730d0c0f79a718164d6dc1ba0ad63ff79e75b70345c24fa9c76d0c7c55e53614dad6362c893714c2734a171b406498481a74334aa64adaa49f0b4b303787abfc3e06dddc0d5d1e22ef50678bc3659eb22243d3613555b5bbbf82f814c21d8e7a03869854b3640404567bb2dc7a0c06fa6c2b501f5fb3cc1485c8e169f2344497a9215d81282fa7585a0275169a42a89c1484df1e2445e377b26c2bdc7320695fb3a07426e5b73302f26a61703a3bc7014de89a6023001cb39a84e6c4d2057930ddb239de3466338732f606e47cce27197bb1c4e111ba16299f1a9f7afc49a7cdbc7a578f90469c7f5faa9df8152319031c969ee0717839cc6f89989db101b2292fb0c13fe6fb8eb2c750c76f794a723a8825c2cc88e6d05b29b91f091a85e8a2045a8342a39fdbd5ebcb70409dc761a557c0d550a2c6ad929b0c8c7611b23330867f7ae974cf6cb8f36c0ccdf4b52145fab9b67452f858d1cf4f2d24ed56c05994d15570a3af55549de948db10fe80de37ffa4d3d2b5e9ab8d04977c11b5463175ab7b68eb51b8825a44e56fa29deae9b6a81d52c1d0a10ce1eb8581b1a011137be165ab97b28f3fcd883750a10674c00563922bd65532e225de0c2c716c8d091c34fb369411d5656b57dfd814a5486a8e31e99751ef3d6e56f5dbfb37ae134965e67772cb05a29cb2260c62b8825ae0f89996e09b69d4d06d99017958e7357a1058c012cadba7cc8f80214c8d4ff0fc4b3f61a038464e5011c41799a93cb20bbe41dada43ba27628e45741d45c6f4700b526ebab0fb1b8ff73825003007cad41556c2dd12acf1c4115390111df47b96f47f606f2469cb459b612a85bf0642a45306b9202b7b0e964f910927fb1d5e6ecf5be4ab42e3492cb19a55aeb057035ba47e1c3e0af7785cf5942fe7d0aa0d60b5a8f611b3b606579da5752ce74e8a28e094741aafe003806d496748f7406233675f52ab015d7e4ec2b5ad096e2f808846adb8459fea59996de8aa86288866f9246c544afa60365b3e4cc1c21c593ce19bebc301c709478760cc1c664dd04a27ce45049bc8be8d6508de027f9311d21e817cc08ca7de7cc73acf094ba51ff87362aab8f322e79f32416644f351f670deae751d96066bcd814618a88457d0563dbd7332ec9469e3c67d2db06066ed84b0fa52d20f014d7a7b3a95204a33591ae76aa43744454c69615da9f15112c01dab57c5bf475ab32c929652c093d03130caca25c34216fbc6384f6e9a13bde3cf52b9429e884b1eb924e831eaf36621fc6b1c79cebf04b89a0369720a31aa13da83d020926ae1207ef9b39a6369e2189484d29708d702f8c1d2df8a6e44afb799f714ccdff64a56a20c281b90cdf7eefdb877fb819afb7985d6ae0554bc4b7ec9dc94afd53facb2e290a013bc64600732f399a93e94d278162962e65dce165ef3c60933e09c5e47fe5afd403ea38607d1e7721398a6d1dac0929546fb8ab8322904b86de14d15084cfa8a214e69989a610f00881c7f8543da24872213d0327b19bc1424f5fdf2470695fc898078e2c1ce8d4a81337d78d62dd8044c0e792178d32b303ac7022fed18e8f17ee67ea103bc58eab965e78da9134e56bdec79d0923cff1ca4f006fc4e6e547db37bdfeaa253cab5280d4f8366aeb06d0d422afb30f601b1ef56e15bf68cab670993183625bacf03309fb6d4bc660a5aee20227024bce79b9bc72442119f0163d8b269620e166952f96822e9937353a67dba4114fb4aa23694298c9273d68b7acdfd356648df7f859ac188f5a30a70361530a3b2fa2023881db3de84e5f87362da3f450e78926b255beef1e9dc86c1009a499cc3168028953a6938813b643e7b4fdd24131f2b4d611cb8dbad4b537b474bf36ab2c57bfceac389d388cccb3af0939851b08c92e7f118c0bebc8fbc0f73ff09138ac4d05ffa1b1ddb5be59d68a71d87b39919ec45d5e92de9f9cf2f6a5f4672387521d25ade085f7c535b3a59670f42444a26cffa724f919470e014eb723e13e2cd6f535e2d97371e9cfdd1d9459d477584161860b5f9339c3dc557da45585aa5d853d10284b287fa7a014f0c6d2b81f063a0ff870d5eddee200849ee6ffdec604d2160dfbbf181b33192c86b95916110631156672bf5432e452c87300d750fa74930dcbfa01805a2b9649cce1aa98f12bc477ef2ca90e4c6d746b8d80dd12eef0ca87fa728055239489be8aeec9168318bc0cf082426d554a217121243dffc18a2dcfbcfed465c558e9fec039ef3b05361f5c905a619586c4b9ee63e215e51beb0b4529c2be1b52ef6aadaa94fa2a29f2b6cbc526392b1efb61c8832bf92a83fe5b22ea4a3b73642f246b9b98b9da00ad2d620e2e2ea77d4c02d8fb18b7aef74bf63e2d41f683d83db7786016502a706a49bfcadef5104afe4cad5e625540678ee5731589b7cfb638946ae59593bd70bb994acbbcbfaaa05a38d5f95ba49956292a0a00c3c0d65da2c8e5cc7a1ebddc712a0ec1607c9410519e0533568d7cc6c416923085672e6af24c1c7ee49909d35cd040fdff04fdeea5f1f7ef7bc3adbff47793f1a9e91b526d866581ca0b03a80ed2301d29080283bdccbff8f2c96e27d2cc673059c4db367d888a28cd031055261825c815aaedf41f899101218cf97634d8219412359f7ed424402591860a36037431f77f80ad3af0b8d7beb43994f75a5bb95419cdccb432b2a5b03728cc6bb5f110f8fc15c92e38e55c201057f0852d05ed30bb66ccdf0a19b68704513dc9001424bd3fce016fa1397770a006e2631cb84ebf6b8fd3c609572237cf3bd17af82daad0741c966f522a8b10d9fcb744c2d9bef8ab41b76fd60dde6b694fc9def89529b124bcda1d6ca3169def5b5deab36760f19bd3ed7ee02fbc9a8c2b05d407269c9d8f18a1f14748cac1d46944675899e169492784a48eb9e1bdc233e3b3fa047004c697c7fe53f2254c81a9d2087a25df2cdc4223369de952785209db7559e833daf0adf7bf8945fb8a001dfd84e933e320c99505188b695572acba7e253bacc84e3d20820df23fb1c103a374fa008a6ea377d5a342c3ae43c587cabcacb4674b3b97862217d6a3d3c9ed37ea569985ad0ecd61da221836a5950f4b5d26a58996479251ed9199f97c989cea6d28d4453ee67c5a21f1da4ee30c6bcb30d41ae77d75f997aece27d1da4e31f9bed0d51a18f40ce780c593bdc523cab3fc647224e7ed2753be0372ae08f623174715d437c36ba7a89518d4e4042ded1accc73473323ee6ab1debca8d8d1eefcc9294ba7b3b26545fced985b12d5f5492daff00a3659d29f3c8dedd63b33d625c890cdd040433c59df56ac639be9f6b3f86433389e73fa8715375d4a21da805ced0a08beb18b8411e18e90ca5c3df2409f15a552931e324c684aa0a8259d0355979739dcf9d72375973f09358c07ccc074b83cd31a898ac7a59600e82a6368ef6f28f791b97a40072bd9f9f60cba0ccfd8d116ebe4dc3b9ba56faaba938c72209c291ffc71ea87d31cfc1b6d91e0e1fa620709c063dbe672a9411aab10c9845ffc28a2fd33c9642c54ce080cd821277fd6574c1e513140ad616b9aaefded57bba392a696054a353f432c91c28360d4860e1472af9f50339a81736514c55a534d07ee87f82329ecdba712643edc55d59c1478bc2644caf43ebcf200310c1065b0bd69cd9bf9c10dee0639febbbcf1d8c2b3a82a206b529f09fbb610eddd6aefbc82939aa937a821295ef34a4903da9d30aa3d8c62788a8d1e20f6031d6679849687049f337937a0aa86b1263ec401b04180d73770dd36409ff58c6e2b8a441259e10c6a9ac5d84dbd0b0f64a60fbf93f6a6b4b77adf58752f73146e49bebccbeca82764452df1759bed3e163011be481a12ffd3ec8155bc8ff3ec101689a21b194a121fb0ba9b5940a6c58bfed76946302ac76f17b0fd31c65dd228453966f496154fefa6ef4e176e5f82ef05085ed20d9e1deb3ffa7e7f44185cbc299c1d3f7b589b68c68e0715e5b9af2853459c07064a598cffdf82b357c8899f81e3bf65718911ca6da595997c3b162dec8348bb9587049c0c1acc3639de4d54ef4b2f235d4410fb966715dd285b79046130ac4c9c7905dacddd2612d3081bac132af2d76669f5e53024ddd08a0bc95115e35bb2a236871ed59d4bc6ed28749761729a2778e25eb787c419802fe691e00a1571081abe2434f90ec06f52e458499670900c80f0af6378f6537a56be03eeba87b10d5af24d8a0763503dddd69de64bdd2513efb14ccccdc3a4db53bf0d21ac1e46729fd176e52a3a4562fed6a7adb6623058a55912592881f0f45da057d824ff4636dd672c3bd4731ae9cccdfa4d82917a8f7e36be0a5d1a72519c3023ca5e0a7e079182626bdca27479bf36c44a392cd9fbf33eed46c0c933af1815c09667a30b3f4bc8d5201baef642fae7d5c52bc9eb046f382d9a9156400b79667"}, {@device_a, @broadcast, 0xfb, "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"}, {@device_b, @device_b, 0xaa, "bf8927d135d951fc58413d62299ac057f9b1dccda8d4e920c706a0dc413d365b29a33adf7f0cd80bb01ca4394ee3e37de7227fd9973b1df849547a39a088db5f1fea374a8003dd4ccd5181a8c067b737698a0fc1ca2d648a78b6ef4ea68b069c191a6908926aa92b402f1d9f241dc5038744aaca3bd36b9c40d7d64add714a0e6be9e1b7e671e3f06013349266e4f4474f658f37e7081b394342b62c0374e3cf84b6e97c125007b61dad"}, {@device_b, @device_b, 0x1c, "e5d728727aecd89938bfb6dde7b50b93947ef16252c8ed2e4ba03c68"}, {@device_b, @broadcast, 0x78, "454d945df3ad86e308e3ac152a9fc589a82b568c8a8bc4d5bcaea9bd8327925620b28633913c696f8a258aa54c273052605850870c78cff3a4373129ccb597c480a2a2f40777078176151b4479080a42a1d111d7028a72fb31bcba73e57fd40ad61b5d910e4c8ba013fc3279aea0c9139672a4afd2db512a"}, {@device_a, @broadcast, 0xd6, "8c5d268ba5126c11f49667dd0464b882a64469b38b80a67aca79970f916272f82b4144453160c978e872e54946e086e146abadcef244350b8edb85fb65179996f1b1d6dcd66da923e86fdb978d3285a797ab19aa150175572914ae4c7101a22e28dac436a82f9c7654dc630751030f5579542dc3e3945a4b0a98d170da6ba8faca5ed45af7375b6ad8211f8c4c8658a318b7d94faf9903e9cd4ec72754f1afe8b65ec993af641a4da53cec54e38d8d725efdf2b990a8283c64c479e1919daa8f65954c058e489d3f22142e7e11a6e06d72a9a65dc9c9"}]}}]}, 0x158c}, 0x1, 0x0, 0x0, 0xc014}, 0x80) 506.5966ms ago: executing program 3 (id=5977): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r1, 0x0, 0x5, 0xff, 0x0, 0x1, @private2, @remote, 0x8, 0x80, 0x1, 0x10000}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xe, 0x0, &(0x7f00000002c0)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 277.601677ms ago: executing program 2 (id=5978): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = epoll_create1(0x0) sendfile(r2, r0, &(0x7f0000000140)=0x6, 0x276f) r3 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xa}, {0x3}, {0x3}, {0x2}]}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/220, 0x51, 0xdc, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) accept4(r3, 0x0, 0x0, 0x0) (async) r5 = accept4(r3, 0x0, 0x0, 0x0) accept4$unix(r5, 0x0, 0x0, 0x0) 262.666879ms ago: executing program 1 (id=5979): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000200)={{r1}, 0x0, 0x8, @unused=[0xfffffffffffffffd, 0x2, 0x2, 0x7], @name="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"}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x1000, @empty}, {0x20000010304, @local}, 0x1c, {0x2, 0x4e20, @remote}, 'bond0\x00'}) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x3, @loopback, 0x9}, @in6={0xa, 0x4e24, 0x7, @local, 0xf66}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0xc, @remote, 0x4}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0xf20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x40}, @in6={0xa, 0x4e22, 0x101, @mcast1, 0x2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, @in6={0xa, 0x4e23, 0xad, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}], 0xe8) 206.860839ms ago: executing program 4 (id=5980): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 134.446814ms ago: executing program 3 (id=5981): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, &(0x7f00000001c0)) 101.091304ms ago: executing program 0 (id=5982): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x38, 0x21}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x4, 0x25ffdbfe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 71.739645ms ago: executing program 2 (id=5983): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r3, 0x5421, &(0x7f0000000680)=0xffffffff7fffffff) (async) ioctl$int_in(r3, 0x5421, &(0x7f0000000680)=0xffffffff7fffffff) accept(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x20000, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff1, 0x6}, {0x1, 0x2}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x23}]}}]}, 0x3c}}, 0x20008000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x20000, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff1, 0x6}, {0x1, 0x2}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x23}]}}]}, 0x3c}}, 0x20008000) r4 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xe, &(0x7f0000000440)=0x100, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006700028008001c0071d9462a6f6d920a709a37dbab9e63499666d18bb308b035582a98eb70377e2d29c85b92fd951ad93a119b08cede7b39b2a148db461a21a5f93cae3a01a61b4b6c09e4213acf0015bab9e9f8a05e26355e224464558ec5377ef279cde60377d020b61fdc8ee32924a38fb419c0c1ee2495ce2f9c053aefc5e953351610df735835b9351a64be78a186efad5f73f06180f380fb7bcf37c9f85904e8e00f7cac4466f7820fcf4472b3", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="cf390000259ffe0d006162a02951b27fd7560dd801724af97a0f176b94954eb5"], 0x33fe0) 1.823293ms ago: executing program 4 (id=5984): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="110000000000030000000f00000008410300", @ANYRES32=r1, @ANYBLOB="0500300000000000"], 0x24}}, 0x0) 0s ago: executing program 3 (id=5985): r0 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x3, 0x6, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0x2}]}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) kernel console output (not intermixed with test programs): n process `syz.4.3911'. [ 448.121775][T20284] netlink: 'syz.0.3912': attribute type 1 has an invalid length. [ 448.553115][T20312] netlink: 'syz.1.3920': attribute type 6 has an invalid length. [ 448.593483][T20313] x_tables: duplicate underflow at hook 1 [ 448.593888][T20316] x_tables: duplicate underflow at hook 1 [ 448.753658][T20321] netlink: 'syz.3.3922': attribute type 1 has an invalid length. [ 448.780940][T20329] netlink: 'syz.1.3925': attribute type 1 has an invalid length. [ 449.327019][T20370] __nla_validate_parse: 7 callbacks suppressed [ 449.327039][T20370] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3936'. [ 450.201443][T20410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3945'. [ 450.232999][T20410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3945'. [ 450.265688][T20410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3945'. [ 450.285142][T20410] geneve3: entered promiscuous mode [ 450.292413][T20410] geneve3: entered allmulticast mode [ 450.434131][T20419] netlink: 'syz.1.3947': attribute type 1 has an invalid length. [ 450.479645][T20419] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3947'. [ 450.498026][T20420] wlan0 speed is unknown, defaulting to 1000 [ 450.646054][T20442] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3950'. [ 450.887177][T20441] syzkaller0: entered promiscuous mode [ 450.893128][T20441] syzkaller0: entered allmulticast mode [ 451.176492][T20465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3956'. [ 451.264610][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3959'. [ 451.389672][T20476] netlink: 'syz.1.3961': attribute type 29 has an invalid length. [ 451.404036][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 451.484842][T20483] block nbd9: Unsupported socket: should be TCP or UNIX. [ 451.541588][T20484] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20004 [ 451.553602][T20486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3966'. [ 451.821611][T20502] dvmrp0: entered allmulticast mode [ 451.994793][T20510] netlink: 'syz.2.3974': attribute type 5 has an invalid length. [ 452.367855][ T3653] net_ratelimit: 127 callbacks suppressed [ 452.367879][ T3653] bond1: (slave bond0): failed to get link speed/duplex [ 452.412957][ T6033] bond1: (slave lo): failed to get link speed/duplex [ 452.438281][T20547] netlink: 'syz.4.3985': attribute type 1 has an invalid length. [ 452.479896][T20547] bond1: entered promiscuous mode [ 452.485536][T20547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.507759][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 452.547858][ T13] bond1: (slave lo): failed to get link speed/duplex [ 452.556555][T20557] bond1: entered allmulticast mode [ 452.652424][T20561] netlink: 'syz.1.3988': attribute type 1 has an invalid length. [ 452.746942][T20566] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 452.772896][T20566] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 452.786141][T20566] bond6: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 452.825246][T20568] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 452.931639][ T151] bond1: (slave bond0): failed to get link speed/duplex [ 452.957968][ T6033] bond1: (slave lo): failed to get link speed/duplex [ 453.059900][ T6033] bond1: (slave bond0): failed to get link speed/duplex [ 453.068952][ T6033] bond1: (slave lo): failed to get link speed/duplex [ 453.173009][T17108] bond1: (slave bond0): failed to get link speed/duplex [ 453.239827][T20593] bond5 (unregistering): Released all slaves [ 453.447090][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 453.709382][T20621] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 453.767388][T20617] macvlan3: entered promiscuous mode [ 453.772883][T20617] macvlan3: entered allmulticast mode [ 453.789103][T20617] bond3: entered promiscuous mode [ 453.794300][T20617] bridge3: entered promiscuous mode [ 453.814900][T20617] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 453.835247][T20617] bond3: left promiscuous mode [ 453.841148][T20617] bridge3: left promiscuous mode [ 454.265453][T20658] netlink: 'syz.0.4017': attribute type 1 has an invalid length. [ 454.335521][T20658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.355957][T20658] netlink: 'syz.0.4017': attribute type 4 has an invalid length. [ 454.420241][T20658] netlink: 'syz.0.4017': attribute type 4 has an invalid length. [ 454.430702][T20672] __nla_validate_parse: 14 callbacks suppressed [ 454.430722][T20672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4022'. [ 454.514393][T20668] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 454.540222][T20658] bond5: entered promiscuous mode [ 454.545378][T20658] bond5: entered allmulticast mode [ 454.644898][T20681] xt_hashlimit: size too large, truncated to 1048576 [ 454.668638][T20679] netlink: 'syz.1.4025': attribute type 39 has an invalid length. [ 454.856383][T20703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4032'. [ 454.990326][T20706] bridge1: port 1(veth7) entered blocking state [ 454.997350][T20706] bridge1: port 1(veth7) entered disabled state [ 455.018522][T20706] veth7: entered allmulticast mode [ 455.025894][T20706] veth7: entered promiscuous mode [ 455.100580][T20703] bridge1: port 2(veth0_to_bond) entered blocking state [ 455.111364][T20703] bridge1: port 2(veth0_to_bond) entered disabled state [ 455.119581][T20703] veth0_to_bond: entered allmulticast mode [ 455.129567][T20703] veth0_to_bond: entered promiscuous mode [ 455.351167][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4040'. [ 455.742638][T20745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4041'. [ 455.892766][T20752] netlink: 'syz.3.4046': attribute type 10 has an invalid length. [ 455.909283][T20752] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4046'. [ 455.962629][T20759] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4049'. [ 456.134351][T20762] netlink: 380 bytes leftover after parsing attributes in process `syz.1.4052'. [ 456.176533][T20767] lo speed is unknown, defaulting to 1000 [ 456.186376][T20767] lo speed is unknown, defaulting to 1000 [ 456.218940][T20767] lo speed is unknown, defaulting to 1000 [ 456.761039][T20793] netlink: 696 bytes leftover after parsing attributes in process `syz.3.4060'. [ 456.809407][T20799] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4063'. [ 456.826463][T20801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4062'. [ 456.836387][T20799] netlink: 'syz.0.4063': attribute type 12 has an invalid length. [ 456.949910][ T9081] lo speed is unknown, defaulting to 1000 [ 456.966805][T20767] infiniband syz2: set down [ 456.972006][T20767] infiniband syz2: added lo [ 457.209858][T20767] RDS/IB: syz2: added [ 457.214894][T20767] smc: adding ib device syz2 with port count 1 [ 457.258975][T20767] smc: ib device syz2 port 1 has pnetid SYZ0 (user defined) [ 457.270084][ T9081] lo speed is unknown, defaulting to 1000 [ 457.395646][T20822] net_ratelimit: 60 callbacks suppressed [ 457.395666][T20822] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 457.428572][ T3547] bond1: (slave bond0): failed to get link speed/duplex [ 457.448338][ T3475] bond1: (slave lo): failed to get link speed/duplex [ 457.455557][T20767] lo speed is unknown, defaulting to 1000 [ 457.513815][T20831] x_tables: unsorted entry at hook 3 [ 457.619535][T20826] syzkaller0: entered promiscuous mode [ 457.625515][T20826] syzkaller0: entered allmulticast mode [ 457.635116][T20834] syzkaller0: entered promiscuous mode [ 457.642295][T20834] syzkaller0: entered allmulticast mode [ 459.457923][ T3727] bond1: (slave lo): failed to get link speed/duplex [ 459.470170][T20845] __nla_validate_parse: 2 callbacks suppressed [ 459.470189][T20845] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4077'. [ 459.474688][T20767] lo speed is unknown, defaulting to 1000 [ 459.486575][ T3727] bond1: (slave bond0): failed to get link speed/duplex [ 459.628282][ T3727] bond1: (slave bond0): failed to get link speed/duplex [ 459.647698][T17108] bond1: (slave lo): failed to get link speed/duplex [ 459.732658][T20855] tipc: Started in network mode [ 459.739700][T20855] tipc: Node identity aadeb3308b1a, cluster identity 4711 [ 459.747049][T20855] tipc: Enabled bearer , priority 0 [ 459.774752][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4081'. [ 459.784332][ T9323] bond1: (slave bond0): failed to get link speed/duplex [ 459.798427][T20859] syzkaller0: entered allmulticast mode [ 459.810846][T20861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4083'. [ 459.828071][ T9323] bond1: (slave lo): failed to get link speed/duplex [ 459.871834][T20855] tipc: Resetting bearer [ 459.899999][T20863] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 459.907546][T20863] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 459.930935][T20863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4082'. [ 459.958854][T20854] tipc: Resetting bearer [ 459.999536][T20869] netlink: 'syz.1.4084': attribute type 1 has an invalid length. [ 460.018667][T20854] tipc: Disabling bearer [ 460.061693][T20767] lo speed is unknown, defaulting to 1000 [ 460.067999][ T3547] bond1: (slave lo): failed to get link speed/duplex [ 460.258649][T20884] netlink: 'syz.0.4087': attribute type 3 has an invalid length. [ 460.304574][T20888] netlink: 'syz.4.4090': attribute type 1 has an invalid length. [ 460.500981][T20896] netlink: 'syz.3.4093': attribute type 1 has an invalid length. [ 460.514604][T20888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.563284][T20889] bond2: (slave geneve2): making interface the new active one [ 460.577222][T20889] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 460.586996][ T9323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.650726][T20899] bond5 (unregistering): Released all slaves [ 460.714233][T20905] netlink: 'syz.0.4095': attribute type 2 has an invalid length. [ 460.726387][T20905] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4095'. [ 460.745872][T20906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4094'. [ 460.758250][T20906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4094'. [ 460.792866][ T3727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.802500][ T3727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.832718][T20900] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4093'. [ 460.832762][T20767] lo speed is unknown, defaulting to 1000 [ 460.921207][T20907] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 460.935209][T20907] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 460.961838][T20907] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 461.044952][ T3727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.495612][T20767] lo speed is unknown, defaulting to 1000 [ 461.527055][T20933] dvmrp0: entered allmulticast mode [ 461.938674][T20961] netlink: 'syz.4.4109': attribute type 1 has an invalid length. [ 461.967025][T20961] netlink: 'syz.4.4109': attribute type 1 has an invalid length. [ 461.989204][T20961] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.4109'. [ 462.093985][T20767] lo speed is unknown, defaulting to 1000 [ 462.196842][T20972] netlink: 'syz.4.4112': attribute type 33 has an invalid length. [ 462.221640][T20972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4112'. [ 462.250994][T20972] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 462.349246][T20975] bridge0: port 1(batadv1) entered blocking state [ 462.356158][T20975] bridge0: port 1(batadv1) entered disabled state [ 462.363383][T20975] batadv1: entered allmulticast mode [ 462.388428][T20975] batadv1: entered promiscuous mode [ 462.478065][ T3653] net_ratelimit: 31 callbacks suppressed [ 462.478087][ T3653] bond1: (slave bond0): failed to get link speed/duplex [ 462.510851][T17108] bond1: (slave lo): failed to get link speed/duplex [ 462.609609][ T3547] bond1: (slave bond0): failed to get link speed/duplex [ 462.641991][ T3727] bond1: (slave lo): failed to get link speed/duplex [ 462.718027][ T3653] bond1: (slave bond0): failed to get link speed/duplex [ 462.759269][ T3653] bond1: (slave lo): failed to get link speed/duplex [ 462.823283][T20996] veth0_to_bridge: entered promiscuous mode [ 462.848852][ T3727] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 462.858267][ T3727] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 462.877245][ T35] bond1: (slave lo): failed to get link speed/duplex [ 462.901876][ T151] bond1: (slave bond0): failed to get link speed/duplex [ 462.910711][T20999] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 462.940460][T20767] lo speed is unknown, defaulting to 1000 [ 462.959149][T21000] veth0_to_bridge: left promiscuous mode [ 463.012108][ T3653] bond1: (slave lo): failed to get link speed/duplex [ 463.078620][ T6840] udevd[6840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 463.649739][T20767] lo speed is unknown, defaulting to 1000 [ 463.692126][T21038] bond7: entered promiscuous mode [ 463.697395][T21038] bond7: entered allmulticast mode [ 463.704902][T21038] 8021q: adding VLAN 0 to HW filter on device bond7 [ 463.882093][T21051] syzkaller1: entered promiscuous mode [ 463.889666][T21051] syzkaller1: entered allmulticast mode [ 464.252483][T21067] wlan0 speed is unknown, defaulting to 1000 [ 464.286916][T20767] lo speed is unknown, defaulting to 1000 [ 464.622218][T21073] __nla_validate_parse: 16 callbacks suppressed [ 464.622240][T21073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4144'. [ 464.639305][T21067] lo speed is unknown, defaulting to 1000 [ 464.714252][T21075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4144'. [ 464.748646][T21073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4144'. [ 464.880261][T21079] netlink: 'syz.1.4145': attribute type 1 has an invalid length. [ 464.897284][T21079] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4145'. [ 464.925144][T21079] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4145'. [ 464.939862][T21079] netlink: 658 bytes leftover after parsing attributes in process `syz.1.4145'. [ 465.057200][T21081] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4146'. [ 465.244460][T21083] netlink: 'syz.2.4147': attribute type 11 has an invalid length. [ 465.260031][T21083] netlink: 'syz.2.4147': attribute type 4 has an invalid length. [ 465.279229][T21083] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.4147'. [ 465.291182][T21085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4148'. [ 465.381505][T21090] xt_TPROXY: Can be used only with -p tcp or -p udp [ 465.750005][T21112] netlink: 'syz.2.4154': attribute type 10 has an invalid length. [ 465.803093][T21114] nbd: illegal input index 2958377 [ 465.913195][T21112] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 465.963412][T21112] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 466.015159][T21128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4160'. [ 466.051449][T21121] syzkaller1: entered promiscuous mode [ 466.061603][T21121] syzkaller1: entered allmulticast mode [ 466.102186][T21128] erspan0: entered promiscuous mode [ 466.109496][T21128] gretap0: entered promiscuous mode [ 466.115595][T21128] debugfs: 'hsr1' already exists in 'hsr' [ 466.135392][T21128] Cannot create hsr debugfs directory [ 466.141711][T21128] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 466.152245][T21128] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 466.172214][T21131] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 466.180582][T21131] netlink: 'syz.3.4161': attribute type 2 has an invalid length. [ 466.707477][T21163] netlink: 'syz.2.4171': attribute type 10 has an invalid length. [ 466.763586][T21163] bridge_slave_1: entered promiscuous mode [ 466.771977][T21163] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 467.135127][T21190] netlink: 'syz.2.4177': attribute type 7 has an invalid length. [ 467.538919][ T35] net_ratelimit: 64 callbacks suppressed [ 467.538942][ T35] bond1: (slave bond0): failed to get link speed/duplex [ 467.628056][ T35] bond1: (slave lo): failed to get link speed/duplex [ 467.707969][T21224] syzkaller0: entered promiscuous mode [ 467.719612][T21224] syzkaller0: entered allmulticast mode [ 467.819804][ T3653] bond1: (slave bond0): failed to get link speed/duplex [ 467.839160][ T3547] bond1: (slave lo): failed to get link speed/duplex [ 467.938765][ T3547] bond1: (slave bond0): failed to get link speed/duplex [ 467.958154][ T3547] bond1: (slave lo): failed to get link speed/duplex [ 468.041011][T21240] xt_CONNSECMARK: invalid mode: 0 [ 468.048550][ T9319] bond1: (slave bond0): failed to get link speed/duplex [ 468.090814][ T9319] bond1: (slave lo): failed to get link speed/duplex [ 468.177811][T17108] bond1: (slave bond0): failed to get link speed/duplex [ 468.207808][T17108] bond1: (slave lo): failed to get link speed/duplex [ 468.410495][T21267] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 468.583263][T21260] syzkaller1: entered promiscuous mode [ 468.613495][T21260] syzkaller1: entered allmulticast mode [ 468.672582][T21277] veth0: entered promiscuous mode [ 468.710563][T21276] veth0: left promiscuous mode [ 469.156594][T21306] netlink: 'syz.0.4214': attribute type 16 has an invalid length. [ 469.399738][T21325] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 470.603206][T21362] wlan0 speed is unknown, defaulting to 1000 [ 470.622194][T21362] lo speed is unknown, defaulting to 1000 [ 470.696254][T21378] delete_channel: no stack [ 470.716260][T21377] netlink: 'syz.3.4234': attribute type 11 has an invalid length. [ 470.742203][T21377] __nla_validate_parse: 12 callbacks suppressed [ 470.742223][T21377] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4234'. [ 470.817942][T21375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.981674][T21389] netlink: 'syz.1.4236': attribute type 6 has an invalid length. [ 470.981988][T21388] netlink: 'syz.1.4236': attribute type 6 has an invalid length. [ 471.337015][T21404] tipc: Enabling of bearer rejected, failed to enable media [ 471.525407][T21410] set match dimension is over the limit! [ 471.632009][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4245'. [ 471.706511][T21422] bond0: entered promiscuous mode [ 471.715947][T21422] bond_slave_0: entered promiscuous mode [ 471.725601][T21422] bond_slave_1: entered promiscuous mode [ 471.732980][T21422] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 471.749902][T21422] ip6gretap0: entered promiscuous mode [ 471.760439][T21422] debugfs: 'hsr1' already exists in 'hsr' [ 471.766522][T21422] Cannot create hsr debugfs directory [ 471.773166][T21422] hsr1: entered promiscuous mode [ 472.155681][T21448] netlink: 212232 bytes leftover after parsing attributes in process `syz.1.4251'. [ 472.467234][T21454] netlink: 'syz.3.4254': attribute type 32 has an invalid length. [ 472.480636][T21455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4254'. [ 472.968512][ T37] net_ratelimit: 55 callbacks suppressed [ 472.968534][ T37] bond1: (slave lo): failed to get link speed/duplex [ 473.029894][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 473.047773][T21467] netlink: 18 bytes leftover after parsing attributes in process `syz.0.4258'. [ 473.091312][T21472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.118901][ T37] bond1: (slave lo): failed to get link speed/duplex [ 473.138315][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 473.237968][ T9323] bond1: (slave lo): failed to get link speed/duplex [ 473.289299][ T9323] bond1: (slave bond0): failed to get link speed/duplex [ 473.368171][ T3653] bond1: (slave lo): failed to get link speed/duplex [ 473.438559][ T6033] bond1: (slave bond0): failed to get link speed/duplex [ 473.488101][ T3653] bond1: (slave lo): failed to get link speed/duplex [ 474.044364][T21532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4281'. [ 474.149934][T21532] bond6 (unregistering): Released all slaves [ 474.224186][T21544] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 474.232250][T21544] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 474.286170][T21546] pim6reg1: entered promiscuous mode [ 474.292709][T21546] pim6reg1: entered allmulticast mode [ 474.712926][T21570] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 474.738965][T21570] syzkaller1: linktype set to 823 [ 474.895615][T21583] netlink: 3172 bytes leftover after parsing attributes in process `syz.4.4296'. [ 474.962080][T21592] netlink: 'syz.0.4298': attribute type 10 has an invalid length. [ 474.990889][T21592] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 475.094007][T21596] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 475.179828][T21600] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4300'. [ 475.207182][T21602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4301'. [ 475.219661][T21600] netlink: 'syz.2.4300': attribute type 2 has an invalid length. [ 475.241142][T21600] 9: entered promiscuous mode [ 475.562719][T21622] siw: device registration error -23 [ 475.991740][T21649] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 476.011360][T21649] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 476.102463][T21656] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 476.353563][T21669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4321'. [ 476.386634][T21677] sit0: entered promiscuous mode [ 476.393032][T21677] netlink: 'syz.4.4325': attribute type 1 has an invalid length. [ 476.403767][T21677] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4325'. [ 476.765955][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4330'. [ 476.783502][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4330'. [ 476.794890][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4330'. [ 476.832142][T21696] netlink: 'syz.3.4330': attribute type 23 has an invalid length. [ 477.081409][T21710] nbd: nbd4 already in use [ 477.172819][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4337'. [ 477.358204][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 477.370107][ T56] block nbd4: Possible stuck request ffff8880255e8000: control (read@0,4096B). Runtime 210 seconds [ 477.587293][T21747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4345'. [ 477.603720][T21747] netlink: 'syz.4.4345': attribute type 4 has an invalid length. [ 477.782301][T21757] bond3: (slave lo): Releasing backup interface [ 477.830431][T21757] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 478.021179][ T13] net_ratelimit: 68 callbacks suppressed [ 478.021203][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 478.067983][ T13] bond1: (slave lo): failed to get link speed/duplex [ 478.092262][T21769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4355'. [ 478.118704][T21769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4355'. [ 478.143257][T21769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4355'. [ 478.157857][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 478.177776][ T3727] bond1: (slave lo): failed to get link speed/duplex [ 478.267706][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 478.288014][ T13] bond1: (slave lo): failed to get link speed/duplex [ 478.387733][ T151] bond1: (slave bond0): failed to get link speed/duplex [ 478.408262][ T151] bond1: (slave lo): failed to get link speed/duplex [ 478.716457][T21809] Cannot find add_set index 1 as target [ 478.847534][T21792] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 478.963585][T21821] ip6gre1: entered promiscuous mode [ 478.998159][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 479.023043][ T3870] bond1: (slave lo): failed to get link speed/duplex [ 479.039427][ T5847] Bluetooth: hci1: command tx timeout [ 479.182277][T21823] dummy0: entered promiscuous mode [ 479.189884][T21823] team0: entered promiscuous mode [ 479.196752][T21823] debugfs: 'hsr1' already exists in 'hsr' [ 479.202788][T21823] Cannot create hsr debugfs directory [ 479.212008][T21823] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 479.222995][T21823] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 479.271512][T21828] netlink: 'syz.0.4370': attribute type 12 has an invalid length. [ 479.452006][T21837] : renamed from bond_slave_0 [ 479.488096][T21843] netlink: 'syz.2.4375': attribute type 1 has an invalid length. [ 479.497297][T21837] syzkaller0: entered allmulticast mode [ 479.976261][T21856] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 480.053051][T21856] bond3 (unregistering): Released all slaves [ 480.425867][T21880] syzkaller0: entered promiscuous mode [ 480.431569][T21880] syzkaller0: entered allmulticast mode [ 480.875324][T21902] netlink: 'syz.3.4395': attribute type 1 has an invalid length. [ 481.477103][T21931] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 481.703283][ T6840] udevd[6840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 481.794197][T21948] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 481.806656][T21948] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 481.952512][T21958] __nla_validate_parse: 19 callbacks suppressed [ 481.952532][T21958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4415'. [ 481.989520][T21958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4415'. [ 482.820259][T22013] atomic_op ffff888052a8b198 conn xmit_atomic 0000000000000000 [ 482.996973][T22021] netlink: 'syz.2.4429': attribute type 25 has an invalid length. [ 483.053369][T22025] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 483.071109][ T37] net_ratelimit: 50 callbacks suppressed [ 483.071132][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 483.105802][ T37] bond1: (slave lo): failed to get link speed/duplex [ 483.279662][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 483.488137][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 483.508236][ T37] bond1: (slave lo): failed to get link speed/duplex [ 483.620147][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 483.633918][ T13] bond1: (slave lo): failed to get link speed/duplex [ 483.727979][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 483.781270][T22064] netlink: 'syz.4.4442': attribute type 9 has an invalid length. [ 483.798537][ T37] bond1: (slave lo): failed to get link speed/duplex [ 483.848123][ T4394] bond1: (slave bond0): failed to get link speed/duplex [ 483.907849][ T9323] bond1: (slave lo): failed to get link speed/duplex [ 484.256525][T22096] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4448'. [ 484.294593][T22098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4449'. [ 484.425018][T22109] IPVS: length: 239 != 24 [ 484.492413][T22113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4452'. [ 484.506106][T22113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4452'. [ 484.518638][T22115] tipc: Enabling of bearer rejected, failed to enable media [ 484.561146][T22115] sctp: [Deprecated]: syz.4.4453 (pid 22115) Use of int in max_burst socket option deprecated. [ 484.561146][T22115] Use struct sctp_assoc_value instead [ 484.605023][T22117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4454'. [ 484.629149][T22119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4455'. [ 484.645016][T22119] bridge_slave_1: left allmulticast mode [ 484.651790][T22119] bridge_slave_1: left promiscuous mode [ 484.658360][T22119] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.673858][T22119] bridge_slave_0: left allmulticast mode [ 484.680574][T22119] bridge_slave_0: left promiscuous mode [ 484.689748][T22119] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.833356][T22129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4458'. [ 485.298818][T22135] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 485.659188][T22159] bond8: option mode: invalid value (22) [ 485.689977][T22159] bond8 (unregistering): Released all slaves [ 485.817982][T22176] netlink: 'syz.3.4473': attribute type 1 has an invalid length. [ 485.843519][T22170] : entered promiscuous mode [ 486.103506][T22188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4478'. [ 486.325719][T22206] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 486.844997][T22240] netlink: 'syz.2.4489': attribute type 13 has an invalid length. [ 486.855856][T22240] netlink: 'syz.2.4489': attribute type 58 has an invalid length. [ 487.094004][T22249] __nla_validate_parse: 1 callbacks suppressed [ 487.094024][T22249] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4493'. [ 487.152611][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4492'. [ 487.162202][T22257] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4493'. [ 487.338185][T22260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 487.424533][T22271] tipc: Started in network mode [ 487.431795][T22271] tipc: Node identity 9, cluster identity 4711 [ 487.450221][T22271] tipc: Node number set to 9 [ 487.575468][T22278] siw: device registration error -23 [ 487.705244][T22288] sctp: [Deprecated]: syz.3.4504 (pid 22288) Use of int in max_burst socket option deprecated. [ 487.705244][T22288] Use struct sctp_assoc_value instead [ 487.789919][T22291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4505'. [ 487.974318][T22297] netlink: 'syz.0.4508': attribute type 83 has an invalid length. [ 488.144623][T22309] netlink: 'syz.0.4513': attribute type 16 has an invalid length. [ 488.155938][T22309] netlink: 'syz.0.4513': attribute type 17 has an invalid length. [ 488.252293][T22309] lo: left promiscuous mode [ 488.294478][T22320] net_ratelimit: 69 callbacks suppressed [ 488.294498][T22320] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 488.352962][T22309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.364286][T22309] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.374888][T22309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.419738][T22314] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 488.431711][T22314] bond6 (unregistering): Released all slaves [ 488.452713][T22311] º: renamed from veth1_vlan [ 488.538589][ T3727] bond1: (slave lo): failed to get link speed/duplex [ 488.561522][ T9319] bond1: (slave bond0): failed to get link speed/duplex [ 488.630219][T22327] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.4519'. [ 488.669020][T17108] bond1: (slave lo): failed to get link speed/duplex [ 488.698853][ T3727] bond1: (slave bond0): failed to get link speed/duplex [ 488.800371][ T9319] bond1: (slave lo): failed to get link speed/duplex [ 488.852462][ T9319] bond1: (slave bond0): failed to get link speed/duplex [ 488.948133][ T3727] bond1: (slave lo): failed to get link speed/duplex [ 488.976158][T17108] bond1: (slave bond0): failed to get link speed/duplex [ 489.104984][T22366] netlink: 'syz.2.4530': attribute type 1 has an invalid length. [ 489.136077][T22358] can: request_module (can-proto-4) failed. [ 489.215426][T22366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 489.252061][T22358] bond4: (slave geneve2): making interface the new active one [ 489.262157][T22358] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 489.348202][T22378] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4535'. [ 489.494370][T22383] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4537'. [ 489.610732][T22393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4540'. [ 489.626883][T22393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4540'. [ 489.659094][T22399] netlink: 'syz.4.4539': attribute type 21 has an invalid length. [ 489.914399][T22418] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 491.663490][T22480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.772068][T22480] bond2: left promiscuous mode [ 491.777021][T22480] bond2: left allmulticast mode [ 491.793828][T22480] vlan3: left allmulticast mode [ 491.800350][T22480] veth1: left allmulticast mode [ 491.821752][ T3653] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.900118][ T3653] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.918798][ T3727] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.927445][ T3727] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.991781][T22509] netlink: 'syz.2.4572': attribute type 12 has an invalid length. [ 492.014481][T22504] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 492.113064][T22504] __nla_validate_parse: 7 callbacks suppressed [ 492.113085][T22504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4570'. [ 492.388737][T22546] netlink: 'syz.4.4580': attribute type 1 has an invalid length. [ 492.663274][T22560] Bluetooth: MGMT ver 1.23 [ 492.678615][T22560] Bluetooth: hci1: too big key_count value 32778 [ 492.792434][T22570] netlink: 'syz.4.4587': attribute type 1 has an invalid length. [ 492.908744][T22570] 8021q: adding VLAN 0 to HW filter on device bond4 [ 493.013551][T22587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4589'. [ 493.036132][ T5840] Bluetooth: hci4: link tx timeout [ 493.042061][T22574] bond4: (slave veth9): Enslaving as an active interface with a down link [ 493.053140][ T5840] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 493.068264][ T5840] Bluetooth: hci4: link tx timeout [ 493.073452][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 493.152956][T22577] veth0_to_bond: left allmulticast mode [ 493.160858][T22577] veth0_to_bond: left promiscuous mode [ 493.166817][T22577] bridge1: port 2(veth0_to_bond) entered disabled state [ 493.190961][T22577] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 493.254906][T22570] bond4: (slave veth11): Enslaving as an active interface with a down link [ 493.339899][T17108] net_ratelimit: 56 callbacks suppressed [ 493.339920][T17108] bond1: (slave bond0): failed to get link speed/duplex [ 493.439345][T17108] bond1: (slave lo): failed to get link speed/duplex [ 493.458706][T17108] bond1: (slave bond0): failed to get link speed/duplex [ 493.548660][ T3870] bond1: (slave lo): failed to get link speed/duplex [ 493.568293][ T3870] bond1: (slave bond0): failed to get link speed/duplex [ 493.728747][ T3870] bond1: (slave lo): failed to get link speed/duplex [ 493.748863][ T3870] bond1: (slave bond0): failed to get link speed/duplex [ 493.759802][T22619] netlink: 'syz.1.4598': attribute type 1 has an invalid length. [ 493.776989][T22619] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4598'. [ 493.819996][T22621] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 493.851036][ T3653] bond1: (slave lo): failed to get link speed/duplex [ 493.869685][T22627] veth1_macvtap: entered allmulticast mode [ 493.920083][ T3653] bond1: (slave bond0): failed to get link speed/duplex [ 493.968319][ T9323] bond1: (slave lo): failed to get link speed/duplex [ 494.174458][T22651] syzkaller1: entered allmulticast mode [ 494.180925][T22653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4610'. [ 494.222132][T22656] netlink: 'syz.2.4611': attribute type 1 has an invalid length. [ 494.239532][T22655] netlink: 'syz.2.4611': attribute type 1 has an invalid length. [ 494.634644][T22680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4622'. [ 494.834640][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4626'. [ 494.886919][T22698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4626'. [ 494.913390][T22680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.929111][T22680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.941985][T22680] bond0 (unregistering): Released all slaves [ 495.021170][T22701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4627'. [ 495.117989][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 495.174526][T22707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4628'. [ 495.191345][T22707] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4628'. [ 495.430354][T22717] syzkaller1: entered promiscuous mode [ 495.436103][T22717] syzkaller1: entered allmulticast mode [ 495.698563][T22721] nbd9: detected capacity change from 0 to 127 [ 495.716650][T22728] nbd: couldn't find a device at index 0 [ 495.778894][ T5840] block nbd9: Receive control failed (result -104) [ 496.242485][T22766] netlink: 'syz.4.4650': attribute type 1 has an invalid length. [ 496.392815][T22774] netlink: 'syz.4.4653': attribute type 1 has an invalid length. [ 496.455564][T22773] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 496.469017][T22773] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 496.559780][T22787] syzkaller0: entered promiscuous mode [ 496.565654][T22787] syzkaller0: entered allmulticast mode [ 496.858134][T22804] Cannot find add_set index 2 as target [ 497.154968][T22822] IPVS: length: 191 != 24 [ 497.168836][T22822] __nla_validate_parse: 17 callbacks suppressed [ 497.168853][T22822] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4666'. [ 497.199114][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 497.215178][T22822] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4666'. [ 497.228040][T22825] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4667'. [ 497.251457][T22825] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 497.518495][T22830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4669'. [ 497.554176][T22830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4669'. [ 497.720460][T22845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4674'. [ 497.746579][T22845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4674'. [ 497.969387][T22860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4677'. [ 498.284623][T22876] x_tables: duplicate underflow at hook 1 [ 498.412899][T22883] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4690'. [ 498.513958][T22892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4691'. [ 498.519703][ T9319] net_ratelimit: 68 callbacks suppressed [ 498.519782][ T9319] bond1: (slave bond0): failed to get link speed/duplex [ 498.591050][ T9319] bond1: (slave lo): failed to get link speed/duplex [ 498.638244][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 498.657853][ T9319] bond1: (slave bond0): failed to get link speed/duplex [ 498.734449][ T35] bond1: (slave lo): failed to get link speed/duplex [ 498.830215][ T9319] bond1: (slave bond0): failed to get link speed/duplex [ 498.868090][T17108] bond1: (slave lo): failed to get link speed/duplex [ 498.958905][ T3653] bond1: (slave bond0): failed to get link speed/duplex [ 498.989278][ T3653] bond1: (slave lo): failed to get link speed/duplex [ 499.054684][ T56] block nbd9: Connection timed out, retrying (0/1 alive) [ 499.062777][ T56] block nbd9: Connection timed out, retrying (0/1 alive) [ 499.074241][ T56] block nbd9: Connection timed out, retrying (0/1 alive) [ 499.081897][ T56] block nbd9: Connection timed out, retrying (0/1 alive) [ 499.089312][ T3653] bond1: (slave bond0): failed to get link speed/duplex [ 499.096513][ T56] block nbd9: Dead connection, failed to find a fallback [ 499.104885][ T9319] bond1: (slave lo): failed to get link speed/duplex [ 499.105740][ T56] block nbd9: shutting down sockets [ 499.118209][ T56] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.130101][ T56] Buffer I/O error on dev nbd9, logical block 3, async page read [ 499.138858][ T56] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.152887][ T56] Buffer I/O error on dev nbd9, logical block 2, async page read [ 499.160794][ T56] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.170834][ T56] Buffer I/O error on dev nbd9, logical block 1, async page read [ 499.179015][ T56] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.189872][ T56] Buffer I/O error on dev nbd9, logical block 0, async page read [ 499.199383][ T6840] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.213576][ T6840] Buffer I/O error on dev nbd9, logical block 0, async page read [ 499.221574][ T6840] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.232138][ T6840] Buffer I/O error on dev nbd9, logical block 1, async page read [ 499.240087][ T6840] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.249931][ T6840] Buffer I/O error on dev nbd9, logical block 2, async page read [ 499.258231][ T6840] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.268036][ T6840] Buffer I/O error on dev nbd9, logical block 3, async page read [ 499.275882][ T6840] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.285882][ T6840] Buffer I/O error on dev nbd9, logical block 0, async page read [ 499.294270][ T6840] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 499.303925][ T6840] Buffer I/O error on dev nbd9, logical block 1, async page read [ 499.312860][ T6840] ldm_validate_partition_table(): Disk read failed. [ 499.321283][ T6840] Dev nbd9: unable to read RDB block 0 [ 499.328967][ T6840] nbd9: unable to read partition table [ 499.342198][ T6840] ldm_validate_partition_table(): Disk read failed. [ 499.349983][ T6840] Dev nbd9: unable to read RDB block 0 [ 499.356254][ T6840] nbd9: unable to read partition table [ 499.592555][T22928] nbd: couldn't find a device at index 0 [ 499.639806][T22939] netlink: 'syz.2.4701': attribute type 4 has an invalid length. [ 499.975031][T22969] wlan0 speed is unknown, defaulting to 1000 [ 500.233879][T22969] lo speed is unknown, defaulting to 1000 [ 500.374011][T22986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 500.585518][T22998] nbd: nbd3 already in use [ 500.613473][T23000] nbd: nbd3 already in use [ 500.661938][T22998] block nbd3: NBD_DISCONNECT [ 500.667124][T22998] block nbd3: Send disconnect failed -32 [ 500.691892][T22998] block nbd3: shutting down sockets [ 500.699794][ T6158] ldm_validate_partition_table(): Disk read failed. [ 500.707132][ T6158] Dev nbd3: unable to read RDB block 0 [ 500.727064][T23005] block nbd3: NBD_DISCONNECT [ 500.733107][ T6158] nbd3: unable to read partition table [ 500.764759][T23005] block nbd3: Send disconnect failed -32 [ 500.789890][ T6158] block nbd3: NBD_DISCONNECT [ 500.821121][ T6158] block nbd3: Send disconnect failed -32 [ 500.880973][ T5199] udevd[5199]: worker [6158] terminated by signal 9 (Killed) [ 500.999356][ T5199] udevd[5199]: worker [6158] failed while handling '/devices/virtual/block/nbd3' [ 501.150610][T23027] netlink: 'syz.1.4720': attribute type 1 has an invalid length. [ 501.273774][ T6840] udevd[6840]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 501.371142][T23027] 8021q: adding VLAN 0 to HW filter on device bond8 [ 501.379240][T23029] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 501.443520][T23029] bond8: entered allmulticast mode [ 501.478493][T23032] 8021q: adding VLAN 0 to HW filter on device bond8 [ 501.662185][T23043] netlink: 'syz.4.4722': attribute type 3 has an invalid length. [ 501.980427][T23035] netlink: 'syz.1.4720': attribute type 7 has an invalid length. [ 501.989211][T23042] tunl0: entered promiscuous mode [ 501.994543][T23042] netlink: 'syz.3.4724': attribute type 3 has an invalid length. [ 502.282069][T23056] netlink: 'syz.4.4728': attribute type 3 has an invalid length. [ 502.344652][T23071] __nla_validate_parse: 6 callbacks suppressed [ 502.344672][T23071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4730'. [ 502.631890][T23086] tunl0: entered promiscuous mode [ 502.646892][T23086] netlink: 'syz.0.4734': attribute type 3 has an invalid length. [ 502.665472][T23086] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4734'. [ 502.727131][T23086] batadv2: entered allmulticast mode [ 503.529332][ T151] net_ratelimit: 51 callbacks suppressed [ 503.529356][ T151] bond1: (slave bond0): failed to get link speed/duplex [ 503.557772][T23022] bond1: (slave lo): failed to get link speed/duplex [ 503.668090][ T151] bond1: (slave bond0): failed to get link speed/duplex [ 503.675292][ T35] bond1: (slave lo): failed to get link speed/duplex [ 503.752073][T23127] wlan0 speed is unknown, defaulting to 1000 [ 503.777402][T23127] lo speed is unknown, defaulting to 1000 [ 503.783501][ T35] bond1: (slave bond0): failed to get link speed/duplex [ 503.841255][ T151] bond1: (slave lo): failed to get link speed/duplex [ 503.901740][T23133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.912298][ T151] bond1: (slave bond0): failed to get link speed/duplex [ 503.958641][ T3870] bond1: (slave lo): failed to get link speed/duplex [ 504.016358][T23137] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20000 [ 504.045900][T23140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4747'. [ 504.056578][ T151] bond1: (slave bond0): failed to get link speed/duplex [ 504.110831][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4747'. [ 504.151092][T23140] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4747'. [ 504.357285][T23144] wlan0 speed is unknown, defaulting to 1000 [ 504.446986][T23156] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4752'. [ 504.458283][T23144] lo speed is unknown, defaulting to 1000 [ 505.247265][T23188] tipc: Enabled bearer , priority 0 [ 505.279160][T23191] syzkaller0: entered promiscuous mode [ 505.284832][T23191] syzkaller0: entered allmulticast mode [ 505.301278][T23188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4762'. [ 505.311545][T23188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4762'. [ 505.374489][T23198] netlink: 'syz.3.4764': attribute type 13 has an invalid length. [ 505.391200][T23198] netlink: 'syz.3.4764': attribute type 58 has an invalid length. [ 505.421208][T23188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4762'. [ 505.431332][T23188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4762'. [ 505.561139][T23203] tipc: Resetting bearer [ 505.725143][T23187] tipc: Resetting bearer [ 505.774854][T23187] tipc: Disabling bearer [ 505.947298][T23216] netlink: 'syz.2.4768': attribute type 4 has an invalid length. [ 506.209063][T23234] IPVS: Error connecting to the multicast addr [ 506.401129][T23243] syzkaller1: entered promiscuous mode [ 506.406780][T23243] syzkaller1: entered allmulticast mode [ 506.505147][T23244] can: request_module (can-proto-0) failed. [ 506.771982][T23268] tipc: Started in network mode [ 506.776945][T23268] tipc: Node identity 080211, cluster identity 4711 [ 506.814321][T23268] tipc: Enabled bearer , priority 0 [ 507.412331][T23297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.442535][ T25] block nbd4: Possible stuck request ffff8880255e8000: control (read@0,4096B). Runtime 240 seconds [ 507.851152][ T9081] tipc: Node number set to 134353152 [ 508.015116][T23322] __nla_validate_parse: 66 callbacks suppressed [ 508.015141][T23322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4798'. [ 508.265867][T23339] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4803'. [ 508.519868][T23344] nbd10: detected capacity change from 0 to 127 [ 508.554407][T23356] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 508.588235][T23343] nbd11: detected capacity change from 0 to 127 [ 508.596084][T23357] siw: device registration error -23 [ 508.630883][ T5840] block nbd10: Receive control failed (result -104) [ 508.639615][ T5847] block nbd11: Receive control failed (result -32) [ 508.710550][ T35] net_ratelimit: 60 callbacks suppressed [ 508.710573][ T35] bond1: (slave bond0): failed to get link speed/duplex [ 508.722163][T23363] netlink: 'syz.3.4812': attribute type 1 has an invalid length. [ 508.743282][T23363] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4812'. [ 508.789998][ T35] bond1: (slave lo): failed to get link speed/duplex [ 508.836091][T23371] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 508.870177][ T4394] bond1: (slave bond0): failed to get link speed/duplex [ 508.918146][ T4394] bond1: (slave lo): failed to get link speed/duplex [ 508.925546][T23373] netlink: 'syz.4.4814': attribute type 10 has an invalid length. [ 508.963323][T23373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.995071][T23373] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 509.041140][ T3870] bond1: (slave bond0): failed to get link speed/duplex [ 509.060756][T23384] syz_tun: entered allmulticast mode [ 509.088798][ T3870] bond1: (slave lo): failed to get link speed/duplex [ 509.096091][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4815'. [ 509.234622][T23380] syz_tun (unregistering): left allmulticast mode [ 509.289371][ T35] bond1: (slave bond0): failed to get link speed/duplex [ 509.318255][ T4394] bond1: (slave lo): failed to get link speed/duplex [ 509.409061][ T35] bond1: (slave bond0): failed to get link speed/duplex [ 509.491221][T23402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4822'. [ 509.503445][T23406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4824'. [ 509.524582][T23413] netlink: 'syz.3.4825': attribute type 13 has an invalid length. [ 509.534265][T23413] macvtap0: entered allmulticast mode [ 509.541897][T23413] macvtap0: refused to change device tx_queue_len [ 509.578654][ T4394] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x12 [ 509.669359][T23422] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4827'. [ 509.681306][T23423] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4826'. [ 510.272142][T23462] xt_ecn: cannot match TCP bits for non-tcp packets [ 510.288804][T23460] vlan4: entered promiscuous mode [ 510.293927][T23460] bridge0: entered promiscuous mode [ 510.302213][T23460] tun0: tun_chr_ioctl cmd 1074025675 [ 510.309304][T23460] tun0: persist disabled [ 510.508506][T23466] netlink: 'syz.0.4840': attribute type 2 has an invalid length. [ 510.555938][T23466] : entered promiscuous mode [ 510.580799][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4840'. [ 510.702776][T23488] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4848'. [ 510.848164][T23502] x_tables: duplicate underflow at hook 1 [ 510.856772][T23501] x_tables: duplicate underflow at hook 1 [ 511.049458][T23514] syzkaller0: entered promiscuous mode [ 511.055329][T23514] syzkaller0: entered allmulticast mode [ 511.453966][T23540] netlink: 'syz.2.4864': attribute type 2 has an invalid length. [ 511.545169][T23542] TCP: TCP_TX_DELAY enabled [ 511.558360][T23548] ip6t_REJECT: ECHOREPLY is not supported [ 511.840918][T23564] xt_l2tp: missing protocol rule (udp|l2tpip) [ 512.435770][T23601] netlink: 'syz.2.4883': attribute type 1 has an invalid length. [ 512.471074][T23605] tc_dump_action: action bad kind [ 512.482191][T23601] netlink: 'syz.2.4883': attribute type 1 has an invalid length. [ 513.044298][T23629] __nla_validate_parse: 3 callbacks suppressed [ 513.044318][T23629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4890'. [ 513.104157][T23631] netlink: 'syz.0.4892': attribute type 21 has an invalid length. [ 513.113719][T23631] netlink: 'syz.0.4892': attribute type 22 has an invalid length. [ 513.122621][T23631] netlink: 'syz.0.4892': attribute type 23 has an invalid length. [ 513.131464][T23631] netlink: 'syz.0.4892': attribute type 25 has an invalid length. [ 513.175667][T23631] netlink: 'syz.0.4892': attribute type 26 has an invalid length. [ 513.189617][T23631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4892'. [ 513.471088][T23642] netlink: 'syz.3.4893': attribute type 23 has an invalid length. [ 513.857816][ T6033] net_ratelimit: 77 callbacks suppressed [ 513.857840][ T6033] bond1: (slave bond0): failed to get link speed/duplex [ 513.949315][ T6033] bond1: (slave lo): failed to get link speed/duplex [ 513.998224][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 514.007813][ T3727] bond1: (slave bond0): failed to get link speed/duplex [ 514.058568][ T3727] bond1: (slave lo): failed to get link speed/duplex [ 514.069896][T23682] delete_channel: no stack [ 514.118640][ T3475] bond1: (slave bond0): failed to get link speed/duplex [ 514.167773][ T3727] bond1: (slave lo): failed to get link speed/duplex [ 514.227911][ T3727] bond1: (slave bond0): failed to get link speed/duplex [ 514.290886][ T3870] bond1: (slave lo): failed to get link speed/duplex [ 514.338363][ T9319] bond1: (slave bond0): failed to get link speed/duplex [ 514.423727][ T3870] bond1: (slave lo): failed to get link speed/duplex [ 514.704855][T23711] gre0: entered promiscuous mode [ 514.719229][T23711] gre0: entered allmulticast mode [ 514.874076][T23719] syzkaller1: entered promiscuous mode [ 514.887438][T23719] syzkaller1: entered allmulticast mode [ 514.890271][T23689] ipt_ECN: cannot use operation on non-tcp rule [ 514.926427][T23689] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 515.009708][T23688] lec:lec_atm_close: lec0: Shut down! [ 515.060714][T23726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.083889][T23732] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4918'. [ 515.330200][T23745] delete_channel: no stack [ 515.442917][T23755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4925'. [ 515.644793][T23765] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 515.672159][T23766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.685380][T23768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4930'. [ 515.697123][T23765] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 515.716144][T23765] gretap1: entered promiscuous mode [ 515.728068][T23765] gretap1: entered allmulticast mode [ 515.876749][T23775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4933'. [ 515.892953][T23775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4933'. [ 515.913553][T23778] xt_hashlimit: size too large, truncated to 1048576 [ 515.921798][T23775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4933'. [ 516.331776][T23800] validate_nla: 2 callbacks suppressed [ 516.331797][T23800] netlink: 'syz.1.4941': attribute type 22 has an invalid length. [ 516.742117][T23823] syzkaller1: entered promiscuous mode [ 516.747864][T23823] syzkaller1: entered allmulticast mode [ 516.772535][T23821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4947'. [ 516.792663][T23821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4947'. [ 516.880637][T23827] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 516.921276][T23829] wlan0 speed is unknown, defaulting to 1000 [ 517.286681][T23849] xfrm1: entered allmulticast mode [ 517.823002][T23883] syzkaller0: entered promiscuous mode [ 517.835412][T23883] syzkaller0: entered allmulticast mode [ 517.929644][T23886] netlink: 'syz.2.4971': attribute type 12 has an invalid length. [ 518.202485][T23887] infiniband !yz!: set down [ 518.208480][T23887] infiniband !yz!: added team_slave_0 [ 518.265413][T23887] RDS/IB: !yz!: added [ 518.269755][T23887] smc: adding ib device !yz! with port count 1 [ 518.279437][T23887] smc: ib device !yz! port 1 has no pnetid [ 518.464699][T23901] __nla_validate_parse: 5 callbacks suppressed [ 518.464719][T23901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4975'. [ 518.590431][T23901] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.4975'. [ 518.655479][T23906] netlink: 'syz.4.4976': attribute type 32 has an invalid length. [ 518.674444][T23906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4976'. [ 518.806734][T23911] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4977'. [ 518.916697][T23914] net_ratelimit: 63 callbacks suppressed [ 518.916722][T23914] netlink: zone id is out of range [ 518.931691][T23914] netlink: zone id is out of range [ 518.937213][T23914] netlink: zone id is out of range [ 518.946516][T23914] netlink: zone id is out of range [ 518.952322][T23914] netlink: zone id is out of range [ 518.959021][T23914] netlink: zone id is out of range [ 518.964469][T23914] netlink: zone id is out of range [ 518.973954][T23914] netlink: zone id is out of range [ 518.987995][T23914] netlink: zone id is out of range [ 518.993475][T23914] netlink: zone id is out of range [ 520.329913][T23906] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 520.356219][T23909] syzkaller1: entered promiscuous mode [ 520.379225][T23909] syzkaller1: entered allmulticast mode [ 520.722686][T23941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4986'. [ 520.748664][T23941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4986'. [ 521.514556][T23976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4995'. [ 521.695756][T23981] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.4996'. [ 521.731064][T23985] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.4996'. [ 521.762032][T23981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4996'. [ 521.906610][T23996] dvmrp6: entered allmulticast mode [ 522.206288][T24011] bridge0: port 2(macsec0) entered blocking state [ 522.226237][T24011] bridge0: port 2(macsec0) entered disabled state [ 522.234238][T24011] macsec0: entered allmulticast mode [ 522.240849][T24011] veth1_macvtap: entered allmulticast mode [ 522.251682][T24011] macsec0: entered promiscuous mode [ 523.971167][T17108] net_ratelimit: 110 callbacks suppressed [ 523.971189][T17108] bond1: (slave lo): failed to get link speed/duplex [ 524.048131][T17108] bond1: (slave bond0): failed to get link speed/duplex [ 524.138086][T17108] bond1: (slave lo): failed to get link speed/duplex [ 524.158770][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 524.185705][T24106] __nla_validate_parse: 3 callbacks suppressed [ 524.185723][T24106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5026'. [ 524.249030][T23104] bond1: (slave lo): failed to get link speed/duplex [ 524.285437][T24112] netlink: 'syz.1.5027': attribute type 7 has an invalid length. [ 524.326480][T24112] netlink: 'syz.1.5027': attribute type 7 has an invalid length. [ 524.338531][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 524.358630][ T13] bond1: (slave lo): failed to get link speed/duplex [ 524.366436][T24116] netlink: 'syz.1.5027': attribute type 7 has an invalid length. [ 524.451731][ T3547] bond1: (slave bond0): failed to get link speed/duplex [ 524.512304][T23104] bond1: (slave lo): failed to get link speed/duplex [ 524.599532][ T6033] bond1: (slave bond0): failed to get link speed/duplex [ 524.622563][T24127] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5034'. [ 524.663284][T24127] netlink: 'syz.0.5034': attribute type 11 has an invalid length. [ 524.762882][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5036'. [ 524.779690][T24138] netlink: 'syz.1.5037': attribute type 1 has an invalid length. [ 525.039735][T24147] syzkaller1: entered promiscuous mode [ 525.045303][T24147] syzkaller1: entered allmulticast mode [ 525.251937][T24161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5043'. [ 525.277046][T24161] netlink: 'syz.1.5043': attribute type 7 has an invalid length. [ 525.293804][T24161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5043'. [ 525.646726][T24172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5044'. [ 529.491625][T24172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.682100][ T3727] net_ratelimit: 6 callbacks suppressed [ 529.682122][ T3727] bond1: (slave bond0): failed to get link speed/duplex [ 529.807806][ T35] bond1: (slave lo): failed to get link speed/duplex [ 529.828131][ T35] bond1: (slave bond0): failed to get link speed/duplex [ 529.871178][T24194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.950878][ T3547] bond1: (slave lo): failed to get link speed/duplex [ 529.978755][ T151] bond1: (slave bond0): failed to get link speed/duplex [ 530.068668][ T151] bond1: (slave lo): failed to get link speed/duplex [ 530.098738][ T6033] bond1: (slave bond0): failed to get link speed/duplex [ 530.152570][T24210] xt_TCPMSS: Only works on TCP SYN packets [ 530.189489][ T151] bond1: (slave lo): failed to get link speed/duplex [ 530.198200][T24210] xt_TCPMSS: Only works on TCP SYN packets [ 530.210669][T24214] netlink: 'syz.2.5058': attribute type 1 has an invalid length. [ 530.229135][ T151] bond1: (slave bond0): failed to get link speed/duplex [ 530.346660][T24214] 8021q: adding VLAN 0 to HW filter on device bond5 [ 530.476590][T24230] netlink: 'syz.4.5064': attribute type 10 has an invalid length. [ 530.533352][T24230] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.570577][T24230] bond0: (slave team0): Enslaving as an active interface with a down link [ 530.834975][T24250] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 530.943902][T24256] netlink: 'syz.3.5073': attribute type 1 has an invalid length. [ 531.090349][T24260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5074'. [ 531.197012][T24270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5078'. [ 531.243532][T24270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5078'. [ 531.357032][T24281] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5082'. [ 531.429242][T24286] netlink: 'syz.1.5084': attribute type 1 has an invalid length. [ 531.450033][T24286] netlink: 'syz.1.5084': attribute type 3 has an invalid length. [ 531.471932][T24286] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5084'. [ 531.507409][T24289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5084'. [ 531.535732][T24289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5084'. [ 531.585756][T24289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5084'. [ 531.595240][T24289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5084'. [ 531.946474][T24307] vlan1: entered allmulticast mode [ 531.974569][T24307] veth0_vlan: entered allmulticast mode [ 532.005255][T24307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5089'. [ 532.298009][T24326] dvmrp0: left allmulticast mode [ 532.419167][T24331] siw: device registration error -23 [ 532.549346][T24333] netlink: 'syz.3.5095': attribute type 1 has an invalid length. [ 532.630363][T24341] x_tables: duplicate entry at hook 1 [ 532.886281][T24349] netlink: 'syz.1.5102': attribute type 1 has an invalid length. [ 532.950326][T24358] tipc: Enabled bearer , priority 10 [ 534.142334][T24435] xt_socket: unknown flags 0x50 [ 534.702186][T24460] syzkaller1: entered promiscuous mode [ 534.718654][T24460] syzkaller1: entered allmulticast mode [ 534.730322][T24460] netlink: 'syz.4.5139': attribute type 1 has an invalid length. [ 534.738725][ T4394] net_ratelimit: 65 callbacks suppressed [ 534.738747][ T4394] bond1: (slave bond0): failed to get link speed/duplex [ 534.739224][T17108] bond1: (slave lo): failed to get link speed/duplex [ 534.848043][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 534.868574][ T3727] bond1: (slave lo): failed to get link speed/duplex [ 534.931586][T24476] netlink: 'syz.1.5142': attribute type 29 has an invalid length. [ 534.947032][T24476] netlink: 'syz.1.5142': attribute type 29 has an invalid length. [ 534.959599][T24474] tipc: Failed to remove unknown binding: 66,1,1/9:116092148/116092150 [ 534.973593][T24479] tipc: Failed to remove unknown binding: 66,1,1/9:116092148/116092150 [ 534.998419][T17108] bond1: (slave bond0): failed to get link speed/duplex [ 535.021234][T17108] bond1: (slave lo): failed to get link speed/duplex [ 535.059508][T24481] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 535.110077][T17108] bond1: (slave bond0): failed to get link speed/duplex [ 535.148019][ T13] bond1: (slave lo): failed to get link speed/duplex [ 535.314169][T24498] validate_nla: 2 callbacks suppressed [ 535.314189][T24498] netlink: 'syz.0.5151': attribute type 4 has an invalid length. [ 535.352972][T24490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.368870][T24499] netlink: 'syz.0.5151': attribute type 4 has an invalid length. [ 535.409943][ T4394] bond1: (slave lo): failed to get link speed/duplex [ 535.455376][T24503] netlink: 'syz.4.5152': attribute type 1 has an invalid length. [ 535.489294][ T151] bond1: (slave bond0): failed to get link speed/duplex [ 535.616961][T24515] nbd: illegal input index 2958377 [ 535.722116][T24523] delete_channel: no stack [ 536.035234][T24554] ip6gre1: entered allmulticast mode [ 536.070597][T24554] syzkaller0: entered promiscuous mode [ 536.076319][T24554] syzkaller0: entered allmulticast mode [ 536.200553][T24570] __nla_validate_parse: 24 callbacks suppressed [ 536.200575][T24570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5173'. [ 536.334842][T24578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5173'. [ 536.769461][T24612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5185'. [ 536.905565][T24621] netlink: 'syz.1.5188': attribute type 1 has an invalid length. [ 536.970842][T24621] bond9: (slave geneve3): making interface the new active one [ 536.979958][T24621] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 537.118883][T23104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 537.182164][T23104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 537.208755][T23104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 537.234018][T23104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 537.280006][T24643] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5193'. [ 537.365361][T24654] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5193'. [ 537.522854][ T25] block nbd4: Possible stuck request ffff8880255e8000: control (read@0,4096B). Runtime 270 seconds [ 537.579011][T24662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5195'. [ 537.717451][T24668] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 537.990149][T24689] netlink: 'syz.3.5202': attribute type 5 has an invalid length. [ 538.087100][T24692] xt_CONNSECMARK: invalid mode: 0 [ 538.102284][T24692] sit0: entered promiscuous mode [ 538.149976][T24695] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5205'. [ 538.171764][T24692] netlink: 'syz.0.5204': attribute type 1 has an invalid length. [ 538.208511][T24692] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5204'. [ 538.219270][T24700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5206'. [ 538.487500][T24713] netlink: 'syz.3.5209': attribute type 11 has an invalid length. [ 538.495597][T24713] netlink: 'syz.3.5209': attribute type 11 has an invalid length. [ 538.508881][T24713] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5209'. [ 538.727452][T24712] sit2: entered promiscuous mode [ 538.738240][T24712] sit2: entered allmulticast mode [ 538.799999][ T25] block nbd11: Possible stuck request ffff888025850000: control (read@0,1024B). Runtime 30 seconds [ 538.811093][ T25] block nbd11: Possible stuck request ffff888025850200: control (read@1024,1024B). Runtime 30 seconds [ 538.821931][ T11] block nbd10: Possible stuck request ffff888025820000: control (read@0,1024B). Runtime 30 seconds [ 538.822841][ T25] block nbd11: Possible stuck request ffff888025850400: control (read@2048,1024B). Runtime 30 seconds [ 538.836896][ T11] block nbd10: Possible stuck request ffff888025820200: control (read@1024,1024B). Runtime 30 seconds [ 538.853525][ T25] block nbd11: Possible stuck request ffff888025850600: control (read@3072,1024B). Runtime 30 seconds [ 538.857463][ T11] block nbd10: Possible stuck request ffff888025820400: control (read@2048,1024B). Runtime 30 seconds [ 538.884524][ T11] block nbd10: Possible stuck request ffff888025820600: control (read@3072,1024B). Runtime 30 seconds [ 539.081304][T24738] netlink: 'syz.2.5216': attribute type 1 has an invalid length. [ 539.158633][T24738] 8021q: adding VLAN 0 to HW filter on device bond6 [ 539.309358][T24738] veth5: entered promiscuous mode [ 539.351022][T24738] bond6: (slave veth5): Enslaving as an active interface with an up link [ 539.432083][T24743] vlan5: entered allmulticast mode [ 539.437326][T24743] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 539.493112][T24763] netlink: 'syz.0.5221': attribute type 10 has an invalid length. [ 539.501351][T24762] netlink: 'syz.0.5221': attribute type 10 has an invalid length. [ 539.837865][ T151] net_ratelimit: 64 callbacks suppressed [ 539.837888][ T151] bond1: (slave lo): failed to get link speed/duplex [ 539.871180][T24778] can: request_module (can-proto-0) failed. [ 539.879382][T24708] bond1: (slave bond0): failed to get link speed/duplex [ 539.968202][ T3727] bond1: (slave lo): failed to get link speed/duplex [ 540.018034][T24708] bond1: (slave bond0): failed to get link speed/duplex [ 540.077930][ T4394] bond1: (slave lo): failed to get link speed/duplex [ 540.119657][T24791] openvswitch: netlink: Message has 536 unknown bytes. [ 540.128478][T24791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.139637][ T3727] bond1: (slave bond0): failed to get link speed/duplex [ 540.207945][ T3727] bond1: (slave lo): failed to get link speed/duplex [ 540.258111][ T3727] bond1: (slave bond0): failed to get link speed/duplex [ 540.643157][T24812] syzkaller0: entered promiscuous mode [ 540.661263][T24812] syzkaller0: entered allmulticast mode [ 540.994658][T24834] netlink: 'syz.3.5238': attribute type 2 has an invalid length. [ 541.203142][T24847] veth7: entered allmulticast mode [ 541.324027][T24859] __nla_validate_parse: 7 callbacks suppressed [ 541.324047][T24859] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5242'. [ 541.341527][T24859] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5242'. [ 542.208788][T24876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5246'. [ 542.268584][T24877] IPVS: set_ctl: invalid protocol: 0 15.0.0.0:65535 [ 542.372015][T24883] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20002 [ 542.611463][T24892] tipc: Enabling of bearer rejected, failed to enable media [ 542.639567][T24897] bridge0: port 3(veth0_to_bridge) entered blocking state [ 542.657908][T24897] bridge0: port 3(veth0_to_bridge) entered disabled state [ 542.665314][T24897] veth0_to_bridge: entered allmulticast mode [ 542.695072][T24899] netlink: 'syz.3.5255': attribute type 1 has an invalid length. [ 542.716642][T24897] veth0_to_bridge: entered promiscuous mode [ 542.962263][T24914] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5259'. [ 543.007833][T24914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5259'. [ 543.072609][T24918] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 543.272391][T24935] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5265'. [ 543.371401][T24937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5266'. [ 543.389134][T24937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5266'. [ 543.606525][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5269'. [ 543.800122][T24962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5272'. [ 544.857882][ T3870] net_ratelimit: 79 callbacks suppressed [ 544.857904][ T3870] bond1: (slave lo): failed to get link speed/duplex [ 545.174665][T25008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 545.237927][ T6033] bond1: (slave lo): failed to get link speed/duplex [ 545.291699][ T3653] bond1: (slave bond0): failed to get link speed/duplex [ 545.366954][T25023] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 545.395551][T25023] batadv1: entered promiscuous mode [ 545.421614][T25023] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 545.451847][T25023] team0: Failed to send options change via netlink (err -105) [ 545.477912][T25023] team0: Port device batadv1 added [ 545.498266][T24708] bond1: (slave lo): failed to get link speed/duplex [ 545.518686][T24708] bond1: (slave bond0): failed to get link speed/duplex [ 545.608549][ T3727] bond1: (slave lo): failed to get link speed/duplex [ 545.638854][ T3727] bond1: (slave bond0): failed to get link speed/duplex [ 545.729806][ T3727] bond1: (slave lo): failed to get link speed/duplex [ 545.758477][ T9323] bond1: (slave bond0): failed to get link speed/duplex [ 546.009459][T25048] ksmbd: Unknown IPC event: 3, ignore. [ 546.250223][T25055] netlink: 'syz.0.5296': attribute type 12 has an invalid length. [ 546.290891][T25062] tipc: Enabled bearer , priority 2 [ 546.361616][T25066] netlink: 'syz.4.5300': attribute type 1 has an invalid length. [ 546.389181][T25066] __nla_validate_parse: 12 callbacks suppressed [ 546.389199][T25066] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5300'. [ 546.468096][T25066] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 546.650586][T25088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5307'. [ 546.771351][T25094] IPVS: set_ctl: invalid protocol: 108 172.20.20.65:20000 [ 547.056171][T25112] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 547.179855][T25117] netlink: 'syz.1.5316': attribute type 16 has an invalid length. [ 547.389306][T25125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5319'. [ 547.408538][ T5965] tipc: Node number set to 566539056 [ 547.455415][T25125] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 548.238629][T25148] netlink: 'syz.0.5326': attribute type 1 has an invalid length. [ 548.354919][T25148] 8021q: adding VLAN 0 to HW filter on device bond6 [ 548.369832][T25168] set match dimension is over the limit! [ 548.516546][T25166] vlan2: entered allmulticast mode [ 548.560633][T25166] bond6: entered allmulticast mode [ 548.625840][T25148] bond6: (slave gretap1): making interface the new active one [ 548.661314][T25148] gretap1: entered allmulticast mode [ 548.699103][T25148] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 548.976936][T25186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5338'. [ 549.012497][T25192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5339'. [ 549.039300][T25195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5341'. [ 549.343941][T25192] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.374880][T25192] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.423618][T25204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5338'. [ 549.688572][T25192] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.727802][T25192] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.945105][T25192] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.971349][T25192] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.165259][T25192] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.186110][T25192] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.233997][T24656] net_ratelimit: 53 callbacks suppressed [ 550.234020][T24656] bond1: (slave lo): failed to get link speed/duplex [ 550.264506][ T3727] bond1: (slave bond0): failed to get link speed/duplex [ 550.360839][T24656] bond1: (slave lo): failed to get link speed/duplex [ 550.422321][T25234] bond6: option min_links: invalid value (18446744073709551614) [ 550.430242][T25234] bond6: option min_links: allowed values 0 - 2147483647 [ 550.454095][T25234] bond6 (unregistering): Released all slaves [ 550.570370][ T4394] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.602870][ T4394] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.675126][ T4394] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.708862][ T4394] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.023438][T25268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5357'. [ 551.054128][ T1150] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.089465][ T1150] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.198481][T25271] tipc: Enabled bearer , priority 0 [ 551.206510][T25271] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 551.214427][T25271] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 551.249886][T25273] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5359'. [ 551.266676][T25192] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.297072][T25192] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.331028][T25275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5360'. [ 551.359782][T25275] chnl_net:caif_netlink_parms(): no params data found [ 551.464987][T25273] batman_adv: batadv0: Adding interface: veth7 [ 551.488343][T25273] batman_adv: batadv0: The MTU of interface veth7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.539030][T25273] batman_adv: batadv0: Interface activated: veth7 [ 551.589712][T25278] netlink: 404 bytes leftover after parsing attributes in process `syz.2.5359'. [ 551.610899][T25278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5359'. [ 551.635290][T25278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5359'. [ 551.668257][T25278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5359'. [ 551.716700][T25192] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.729453][T25192] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.753014][T25289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5363'. [ 551.788865][T25286] netlink: 'syz.4.5363': attribute type 3 has an invalid length. [ 551.800770][T25286] netlink: 'syz.4.5363': attribute type 3 has an invalid length. [ 551.809240][T25286] netlink: 'syz.4.5363': attribute type 3 has an invalid length. [ 551.821443][T25286] netlink: 'syz.4.5363': attribute type 3 has an invalid length. [ 551.854425][ T1150] bond1: (slave lo): failed to get link speed/duplex [ 551.912307][T25192] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.937947][T25192] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.974045][T25290] tipc: Enabling of bearer rejected, already enabled [ 552.000582][ T3870] bond1: (slave bond0): failed to get link speed/duplex [ 552.019632][ T3870] bond1: (slave lo): failed to get link speed/duplex [ 552.120221][T25295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5366'. [ 552.122838][ T3870] bond1: (slave bond0): failed to get link speed/duplex [ 552.152882][T25298] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5367'. [ 552.180408][T25300] netlink: 'syz.2.5369': attribute type 17 has an invalid length. [ 552.188525][T24656] bond1: (slave lo): failed to get link speed/duplex [ 552.204464][T25300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5369'. [ 552.225095][T25300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5369'. [ 552.253780][T25300] gretap0: entered promiscuous mode [ 552.273247][T25300] gretap0: left promiscuous mode [ 552.338214][ T4394] bond1: (slave bond0): failed to get link speed/duplex [ 552.345323][T24656] bond1: (slave lo): failed to get link speed/duplex [ 552.683164][T25325] nftables ruleset with unbound set [ 552.904071][T25339] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 552.912308][T25343] netem: change failed [ 552.924068][T25343] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5382'. [ 553.099975][T25347] vlan4: entered promiscuous mode [ 553.105259][T25347] bridge0: entered promiscuous mode [ 553.348706][T25363] bridge0: entered allmulticast mode [ 553.905654][T25384] netlink: 'syz.1.5396': attribute type 5 has an invalid length. [ 554.452989][T25412] xt_l2tp: unknown flags: 10 [ 555.238619][T24656] net_ratelimit: 45 callbacks suppressed [ 555.238943][T24656] bond1: (slave bond0): failed to get link speed/duplex [ 555.289032][T24656] bond1: (slave lo): failed to get link speed/duplex [ 555.378088][T25482] 8021q: VLANs not supported on lo [ 555.398443][ T3727] bond1: (slave lo): failed to get link speed/duplex [ 555.405959][ T80] bond1: (slave bond0): failed to get link speed/duplex [ 555.529127][ T37] bond1: (slave lo): failed to get link speed/duplex [ 555.648125][ T35] bond1: (slave bond0): failed to get link speed/duplex [ 555.668333][ T35] bond1: (slave lo): failed to get link speed/duplex [ 555.760782][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 555.798737][ T3653] bond1: (slave lo): failed to get link speed/duplex [ 555.891537][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 556.298111][T25516] block nbd12: server does not support multiple connections per device. [ 556.326393][T25516] block nbd12: shutting down sockets [ 556.388483][T25525] syzkaller0: entered promiscuous mode [ 556.422531][T25525] syzkaller0: entered allmulticast mode [ 556.466115][T25535] ipt_REJECT: ECHOREPLY no longer supported. [ 556.494743][T25530] gre1: entered promiscuous mode [ 556.524076][T25530] gre1: entered allmulticast mode [ 556.622301][T25529] __nla_validate_parse: 10 callbacks suppressed [ 556.622321][T25529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5437'. [ 556.653876][T25530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5438'. [ 556.806043][T25558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5444'. [ 556.841431][T25559] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5443'. [ 556.956318][T25564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5446'. [ 556.988701][T25564] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 557.023859][T25569] vlan3: entered allmulticast mode [ 557.033674][T25569] bridge_slave_0: entered allmulticast mode [ 557.306151][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5455'. [ 557.348016][T25589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5455'. [ 557.445993][T25594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5456'. [ 557.483187][T25594] pim6reg: entered allmulticast mode [ 557.491282][T25594] pim6reg: left allmulticast mode [ 557.615882][T25602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 557.780505][T25594] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5456'. [ 557.831812][T25613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5461'. [ 557.874943][T25613] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 557.908566][T25613] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 557.930205][T25613] team0: Failed to send options change via netlink (err -105) [ 557.950314][T25613] team0: Port device batadv1 added [ 558.103950][T25627] vlan3: entered promiscuous mode [ 558.113340][T25627] vlan3: entered allmulticast mode [ 558.118964][T25627] hsr_slave_1: entered allmulticast mode [ 558.198961][T25637] tipc: Resetting bearer [ 558.208954][T25637] tipc: Resetting bearer [ 558.546285][T25659] nbd: must specify at least one socket [ 558.573873][T25659] nbd: must specify at least one socket [ 558.909408][T25677] vlan1: entered allmulticast mode [ 558.914625][T25677] veth0_vlan: entered allmulticast mode [ 559.969699][T25704] tipc: Enabled bearer , priority 0 [ 559.985514][T25704] sch_tbf: burst 127 is lower than device vlan0 mtu (1514) ! [ 560.018636][T25715] syzkaller0: entered promiscuous mode [ 560.048369][T25715] syzkaller0: entered allmulticast mode [ 560.063409][T25704] tipc: Resetting bearer [ 560.075370][T25704] netlink: 'syz.2.5486': attribute type 2 has an invalid length. [ 560.121126][T25702] tipc: Resetting bearer [ 560.195790][T25702] tipc: Disabling bearer [ 560.263510][ T13] net_ratelimit: 63 callbacks suppressed [ 560.263533][ T13] bond1: (slave lo): failed to get link speed/duplex [ 560.407948][T24656] bond1: (slave bond0): failed to get link speed/duplex [ 560.438962][T24656] bond1: (slave lo): failed to get link speed/duplex [ 560.448640][T25738] wlan0 speed is unknown, defaulting to 1000 [ 560.448644][T25742] netlink: 'syz.1.5494': attribute type 8 has an invalid length. [ 560.471289][T25751] ipt_rpfilter: unknown options [ 560.510210][T25738] lo speed is unknown, defaulting to 1000 [ 560.547769][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 560.563085][ T13] bond1: (slave lo): failed to get link speed/duplex [ 560.669367][T24656] bond1: (slave bond0): failed to get link speed/duplex [ 560.728229][ T1150] bond1: (slave lo): failed to get link speed/duplex [ 560.818859][ T1150] bond1: (slave bond0): failed to get link speed/duplex [ 560.839468][ T3653] bond1: (slave lo): failed to get link speed/duplex [ 560.996609][T25761] netlink: 'syz.0.5501': attribute type 8 has an invalid length. [ 561.287786][ T1150] bond1: (slave lo): failed to get link speed/duplex [ 561.371914][T25781] Unsupported ieee802154 address type: 0 [ 561.473503][T25781] can: request_module (can-proto-4) failed. [ 561.548932][T25782] wlan0 speed is unknown, defaulting to 1000 [ 561.584945][T25782] lo speed is unknown, defaulting to 1000 [ 561.609782][T25798] vlan2: entered promiscuous mode [ 561.637774][T25798] bridge0: entered promiscuous mode [ 561.670083][T25800] netlink: 'syz.3.5512': attribute type 1 has an invalid length. [ 561.814698][T25800] 8021q: adding VLAN 0 to HW filter on device bond6 [ 561.890820][T25816] __nla_validate_parse: 8 callbacks suppressed [ 561.890839][T25816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5516'. [ 561.944223][T25818] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5516'. [ 562.015763][T25805] bond6: (slave veth9): Enslaving as an active interface with a down link [ 562.047200][T25808] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 562.358622][T25812] wlan0 speed is unknown, defaulting to 1000 [ 562.418235][T25827] x_tables: duplicate underflow at hook 2 [ 562.582188][T25833] ip6gre1: entered promiscuous mode [ 562.597783][T25833] ip6gre1: entered allmulticast mode [ 562.609970][T25812] lo speed is unknown, defaulting to 1000 [ 562.611737][ T151] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.638925][ T9100] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.646958][ T151] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.834998][T25843] netlink: 'syz.4.5524': attribute type 11 has an invalid length. [ 562.850275][T25843] netlink: 'syz.4.5524': attribute type 4 has an invalid length. [ 562.867870][T25843] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.5524'. [ 563.109882][T25854] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 563.247840][ T9100] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 563.520499][ T9100] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 564.162638][T25901] ip6erspan0: entered promiscuous mode [ 564.173393][T25901] ip6erspan0: entered allmulticast mode [ 564.258891][T25901] syz.3.5542 (25901) used obsolete PPPIOCDETACH ioctl [ 565.299084][T25946] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5559'. [ 565.346498][T25955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5561'. [ 565.369363][ T35] net_ratelimit: 43 callbacks suppressed [ 565.369385][ T35] bond1: (slave bond0): failed to get link speed/duplex [ 565.387870][ T1150] bond1: (slave lo): failed to get link speed/duplex [ 565.453060][T25962] netlink: 'syz.3.5563': attribute type 1 has an invalid length. [ 565.585584][T25962] 8021q: adding VLAN 0 to HW filter on device bond7 [ 565.593961][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 565.760142][T25969] 8021q: adding VLAN 0 to HW filter on device bond7 [ 565.776684][T25969] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 565.789950][T25969] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 565.818448][T25984] netlink: 'syz.2.5565': attribute type 1 has an invalid length. [ 565.995182][T25984] bond7: entered promiscuous mode [ 566.001059][T25984] 8021q: adding VLAN 0 to HW filter on device bond7 [ 566.026878][T25962] veth11: entered promiscuous mode [ 566.059066][T25995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5570'. [ 566.100469][ T9319] bond1: (slave bond0): failed to get link speed/duplex [ 566.203217][T26010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5573'. [ 566.366812][T26010] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5573'. [ 566.379962][ T3870] bond1: (slave bond0): failed to get link speed/duplex [ 566.397915][ T37] bond1: (slave lo): failed to get link speed/duplex [ 566.448656][T26021] SET target dimension over the limit! [ 566.485963][T26025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5576'. [ 566.498523][ T3870] bond1: (slave bond0): failed to get link speed/duplex [ 566.508691][ T171] bond1: (slave lo): failed to get link speed/duplex [ 566.604334][T26027] netlink: 'syz.0.5581': attribute type 2 has an invalid length. [ 566.613005][ T171] bond1: (slave bond0): failed to get link speed/duplex [ 566.647785][ T6033] bond1: (slave lo): failed to get link speed/duplex [ 566.659936][T26034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5579'. [ 566.797779][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 567.000343][T26054] netlink: 'syz.3.5587': attribute type 2 has an invalid length. [ 567.009177][T26053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 567.012520][T26054] __nla_validate_parse: 1 callbacks suppressed [ 567.012573][T26054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5587'. [ 567.016860][T26053] IPv6: NLM_F_CREATE should be set when creating new route [ 567.045365][T26054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5587'. [ 567.082901][T26053] lo: entered allmulticast mode [ 567.115471][T26053] tunl0: left promiscuous mode [ 567.123418][T26053] tunl0: entered allmulticast mode [ 567.132321][T26053] gre0: entered allmulticast mode [ 567.168104][T26053] gretap0: entered allmulticast mode [ 567.174378][T26054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5587'. [ 567.299317][T26053] erspan0: entered allmulticast mode [ 567.320465][T26053] ip_vti0: entered allmulticast mode [ 567.334671][T26053] ip6_vti0: entered allmulticast mode [ 567.349530][T26053] sit0: left promiscuous mode [ 567.354354][T26053] sit0: entered allmulticast mode [ 567.397918][T26053] ip6tnl0: entered allmulticast mode [ 567.504387][T26053] ip6gre0: entered allmulticast mode [ 567.528448][T26053] ip6gretap0: entered allmulticast mode [ 567.550486][T26053] bridge0: entered allmulticast mode [ 567.578298][T26053] vcan0: entered allmulticast mode [ 567.589187][T26053] bond0: entered allmulticast mode [ 567.615846][ T25] block nbd4: Possible stuck request ffff8880255e8000: control (read@0,4096B). Runtime 300 seconds [ 567.629996][T26053] team0: entered allmulticast mode [ 567.658739][T26053] dummy0: entered allmulticast mode [ 567.668797][T26053] nlmon0: entered allmulticast mode [ 567.686806][T26053] caif0: entered allmulticast mode [ 567.699396][T26053] batadv0: entered allmulticast mode [ 567.705202][T26053] vxcan0: entered allmulticast mode [ 567.713410][T26053] vxcan1: entered allmulticast mode [ 567.719716][T26053] veth0: entered allmulticast mode [ 567.725419][T26053] veth1: entered allmulticast mode [ 567.731028][T26053] wg0: entered allmulticast mode [ 567.736553][T26053] wg1: entered allmulticast mode [ 567.742388][T26053] wg2: entered allmulticast mode [ 567.748298][T26053] veth1_to_bridge: entered allmulticast mode [ 567.754731][T26053] bridge_slave_1: entered allmulticast mode [ 567.762192][T26053] veth0_to_bond: entered allmulticast mode [ 567.776720][T26053] bond_slave_0: entered allmulticast mode [ 567.782841][T26053] veth0_to_team: entered allmulticast mode [ 567.789578][T26053] team_slave_0: entered allmulticast mode [ 567.795704][T26053] veth1_to_team: entered allmulticast mode [ 567.801830][T26053] team_slave_1: entered allmulticast mode [ 567.807941][T26053] veth1_to_batadv: entered allmulticast mode [ 567.814234][T26053] batadv_slave_1: entered allmulticast mode [ 567.820824][T26053] xfrm0: entered allmulticast mode [ 567.826168][T26053] veth0_to_hsr: entered allmulticast mode [ 567.835253][T26053] hsr_slave_0: entered allmulticast mode [ 567.842763][T26053] veth1_to_hsr: entered allmulticast mode [ 567.892655][T26053] hsr0: entered allmulticast mode [ 567.917739][T26053] veth1_virt_wifi: entered allmulticast mode [ 567.950311][T26053] veth0_virt_wifi: entered allmulticast mode [ 567.977333][T26053] veth1_vlan: entered allmulticast mode [ 567.997375][T26053] vlan0: entered allmulticast mode [ 568.018517][T26053] veth0_vlan: left promiscuous mode [ 568.038004][T26053] macvlan0: entered allmulticast mode [ 568.058325][T26053] macvlan1: entered allmulticast mode [ 568.084331][T26053] ipvlan0: entered allmulticast mode [ 568.097891][T26053] ipvlan1: entered allmulticast mode [ 568.118111][T26053] veth0_macvtap: entered allmulticast mode [ 568.168115][T26053] geneve0: entered allmulticast mode [ 568.195763][T26053] geneve1: entered allmulticast mode [ 568.215767][T26053] veth2: entered allmulticast mode [ 568.228742][T26053] veth3: entered allmulticast mode [ 568.234046][T26053] bond1: entered allmulticast mode [ 568.259446][T26053] mac80211_hwsim hwsim28 pim6reg0: entered allmulticast mode [ 568.268048][T26053] bridge1: entered allmulticast mode [ 568.288062][T26053] bond0.2: entered allmulticast mode [ 568.295014][T26053] vxlan0: entered allmulticast mode [ 568.309050][T26053] ipip0: entered allmulticast mode [ 568.314368][T26053] bond2: entered allmulticast mode [ 568.325488][T26053] vlan0.0: entered allmulticast mode [ 568.332467][T26053] ip6erspan0: entered allmulticast mode [ 568.353648][T26053] gtp0: entered allmulticast mode [ 568.360115][T26053] bridge2: entered allmulticast mode [ 568.376121][T26053] bond3: entered allmulticast mode [ 568.392942][T26053] bond4: left promiscuous mode [ 568.404854][T26053] bridge3: left promiscuous mode [ 568.410637][T26053] bond4: entered allmulticast mode [ 568.415792][T26053] bridge3: entered allmulticast mode [ 568.458854][T26053] erspan1: entered allmulticast mode [ 568.464591][T26053] geneve2: entered allmulticast mode [ 568.472125][T26053] geneve3: left promiscuous mode [ 568.488802][T26053] bond5: left promiscuous mode [ 568.493742][T26053] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 568.505441][T26053] hsr1: entered allmulticast mode [ 568.525615][T26053] sit1: entered allmulticast mode [ 568.531115][T26053] ip6gre1: left promiscuous mode [ 568.536073][T26053] ip6gre1: entered allmulticast mode [ 568.541730][T26053] ip6tnl1: entered allmulticast mode [ 568.547154][T26053] nicvf0: entered allmulticast mode [ 568.553574][T26053] syztnl1: entered allmulticast mode [ 568.559981][T26053] bridge4: entered allmulticast mode [ 568.565565][T26053] : entered allmulticast mode [ 568.571489][T26053] syztnl0: entered allmulticast mode [ 568.577016][T26053] macsec1: entered allmulticast mode [ 568.583571][T26053] veth4: entered allmulticast mode [ 568.589064][T26053] veth5: entered allmulticast mode [ 568.608899][T26053] vlan3: left promiscuous mode [ 568.618137][T26053] vlan4: entered allmulticast mode [ 568.623512][T26053] bridge5: entered allmulticast mode [ 568.863331][T26080] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5597'. [ 568.874886][T26080] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5597'. [ 568.906769][T26078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5595'. [ 568.920700][ T25] block nbd11: Possible stuck request ffff888025850000: control (read@0,1024B). Runtime 60 seconds [ 568.920722][ T11] block nbd10: Possible stuck request ffff888025820000: control (read@0,1024B). Runtime 60 seconds [ 568.931591][ T25] block nbd11: Possible stuck request ffff888025850200: control (read@1024,1024B). Runtime 60 seconds [ 568.931626][ T25] block nbd11: Possible stuck request ffff888025850400: control (read@2048,1024B). Runtime 60 seconds [ 568.931656][ T25] block nbd11: Possible stuck request ffff888025850600: control (read@3072,1024B). Runtime 60 seconds [ 568.979910][ T11] block nbd10: Possible stuck request ffff888025820200: control (read@1024,1024B). Runtime 60 seconds [ 568.991085][T26078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.991107][ T11] block nbd10: Possible stuck request ffff888025820400: control (read@2048,1024B). Runtime 60 seconds [ 569.021424][ T11] block nbd10: Possible stuck request ffff888025820600: control (read@3072,1024B). Runtime 60 seconds [ 569.353384][T26109] netlink: 'syz.1.5602': attribute type 2 has an invalid length. [ 569.368278][T26109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5602'. [ 569.516829][T26123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5605'. [ 569.526555][T26123] 8021q: VLANs not supported on ipvlan0 [ 570.197136][T26159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5615'. [ 570.212046][T26156] syzkaller1: entered promiscuous mode [ 570.222038][T26159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5615'. [ 570.227823][T26156] syzkaller1: entered allmulticast mode [ 570.479031][ T171] net_ratelimit: 34 callbacks suppressed [ 570.479053][ T171] bond1: (slave lo): failed to get link speed/duplex [ 570.524606][T26174] delete_channel: no stack [ 570.530491][ T171] bond1: (slave bond0): failed to get link speed/duplex [ 570.618305][ T171] bond1: (slave lo): failed to get link speed/duplex [ 570.649963][ T171] bond1: (slave bond0): failed to get link speed/duplex [ 570.727795][ T171] bond1: (slave lo): failed to get link speed/duplex [ 570.761119][ T171] bond1: (slave bond0): failed to get link speed/duplex [ 570.838394][ T171] bond1: (slave lo): failed to get link speed/duplex [ 570.881101][ T171] bond1: (slave bond0): failed to get link speed/duplex [ 570.951240][ T80] bond1: (slave lo): failed to get link speed/duplex [ 570.997981][ T171] bond1: (slave bond0): failed to get link speed/duplex [ 571.152364][T26191] netlink: 'syz.2.5626': attribute type 1 has an invalid length. [ 571.176392][T26191] netlink: 'syz.2.5626': attribute type 3 has an invalid length. [ 571.196104][T26191] NCSI netlink: No device for ifindex 813332851 [ 571.505349][T26213] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 571.594098][T26213] bond8 (unregistering): Released all slaves [ 571.880993][T26236] netlink: 'syz.3.5638': attribute type 12 has an invalid length. [ 571.945064][T26236] bond8: option primary_reselect: invalid value (255) [ 571.960200][T26236] bond8 (unregistering): Released all slaves [ 572.163195][T26249] __nla_validate_parse: 2 callbacks suppressed [ 572.163216][T26249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5642'. [ 572.208864][T26251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5643'. [ 572.401620][T26262] netlink: 'syz.1.5649': attribute type 12 has an invalid length. [ 572.411100][T26262] sctp: [Deprecated]: syz.1.5649 (pid 26262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.411100][T26262] Use struct sctp_sack_info instead [ 572.480238][T26268] smc: net device gre0 applied user defined pnetid SYZ1 [ 572.498507][T26268] smc: net device gre0 erased user defined pnetid SYZ1 [ 572.535896][T26270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5651'. [ 572.711260][T26284] syzkaller1: entered promiscuous mode [ 572.716830][T26284] syzkaller1: entered allmulticast mode [ 572.738717][T26284] IPv6: NLM_F_REPLACE set, but no existing node found! [ 572.825451][T26287] sctp: [Deprecated]: syz.0.5655 (pid 26287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.825451][T26287] Use struct sctp_sack_info instead [ 572.853704][T26292] sctp: [Deprecated]: syz.0.5655 (pid 26292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.853704][T26292] Use struct sctp_sack_info instead [ 573.078694][T26306] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5659'. [ 573.113509][T26306] bond10: (slave erspan0): Device is not bonding slave [ 573.121494][T26306] bond10: option active_slave: invalid value (erspan0) [ 573.133054][T26306] bond10 (unregistering): Released all slaves [ 573.233645][T26319] netlink: 'syz.4.5663': attribute type 29 has an invalid length. [ 573.250301][T26319] netlink: 'syz.4.5663': attribute type 29 has an invalid length. [ 573.264495][T26308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5661'. [ 573.278400][T26319] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5663'. [ 573.383924][T26319] sctp: [Deprecated]: syz.4.5663 (pid 26319) Use of int in max_burst socket option deprecated. [ 573.383924][T26319] Use struct sctp_assoc_value instead [ 573.532978][T26330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5666'. [ 573.584392][T26333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5666'. [ 573.596786][T26330] netlink: 'syz.4.5666': attribute type 2 has an invalid length. [ 573.890445][T26355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5677'. [ 574.187795][ T5199] udevd[5199]: worker [6840] /devices/virtual/block/nbd10 is taking a long time [ 574.208529][ T5199] udevd[5199]: worker [6098] /devices/virtual/block/nbd11 is taking a long time [ 574.343708][T26389] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5686'. [ 574.632773][T26406] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 574.802308][T26420] netlink: 'syz.0.5693': attribute type 5 has an invalid length. [ 574.903165][T26415] delete_channel: no stack [ 575.039560][T26433] netlink: 'syz.1.5702': attribute type 1 has an invalid length. [ 575.318399][T26452] chnl_net:caif_netlink_parms(): no params data found [ 575.403249][T26459] netlink: 'syz.4.5711': attribute type 27 has an invalid length. [ 575.460066][T26457] bridge0: left allmulticast mode [ 575.475758][T26457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.490313][T26457] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.513583][T26457] net_ratelimit: 65 callbacks suppressed [ 575.513593][T26457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.560443][ T4394] bond0: (slave 32): link status definitely down, disabling slave [ 575.576473][ T4394] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 575.591660][ T4394] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 575.619881][ T4394] bond0: now running without any active interface! [ 575.702975][T24708] bond1: (slave lo): failed to get link speed/duplex [ 575.727918][ T9323] bond1: (slave bond0): failed to get link speed/duplex [ 575.777865][T26474] tipc: Enabling of bearer rejected, already enabled [ 575.861474][ T9323] bond1: (slave bond0): failed to get link speed/duplex [ 575.879360][T24708] bond1: (slave lo): failed to get link speed/duplex [ 575.917784][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 575.981870][ T3870] bond1: (slave bond0): failed to get link speed/duplex [ 576.039665][ T3870] bond1: (slave lo): failed to get link speed/duplex [ 576.126037][ T3870] bond1: (slave bond0): failed to get link speed/duplex [ 576.164500][T24708] bond1: (slave lo): failed to get link speed/duplex [ 576.251886][T24708] bond1: (slave bond0): failed to get link speed/duplex [ 576.373966][T26525] validate_nla: 2 callbacks suppressed [ 576.373985][T26525] netlink: 'syz.0.5730': attribute type 3 has an invalid length. [ 576.963181][T26560] netlink: 'syz.4.5743': attribute type 22 has an invalid length. [ 577.139050][T26574] netlink: 'syz.0.5750': attribute type 16 has an invalid length. [ 577.148211][T26566] netlink: 'syz.1.5746': attribute type 39 has an invalid length. [ 577.260089][T26575] __nla_validate_parse: 24 callbacks suppressed [ 577.260110][T26575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5749'. [ 577.396129][T26588] xt_TCPMSS: Only works on TCP SYN packets [ 577.556019][T26596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5755'. [ 577.594238][T26596] netlink: 'syz.0.5755': attribute type 7 has an invalid length. [ 577.609590][T26596] netlink: 'syz.0.5755': attribute type 8 has an invalid length. [ 577.637381][T26596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5755'. [ 577.749333][T26607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5757'. [ 577.774684][T26615] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 577.829453][T26615] bond3: (slave lo): Enslaving as a backup interface with an up link [ 577.929063][T26613] tipc: Enabling of bearer rejected, already enabled [ 578.130052][T26642] netlink: 'syz.3.5767': attribute type 1 has an invalid length. [ 578.287179][T26642] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 578.295604][T26653] netlink: 'syz.1.5769': attribute type 3 has an invalid length. [ 578.300829][T26642] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 578.319056][T26642] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 578.332245][T26648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5767'. [ 578.561290][T26664] netlink: 'syz.0.5772': attribute type 30 has an invalid length. [ 578.570160][T26665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5771'. [ 578.606044][T26667] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5774'. [ 578.679482][T26672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5776'. [ 578.802397][T26664] bond7: option arp_missed_max: invalid value (0) [ 578.810001][T26664] bond7: option arp_missed_max: allowed values 1 - 255 [ 578.820548][T26664] bond7 (unregistering): Released all slaves [ 579.175232][T26668] syzkaller0: entered promiscuous mode [ 579.191871][T26702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5779'. [ 579.208207][T26668] syzkaller0: entered allmulticast mode [ 579.271632][T26660] sit2: entered promiscuous mode [ 579.278770][T26660] sit2: entered allmulticast mode [ 579.316184][T26693] IPv6: sit2: Disabled Multicast RS [ 579.344854][T26693] sit2: entered allmulticast mode [ 579.601014][T26720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5784'. [ 579.756548][T26726] netlink: 'syz.4.5785': attribute type 1 has an invalid length. [ 581.388092][ T35] net_ratelimit: 38 callbacks suppressed [ 581.388114][ T35] bond1: (slave lo): failed to get link speed/duplex [ 581.418415][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 581.508526][ T13] bond1: (slave lo): failed to get link speed/duplex [ 581.539460][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 581.628271][ T151] bond1: (slave lo): failed to get link speed/duplex [ 581.668188][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 581.749158][ T9323] bond1: (slave lo): failed to get link speed/duplex [ 581.817933][ T35] bond1: (slave bond0): failed to get link speed/duplex [ 581.893022][ T3870] bond1: (slave lo): failed to get link speed/duplex [ 581.929455][ T9323] bond1: (slave bond0): failed to get link speed/duplex [ 581.993144][T26759] syzkaller0: entered promiscuous mode [ 581.999252][T26759] syzkaller0: entered allmulticast mode [ 582.263818][T26790] IPv6: NLM_F_CREATE should be specified when creating new route [ 582.273860][T26780] IPv6: NLM_F_CREATE should be specified when creating new route [ 582.594746][T26809] __nla_validate_parse: 5 callbacks suppressed [ 582.594767][T26809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5804'. [ 582.638950][T26809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5804'. [ 582.795729][T26819] netlink: 'syz.3.5809': attribute type 2 has an invalid length. [ 582.994217][T26833] netlink: 'syz.0.5812': attribute type 1 has an invalid length. [ 583.002371][T26833] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5812'. [ 583.016556][T26833] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5812'. [ 583.193663][T26845] x_tables: duplicate underflow at hook 1 [ 583.303351][T26850] netlink: 'syz.2.5817': attribute type 30 has an invalid length. [ 583.366884][T26850] bond9: option arp_missed_max: invalid value (0) [ 583.374550][T26850] bond9: option arp_missed_max: allowed values 1 - 255 [ 583.389484][T26850] bond9 (unregistering): Released all slaves [ 583.938915][T26886] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5828'. [ 583.952032][T26892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5826'. [ 584.219792][T26904] netlink: 'syz.3.5833': attribute type 1 has an invalid length. [ 584.298284][T26904] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5833'. [ 584.337365][T26908] dvmrp6: entered allmulticast mode [ 584.510835][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 584.523427][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 584.534112][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 584.543232][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 584.552380][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 584.607937][T26920] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5839'. [ 584.620080][T26912] wlan0 speed is unknown, defaulting to 1000 [ 584.640283][T26912] lo speed is unknown, defaulting to 1000 [ 584.703370][T26923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5837'. [ 585.488187][T26954] netlink: 'syz.3.5847': attribute type 2 has an invalid length. [ 585.524273][T26953] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 585.541892][T26953] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 585.556319][T26953] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 585.941706][T26975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5851'. [ 586.086116][T26912] chnl_net:caif_netlink_parms(): no params data found [ 586.276990][T26912] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.298177][T26912] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.340344][T26912] bridge_slave_0: entered allmulticast mode [ 586.359061][T26912] bridge_slave_0: entered promiscuous mode [ 586.409974][T26912] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.417381][T26912] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.445786][T26912] bridge_slave_1: entered allmulticast mode [ 586.470022][T26912] bridge_slave_1: entered promiscuous mode [ 586.613663][T26912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.639971][ T5840] Bluetooth: hci3: command tx timeout [ 586.648140][ T80] net_ratelimit: 74 callbacks suppressed [ 586.648161][ T80] bond1: (slave lo): failed to get link speed/duplex [ 586.698282][ T80] bond1: (slave bond0): failed to get link speed/duplex [ 586.737330][T26912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.762494][T27008] batadv_slave_1: entered promiscuous mode [ 586.870175][T27002] batadv_slave_1: left promiscuous mode [ 586.887316][T26912] team0: Port device team_slave_0 added [ 586.932901][T26912] team0: Port device team_slave_1 added [ 586.976125][T27011] netlink: 'syz.4.5862': attribute type 11 has an invalid length. [ 587.005083][T27014] tipc: Enabled bearer , priority 0 [ 587.022240][T26912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.031176][T26912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.090016][T26912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.113357][T27022] syzkaller0: entered promiscuous mode [ 587.141539][T27022] syzkaller0: entered allmulticast mode [ 587.173836][T26912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.183329][T26912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.225369][T26912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.251553][T27022] tipc: Resetting bearer [ 587.271339][T27013] tipc: Resetting bearer [ 587.299740][T27013] tipc: Disabling bearer [ 587.474366][T26912] hsr_slave_0: entered promiscuous mode [ 587.510679][T26912] hsr_slave_1: entered promiscuous mode [ 587.532600][T26912] debugfs: 'hsr0' already exists in 'hsr' [ 587.549513][T26912] Cannot create hsr debugfs directory [ 587.732059][T27058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.058126][ T9323] bond1: (slave lo): failed to get link speed/duplex [ 588.078463][ T35] bond1: (slave bond0): failed to get link speed/duplex [ 588.236307][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 588.298366][ T9323] bond1: (slave lo): failed to get link speed/duplex [ 588.359553][ T9323] bond1: (slave bond0): failed to get link speed/duplex [ 588.372882][T26912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 588.403364][T26912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 588.439179][T26912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 588.494192][T26912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 588.619349][T27097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.638981][T27095] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 588.719998][ T5847] Bluetooth: hci3: command tx timeout [ 588.860529][T27113] tipc: Enabling of bearer rejected, failed to enable media [ 588.914328][T26912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.942450][T27119] ip6gre0: Master is either lo or non-ether device [ 589.050572][T26912] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.087498][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.094884][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.159392][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.166639][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.235708][T27133] __nla_validate_parse: 4 callbacks suppressed [ 589.235723][T27130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5897'. [ 589.235728][T27133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5896'. [ 589.310540][T27139] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 925581108, id = 0 [ 589.863496][T26912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.011521][T26912] veth0_vlan: entered promiscuous mode [ 590.026328][T27165] netlink: 'syz.3.5907': attribute type 30 has an invalid length. [ 590.068676][T26912] veth1_vlan: entered promiscuous mode [ 590.176045][T26912] veth0_macvtap: entered promiscuous mode [ 590.200655][T26912] veth1_macvtap: entered promiscuous mode [ 590.263462][T26912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.333460][T26912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.356471][T24656] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.375696][T24656] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.431978][T24656] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.543088][T24656] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.667849][T27190] netlink: 'syz.1.5914': attribute type 1 has an invalid length. [ 590.786395][ T3727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.798684][ T5847] Bluetooth: hci3: command tx timeout [ 590.804902][ T3727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.891330][T27194] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5916'. [ 590.905746][T27194] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5916'. [ 590.947509][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.966660][T27194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5916'. [ 590.988404][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.127461][T27207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5921'. [ 591.146014][T27209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5921'. [ 591.160315][T27209] bridge_slave_1: left allmulticast mode [ 591.166201][T27209] bridge_slave_1: left promiscuous mode [ 591.174420][T27209] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.192154][T27209] bridge_slave_0: left allmulticast mode [ 591.204722][T27209] bridge_slave_0: left promiscuous mode [ 591.216826][T27209] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.226358][T27216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5922'. [ 591.470335][T27216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5922'. [ 591.556030][T27223] IPVS: Error connecting to the multicast addr [ 591.748104][ T151] net_ratelimit: 28 callbacks suppressed [ 591.748126][ T151] bond1: (slave bond0): failed to get link speed/duplex [ 591.789670][T27237] net veth1_virt_wifi .!: renamed from virt_wifi0 [ 591.818996][ T6033] bond1: (slave lo): failed to get link speed/duplex [ 591.888476][ T6069] bond1: (slave bond0): failed to get link speed/duplex [ 591.951546][ T6069] bond1: (slave lo): failed to get link speed/duplex [ 592.018184][ T6033] bond1: (slave bond0): failed to get link speed/duplex [ 592.081316][ T6033] bond1: (slave lo): failed to get link speed/duplex [ 592.096011][T27259] vlan0: entered promiscuous mode [ 592.133281][T27259] vlan0: entered allmulticast mode [ 592.147774][ T6033] bond1: (slave bond0): failed to get link speed/duplex [ 592.198604][T27262] wireguard0: entered promiscuous mode [ 592.208452][T27262] wireguard0: entered allmulticast mode [ 592.313356][T27262] team0: Device wireguard0 is of different type [ 592.387877][ T3653] bond1: (slave lo): failed to get link speed/duplex [ 592.397090][T27265] dvmrp0: left allmulticast mode [ 592.402646][T27265] dvmrp6: left allmulticast mode [ 592.463528][T27270] pim6reg1: entered promiscuous mode [ 592.482842][T27270] pim6reg1: entered allmulticast mode [ 592.558280][ T151] bond1: (slave lo): failed to get link speed/duplex [ 592.590213][ T151] bond1: (slave bond0): failed to get link speed/duplex [ 592.628883][T27285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5939'. [ 592.651995][T27285] netlink: 'syz.0.5939': attribute type 2 has an invalid length. [ 592.877645][ T5847] Bluetooth: hci3: command tx timeout [ 593.071532][T27310] ip6gre2: entered allmulticast mode [ 593.207858][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 593.292280][T27320] bond0: left promiscuous mode [ 593.297461][T27320] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 593.306120][T27320] bridge_slave_1: left promiscuous mode [ 593.314303][T27320] netlink: 'syz.2.5950': attribute type 10 has an invalid length. [ 593.375066][T27320] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 594.123802][T27366] tipc: Enabling of bearer rejected, already enabled [ 594.147171][T27366] Unknown options in mask b7f2 [ 594.356433][T27375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 594.486914][T27385] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 594.551472][T27375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 594.773062][T27375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 594.831384][T27365] bridge0: port 1(batadv0) entered blocking state [ 594.849919][T27365] bridge0: port 1(batadv0) entered disabled state [ 594.875316][T27365] batadv0: entered allmulticast mode [ 594.902221][T27365] batadv0: entered promiscuous mode [ 594.930492][T27363] lec:lec_atm_close: lec0: Shut down! [ 594.951251][T27375] bond0: (slave netdevsim0): Releasing backup interface [ 594.975134][T27375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 595.188418][ T4394] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 595.265189][ T6033] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 595.281909][T27417] __nla_validate_parse: 7 callbacks suppressed [ 595.281929][T27417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5976'. [ 595.327830][ T6033] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 595.337169][ T6033] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 595.348045][ T3653] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 595.405045][ T6069] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 595.405916][T27417] netlink: 'syz.0.5976': attribute type 23 has an invalid length. [ 595.758697][ T31] INFO: task udevd:6841 blocked for more than 143 seconds. [ 595.766146][ T31] Not tainted syzkaller #0 [ 595.784774][ T31] Blocked by coredump. [ 595.795526][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 595.811865][T27443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5983'. [ 595.826175][ T31] task:udevd state:D stack:23320 pid:6841 tgid:6841 ppid:5199 task_flags:0x40054c flags:0x00080003 [ 595.864241][ T31] Call Trace: [ 595.873805][ T31] [ 595.880540][T27448] netlink: 'syz.3.5985': attribute type 4 has an invalid length. [ 595.897687][ T31] __schedule+0x14bc/0x5000 [ 595.905606][ T31] ? __pfx___schedule+0x10/0x10 [ 595.915049][T27448] netlink: 'syz.3.5985': attribute type 4 has an invalid length. [ 595.924733][ T31] ? schedule+0x91/0x360 [ 595.929407][ T31] schedule+0x165/0x360 [ 595.933771][ T31] io_schedule+0x80/0xd0 [ 595.938219][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 595.943667][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 595.950120][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 595.955765][ T31] ? __pfx_find_lock_entries+0x10/0x10 [ 595.961757][ T31] ? __filemap_fdatawait_range+0x1d2/0x230 [ 595.967807][ T31] ? __filemap_get_folio_mpol+0x81/0xb00 [ 595.973571][ T31] __filemap_get_folio_mpol+0x13e/0xb00 [ 595.979483][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 595.985715][ T31] truncate_inode_pages_range+0x3f0/0xd90 [ 595.992207][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 595.999321][ T31] ? smp_call_function_many_cond+0xf43/0x12b0 [ 596.005704][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 596.011499][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 596.016639][ T31] ? __pfx_has_bh_in_lru+0x10/0x10 [ 596.021986][ T31] blkdev_flush_mapping+0x109/0x2f0 [ 596.027291][ T31] bdev_release+0x417/0x650 [ 596.032355][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 596.037945][ T31] blkdev_release+0x15/0x20 [ 596.042478][ T31] __fput+0x44c/0xa70 [ 596.046488][ T31] task_work_run+0x1d4/0x260 [ 596.051243][ T31] ? __pfx_task_work_run+0x10/0x10 [ 596.056409][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 596.061732][ T31] do_exit+0x6c5/0x2310 [ 596.065921][ T31] ? do_raw_spin_lock+0x121/0x290 [ 596.072169][ T31] ? __pfx_do_exit+0x10/0x10 [ 596.076806][ T31] ? cgroup1_freezing+0x20/0x350 [ 596.082330][ T31] do_group_exit+0x21c/0x2d0 [ 596.086972][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 596.092755][ T31] get_signal+0x1285/0x1340 [ 596.097340][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 596.103406][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 596.110002][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 596.115636][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 596.121248][ T31] ? rcu_is_watching+0x15/0xb0 [ 596.126080][ T31] do_syscall_64+0x2d0/0xf80 [ 596.132004][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.138655][ T31] ? clear_bhb_loop+0x60/0xb0 [ 596.143497][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.149633][ T31] RIP: 0033:0x7f2ee02a7407 [ 596.154087][ T31] RSP: 002b:00007ffc8efc3da0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 596.163144][ T31] RAX: fffffffffffffffc RBX: 00007f2ee0a8f880 RCX: 00007f2ee02a7407 [ 596.171342][ T31] RDX: 0000000000000200 RSI: 00007f2ee0a8e000 RDI: 0000000000000009 [ 596.179528][ T31] RBP: 0000557b5d653050 R08: 0000000000000000 R09: 0000000000000000 [ 596.188009][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 596.196580][ T31] R13: 0000000000000000 R14: 0000557b5d650358 R15: 00007f2ee0bb639c [ 596.204915][ T31] [ 596.208424][ T31] [ 596.208424][ T31] Showing all locks held in the system: [ 596.216194][ T31] 1 lock held by khungtaskd/31: [ 596.222264][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 596.246522][ T31] 2 locks held by getty/5588: [ 596.252038][ T31] #0: ffff88814de650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 596.262137][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 596.272524][ T31] 3 locks held by kworker/1:6/5907: [ 596.278149][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 596.289375][ T31] #1: ffffc90004e47b80 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 596.302503][ T31] #2: ffff888142692240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0 [ 596.313053][ T31] 1 lock held by udevd/6098: [ 596.319030][ T31] #0: ffff8880257b3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 596.328675][ T31] 1 lock held by udevd/6840: [ 596.333296][ T31] #0: ffff88802562f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 596.343263][ T31] 1 lock held by udevd/6841: [ 596.348152][ T31] #0: ffff888141bb0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 596.358318][ T31] [ 596.360706][ T31] ============================================= [ 596.360706][ T31] [ 596.377849][ T31] NMI backtrace for cpu 1 [ 596.377876][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 596.377900][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.377912][ T31] Call Trace: [ 596.377921][ T31] [ 596.377929][ T31] dump_stack_lvl+0x189/0x250 [ 596.377962][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 596.377986][ T31] ? __pfx__printk+0x10/0x10 [ 596.378030][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 596.378062][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 596.378094][ T31] ? __pfx__printk+0x10/0x10 [ 596.378129][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 596.378164][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 596.378196][ T31] sys_info+0x135/0x170 [ 596.378220][ T31] watchdog+0xf95/0xfe0 [ 596.378255][ T31] ? watchdog+0x20a/0xfe0 [ 596.378291][ T31] kthread+0x711/0x8a0 [ 596.378323][ T31] ? __pfx_watchdog+0x10/0x10 [ 596.378351][ T31] ? __pfx_kthread+0x10/0x10 [ 596.378381][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 596.378412][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 596.378443][ T31] ? __pfx_kthread+0x10/0x10 [ 596.378472][ T31] ret_from_fork+0x599/0xb30 [ 596.378495][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 596.378528][ T31] ? __switch_to_asm+0x39/0x70 [ 596.378553][ T31] ? __switch_to_asm+0x33/0x70 [ 596.378577][ T31] ? __pfx_kthread+0x10/0x10 [ 596.378605][ T31] ret_from_fork_asm+0x1a/0x30 [ 596.378650][ T31] [ 596.378658][ T31] Sending NMI from CPU 1 to CPUs 0: [ 596.533280][ C0] NMI backtrace for cpu 0 [ 596.533298][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 596.533318][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.533329][ C0] RIP: 0010:ttwu_do_wakeup+0xc7/0x130 [ 596.533359][ C0] Code: 0f 1e fa 48 89 fb 65 8b 05 8a cf ec 10 83 f8 08 73 75 41 89 c6 c1 e8 06 48 8d 3c c5 70 20 82 8f be 08 00 00 00 e8 39 30 96 00 <4c> 0f a3 35 a1 3f f0 0d 0f 83 56 ff ff ff 65 ff 05 54 cf ec 10 4c [ 596.533374][ C0] RSP: 0018:ffffc90000007c18 EFLAGS: 00000056 [ 596.533390][ C0] RAX: 0000000000000001 RBX: ffff888030bc9e80 RCX: ffffffff8191e0c7 [ 596.533403][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f822070 [ 596.533415][ C0] RBP: ffff888030bc9e80 R08: ffffffff8f822077 R09: 1ffffffff1f0440e [ 596.533428][ C0] R10: dffffc0000000000 R11: fffffbfff1f0440f R12: dffffc0000000000 [ 596.533441][ C0] R13: 0000000000100009 R14: 0000000000000000 R15: dffffc0000000000 [ 596.533454][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 596.533468][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 596.533480][ C0] CR2: 00007fa5159b42f8 CR3: 0000000031ab6000 CR4: 00000000003526f0 [ 596.533495][ C0] Call Trace: [ 596.533503][ C0] [ 596.533513][ C0] ttwu_do_activate+0x207/0x860 [ 596.533543][ C0] try_to_wake_up+0x721/0x12b0 [ 596.533573][ C0] hrtimer_wakeup+0x4e/0x60 [ 596.533597][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 596.533620][ C0] __hrtimer_run_queues+0x51c/0xc30 [ 596.533642][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 596.533680][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 596.533701][ C0] ? read_tsc+0x9/0x20 [ 596.533732][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 596.533772][ C0] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 596.533795][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 596.533813][ C0] [ 596.533819][ C0] [ 596.533825][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.533845][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 596.533862][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 596.533876][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 596.533890][ C0] RAX: f19292aea3928300 RBX: ffffffff81978fda RCX: f19292aea3928300 [ 596.533903][ C0] RDX: 0000000000000001 RSI: ffffffff8d7925ee RDI: ffffffff8bc08360 [ 596.533915][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 596.533928][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822070 [ 596.533941][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 596.533955][ C0] ? do_idle+0x1ea/0x520 [ 596.533981][ C0] default_idle+0x13/0x20 [ 596.534001][ C0] default_idle_call+0x73/0xb0 [ 596.534021][ C0] do_idle+0x1ea/0x520 [ 596.534038][ C0] ? irqentry_exit+0x5ba/0x660 [ 596.534059][ C0] ? __pfx_do_idle+0x10/0x10 [ 596.534092][ C0] cpu_startup_entry+0x44/0x60 [ 596.534111][ C0] rest_init+0x2de/0x300 [ 596.534134][ C0] start_kernel+0x3a7/0x400 [ 596.534154][ C0] x86_64_start_reservations+0x24/0x30 [ 596.534176][ C0] x86_64_start_kernel+0x143/0x1c0 [ 596.534199][ C0] common_startup_64+0x13e/0x147 [ 596.534232][ C0] [ 596.780089][ T80] net_ratelimit: 58 callbacks suppressed [ 596.780109][ T80] bond1: (slave lo): failed to get link speed/duplex [ 596.783400][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 596.812424][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 596.812486][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 596.812553][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.812586][ T31] Call Trace: [ 596.812631][ T31] [ 596.812671][ T31] dump_stack_lvl+0x99/0x250 [ 596.812775][ T31] ? __asan_memcpy+0x40/0x70 [ 596.812835][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 596.812905][ T31] ? __pfx__printk+0x10/0x10 [ 596.813020][ T31] vpanic+0x237/0x6d0 [ 596.813085][ T31] ? __pfx_vpanic+0x10/0x10 [ 596.813176][ T31] ? preempt_schedule_common+0x83/0xd0 [ 596.813263][ T31] panic+0xb9/0xc0 [ 596.813326][ T31] ? __pfx_panic+0x10/0x10 [ 596.813403][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 596.813469][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 596.813556][ T31] watchdog+0xfdf/0xfe0 [ 596.813650][ T31] ? watchdog+0x20a/0xfe0 [ 596.813752][ T31] kthread+0x711/0x8a0 [ 596.813834][ T31] ? __pfx_watchdog+0x10/0x10 [ 596.813906][ T31] ? __pfx_kthread+0x10/0x10 [ 596.813980][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 596.814063][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 596.814127][ T31] ? __pfx_kthread+0x10/0x10 [ 597.005768][ T31] ret_from_fork+0x599/0xb30 [ 597.010391][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 597.015567][ T31] ? __switch_to_asm+0x39/0x70 [ 597.020386][ T31] ? __switch_to_asm+0x33/0x70 [ 597.025182][ T31] ? __pfx_kthread+0x10/0x10 [ 597.029804][ T31] ret_from_fork_asm+0x1a/0x30 [ 597.034628][ T31] [ 597.038274][ T31] Kernel Offset: disabled [ 597.042634][ T31] Rebooting in 86400 seconds..