last executing test programs: 3.598422186s ago: executing program 4 (id=2805): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) recvmmsg(r3, &(0x7f0000009c40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000100, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r4 = socket$inet6(0xa, 0x3, 0x88) sendto$inet6(r4, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="cfad9fd54d7bb420400ac49e1b6baa5ea700f3820acc0e2262a049b844fd062b78ccecb698619d6d1ebc", @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf251a0000000c0006000100000001000000"], 0x20}}, 0x8000) 2.605525298s ago: executing program 4 (id=2821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 2.247308711s ago: executing program 4 (id=2825): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000ac0)=0x2, 0x12) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000002a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x1abc, 0xe, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3b4, 0x3, 0x0, 0x1, [{0x3b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "2414c81b3bd78761e29edf3e8c850523da7c8427ff986aa2813ee1ae8102e266715f80ae77ce53cce72cd0dd06dd7aa196f5450745b1decc6117fe38985b455a24418428942d9aa3df44a4ca9b92239b9fcaf15667b58610e2a214df76d9405dff1a75f2b8ea93d66a0ffca2609f8ddae4"}, @NFTA_DATA_VALUE={0xa4, 0x1, "73f8715a7772877d190b9ff50a21925d84b468fc9e41d905aa77424a46d684bfde2c4780fbb276803f9b97284dd7de8e5b70f04a8cfc46b9be81f91a56f71ea0b1a6daeb2493b71eaa31a40950dcd391680c5f8ff623118294e95952473044d1fa68a6eac692b558e10d26f180fa02f06c414fd2e34b7fbbab42905ec300c89eb3051a13017bcb86652d5fcbc292a1f5abd2e6d9f8edb8f9b5fe7087991fc5db"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x6a, 0x1, "667c1c6d465ca2d878315e036960ae80f3e06be2c9cb649c8f259a771519e5c5f6e2faa4f6bab6eecc0307a444c9a51566c6164b4cfb0e8a0e0b4c8de93666b326632f8899f25882feb72414adc6e52a23ded1ee92251833192032bd09542c2200d8862faf2e"}]}, @NFTA_SET_ELEM_DATA={0x150, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3f7a01643d0fa737}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "25ed8b1cc94603f206b59d1704f13fbc1953ef294c66465a5e91d8655cae99e074fab64981be030bfb7ae706c9ebdc48e96ccfe907cea852d9af00dd510082253b6a3cf79ecae38c9f56368424679b89cbe64a077b2e985745cebd85775870eb896f8389fc77086a7a336ee6da70d41b7af8805624769071724a869d1a9ce00d81bf6b3c0aabce5cfd2bc870a10c43e4e82e908af5aa8bc4b6349538c6a282bfa7d06184f4153439a31935fbd62dffa9964ab12c3d76ca3e1a4305e84ea20b852447bb6427c9401712aad95e9c5ed6f7d2b9e110b2ed5e86f6ae1e581a4560bf03b8de785967ac454b1e3fe4"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf61d}, @NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x16a8, 0x3, 0x0, 0x1, [{0x4}, {0x13e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1264, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x38, 0x1, "e869e8ebbf2e386d0773e276f8784f311c103e590d85e8e202572b563f6b635258052570b971f56181e407af93bd2dc81f5215d3"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "5a5c922acbac06f9aaba78db31efe8afbf5d264af5863b7341f5bc5845a88eae5bea96ff0a8b738eb204028f68eb2869e6afb8e0f1d36908265bf2de4ea63e78d6c1725fdb334223efac056107d31026a0695ea0dede8566da102e5aa3df4dcd6cca723172ef9035f58c1e0d42d2341e9fa88c0b7f6e4c6ecc64c90eba0667cdf89b13b8db91d5f4adcdd4eebfc363b2ffa62c2d0e87f7bf92fd01dee76dd7178b64fa59a15e288504ce070423219f"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x75, 0x1, "5fa5566130eaadec89d488067a93fd17dc55949ef66561aeaeed7f3520ea41ae3b69f26e0c3376da2d5d9ee0beb6a6114e1f1233a99d1dcfd924391f89e4d261b4277cdc8d4cc6a5dd11bc86a261cb0cea37899b43a7d9a62b9ff1556ecf806de7c98a9c92d7a478756de9098b9d0bbc62"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x23}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x7e}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x5c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_ADDR={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x38, 0x6, 0x1, 0x0, "896580c856b3923fc6a2c2466adcf50b3e4747d16c73e46a61d29342d3d3f8e1696c44ce4df6e66fda555c349a06760edb84712b"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x260, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1e4, 0x7, 0x0, 0x1, @match={{0xa}, @val={0x1d4, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xbd, 0x3, "b6d0082c245a31f76267a7e8405d5206de595f5da00c34ab5e7353c89fa4a05ad7914ae3e8b24d1af3f606f0558c018536ea0722303a0f2809a096e3459dab3f370bae52b1621f37106e88221578b7af29bf50dbb1cf6f9d6e1bc7b03eb7a89e198edace46ec232922c07c76503e05ed438321aa2f9cb6a0ede1cc33ec6e261a774b6d4f5275cf6b59b349f39d3382254f8d1b2cc5a8673bf9492eadafddc2640302442ad66cb7182e3b7ac984fb0689d012350e6d9ae86243"}, @NFTA_MATCH_NAME={0xb, 0x1, 'length\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0xeb, 0x3, "7d3acd3025752d035755368ac9a110e706f0541e2fb6f51b9e5ad413841426fff25348ff1be0067fb93de232310cfa77a12950e025fd1eaa83add090dc65a94b2d20ac3b728a23a90530d1c02399770c4eaecf067c168bbeac9dbc882e43e743480490a4a25d85b298dca92057d4d31f68fe968b4acbacc1ac68b5990621816cb2aaf2152adc48a590a8679712d10682e15dd98e75d632aa85709191640a20aee14c5e29ef86a1cde20253bd816a826f134147783426996d64a7fc6734fbd2f82f579b6c5ef0b0d3e02da55db58d01af40729c0605cb127e44214e820b09c80130ab61bf8ba9aa"}, @NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}]}}}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc, 0x1, "f103cb642003ddef"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x114, 0x5, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x1e, 0xc, "79997e37676249bf1053cf0bf19c2d7fcb06b85f6931ede2b79b"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x17edff5d}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7dc8bd82}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2d7e161}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x76c5008}]}]}, @NFT_MSG_DELFLOWTABLE={0x1dc, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x188, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe844}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffff1fa}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1e1c}, 0x1, 0x0, 0x0, 0x4018890}, 0x14894) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040090}, 0x20008000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200480, 0x0) write$tun(r8, &(0x7f00000002c0)={@void, @val={0x3, 0x1, 0x5, 0x3, 0x2, 0x81}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @empty, @val={@val={0x88a8, 0x2, 0x1, 0x1}, {0x8100, 0x2, 0x0, 0x2}}, {@can={0xc, {{}, 0x7, 0x2, 0x0, 0x0, "c7d4882162c1d377"}}}}}, 0x30) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="22000e040902001c0012800b00010062726964676500000c000280050024000100000000"], 0x3c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r9, &(0x7f0000000940)={0xa, 0x4e20, 0xc, @empty, 0x36a}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 2.246949504s ago: executing program 3 (id=2826): r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x1, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x20040050) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 2.242957477s ago: executing program 4 (id=2828): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x50, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x1a4, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6800000}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x58, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xff}, @NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x6cf}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xfe5}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1ff}]}}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x2}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0xa0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x50, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x76e}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7e35470e}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_TYPE={0x65}]}}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x20}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x200000a0}, 0x8000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x21, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xe}, {0xe, 0xfff1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x80}}, {0x4, 0x1b}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0xd6, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb000000f9ff00000c000000020000000000eb000000000400000000240000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000007a0000000000009500000000000000396def38f9bc31216d62cab919d088d382d86b5b5c813b5c6ae6b8ead85bf5373e3dcae97e4d5db83800d895d4ad90d2e43f354a7bc5ab90fc90fa1db0e62f887b94c663294a2f36a72eab60b2a84ebab074c8b95ec747ddeb4b95f70e0c7475bc91ce1a5ba6338b67098c49d04e9fcf207c873dce9e0572bc2254b0600340210da6535783fc06669eafefbc59d323d38d0db9eb84bf2d7ba373f433a64c6b4036acc040acba1349e3c2b1fe4fb7377b84d8fe23930398fcaf3489220346f48a0f50e5adb7c8c123290bcc21afe5a1d8"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7f00000000000000000000005ac1d932df0d3e5d0142fcd74f6d43c8f9d9025512685c5007fd79d19ef09419ef4d3eca4dc2f10c80aef058c515eaa77423ebd991b2f6c90f32fb9868d6b4a69aa92dc4ed944966910a9ffff5d904cf25051c76b4ee6c775566fe207661aeaaf97479ed85decdcd39a807f123041a359c8f4dc6", 0x87}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) 2.164643629s ago: executing program 3 (id=2831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60}, 0x50) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={r4, 0x8001}, &(0x7f0000000340)=0x8) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_ifindex, @remote}, 0x10) listen(r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0x6, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x5, 0x9, 0x4080a, r6, 0x34e0, '\x00', r9, r10, 0x2, 0x3, 0x5, 0x6}, 0x50) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r0, 0x0) 1.912691572s ago: executing program 1 (id=2833): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000001100), 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001180)={r0, 0x3, 0xfffffffffffff001, 0xfff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000011c0)={0xffffffffffffffff, 0x81, 0x10}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r5}, 0x38) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xed, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000f14010038bd7004fadbdf25090045006973736d000000000800010000000000080003000100"], 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x20008040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001280)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001380)={0x6, 0xd, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000800000000000000ff7f000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000006000000184a00001500e4af515cd5187f8f6954210000000000000070baa9000000950000000000000008d11f40bc9b67251f9169bfdbec00"/132], &(0x7f0000000080)='GPL\x00', 0xddc66256, 0x1000, &(0x7f0000000100)=""/4096, 0x41000, 0x66, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140)={0x2, 0x5, 0x9, 0xfffffffe}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000012c0)=[0x1, r2, r3, r4, r5, r6, r9], &(0x7f0000001300)=[{0x2, 0x5, 0xb, 0x4}, {0x2, 0x2, 0xf}, {0x0, 0x4, 0x2, 0x6}, {0x4, 0x4, 0xb, 0x4}, {0x2, 0x2, 0x8, 0x4}, {0x0, 0x1, 0xd, 0x3}, {0x4, 0x1, 0xb, 0xc}, {0x5, 0x2, 0xb, 0x6}], 0x10, 0xe5}, 0x94) 1.912049946s ago: executing program 2 (id=2834): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r2, 0x4) (async) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/82, 0x52}], 0x2}, 0x40}], 0x1, 0x102, 0x0) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r2) r5 = accept4$unix(r2, 0x0, 0x0, 0x800) recvfrom$unix(r5, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x94) 1.770616373s ago: executing program 1 (id=2835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.680542207s ago: executing program 2 (id=2836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4}, 0x50) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/181, 0xd1}], 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x700}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r6, 0x4, 0x4, 0x7, 0x9, 0x7f, @dev={0xfe, 0x80, '\x00', 0x22}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x7820, 0x8, 0xf5}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e000701000000000000000001"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xe1, 0x4, 0x2, 0x4c, r2, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0xd}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r8, &(0x7f0000000340)="b0e18c7df7a761206f6eed0bd34e2595bd92e9c95a433d7b57c6cd7d42e9514f79762e5b29d75b957237a1a6d21b539900734dcf202787ebe3b18b659b345f681561aae3e84eba20b8f0f9c1283bde177259ead69038c6a0684328343d81f42d939a2bd6b11072452efcbbbe29dab5dd8464a45af8c88782f6be8881c2dfb5fcf05f16e03b7caffed5d66fd5ac4fd85750ee6d33cfc9906b0c1684365fe4e061900ee2e1af773014c783b151e4c23c26d22f845a0f1f2360a0b23d99552952", &(0x7f0000000400)=""/106}, 0x20) close(r2) 1.651268938s ago: executing program 3 (id=2837): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003dc0)=[{0x0, 0xfff0, &(0x7f0000001d00)=[{&(0x7f0000000500)="3baf07d5757e90cf8176cebcb694417a3f845b178b5064f39380248c35de59c7691dfc38ad339086eaf86500d1a4c9f64a5f946473f3f50687abf3f9625655a94eebeb401507d90ecef43bf941df9931b247c42827cde5d64297ccbeaccd120a75631e4b310912d6d8141a227371bfd0ca6a070024882ac20aec102d8645ec1ca13ed97cb84ba5ac58c1b2b31716b5cb", 0x90}, {&(0x7f00000006c0)="ff971fad9a9f147f3fa04f1e7c7abf0b53afc21bc18fce4b1b246318e8695950be34831cee38c148d79af4bebdfb32d8704ace23e1e5bf79e19912b27c631cb25e55660348d162b8a7c6c04df9c94f8670ab9e188296dd03da5acc78e05ffca1c3c6876cbf3ff830b8f629819cad3ce73cdf51aafb26d2fb8f7f0a7885231d367cfbc744e45c324947f3a19e640dd846d4c9052f3d439914535a7fe8c0932d9e67de270b3f4ed3959b5fd835ee49e9b8815da13514f2b0de76b1e8b4241791789ee2ae11d47b93c31a6090bf42530cc89737773524945152b16c90", 0xdb}, {&(0x7f00000007c0)="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", 0x2a5}], 0x3, 0x0, 0x0, 0x4040}], 0x1, 0x8000) 1.545153782s ago: executing program 1 (id=2838): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000056c0), 0x301000, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, 0x8032, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400000000000900020073797a31000000000c00078008001340000000000507050002000000050001000600000014000300686173683a69702c706f72742c697000"], 0x58}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) epoll_create(0xa51) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf253a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b00"], 0x20}, 0x1, 0x0, 0x0, 0x24000850}, 0x20008040) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x30, r5, 0x100, 0x70bd2b, 0xb, {{}, {@void, @val={0xc, 0x99, {0xffffffe6, 0x53}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff00}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x52d}]}, 0x30}, 0x1, 0x0, 0x0, 0x4411}, 0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="055c71"], 0x3) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9ab1, 0x3}, &(0x7f0000000080)=0x3, 0x0, 0x4, 0xd75, 0x0, 0x8, 0x37, 0x3}}], 0x58}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x478, 0xffffffff, 0x0, 0x3f0, 0x0, 0xffffffff, 0xffffffff, 0x4e0, 0x4e0, 0x4e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff000000, 0xff], [0xff, 0x0, 0xffffffff, 0xffffffff], 'wg1\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x3a, 0x9, 0x1, 0x10}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe, 'system_u:object_r:unconfined_execmem_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4d3a46e177abbed5001ef11bd2f0c66301c685c93d118e7c89799c396822"}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'ipvlan0\x00', 'wg1\x00', {}, {}, 0x3a, 0x7, 0x4, 0x8}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4c040}, 0x10040000) sendmsg$NFT_BATCH(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a34000000030a010400000000000000000a0000000900010073797a31000000000c000240000001000000000108000540fffffffb140000001100010000000000000000000100000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004810) vmsplice(r11, &(0x7f0000005640)=[{&(0x7f00000043c0)="ed2bf4b3d436cdccdb98bd26261fafe582789156ca9dd3d7b8b01fe84ca3d64bb46473770ec358a838364ae384601faac91ea7ed3be9ac50ca737f3acd0af55a76161ffe1ca01590183ccbb7cfeb17d25ce8328a759fa80871793deb88c429da8bdbb8f9a51895af7f98bc5c6f4e7e7d092c76a957d5f422f21b5712079b8594051553b804fe3625945ec7ed", 0x8c}, {&(0x7f0000004480)="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", 0x1000}, {&(0x7f0000005480)="32c93e6778ec2bcfbfac1039f127cb77ed596a38f546004870ae7c68150ce2f53e82ad1cba545a29d57b7e90a4f49c5490f7ca2a31451ebe9107eb8f08114162d7095a04708af7f772d92852e312d2ca8928dae10bd3afe2b23691977bb96b9aea6bd96a823207c5de51d4243ca8fbc991691502b27f8de860b2b88c897faad449271fef35d2655aa7bf00d3bb6dd8f398569afd", 0x94}, {&(0x7f0000005540)="7f5fa71b9f03a392f351390b3214fbae0d1bebd092d9966e5b85e01179aa607dd10a82eec49d89ef5b6da6ba1354ea8735fdca7b12629571a8e3d0bee5b1644c338d8cd6ff29b984d1fc97ffb76ce11cd30d23fc47657b2249d11f2d4fcdc189f25538420e148c9afe8b072777b39dc14477e5e95d", 0x75}, {&(0x7f00000055c0)="0acb163b66b3ac752763784a2284ff352a2644908f3f0b546a1569e64b361840053cce23e897a04a98a0a1eda8fc4db4a309fc6af265c830e2460024c16b581ac89b10f8e2697f06deba4e76edc63a97ea47d56fcc5494", 0x57}], 0x5, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) splice(r8, 0x0, r9, &(0x7f00000002c0), 0x6, 0x2) 1.408392279s ago: executing program 3 (id=2839): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) listen(r1, 0xd5d) accept4$unix(r1, 0x0, 0x0, 0x80000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) write(r0, &(0x7f0000000300)="1c0000001a005f0214f9f4070d0903001f000000fe05000000020000", 0x1c) 1.384860433s ago: executing program 2 (id=2840): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x2}, {}, {}, {0x1}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r1, &(0x7f00000002c0)=""/69, 0x45, 0x40000042, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @remote}, 0x3, 0x1, 0x1, 0x3}}, 0x80) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffffe}]}, 0x3c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000b000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f00000006c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @exit, @jmp={0x5, 0x0, 0x9, 0x7, 0x9, 0x100, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) 1.339806012s ago: executing program 1 (id=2841): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r2, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 878.327782ms ago: executing program 2 (id=2843): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3103000000000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r9, 0x8000000000000003}, 0x18) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="9dde6b595f37ae3d436fad8ec3465faff6e91d3b1b0e44e5edbb56bcc8129c75504534ae687b61d2fa06543b251716425e46a946dd78d70f058d83e304919eb0133dd199b032320d34d599cd84f2e5bf17c1c96a12c37e9372c1193490a03dd75a991696d57a962fa46cec2b4dc5cefbfe11b19b2a65b5f65b77d2fbf21f59ad82323074f72636a74d0791eaf86e2a3d896182857c6f176793a1d173d4bf56e43e8daf6ad9bbfb803946a5949d6f29b58ff012859fec5896013b3d802a5e784600c223a7b8404aa777699cc5a2861618bddd9a07d6c5160ccc8b2db5beb5689b825237d9ab8b42468c0ef8f5b0e0a252153942573de500affd4843fb0898944e4842d6d844dea1e031bbecb745983b4b4562c5cb8d6fb90a9079cc4a186a736a711d92c257fbfe8660d8473f85ed44c83734a30f608a069d04d9b0a0c4a1b20038e76d95b6264b15419a3680285241058a8419ae61a8c3b9da90937b8f08ce9385cc4bccdd99aa9046181ce671aebd54d47cd0e37bd6d8b210aa39d23fa98ceda61f1d6148e0dbcb855a1de80d2b1e2bb48876eeb1ea1639cd28d4796b5c96c4c8d2471e91ec81f578cac5998f2f5215", @ANYRES16=r12, @ANYBLOB="010000000000000000000474090608000200e0000002080004000000000014000600626f6e6430000000000000000000000014000300ff020000000000000000000000000001"], 0x4c}, 0x1, 0xffffffff00000003}, 0x0) r13 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNGETOBJECT(r13, 0x89e0, &(0x7f0000000000)=0x8) 876.700367ms ago: executing program 0 (id=2845): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r2) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r3, 0x901, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9be75eb3b47ea528}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x45001}, 0x8000) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000007fff"], 0x90}}, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r7, 0x8) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xfffff801}, &(0x7f0000000100)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) (async) r12 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000340)) r13 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r13, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) (async) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb4, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 665.444562ms ago: executing program 4 (id=2846): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010"], 0x10}], 0x1}, 0x24000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008040) r5 = epoll_create(0x7fff) writev(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x44641, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0xfa8, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) 661.867042ms ago: executing program 0 (id=2847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0156b5437fc9fa32840003000000"], 0x14}}, 0x4090) 567.89969ms ago: executing program 0 (id=2848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 452.718486ms ago: executing program 3 (id=2849): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000001c0)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r2, &(0x7f0000000140)='THAWED\x00', 0x7) 415.864898ms ago: executing program 0 (id=2850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffffffffffe31, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) (async) r2 = socket$netlink(0x10, 0x3, 0xc) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x3, &(0x7f0000000140)=@framed, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) 351.851326ms ago: executing program 1 (id=2851): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x0, 0x2) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x10c6, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x1d, 0x4, 0x1, 0x1b, 0x10b8, 0x64, 0x0, 0x5, 0x6, 0x0, @loopback, @local, {[@noop, @timestamp_addr={0x44, 0x4c, 0xaa, 0x1, 0x9, [{@local, 0x2}, {@rand_addr=0x64010102, 0x10001}, {@empty, 0x6}, {@multicast2, 0x1}, {@local, 0x7f}, {@broadcast}, {@remote, 0xf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x8}]}, @timestamp={0x44, 0x10, 0xd, 0x0, 0x8, [0x1, 0xfffffe01, 0xfffffffb]}]}}, {{0x4e21, 0x4e24, r1, r2, 0x0, 0x0, 0x11, 0x10, 0xf, 0x0, 0x2, {[@md5sig={0x13, 0x12, "8dc74f9bad2ef64c25224f96b3200313"}, @nop, @mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0x5, 0x9}, @exp_fastopen={0xfe, 0xd, 0xf989, "b1f62aeef5fe135638"}]}}, {"e3e75552a6346ca597a3aaf4799363a726d3c24b41b86b7cd578bf44ff835dc6d5891a22287414daedc3972d9fffb69855fc89dd9510e8a42f9cfae79139a481409264cc9ebbac51270bbd55724a182a18e2503d6a99c44336e7086c6dd08a27965d815dfe918f54c10e2e690b8d49184760b403bcd5cd06366f82dc45482119fe5369b1cd3b1386d14346fafd362b4346dc1a46d4a4ad9a1aeb3cba2c84e6d7f56c3c2a3c64bf57b5369ffff3687b4adf680e8fcb7407662ed3b0322cb55114fdc9c2ca6d231274c41d6c8300ece30fc014256470a2cb52cbaf5040ade1c0493790a6c66c297802c9d8a23373ed48fa7a2e65038f56a8b19120106ab70e11f9e09fbbf85e719432ee40d26c996ea86947d69f42a618120145bc3fb16ee15c9c934934d826e5c769309e70bd51b3a17c248e7f6ae09630fc32f87f13f862294ebcd4c0239d2fc5c7e205dd2a7bb400b4eaa59f9dacab0dcd1c46e0190aa08dfec0502e87bedb077e19934b66aa58a1e1f4ed299af4e690cd398fb58f248ff4d516c932801b14c7dacee54f71d175633aa0c8b5309265cf89080d5017ba39d89337149c4d7d583fb23defc2aed91f8a9a6b0badc4738f415cb3e4675cf4428b4338d928af5a6b8128335d022dfd39637f945c1639fb89b65f1c3a70e2ebf0af7130d18ac857ead03004c2ddca9b34d4be08510302356a137c27a64ef474ac42fee3b163e25d4987d26e5507b4227bf3865e628ded529f553fd70ada3178e7b12bffa9bda77b56ef38eaf5f0e7a53dbb42b34f90c93c6f26543180391dec48ffc69e7424338be3aa11e1133950d90e12ac32fac4f395372267b0c3d2275e16f6e49b40f846d21951a571c73b59ad6e47b3d2839c70402a58ddf6d8d74ae9081e766a0e0f510f09c07d90d1bd548eda2749d19fa6c79104b8f776c8cce1ab75f6a3cc059453eb3fb7f695c562c262d363f176885207e6419c769a455b2f7f634620f8ed69ab5602e4026ae14e73e93d5ad2a4ecdde5842871b897b53947761e5361d2fd0de3750e1087a362346e181634f54d4a185f6c0484ea1b417c0a4e820bca2a447b3f67f5c1c8b2c6a5415df0f72266f1402f5665afb6a51f883469748ff04f212dfa116514195d448ddb1e5bf6723f240e2d4947a8bbe73a359dc86586f2d25a15fcf2b471ef2dd3b4ad0a344279f50477b48a33953c31f27df15eeb08f24bedf22264296a11a8832f6c9607803ebb3b829e5ee41b9661b178a93a090adbfc065bc3550793887b679629fe8a844305ea79efe83f05f3760fe5b5b7b829e41e92c343f756cb9bfc54f34795ac2ae1496ca341fff90dd33c75df6d63efd22441a40f10e2eec0b60ae5ac068820443a0d21875d92e6d01e921f707203dd13719cd66cf8f94c02409de7270bbcd958f32a872ea04944981895f37aefa7f1aa6c09e99795b8acb6c1daddf05529d91c77d5d709efcfa85174ad1a239a83e8342ffc8fa09b9ad88de213a74d856ecdf3244d665a2884c7c53153cd2679cbcdcd2744c9ec65171a77ad7dc505d1d19c238f43d55c4b67053199957bc828594d33252a59e7d4fd1206049239a6a06c51716654d9db45c2ba69421b82b5a85347327fe778e2fef44d1c058c51981ee6f54bbe2b8dd097327b5cc409b4858271fd5123b7291e04d39350e706b05fbfc4c9645bdfe285587b1abe7b5fcf7b515e8c90c52141b3755a519e7e9a77cf8cdcaba2a4a7de144f3b3accb78ee230950fa797af491d739666526460ef4f74ff4d2b27e511429efefdb24479096ac8d281b37d25f8bedb19e0003a2dddf7b6ddc30be220f45bf17ed755235007360d6fb970f914653e8360f1b3abbb56fb8d0cd7debad81bd97525c40c9025984defc3a3c12fc5215b49d037944f6894883b3e9000c31a715c2959699b0592eefacf5453dd664ed4bf15c34029cee3603bbd251950709a176b883e39adc8ab241a6d1014fc42c18882d4ecabd6d3c686a95dd3044aba71a4f5a52c459d080440c1ee61836de71e18418ac24ca36b8997bd6190b7b47746282fdea83769d082d983a1beaaccbcb049d205e981e52b67ff8f3c1159deca4b01a3e0115975e8ff2f13210996e7879faa03a16a57cec3481e240b2e2094eb9c9ac20d5bd56c45db6fd5052bb7760f4677d4869655c84e40cdfcb25e7eab94c7929bffdb13edd477a3bc651acc952f24c5046cd36d970b2d36b33d968ffdaa0736ec9b1547c1d13ddbc66e90eaeb5057af88d26e72c74d2e0dbf58ab9dfcb4594d50fb9214cface45c0e78e3303a6ccd0409f2e1051f5de070df50f82d70553c25ddaee46c929e7bfe83d5410d4d806d2ab8072316c790dc53719fdbde07209027e3aa58b470072794ac2229a1d171fe3b915abd47bd4a86c94593c0fda7fd2bf3758cf1c87d3c00055fe6bbdeeadaa2a00f04dbbb3d6d62bb80240e101c33118a2417c7a3ea2747e9b4378f598c5eb2c4e4a2d55f767a7450c73208ffe2a5b22c7b9ad4e6b393cdfca4a77d2c71b7a2c6b8c6e0ef26534c8ccf94caf51cd2ef29fd2c01b01344ad10484e10eb0f71b6094510592cb16b6fef724942c56f39d703da53a70e394e9a0f66494c3e27adf424a9830268ac22c18d4fc6bbbb11d061994d86cf21b6405699d591d95f1b22ad172969db934efd8adc13eb3bee125a6029f588c937296f65167e4e09682785ba7aa93ea098174ef4768b8fad20c8259b469fdecb2fa7ec28294235439d0dcd42eb71b3e1ec03d99cb0d0ebb32965ebe35b64eac3594c4f3880989ae79e64f5d1ea0939cd1a96619d3cc385ff0c4e84f20d294d3e8883e9917c2991380a53debb935e11c39e77b1aef147883bda14fd02a86a11e772677abb353f28b575e700bef3b63de777513d2b8a5e345e32a3b8dfd2a461fe4abfa82cd02e8e3f96b1cd1bc12ee6aee7dc7b433c4c5aa7efb65a725ae9576acf14b19b83107cdf294c0ee4daa444ab76d2816cbe1b9569e029c347b63105596ead879297937b7d32cb58483520e4db986ff70d534b341084f4e3b54917047cc867c6a147422db8d01e37206596c9f6604256a6195315de07132ebba716be86626a5429bbe51c7998701fd424190e50927dd6f9e782eed24052661b92e604c7b199e836aa28b31bed9532efec4d46f0e3b72cc017d091c857f3a11baf98eda55fb8125f201104924c8cbbaeaa144c640518603d031c056f402be3069f3eb7c534a69f455a14712a0c4b123993022758a4bcee4401c9ff265d7212f43380a70564b452438b701a12480d4559efd6801c3cb72264adf43c9e5bc9c25740d9f68a990f2464f774dcb4334d691e57fcbfb6e149880163b5187cc1cefe3a5f75782b5f0a9f7e106599c1db97cc8a007d12f47fc2fa13622c5d709a04bb8145622295efdd1d0756a15c201ff5aaecfb5971302e34d7b5139084f22709f63afab83ed830aedc660d629f5305b40752642a192732842ce27981a0d88b69d1b922abe92f06d3d36fcf795c4eee63ff7e44fcc29716ae24c4499663a12e48f65be575167e19531c433f66d9faefddae1cc5ed3986bcadad89ebafbe255b7228024d88df7c0cf2418a803860a27c0d6dce775320a4c90d424f1545c79a8ff72f6e9e7dc681a5f4f56edc9bb09d8b5343fcfd6c4dc29cc6518e06106f2661ccff53823c1408a026499e8d3e2c47f2398555b6519c95024abd15ac80afb7c8314f118968e4311e5c05be418c6b8e63c18cf2f19c5cf07c9c352add45c4cc6494779e2e617b5cb328efca41f06bf42267207cb02c1009726a205a54b1494bd67a6804d652c44044dfd05ac6906fad3f35eed0df3f64b4aab21b9b82a2cc807dc9fbbe84698488d5ba17c375f4fed3a4e3b207d90786829ffee026bb048ae142d118489548798bffdd4f6b06774f34c065685bf1ae6b76c070f935965544e00d1d98553284739bf011d7686e072957957a474c1c5cd872f9e2ec290c6f0aa0f4e22900b57b1ad13db143ed77c861b430c1e71bbbe56daa38d2b50d3e6e6308912c6ef395ea12ac7bae2572a00ba3bcb31d7ba967cea11a2101644cbb92ad6c72d63f25946d17d03ba18f17291daabc03db6be214b0c088ee0ca0068740b2c80175b5c07298a2c1a5cfe0c09af8580cd9aaed6675ae7eb814d58c9cbe7e8fc6bde4bf6156a6b7a91896cf18ce31657d984099bf019509a68acde1330fde0c317b3d704d46586ac3be4a302b011c63a8184953fb3b965d034acfce79f0d36599d85f64f769fc9c765fbc0637c81724a9d7ecbd13a20779a8c0d69263fb8a6a763eb6a063142f869b249dd6069836a94a941570fc804caba6201cf350e90ee0b4c1673469f7058bdf45cc52bca269bdf903f3616dfd7813318061758d84da6a90fd261dcc90d16387fd5415f473186852e53f4833e0ce71cf5a283711225e30fe2edb20c932474aad0d638be4841b342a7ae0a4b678b411e0de7ef0a45df0b739b332490960db31667de47a7da138dd3e1b4572b32cbf5b3e87f75de7d10a1eb9d9d9fd6fa389b71fdf5d7419dbebc581ff433a75b3f33cb9f4d6ac7b987ee82dafe8512227e5c727028f8b22bf7a6d70f2083061eaa348e760f4740e71c5e8c83c90e8825db7f3112c3a9910695bc78701f8dc142479050ee17f175ae81162fb243ff193666747be87903159f46b37a9ac2c877fa278e4314d403959a965b7261390d3f46604d4806037e06944e8e18497736e0e717e872ade26f30dc02d4affca1c3cf7b67704120ecfcd7c05d30f2bf566820f7bfc4824f7f78aac4ab8f876707e957bb7546a61e03190a5194bb6c67975283c250bba4490f98c98548fbc280da3e15a3293854e91226c686dbfa5e8fb9b4d04efce85693832f1b9eb05416e6b8a38079e3f6cd7edad69fdf274c6d1d75582653e45a4d92043aa2fac885738573f68cee2cac4785b83edd599423aeb081acb65d3e86eb634a295136272436ee5a8c8a2fa8d64eeb740b40e07c9d2c2732af65d31db7007e7b8d7578ef822846cc05a33bbdb231ea5b098e68c4d8efb3bbdfff3296f0dd28b69c34037019cb3e71d79ced70d3ca37b7e6b3b750c0ecf6f678b0f8bc4081f4f2eb0d03ca981b9e4fc6bd70a0df5e6e7e45ebb25e5d621ec8730defe2f1fc4e8a133c9076f4a4de196c9973f01976dc2cdfe23e3f3038d8be07b16c862fa8a7ed48179b4f900782daddf2042b1ea0011e3b62f011189bf1c6e11ded345c405b007b0f043d74fa20f1868ded6525583be4d2765d1535727aeb4be18d60f0ec6ff24be8b5c2372f5adf71eb4ac89f2b23cac282f4be0b2d219fcf5e183f4aba2f64c284bc6507cee1d51242b41054eeb9aae1f374b40b05fb3575bf56156cbece5142785192583ab9b70999ae7e8fa4f645cd2b242547a22c8a6360d26f79517f4512c3164757b3de38de027d8f0970f61178b82bba5718fbc177e647120f49c97ef8ddd015dd54b5f58e9e9c77ed5345ae83e1a2b033182b2c0108f510f1cd666fe3f46cc87e1fb61de1b964646eea6541afa27353e19f67969156c102332e4adfb26a7889a19171d5fd5e11a9ce35ac15e3ec661957e97eb9bbb519fcadbc82604f1775c4c1153dc5965c755d757d3d57e84b5c3520245089128e3da1f764c7b48fa711ecac9c8a54330766d4070eef890c9d7d713e9eb6bd63344bf67cd83acc9447cbf0709bf75fa57277409433cc562b4950a6b3977896b5613f9c66e871e8c680a3c8daf1ce9ec5ff934ce2db8994f121af9dff75a001ed5d8"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="038000000000000005001100fa00000008000500", @ANYRES32=r3, @ANYBLOB="aabded3140cc124e88000000", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40) 280.711344ms ago: executing program 0 (id=2852): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000200)={{r0}, 0x9, &(0x7f0000000180)=[0x3, 0x8000000000000000, 0x140, 0x10, 0x4, 0x1, 0x8000, 0x80000000, 0x3], 0x3, 0x1, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0x8) r2 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0xb, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x60, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 235.226554ms ago: executing program 4 (id=2853): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000008c0)={'hsr0\x00', {0x2, 0x4e20, @empty}}) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000080)=""/226, &(0x7f0000000000)=0xe2) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000900)={'pimreg\x00', {0x2, 0x4e24, @broadcast}}) recvmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000680)=""/250, 0xfa}], 0x5, &(0x7f0000000780)=""/54, 0x36}, 0x8}], 0x1, 0x20, &(0x7f0000000800)={0x77359400}) 208.362135ms ago: executing program 2 (id=2854): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x0, 0xcb, 0x1, 0x6, [{@rand_addr=0x64010101, 0x3ff}, {@empty, 0xfffffff7}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}, {@local, 0xfff}, {@multicast1, 0xff}]}, @timestamp_addr={0x44, 0x0, 0x4c, 0x1, 0x6, [{@loopback, 0x7}, {@multicast1, 0x7fffffff}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x5}, {@broadcast}, {@remote, 0x7}, {@broadcast, 0x7f}]}, @ssrr={0x89, 0x0, 0xaf, [@broadcast, @loopback, @multicast1, @private=0xa010102, @loopback]}, @ra]}}}, @ip_ttl={{0x0, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x0, 0x0, 0x1, 0xf93e}}, @ip_ttl={{0x0, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x1}}, @ip_tos_int, @ip_tos_u8={{0x0, 0x0, 0x1, 0x9b}}], 0x7}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) 156.415777ms ago: executing program 3 (id=2855): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0xfff, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffc, 0x200000000000, 0x101}, 0x0, 0x0, 0x1, 0x0, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000)=0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000140)={'erspan0\x00', r6, 0x80, 0x80, 0x4, 0xc, {{0x7, 0x4, 0x3, 0x39, 0x1c, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast1, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x7b, [@rand_addr=0x64010101]}]}}}}}) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x7, 0xe9, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) 155.807792ms ago: executing program 1 (id=2856): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900050073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 73.000324ms ago: executing program 2 (id=2857): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0x8}, 0xc0000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 0s ago: executing program 0 (id=2858): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffce6, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000034000dc"}}}]}, 0x48}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x2, &(0x7f0000000340)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x3}], &(0x7f0000000380)='GPL\x00', 0x8, 0x40, &(0x7f00000003c0)=""/64, 0x41100, 0x7a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0x80000001, 0xfffffffb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000480)=[r7, r9, r7, r7, r8, r7, r8], &(0x7f00000004c0)=[{0x4, 0x1, 0xc, 0x1}, {0x0, 0x1, 0x3e, 0x3}, {0x2, 0x1, 0x3, 0xa}, {0x0, 0x2, 0xb, 0x4}, {0x2, 0x4, 0x8, 0xa}, {0x0, 0x1, 0xf, 0xb}, {0x3, 0x1, 0x10, 0x5}], 0x10, 0x3}, 0x94) shutdown(r1, 0x1) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000dc0)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000500000008000b4000000000300004802c0001800900010078000000000800024000000003080001400000a0f46dd0010073797a3000000000140000001100010000000000000000000000000a000000000000000000000000000000dea8eeb9ecd7bd6382750f63e4c302b1882aecb7515d71780b57f1105e5ecd916837d96d34239d6c8e6e6dcfc7b2c57df4d0c0098dd0a544af2e33ccdd55d315ef5e5876df9407bb03f343a433697d8623a287f6fb668e5b537ec356b56f20c800f6fb56cad918dcdda10947c1e3c16df1d2757bea69facf2c0122170226261afe0ed453f449300f2b66a285da845d98243324f3f5a949c885527d5f542692c080b36bd4ea6dababec8557b71cff2b478e2a31"], 0xcc}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0af900000000000000000001000400090001"], 0xd8}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000003f80)=ANY=[@ANYRESDEC=r7, @ANYRES16, @ANYRESOCT=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) kernel console output (not intermixed with test programs): y_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.728102][ T8178] RIP: 0033:0x7f5121f8d8dc [ 146.728117][ T8178] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 146.728130][ T8178] RSP: 002b:00007f5122de2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.728149][ T8178] RAX: ffffffffffffffda RBX: 00007f51221e5fa0 RCX: 00007f5121f8d8dc [ 146.728160][ T8178] RDX: 000000000000000f RSI: 00007f5122de20a0 RDI: 0000000000000004 [ 146.728170][ T8178] RBP: 00007f5122de2090 R08: 0000000000000000 R09: 0000000000000000 [ 146.728179][ T8178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.728188][ T8178] R13: 00007f51221e6038 R14: 00007f51221e5fa0 R15: 00007ffe715dc718 [ 146.728216][ T8178] [ 147.482733][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.590'. [ 147.560674][ T8202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.629772][ T8216] netlink: 32 bytes leftover after parsing attributes in process `syz.0.593'. [ 147.742670][ T8221] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20001 [ 147.874454][ T8223] netlink: 260 bytes leftover after parsing attributes in process `syz.2.596'. [ 147.913804][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'. [ 147.971799][ T8228] !: renamed from dummy0 (while UP) [ 148.134552][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 148.183501][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 148.191588][ C1] lec:lec_tx_timeout: lec0 [ 148.196920][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 148.354374][ T8254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.604'. [ 148.713975][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 148.989514][ T8284] can: request_module (can-proto-4) failed. [ 149.014394][ T8286] can: request_module (can-proto-4) failed. [ 149.035214][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 149.095330][ T8294] bridge0: port 4(batadv0) entered disabled state [ 149.141901][ T8301] netlink: 'syz.2.616': attribute type 1 has an invalid length. [ 149.148321][ T8294] dummy0: left allmulticast mode [ 149.165882][ T8301] netlink: 'syz.2.616': attribute type 2 has an invalid length. [ 149.173794][ T8294] bridge0: port 3(dummy0) entered disabled state [ 149.199242][ T8294] bridge_slave_1: left allmulticast mode [ 149.210071][ T8294] bridge_slave_1: left promiscuous mode [ 149.211578][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 149.231771][ T8294] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.250606][ T8306] xt_l2tp: invalid flags combination: 8 [ 149.263319][ T8306] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 149.289771][ T8294] bridge_slave_0: left allmulticast mode [ 149.308435][ T8294] bridge_slave_0: left promiscuous mode [ 149.310061][ T8306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.326969][ T8294] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.452716][ T8307] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 149.715135][ T8326] macvtap1: entered allmulticast mode [ 149.720779][ T8326] veth0_macvtap: entered allmulticast mode [ 149.787859][ T55] block nbd1: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 30 seconds [ 149.800737][ T55] block nbd1: Possible stuck request ffff8880251e01c0: control (read@1024,1024B). Runtime 30 seconds [ 149.813080][ T55] block nbd1: Possible stuck request ffff8880251e0380: control (read@2048,1024B). Runtime 30 seconds [ 149.825579][ T55] block nbd1: Possible stuck request ffff8880251e0540: control (read@3072,1024B). Runtime 30 seconds [ 150.300249][ T8359] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 151.541140][ T8424] syzkaller0: entered promiscuous mode [ 151.547607][ T8424] syzkaller0: entered allmulticast mode [ 152.021028][ T8453] ip6t_REJECT: ECHOREPLY is not supported [ 152.090623][ T8457] __nla_validate_parse: 4 callbacks suppressed [ 152.090644][ T8457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 152.106984][ T8458] netlink: 'syz.3.655': attribute type 5 has an invalid length. [ 152.138630][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 152.172232][ T8460] netlink: 44 bytes leftover after parsing attributes in process `syz.3.655'. [ 152.185778][ T8461] netlink: 44 bytes leftover after parsing attributes in process `syz.3.655'. [ 152.304666][ T8463] syzkaller0: entered promiscuous mode [ 152.310313][ T8463] syzkaller0: entered allmulticast mode [ 152.540418][ T5826] Bluetooth: hci4: link tx timeout [ 152.546678][ T5826] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.983197][ T8511] tipc: Enabled bearer , priority 0 [ 153.048668][ T8509] syzkaller0: entered promiscuous mode [ 153.094508][ T8509] syzkaller0: entered allmulticast mode [ 153.130401][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 153.175548][ T8519] macvlan0: entered promiscuous mode [ 153.183045][ T8519] batadv0: entered promiscuous mode [ 153.190495][ T8519] hsr1: entered allmulticast mode [ 153.199016][ T8519] macvlan0: entered allmulticast mode [ 153.203665][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 153.210695][ T8519] veth1_vlan: entered allmulticast mode [ 153.212548][ C1] lec:lec_tx_timeout: lec0 [ 153.223947][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 153.234930][ T8519] batadv0: entered allmulticast mode [ 153.263855][ T8519] macvlan0: left promiscuous mode [ 153.278958][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'. [ 153.290214][ T8519] batadv0: left promiscuous mode [ 153.323197][ T8511] tipc: Resetting bearer [ 153.346210][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'. [ 153.365052][ T8511] tipc: Disabling bearer [ 153.410386][ T8529] xfrm1: entered promiscuous mode [ 153.438363][ T8529] xfrm1: entered allmulticast mode [ 153.465085][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 153.769944][ T8558] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.683'. [ 153.832871][ T8562] netlink: 'syz.1.685': attribute type 10 has an invalid length. [ 154.131327][ T8584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.693'. [ 154.387740][ T8598] bridge_slave_0: left allmulticast mode [ 154.400839][ T8598] bridge_slave_0: left promiscuous mode [ 154.409325][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.431763][ T8598] bond0: (slave bridge_slave_1): Releasing backup interface [ 154.447276][ T8598] bond0: (slave bond_slave_0): Releasing backup interface [ 154.458508][ T8598] bond0: (slave bond_slave_1): Releasing backup interface [ 154.472031][ T8598] team0: Port device team_slave_0 removed [ 154.486471][ T8598] team0: Port device team_slave_1 removed [ 154.492893][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.501114][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.511069][ T8598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.518688][ T8598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.528189][ T8598] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.583861][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 154.654890][ T8609] tipc: Started in network mode [ 154.659921][ T8609] tipc: Node identity 32415fad5406, cluster identity 4711 [ 154.667882][ T8609] tipc: Enabled bearer , priority 0 [ 154.697939][ T8609] tipc: Resetting bearer [ 154.745054][ T8608] tipc: Disabling bearer [ 154.890955][ T8622] netlink: 'syz.1.708': attribute type 3 has an invalid length. [ 156.130300][ T8695] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 156.534163][ T8723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.559800][ T8729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.689183][ T8739] sctp: [Deprecated]: syz.3.746 (pid 8739) Use of int in max_burst socket option. [ 156.689183][ T8739] Use struct sctp_assoc_value instead [ 156.751761][ T8739] bridge2: entered promiscuous mode [ 156.761527][ T8739] bridge2: entered allmulticast mode [ 156.787379][ T8748] veth0: entered promiscuous mode [ 156.861591][ T8746] veth0: left promiscuous mode [ 157.474517][ T5826] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 157.730359][ T8776] infiniband syz1: set down [ 157.737066][ T8776] infiniband syz1: added bond0 [ 157.748057][ T8776] syz1: rxe_create_cq: returned err = -12 [ 157.764312][ T8776] infiniband syz1: Couldn't create ib_mad CQ [ 157.781719][ T8776] infiniband syz1: Couldn't open port 1 [ 157.847773][ T8776] RDS/IB: syz1: added [ 157.852614][ T8776] smc: adding ib device syz1 with port count 1 [ 157.859801][ T8776] smc: ib device syz1 port 1 has no pnetid [ 158.233944][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 158.242173][ C1] lec:lec_tx_timeout: lec0 [ 158.247153][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 159.055701][ T8852] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 159.166679][ T8852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.793828][ T8886] netlink: 'syz.3.787': attribute type 32 has an invalid length. [ 159.807280][ T8888] Bluetooth: hci1: too big key_count value 32778 [ 159.824008][ T8886] __nla_validate_parse: 11 callbacks suppressed [ 159.824027][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 159.907470][ T8886] bond1: option coupled_control: invalid value (52) [ 159.917677][ T8886] bond1 (unregistering): Released all slaves [ 160.187492][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'. [ 160.458309][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'. [ 160.482721][ T1149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.509062][ T1149] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.523319][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.796'. [ 160.536735][ T1149] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.548388][ T1149] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.678152][ T8922] netlink: 'syz.1.801': attribute type 4 has an invalid length. [ 161.982278][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 162.197614][ T8993] netlink: 'syz.3.817': attribute type 6 has an invalid length. [ 162.263661][ T8993] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.817'. [ 162.591805][ T9011] netlink: 40 bytes leftover after parsing attributes in process `syz.3.820'. [ 162.753675][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.822'. [ 162.936500][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.824'. [ 162.965205][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.824'. [ 163.253473][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 163.261567][ C1] lec:lec_tx_timeout: lec0 [ 163.266277][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 163.367460][ T9047] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 163.572359][ T9059] netlink: 'syz.2.835': attribute type 21 has an invalid length. [ 163.600013][ T9059] netlink: 'syz.2.835': attribute type 5 has an invalid length. [ 164.618065][ T9108] x_tables: duplicate underflow at hook 1 [ 164.638071][ T9111] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 164.649304][ T9104] x_tables: duplicate underflow at hook 1 [ 164.678673][ T9111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.717512][ T9112] sctp: [Deprecated]: syz.4.849 (pid 9112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.717512][ T9112] Use struct sctp_sack_info instead [ 165.049652][ T3509] tipc: Subscription rejected, illegal request [ 165.120516][ T9131] __nla_validate_parse: 10 callbacks suppressed [ 165.120540][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.854'. [ 165.415854][ T9153] tipc: Enabled bearer , priority 10 [ 165.550069][ T9158] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 165.568591][ T9160] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 165.758984][ T9162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.865'. [ 165.798686][ T9173] tipc: Enabled bearer , priority 0 [ 165.902342][ T9173] syzkaller0: entered promiscuous mode [ 165.908415][ T9173] syzkaller0: entered allmulticast mode [ 165.915581][ T9173] tipc: Resetting bearer [ 165.930689][ T9171] tipc: Resetting bearer [ 165.992817][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 166.029625][ T9180] netlink: 72 bytes leftover after parsing attributes in process `syz.1.870'. [ 166.913571][ T24] tipc: Node number set to 376139985 [ 167.262373][ T9171] tipc: Disabling bearer [ 167.742412][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.878'. [ 167.842610][ T9201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.273468][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 168.281665][ C1] lec:lec_tx_timeout: lec0 [ 168.287368][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 168.408188][ T7139] IPVS: starting estimator thread 0... [ 168.437281][ T9230] netlink: 52 bytes leftover after parsing attributes in process `syz.4.886'. [ 168.515869][ T9232] pimreg: entered allmulticast mode [ 168.536296][ T9228] IPVS: using max 24 ests per chain, 57600 per kthread [ 168.544119][ T9232] netlink: 'syz.0.887': attribute type 1 has an invalid length. [ 168.685009][ T9241] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 168.696537][ T9241] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 168.836875][ T9252] Cannot find map_set index 33 as target [ 169.214395][ T9275] dvmrp0: entered allmulticast mode [ 169.267084][ T9275] dvmrp0: left allmulticast mode [ 169.283126][ T9275] pimreg: left allmulticast mode [ 169.481021][ T9295] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.903'. [ 169.690877][ T9311] netlink: 'syz.2.907': attribute type 10 has an invalid length. [ 169.721522][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 169.735378][ T9311] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 170.042712][ T9330] netlink: 512 bytes leftover after parsing attributes in process `syz.3.915'. [ 170.120675][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 170.135572][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'. [ 170.156478][ T9334] tipc: Started in network mode [ 170.161546][ T9334] tipc: Node identity , cluster identity 4711 [ 170.167901][ T9335] netlink: 'syz.2.917': attribute type 9 has an invalid length. [ 170.176984][ T9334] tipc: Failed to set node id, please configure manually [ 170.189023][ T9334] tipc: Enabling of bearer rejected, failed to enable media [ 170.237082][ T9341] geneve2: entered promiscuous mode [ 170.632020][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'. [ 170.658104][ T9364] tipc: Enabled bearer , priority 0 [ 170.665864][ T9364] syzkaller0: entered promiscuous mode [ 170.674291][ T9364] syzkaller0: entered allmulticast mode [ 170.685872][ T9364] tipc: Resetting bearer [ 170.713296][ T9360] tipc: Resetting bearer [ 170.755602][ T9360] tipc: Disabling bearer [ 170.902928][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 170.936286][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.929'. [ 171.278555][ T9403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.937'. [ 171.976460][ T9432] tipc: Enabling of bearer rejected, failed to enable media [ 172.198831][ T9448] netlink: 'syz.1.949': attribute type 1 has an invalid length. [ 172.241334][ T9448] netlink: 'syz.1.949': attribute type 3 has an invalid length. [ 172.258258][ T9448] netlink: 224 bytes leftover after parsing attributes in process `syz.1.949'. [ 172.293633][ T9458] netlink: 104 bytes leftover after parsing attributes in process `syz.0.950'. [ 172.325929][ T9447] delete_channel: no stack [ 172.394870][ T9461] tipc: Enabled bearer , priority 0 [ 172.428782][ T9461] syzkaller0: entered promiscuous mode [ 172.450868][ T9461] syzkaller0: entered allmulticast mode [ 172.524245][ T9460] tipc: Resetting bearer [ 172.588996][ T9460] tipc: Disabling bearer [ 172.637504][ T9472] netlink: 'syz.0.955': attribute type 29 has an invalid length. [ 172.654290][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 172.835823][ T9484] netlink: 332 bytes leftover after parsing attributes in process `syz.3.958'. [ 172.889612][ T9487] netlink: 312 bytes leftover after parsing attributes in process `syz.2.960'. [ 173.257759][ T9504] bond5: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 173.303675][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 173.311729][ C1] lec:lec_tx_timeout: lec0 [ 173.316480][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 173.775895][ T9548] netlink: zone id is out of range [ 173.781419][ T9548] netlink: zone id is out of range [ 173.834860][ T9548] netlink: zone id is out of range [ 173.947645][ T9554] netlink: 'syz.4.981': attribute type 1 has an invalid length. [ 173.955264][ T9548] netlink: set zone limit has 4 unknown bytes [ 174.037229][ T9562] netlink: 'syz.3.984': attribute type 1 has an invalid length. [ 174.061341][ T9554] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.078128][ T9559] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 174.126301][ T9560] veth1: entered promiscuous mode [ 174.142665][ T9560] bond4: (slave veth1): Enslaving as an active interface with an up link [ 174.153228][ T9562] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 174.155224][ T9563] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 174.317770][ T9578] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 174.337626][ T9578] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 174.981021][ T9593] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 175.024020][ T9593] netlink: 'syz.0.993': attribute type 4 has an invalid length. [ 175.331347][ T9613] __nla_validate_parse: 8 callbacks suppressed [ 175.331366][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1003'. [ 175.571804][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'. [ 175.646420][ T9633] netlink: 'syz.4.1007': attribute type 10 has an invalid length. [ 175.665185][ T9633] bond0: (slave wlan1): Opening slave failed [ 175.813678][ T9646] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1011'. [ 175.917537][ T9658] nftables ruleset with unbound chain [ 175.996450][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 176.007310][ T9661] netlink: 'syz.1.1014': attribute type 21 has an invalid length. [ 176.015566][ T9661] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1014'. [ 176.092260][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 176.570149][ T9695] xt_CT: No such helper "syz1" [ 177.060597][ T9735] vxcan1 speed is unknown, defaulting to 1000 [ 177.069655][ T9735] vxcan1 speed is unknown, defaulting to 1000 [ 177.098330][ T9735] vxcan1 speed is unknown, defaulting to 1000 [ 177.124748][ T9741] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 177.137335][ T9739] netlink: 'syz.4.1032': attribute type 29 has an invalid length. [ 177.155045][ T9739] netlink: 'syz.4.1032': attribute type 29 has an invalid length. [ 177.240779][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 177.251380][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 177.421241][ T9735] infiniband syz2: set down [ 177.426036][ T9735] infiniband syz2: added vxcan1 [ 177.438263][ T9687] vxcan1 speed is unknown, defaulting to 1000 [ 177.493355][ T9735] RDS/IB: syz2: added [ 177.497844][ T9735] smc: adding ib device syz2 with port count 1 [ 177.504336][ T9735] smc: ib device syz2 port 1 has no pnetid [ 177.510605][ T7135] vxcan1 speed is unknown, defaulting to 1000 [ 177.520058][ T9735] vxcan1 speed is unknown, defaulting to 1000 [ 177.810115][ T9735] vxcan1 speed is unknown, defaulting to 1000 [ 178.024967][ T9757] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1037'. [ 178.083014][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 178.293941][ T9770] tipc: Started in network mode [ 178.298865][ T9770] tipc: Node identity 9e38b6528984, cluster identity 4711 [ 178.312757][ T9770] tipc: Enabled bearer , priority 0 [ 178.323669][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 178.331797][ C1] lec:lec_tx_timeout: lec0 [ 178.337658][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 178.357294][ T9771] syzkaller0: entered promiscuous mode [ 178.377548][ T9771] syzkaller0: entered allmulticast mode [ 178.467983][ T9772] tipc: Resetting bearer [ 178.552578][ T9785] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004 [ 178.563093][ T9772] tipc: Disabling bearer [ 178.577383][ T9735] vxcan1 speed is unknown, defaulting to 1000 [ 179.004169][ T9810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.011865][ T9810] IPv6: NLM_F_CREATE should be set when creating new route [ 179.019206][ T9810] IPv6: NLM_F_CREATE should be set when creating new route [ 179.029778][ T9813] validate_nla: 4 callbacks suppressed [ 179.029797][ T9813] netlink: 'syz.1.1060': attribute type 1 has an invalid length. [ 179.043936][ T9810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.053340][ T9811] pim6reg: entered allmulticast mode [ 179.063690][ T9811] pim6reg: left allmulticast mode [ 179.240711][ T9819] C: renamed from lo (while UP) [ 179.310523][ T9735] vxcan1 speed is unknown, defaulting to 1000 [ 179.691758][ T9846] netlink: 'syz.1.1067': attribute type 2 has an invalid length. [ 179.787300][ T9846] syz.1.1067 (9846) used greatest stack depth: 16088 bytes left [ 179.879294][ T55] block nbd1: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 60 seconds [ 179.890792][ T55] block nbd1: Possible stuck request ffff8880251e01c0: control (read@1024,1024B). Runtime 60 seconds [ 179.902635][ T55] block nbd1: Possible stuck request ffff8880251e0380: control (read@2048,1024B). Runtime 60 seconds [ 179.914532][ T55] block nbd1: Possible stuck request ffff8880251e0540: control (read@3072,1024B). Runtime 60 seconds [ 179.951327][ T9735] vxcan1 speed is unknown, defaulting to 1000 [ 180.135531][ T9867] openvswitch: netlink: Missing key (keys=440, expected=100) [ 180.270437][ T9876] netlink: 'syz.0.1075': attribute type 4 has an invalid length. [ 180.297931][ T9878] netlink: 'syz.3.1076': attribute type 29 has an invalid length. [ 180.316905][ T9878] netlink: 'syz.3.1076': attribute type 29 has an invalid length. [ 180.440258][ T9883] syzkaller1: entered promiscuous mode [ 180.454005][ T9883] syzkaller1: entered allmulticast mode [ 180.582650][ T9889] __nla_validate_parse: 8 callbacks suppressed [ 180.582670][ T9889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1080'. [ 180.969958][ T9911] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 181.100279][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'. [ 181.356723][ T9938] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 181.589017][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1098'. [ 181.631347][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1098'. [ 181.640959][ T9955] netlink: 'syz.0.1100': attribute type 58 has an invalid length. [ 181.659603][ T9955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1100'. [ 182.560220][T10011] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 182.745244][T10023] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 182.760574][T10023] tipc: Enabled bearer , priority 10 [ 183.016464][ T9993] vxcan1 speed is unknown, defaulting to 1000 [ 183.103252][T10045] tipc: Enabled bearer , priority 0 [ 183.124784][T10045] syzkaller0: entered promiscuous mode [ 183.138803][T10045] syzkaller0: entered allmulticast mode [ 183.200058][T10045] tipc: Resetting bearer [ 183.219135][T10044] tipc: Resetting bearer [ 183.270423][T10044] tipc: Disabling bearer [ 183.353535][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 183.361743][ C1] lec:lec_tx_timeout: lec0 [ 183.366873][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 183.474868][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'. [ 183.754920][T10072] block nbd2: server does not support multiple connections per device. [ 183.771769][T10074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1132'. [ 183.781544][T10072] block nbd2: shutting down sockets [ 183.867949][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 184.299275][T10093] netlink: 'syz.0.1139': attribute type 10 has an invalid length. [ 184.372544][T10093] batman_adv: batadv0: Adding interface: team0 [ 184.383627][T10093] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.434541][T10093] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 184.532844][T10100] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1142'. [ 184.631725][T10106] sch_fq: defrate 0 ignored. [ 184.657350][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 184.682230][T10106] sch_fq: defrate 0 ignored. [ 185.061993][T10132] xt_l2tp: invalid flags combination: 8 [ 185.146578][T10138] batadv0: entered allmulticast mode [ 185.173728][T10138] netlink: 'syz.0.1155': attribute type 1 has an invalid length. [ 185.266698][T10146] netlink: 'syz.1.1159': attribute type 11 has an invalid length. [ 185.331222][T10142] team_slave_0: left promiscuous mode [ 185.353080][T10142] team0: Port device team_slave_0 removed [ 185.387743][T10142] team_slave_1: left promiscuous mode [ 185.408752][T10142] team0: Port device team_slave_1 removed [ 185.430917][T10142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.456552][T10142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.484660][T10142] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.656892][T10166] syzkaller0: entered promiscuous mode [ 185.662421][T10166] syzkaller0: entered allmulticast mode [ 185.716787][T10169] netlink: 'syz.4.1166': attribute type 1 has an invalid length. [ 185.752173][T10175] netlink: 'syz.3.1168': attribute type 11 has an invalid length. [ 185.771931][T10175] __nla_validate_parse: 4 callbacks suppressed [ 185.771949][T10175] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1168'. [ 185.820923][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 185.949080][T10176] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 185.960526][T10176] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 186.028129][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1170'. [ 186.056081][T10187] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1170'. [ 186.092182][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 186.301886][T10200] xt_connbytes: Forcing CT accounting to be enabled [ 186.448902][T10218] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1181'. [ 186.640733][T10229] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1184'. [ 187.128533][T10259] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1192'. [ 187.139664][T10259] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1192'. [ 187.161635][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 187.212147][T10263] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 187.741593][T10285] netlink: 'syz.0.1202': attribute type 4 has an invalid length. [ 187.838023][T10291] netlink: 'syz.1.1204': attribute type 4 has an invalid length. [ 188.198063][T10312] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 188.239409][T10314] netlink: 'syz.0.1214': attribute type 33 has an invalid length. [ 188.817062][T10345] netlink: 'syz.1.1223': attribute type 1 has an invalid length. [ 189.028910][T10347] 8021q: adding VLAN 0 to HW filter on device bond6 [ 189.039902][T10347] bond5: (slave bond6): making interface the new active one [ 189.052550][T10347] bond5: (slave bond6): Enslaving as an active interface with an up link [ 189.074772][T10350] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 189.143462][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 189.152188][ C1] lec:lec_tx_timeout: lec0 [ 189.157628][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 189.164219][T10345] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.486451][ T5194] udevd[5194]: worker [5824] /devices/virtual/block/nbd1 is taking a long time [ 190.039894][T10417] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.272472][T10427] tipc: Enabled bearer , priority 0 [ 190.292597][T10427] syzkaller0: entered promiscuous mode [ 190.306552][T10427] syzkaller0: entered allmulticast mode [ 190.343317][T10427] tipc: Resetting bearer [ 190.359655][T10423] tipc: Resetting bearer [ 190.394954][T10423] tipc: Disabling bearer [ 190.767825][T10457] netlink: 'syz.2.1259': attribute type 2 has an invalid length. [ 190.791599][T10456] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 190.827194][T10456] __nla_validate_parse: 17 callbacks suppressed [ 190.827215][T10456] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1258'. [ 190.949486][T10467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1263'. [ 190.997522][T10467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1263'. [ 191.292107][T10486] netlink: 'syz.0.1268': attribute type 11 has an invalid length. [ 191.301421][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 191.311439][T10486] netlink: 'syz.0.1268': attribute type 11 has an invalid length. [ 191.434086][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1271'. [ 191.656405][T10517] netlink: 'syz.1.1274': attribute type 1 has an invalid length. [ 191.689116][T10517] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.1274'. [ 192.295273][T10556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1285'. [ 192.311870][T10560] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 192.428383][T10564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.950361][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 193.041965][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 193.054090][T10598] smc: net device vcan0 applied user defined pnetid SYZ1 [ 193.449357][T10624] xt_hashlimit: overflow, try lower: 3/0 [ 193.518026][T10628] netlink: 'syz.1.1312': attribute type 1 has an invalid length. [ 193.549980][T10628] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1312'. [ 193.704531][T10641] openvswitch: netlink: Unknown key attributes 2 [ 193.720750][T10642] netlink: 'syz.3.1316': attribute type 10 has an invalid length. [ 194.150312][T10650] hsr_slave_0 (unregistering): left promiscuous mode [ 194.184034][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 194.192146][ C1] lec:lec_tx_timeout: lec0 [ 194.197405][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 194.579610][T10689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.597713][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.607880][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.802831][T10705] IPVS: Unknown mcast interface: dummy0 [ 194.841052][T10707] macvtap1: entered promiscuous mode [ 194.858520][T10707] macvtap1: entered allmulticast mode [ 194.869237][T10707] bond0: entered allmulticast mode [ 194.874887][T10707] bond_slave_0: entered allmulticast mode [ 194.881856][T10707] bond_slave_1: entered allmulticast mode [ 194.893262][T10707] bond0: entered promiscuous mode [ 194.899069][T10707] bond_slave_0: entered promiscuous mode [ 194.906674][T10707] bond_slave_1: entered promiscuous mode [ 194.915578][T10707] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 194.922900][T10707] team0: Device macvtap1 failed to register rx_handler [ 194.933611][T10707] bond0: left allmulticast mode [ 194.938793][T10707] bond_slave_0: left allmulticast mode [ 194.946232][T10707] bond_slave_1: left allmulticast mode [ 194.951758][T10707] bond0: left promiscuous mode [ 194.958345][T10707] bond_slave_0: left promiscuous mode [ 194.964411][T10707] bond_slave_1: left promiscuous mode [ 195.027153][T10715] geneve2: entered promiscuous mode [ 195.032554][T10715] geneve2: entered allmulticast mode [ 195.150358][T10722] netlink: 'syz.1.1340': attribute type 39 has an invalid length. [ 195.205275][T10725] tipc: Enabled bearer , priority 0 [ 195.214495][T10725] syzkaller0: entered promiscuous mode [ 195.220072][T10725] syzkaller0: entered allmulticast mode [ 195.247478][T10723] tipc: Resetting bearer [ 195.293154][T10723] tipc: Disabling bearer [ 195.370506][T10735] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 195.778071][T10761] pim6reg: entered allmulticast mode [ 195.887295][T10770] __nla_validate_parse: 7 callbacks suppressed [ 195.887315][T10770] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1354'. [ 195.917788][T10770] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1354'. [ 195.930006][T10772] netlink: 'syz.0.1354': attribute type 10 has an invalid length. [ 196.605895][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'. [ 196.616411][T10802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1363'. [ 196.653950][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'. [ 196.669136][T10802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1363'. [ 197.083317][T10832] netlink: 'syz.4.1373': attribute type 1 has an invalid length. [ 197.107581][T10832] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1373'. [ 197.143137][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1373'. [ 197.306765][T10844] openvswitch: netlink: Tunnel attr 4210 out of range max 16 [ 197.454169][T10854] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 197.472826][T10847] syzkaller0: entered promiscuous mode [ 197.480342][T10847] syzkaller0: entered allmulticast mode [ 197.515147][T10849] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 197.527144][T10849] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 197.577980][T10853] netlink: 'syz.2.1380': attribute type 4 has an invalid length. [ 199.203959][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 199.212126][ C1] lec:lec_tx_timeout: lec0 [ 199.216893][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 199.384960][T10897] veth0: entered promiscuous mode [ 199.392871][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 199.418582][T10895] veth0: left promiscuous mode [ 199.505740][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'. [ 199.556964][T10905] netlink: 'syz.2.1395': attribute type 1 has an invalid length. [ 199.703324][T10919] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 199.732222][T10919] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 199.887484][T10924] pim6reg1: entered promiscuous mode [ 199.892837][T10924] pim6reg1: entered allmulticast mode [ 200.510709][T10974] batadv0: left allmulticast mode [ 200.539614][T10974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.654843][T10977] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.933262][T10997] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.037583][T10997] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.177107][T10997] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.265692][T10997] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.285461][T10987] vxcan1 speed is unknown, defaulting to 1000 [ 201.403810][ T6898] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.449881][ T6898] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.489729][ T6898] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.541611][ T1132] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.671556][T11015] Cannot find add_set index 65532 as target [ 201.787018][T11022] __nla_validate_parse: 4 callbacks suppressed [ 201.787037][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'. [ 201.816417][T11023] geneve2: entered promiscuous mode [ 201.832779][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'. [ 201.852547][T11023] geneve2: entered allmulticast mode [ 201.867630][ T1132] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 201.895288][ T1132] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 201.925177][T11027] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.985312][ T1132] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 202.155837][T11041] sctp: [Deprecated]: syz.2.1437 (pid 11041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.155837][T11041] Use struct sctp_sack_info instead [ 202.389643][T11059] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1439'. [ 203.195704][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 203.205320][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 203.441503][T11027] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.482206][T11027] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 203.541305][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1457'. [ 203.580637][T11027] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.602196][T11027] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 203.704390][T11114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1459'. [ 203.780239][T11027] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.814670][T11027] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 203.899404][T11121] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 204.052968][T11134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1467'. [ 204.073248][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 204.086068][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 204.155929][T11134] netlink: zone id is out of range [ 204.168641][T11134] netlink: zone id is out of range [ 204.182867][T11134] netlink: zone id is out of range [ 204.188795][T11134] netlink: zone id is out of range [ 204.196271][T11134] netlink: zone id is out of range [ 204.209579][T11134] netlink: zone id is out of range [ 204.222971][T11134] netlink: zone id is out of range [ 204.223917][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 204.236219][ C1] lec:lec_tx_timeout: lec0 [ 204.237414][T11134] netlink: zone id is out of range [ 204.241172][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 204.264837][T11134] netlink: zone id is out of range [ 204.287195][T11134] netlink: zone id is out of range [ 204.539061][ T6898] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 204.547518][ T6898] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 204.580394][ T6898] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 204.592042][T11165] netlink: 'syz.0.1476': attribute type 7 has an invalid length. [ 204.601243][ T6898] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 204.616503][ T6898] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 204.630558][ T6898] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 204.659909][ T6898] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 204.679060][ T6898] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 205.171561][T11197] netlink: 'syz.3.1489': attribute type 11 has an invalid length. [ 205.380569][T11210] netlink: 'syz.0.1492': attribute type 1 has an invalid length. [ 205.959487][T11231] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 206.276684][T11251] team0: Device wireguard0 is of different type [ 206.442935][T11270] tipc: Enabled bearer , priority 0 [ 206.452925][T11264] syzkaller0: entered promiscuous mode [ 206.469747][T11264] syzkaller0: entered allmulticast mode [ 206.491822][T11264] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 206.565749][T11264] tipc: Resetting bearer [ 206.584402][T11262] tipc: Resetting bearer [ 206.620722][T11262] tipc: Disabling bearer [ 206.639574][T11276] xt_HMARK: spi-set and port-set can't be combined [ 206.640288][T11275] netlink: 'syz.4.1512': attribute type 1 has an invalid length. [ 206.724807][T11282] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 206.752207][T11282] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 206.779632][T11283] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 206.821263][T11283] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 207.174662][T11311] netlink: 'syz.0.1524': attribute type 29 has an invalid length. [ 207.218091][T11311] netlink: 'syz.0.1524': attribute type 29 has an invalid length. [ 207.261180][T11311] __nla_validate_parse: 36 callbacks suppressed [ 207.261202][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1524'. [ 207.270970][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 207.390510][T11325] netlink: 'syz.0.1524': attribute type 29 has an invalid length. [ 207.457079][T11325] netlink: 'syz.0.1524': attribute type 29 has an invalid length. [ 207.714006][T11345] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1537'. [ 207.782226][T11349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1536'. [ 207.802076][T11349] netlink: 'syz.3.1536': attribute type 21 has an invalid length. [ 207.814196][T11349] netlink: 'syz.3.1536': attribute type 6 has an invalid length. [ 207.822439][T11349] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1536'. [ 207.832122][T11353] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1538'. [ 207.862019][T11353] 8021q: VLANs not supported on gre0 [ 207.908203][T11357] tipc: Enabled bearer , priority 0 [ 207.932876][T11357] syzkaller0: entered promiscuous mode [ 207.940990][T11357] syzkaller0: entered allmulticast mode [ 208.004777][T11357] tipc: Resetting bearer [ 208.045880][T11357] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1540'. [ 208.081846][T11356] tipc: Resetting bearer [ 208.146290][T11356] tipc: Disabling bearer [ 208.198870][T11374] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1545'. [ 208.599530][T11368] tipc: Enabling of bearer rejected, failed to enable media [ 208.768755][T11367] syzkaller0: entered promiscuous mode [ 208.774481][T11367] syzkaller0: entered allmulticast mode [ 208.992449][T11408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1555'. [ 209.003347][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'. [ 209.041621][T11407] xt_CT: No such helper "pptp" [ 209.255900][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 209.263984][ C1] lec:lec_tx_timeout: lec0 [ 209.269073][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 209.952590][ T55] block nbd1: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 90 seconds [ 209.965241][ T55] block nbd1: Possible stuck request ffff8880251e01c0: control (read@1024,1024B). Runtime 90 seconds [ 209.976675][ T55] block nbd1: Possible stuck request ffff8880251e0380: control (read@2048,1024B). Runtime 90 seconds [ 209.988608][ T55] block nbd1: Possible stuck request ffff8880251e0540: control (read@3072,1024B). Runtime 90 seconds [ 210.870913][T11437] syzkaller1: entered promiscuous mode [ 210.876557][T11437] syzkaller1: entered allmulticast mode [ 211.322562][T11470] netlink: 'syz.0.1572': attribute type 1 has an invalid length. [ 211.341609][T11460] bond1: option all_slaves_active: invalid value (222) [ 211.382224][T11460] bond1 (unregistering): Released all slaves [ 211.496129][T11480] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 211.562461][T11480] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 211.845273][T11504] netlink: 'syz.1.1580': attribute type 1 has an invalid length. [ 211.868677][T11503] netlink: 'syz.4.1579': attribute type 10 has an invalid length. [ 211.990671][T11506] bond8: (slave geneve4): making interface the new active one [ 212.002261][T11506] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 212.018658][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 212.020338][T11521] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 212.037181][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 212.070648][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 212.101870][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 212.332015][T11534] __nla_validate_parse: 3 callbacks suppressed [ 212.332037][T11534] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1587'. [ 212.382342][T11538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1588'. [ 212.417138][T11541] xt_TCPMSS: Only works on TCP SYN packets [ 212.769799][T11558] net_ratelimit: 11 callbacks suppressed [ 212.769820][T11558] bond_slave_0: mtu less than device minimum [ 212.932851][T11572] netlink: 'syz.1.1599': attribute type 6 has an invalid length. [ 212.952611][T11572] netlink: 'syz.1.1599': attribute type 1 has an invalid length. [ 212.970411][T11572] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1599'. [ 213.071318][T11581] tipc: Enabled bearer , priority 0 [ 213.104636][T11581] syzkaller0: entered promiscuous mode [ 213.114750][T11581] syzkaller0: entered allmulticast mode [ 213.179357][T11582] tipc: Resetting bearer [ 213.287392][T11582] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1602'. [ 213.309622][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1606'. [ 213.309726][T11582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1602'. [ 213.335413][T11597] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1607'. [ 213.373749][T11581] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1602'. [ 213.383175][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1602'. [ 213.390297][T11589] 8021q: adding VLAN 0 to HW filter on device bond9 [ 213.672565][T11622] xt_l2tp: unknown flags: 10 [ 213.979462][T11579] tipc: Resetting bearer [ 214.011046][T11579] tipc: Disabling bearer [ 214.178407][T11644] dvmrp0: entered allmulticast mode [ 214.187128][T11644] dvmrp0: left allmulticast mode [ 214.196151][T11644] pimreg: left allmulticast mode [ 214.199766][T11646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1619'. [ 214.284037][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 214.292151][ C1] lec:lec_tx_timeout: lec0 [ 214.297699][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 214.619568][T11667] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 214.852008][T11676] xt_cgroup: path and classid specified [ 214.875637][T11676] netlink: 'syz.4.1630': attribute type 10 has an invalid length. [ 214.900629][T11676] team0: Port device 0! added [ 214.937194][T11684] netlink: 'syz.4.1630': attribute type 10 has an invalid length. [ 214.977831][T11684] team0: Failed to send port change of device 0! via netlink (err -105) [ 215.041193][T11684] team0: Failed to send options change via netlink (err -105) [ 215.057122][T11684] team0: Failed to send port change of device 0! via netlink (err -105) [ 215.090536][T11684] team0: Port device 0! removed [ 215.167412][T11684] bond0: (slave 0!): Enslaving as an active interface with an up link [ 215.359240][T11705] netlink: 'syz.1.1639': attribute type 4 has an invalid length. [ 215.374007][T11705] xt_TCPMSS: Only works on TCP SYN packets [ 215.381591][T11705] netlink: 'syz.1.1639': attribute type 39 has an invalid length. [ 216.295615][T11762] netlink: 'syz.0.1658': attribute type 11 has an invalid length. [ 216.303907][T11762] netlink: 'syz.0.1658': attribute type 5 has an invalid length. [ 216.320470][T11760] syzkaller1: entered promiscuous mode [ 216.326448][T11760] syzkaller1: entered allmulticast mode [ 217.065757][T11805] IPVS: set_ctl: invalid protocol: 200 100.1.1.1:20003 [ 217.070971][T11807] netlink: 'syz.1.1672': attribute type 1 has an invalid length. [ 217.146321][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 217.147863][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 217.152690][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 217.333740][T11824] __nla_validate_parse: 43 callbacks suppressed [ 217.333761][T11824] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1677'. [ 217.351441][T11824] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1677'. [ 217.940535][T11858] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1688'. [ 217.985111][T11860] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1689'. [ 217.998578][T11862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1690'. [ 218.032994][T11860] vlan2: entered allmulticast mode [ 218.037067][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1689'. [ 218.062935][T11860] gretap0: entered allmulticast mode [ 218.120609][T11865] bond7: option xmit_hash_policy: invalid value (64) [ 218.129718][T11865] bond7 (unregistering): Released all slaves [ 218.174269][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1693'. [ 218.192924][T11875] netlink: 'syz.3.1691': attribute type 10 has an invalid length. [ 218.549718][T11892] set match dimension is over the limit! [ 218.575809][T11892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1700'. [ 218.587720][T11892] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1700'. [ 218.678301][T11898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1703'. [ 218.832916][T11908] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 219.313445][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 219.321549][ C1] lec:lec_tx_timeout: lec0 [ 219.327372][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 220.737529][T11998] lo: left allmulticast mode [ 220.744840][T11998] tunl0: left allmulticast mode [ 220.750688][T11998] gre0: left allmulticast mode [ 220.758343][T11998] gretap0: left allmulticast mode [ 220.763826][T11998] erspan0: left allmulticast mode [ 220.779374][T11998] ip_vti0: left allmulticast mode [ 220.785328][T11998] ip6_vti0: left allmulticast mode [ 220.800899][T11998] sit0: left allmulticast mode [ 220.806409][T11998] ip6tnl0: left allmulticast mode [ 220.821906][T11998] ip6gre0: left allmulticast mode [ 220.832019][T11998] syz_tun: left allmulticast mode [ 220.843812][T11998] ip6gretap0: left allmulticast mode [ 220.865452][T11998] bond0: (slave bridge0): Releasing backup interface [ 220.884342][T11998] bond0: left allmulticast mode [ 220.889439][T11998] team0: left allmulticast mode [ 220.903949][T11998] dummy0: left allmulticast mode [ 220.909227][T11998] nlmon0: left allmulticast mode [ 220.929688][T11998] caif0: left allmulticast mode [ 220.930789][T12002] xt_hashlimit: overflow, try lower: 3/0 [ 220.940349][T11998] vxcan0: left allmulticast mode [ 220.957038][T11998] vxcan1: left allmulticast mode [ 220.965076][T11998] veth0: left allmulticast mode [ 220.970409][T11998] veth1: left allmulticast mode [ 220.976402][T11998] wg0: left allmulticast mode [ 220.989309][T11998] wg1: left allmulticast mode [ 220.994975][T11998] wg2: left allmulticast mode [ 221.000018][T11998] veth0_to_bridge: left allmulticast mode [ 221.006882][T11998] bridge_slave_0: left allmulticast mode [ 221.012867][T11998] veth1_to_bridge: left allmulticast mode [ 221.019620][T11998] bridge_slave_1: left allmulticast mode [ 221.029082][T11998] veth0_to_bond: left allmulticast mode [ 221.035375][T11998] bond_slave_0: left allmulticast mode [ 221.041389][T11998] veth1_to_bond: left allmulticast mode [ 221.047486][T11998] bond_slave_1: left allmulticast mode [ 221.053152][T11998] veth0_to_team: left allmulticast mode [ 221.059155][T11998] team_slave_0: left allmulticast mode [ 221.065499][T11998] veth1_to_team: left allmulticast mode [ 221.071314][T11998] team_slave_1: left allmulticast mode [ 221.077188][T11998] veth0_to_batadv: left allmulticast mode [ 221.083158][T11998] batadv_slave_0: left allmulticast mode [ 221.089365][T11998] veth1_to_batadv: left allmulticast mode [ 221.095970][T11998] batadv_slave_1: left allmulticast mode [ 221.101999][T11998] xfrm0: left allmulticast mode [ 221.107251][T11998] veth1_to_hsr: left allmulticast mode [ 221.113059][T11998] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 224.344379][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 224.352425][ C1] lec:lec_tx_timeout: lec0 [ 224.357265][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 224.540543][T12093] netlink: 'syz.0.1755': attribute type 1 has an invalid length. [ 224.604382][T12093] 8021q: adding VLAN 0 to HW filter on device bond10 [ 224.615130][T12098] __nla_validate_parse: 5 callbacks suppressed [ 224.615151][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'. [ 224.676829][T12104] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 224.697620][T12102] veth3: entered promiscuous mode [ 224.747058][T12093] bond10: entered allmulticast mode [ 224.822157][T12113] SET target dimension over the limit! [ 224.828239][T12112] SET target dimension over the limit! [ 224.838487][T12093] tipc: MTU too low for tipc bearer [ 224.855604][T12108] netlink: zone id is out of range [ 224.862401][T12108] netlink: zone id is out of range [ 224.868020][T12108] netlink: zone id is out of range [ 224.873289][T12108] netlink: zone id is out of range [ 224.882033][T12108] netlink: zone id is out of range [ 224.893664][T12108] netlink: zone id is out of range [ 224.904594][T12108] netlink: zone id is out of range [ 224.920631][T12108] netlink: zone id is out of range [ 224.934152][T12108] netlink: zone id is out of range [ 225.322623][T12141] pim6reg: entered allmulticast mode [ 225.744289][T12156] sit0: left promiscuous mode [ 225.811977][T12156] batadv0: left allmulticast mode [ 225.929161][T12180] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1777'. [ 225.964950][T12180] netlink: 'syz.1.1777': attribute type 1 has an invalid length. [ 225.966180][T12156] veth0_to_batadv: left promiscuous mode [ 225.978785][T12156] veth0_to_batadv: left allmulticast mode [ 225.986691][T12156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.003306][T12156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.136866][T12156] gretap1: left promiscuous mode [ 226.142214][T12156] gretap1: left allmulticast mode [ 226.152690][T12156] gtp0: left promiscuous mode [ 226.158041][T12156] gtp0: left allmulticast mode [ 226.201893][T12156] veth0_macvtap: left allmulticast mode [ 226.208610][T12156] macvtap1: left allmulticast mode [ 226.225164][T12156] geneve2: left promiscuous mode [ 226.230282][T12156] geneve2: left allmulticast mode [ 226.240890][T12156] bond10: left allmulticast mode [ 226.276197][T12158] bond3: option all_slaves_active: invalid value (222) [ 226.288160][T12158] bond3 (unregistering): Released all slaves [ 226.319877][T12174] tipc: Enabling of bearer rejected, failed to enable media [ 226.390374][ T3509] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.410123][ T3509] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.420030][ T3509] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.430595][ T3509] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.440112][ T3509] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.449467][ T3509] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.493205][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1782'. [ 226.502672][ T3509] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.532907][ T3509] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.565167][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1781'. [ 226.574627][T12198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1781'. [ 226.656016][T12198] geneve3: entered promiscuous mode [ 226.665150][T12202] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1784'. [ 226.687932][T12198] geneve3: entered allmulticast mode [ 226.694672][T12202] net_ratelimit: 19 callbacks suppressed [ 226.694692][T12202] netlink: zone id is out of range [ 226.735451][T12202] netlink: get zone limit has 8 unknown bytes [ 226.746497][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 226.825417][T12209] netlink: 'syz.1.1786': attribute type 12 has an invalid length. [ 226.844610][T12209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1786'. [ 227.029510][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1787'. [ 227.051949][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1787'. [ 227.166395][T12227] netlink: 'syz.4.1790': attribute type 10 has an invalid length. [ 227.357519][T12242] xfrm1: entered promiscuous mode [ 227.374343][T12242] xfrm1: entered allmulticast mode [ 227.750813][T12267] pimreg3: entered allmulticast mode [ 227.974795][T12281] netlink: 'syz.3.1809': attribute type 16 has an invalid length. [ 228.038881][T12281] netlink: 'syz.3.1809': attribute type 3 has an invalid length. [ 228.085486][T12290] netlink: 'syz.0.1810': attribute type 1 has an invalid length. [ 228.284986][T12304] tipc: Enabled bearer , priority 0 [ 228.323075][T12304] syzkaller0: entered promiscuous mode [ 228.337775][T12304] syzkaller0: entered allmulticast mode [ 228.409359][T12304] tipc: Resetting bearer [ 228.424326][T12298] tipc: Resetting bearer [ 228.461155][T12298] tipc: Disabling bearer [ 228.779639][T12325] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 229.363459][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 229.371596][ C1] lec:lec_tx_timeout: lec0 [ 229.376846][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 229.727209][T12397] __nla_validate_parse: 21 callbacks suppressed [ 229.727234][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 229.761873][T12401] tipc: Enabled bearer , priority 0 [ 229.770424][T12401] syzkaller0: entered promiscuous mode [ 229.777648][T12401] syzkaller0: entered allmulticast mode [ 229.804612][T12402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1839'. [ 229.825265][T12401] netlink: 'syz.1.1841': attribute type 12 has an invalid length. [ 229.837221][T12402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1839'. [ 229.875136][T12406] netlink: 'syz.4.1842': attribute type 10 has an invalid length. [ 229.894418][T12406] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 229.925928][T12401] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1841'. [ 229.964242][T12401] tipc: Resetting bearer [ 229.979762][T12400] tipc: Resetting bearer [ 230.008807][T12411] syz.2.1844 uses old SIOCAX25GETINFO [ 230.053984][T12400] tipc: Disabling bearer [ 230.287292][T12432] netlink: 'syz.1.1849': attribute type 16 has an invalid length. [ 230.313437][T12423] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1848'. [ 230.314981][T12432] netlink: 'syz.1.1849': attribute type 3 has an invalid length. [ 230.332571][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1849'. [ 230.778911][T12451] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1853'. [ 231.003844][T12461] netlink: 'syz.4.1856': attribute type 1 has an invalid length. [ 231.263229][T12471] bond2: option resend_igmp: invalid value (32767) [ 231.271532][T12471] bond2: option resend_igmp: allowed values 0 - 255 [ 231.295553][T12471] bond2 (unregistering): Released all slaves [ 231.964822][T12515] tipc: Enabled bearer , priority 0 [ 232.003070][T12515] syzkaller0: entered promiscuous mode [ 232.030746][T12515] syzkaller0: entered allmulticast mode [ 232.072154][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 232.098696][T12515] tipc: Resetting bearer [ 232.170653][T12511] tipc: Resetting bearer [ 232.260955][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1873'. [ 232.285475][T12511] tipc: Disabling bearer [ 232.499858][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 232.542142][T12545] bond0: invalid ARP target 0.0.0.0 specified for addition [ 232.577950][T12545] bond0: option arp_ip_target: invalid value (0) [ 232.851641][T12568] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 233.091898][T12581] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 233.345670][T12598] netlink: 'syz.2.1891': attribute type 58 has an invalid length. [ 233.374045][T12587] hsr_slave_1 (unregistering): left promiscuous mode [ 233.403759][T12602] xt_l2tp: wrong L2TP version: 0 [ 233.447893][T12597] geneve2: entered promiscuous mode [ 233.469270][T12597] geneve2: entered allmulticast mode [ 233.509924][ T3509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 233.545203][ T3509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 233.574263][ T3509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 233.608028][ T3509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 233.738540][T12613] bridge4: entered allmulticast mode [ 233.935065][T12625] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 234.735248][T12670] netlink: 'syz.2.1911': attribute type 1 has an invalid length. [ 234.794170][T12670] __nla_validate_parse: 11 callbacks suppressed [ 234.794194][T12670] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1911'. [ 234.963626][T12681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1913'. [ 235.153648][ T5834] Bluetooth: hci0: command tx timeout [ 235.176651][T12688] netlink: 'syz.4.1916': attribute type 10 has an invalid length. [ 235.238646][T12688] team0: Device veth1_macvtap failed to register rx_handler [ 235.335567][T12693] syzkaller0: entered promiscuous mode [ 235.356726][T12693] syzkaller0: entered allmulticast mode [ 235.406919][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'. [ 235.445380][T12703] bond0: entered promiscuous mode [ 235.450481][T12703] bond_slave_0: entered promiscuous mode [ 235.459556][T12703] bond_slave_1: entered promiscuous mode [ 235.468901][T12703] bond0: left promiscuous mode [ 235.474149][T12703] bond_slave_0: left promiscuous mode [ 235.480099][T12703] bond_slave_1: left promiscuous mode [ 235.512975][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 235.548585][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6170 ms [ 235.556734][ C1] lec:lec_tx_timeout: lec0 [ 235.562996][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 235.574909][T12701] vlan3: entered promiscuous mode [ 235.595268][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'. [ 235.607232][T12701] gretap0: entered promiscuous mode [ 235.647653][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 235.660197][T12707] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1922'. [ 235.690301][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1921'. [ 235.696365][T12703] bond0: entered promiscuous mode [ 235.717527][T12703] bond_slave_0: entered promiscuous mode [ 235.723955][T12703] bond_slave_1: entered promiscuous mode [ 235.751926][T12703] bond0: left promiscuous mode [ 235.777793][T12703] bond_slave_0: left promiscuous mode [ 235.796110][T12703] bond_slave_1: left promiscuous mode [ 235.864858][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'. [ 235.925700][T12703] bond0: entered promiscuous mode [ 235.968017][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1925'. [ 235.974600][T12703] bond_slave_0: entered promiscuous mode [ 235.983264][T12703] bond_slave_1: entered promiscuous mode [ 236.015795][T12703] bond0: left promiscuous mode [ 236.021329][T12703] bond_slave_0: left promiscuous mode [ 236.027395][T12703] bond_slave_1: left promiscuous mode [ 236.121676][T12703] bond0: entered promiscuous mode [ 236.133723][T12703] bond_slave_0: entered promiscuous mode [ 236.140106][T12703] bond_slave_1: entered promiscuous mode [ 236.188838][T12703] bond0: left promiscuous mode [ 236.198959][T12703] bond_slave_0: left promiscuous mode [ 236.229681][T12703] bond_slave_1: left promiscuous mode [ 236.251558][T12743] xt_cgroup: path and classid specified [ 236.391189][T12739] hsr_slave_0 (unregistering): left promiscuous mode [ 236.512192][T12738] syzkaller1: entered promiscuous mode [ 236.518896][T12738] syzkaller1: entered allmulticast mode [ 236.953878][T12770] veth3: entered allmulticast mode [ 237.142137][T12783] tc_dump_action: action bad kind [ 237.181039][T12786] netlink: 'syz.0.1940': attribute type 1 has an invalid length. [ 238.407462][T12866] only policy match revision 0 supported [ 238.407485][T12866] unable to load match [ 238.575634][T12874] sch_fq: defrate 0 ignored. [ 239.467630][T12921] netlink: 'syz.3.1980': attribute type 5 has an invalid length. [ 239.680698][T12938] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.878811][T12942] __nla_validate_parse: 83 callbacks suppressed [ 239.878833][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'. [ 239.935088][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 239.982605][T12946] tipc: Enabling of bearer rejected, failed to enable media [ 240.024464][ T55] block nbd1: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 120 seconds [ 240.035590][ T55] block nbd1: Possible stuck request ffff8880251e01c0: control (read@1024,1024B). Runtime 120 seconds [ 240.047587][ T55] block nbd1: Possible stuck request ffff8880251e0380: control (read@2048,1024B). Runtime 120 seconds [ 240.059498][ T55] block nbd1: Possible stuck request ffff8880251e0540: control (read@3072,1024B). Runtime 120 seconds [ 240.106676][T12956] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1989'. [ 240.369415][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 240.394486][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1992'. [ 240.436600][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'. [ 240.457792][T12965] chnl_net:caif_netlink_parms(): no params data found [ 240.528426][T12966] netlink: 'syz.4.1994': attribute type 3 has an invalid length. [ 240.538213][T12966] netlink: 'syz.4.1994': attribute type 3 has an invalid length. [ 240.554316][T12969] netlink: 'syz.4.1994': attribute type 3 has an invalid length. [ 240.562359][T12969] netlink: 'syz.4.1994': attribute type 3 has an invalid length. [ 240.617891][T12976] netlink: 'syz.3.1997': attribute type 1 has an invalid length. [ 240.634623][T12976] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1997'. [ 240.767028][T12986] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 240.905360][T12993] tipc: Enabled bearer , priority 0 [ 240.947277][T12993] syzkaller0: entered promiscuous mode [ 240.952803][T12993] syzkaller0: entered allmulticast mode [ 241.034174][T12991] tipc: Resetting bearer [ 241.100144][T13007] netlink: 'syz.2.2004': attribute type 11 has an invalid length. [ 241.119039][T12991] tipc: Disabling bearer [ 241.199515][T13000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2002'. [ 241.303424][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 241.311526][ C1] lec:lec_tx_timeout: lec0 [ 241.317120][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 241.399357][T13018] netlink: 'syz.1.2008': attribute type 21 has an invalid length. [ 241.415755][T13018] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2008'. [ 241.427805][T13024] netlink: 'syz.0.2010': attribute type 1 has an invalid length. [ 241.444732][T13022] xt_ecn: cannot match TCP bits for non-tcp packets [ 241.492526][T13024] 8021q: adding VLAN 0 to HW filter on device bond11 [ 241.527152][T13028] bond11: (slave geneve3): making interface the new active one [ 241.591965][T13028] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 241.614294][ T1132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.637148][ T1132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.661290][T13035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.681682][ T1132] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.696255][ T30] audit: type=1107 audit(1759931827.061:2): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ß”•›P…þ™z1Û–km‘²²S¯Ð¶-iZöÇÝë Ûj^òD¾_ñ[dJ»ªºòfš~Ú  ~/ ÖÑ’‡ ¶»ë‹b@{@ƒwY"ñÃA•×óm¢l¢ê‚gï]ÖqĨ ›pœ!„gÁÜV' [ 241.763731][T13037] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 241.782122][T13037] bond2 (unregistering): Released all slaves [ 241.808764][T13043] netlink: 'syz.4.2017': attribute type 1 has an invalid length. [ 241.817627][T13043] netlink: 'syz.4.2017': attribute type 3 has an invalid length. [ 241.825419][ T1132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.838491][T13043] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2017'. [ 241.973939][T13043] tipc: Enabled bearer , priority 0 [ 241.991159][T13050] syzkaller0: entered promiscuous mode [ 241.997992][T13050] syzkaller0: entered allmulticast mode [ 242.044731][T13050] tipc: Resetting bearer [ 242.077618][T13050] tipc: Disabling bearer [ 242.162555][T13067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.318627][T13076] openvswitch: netlink: Key type 123 is out of range max 32 [ 243.235235][T13129] vcan0: entered allmulticast mode [ 243.529346][T13151] IPVS: set_ctl: invalid protocol: 60 172.20.20.59:20004 [ 243.837885][T13168] bond0: entered promiscuous mode [ 243.852873][T13168] hsr0: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 243.865167][T13168] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 243.880435][T13168] hsr0: entered allmulticast mode [ 243.900907][T13168] bond0: entered allmulticast mode [ 243.917665][T13168] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 244.154015][T13191] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 244.210236][T13188] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 244.770841][T13225] team0: Device ip6gre1 is of different type [ 245.099322][T13234] bond3: invalid ARP target 0.0.0.0 specified for addition [ 245.107000][T13234] bond3: option arp_ip_target: invalid value (0) [ 245.118295][T13234] bond3 (unregistering): Released all slaves [ 245.157416][T13262] __nla_validate_parse: 12 callbacks suppressed [ 245.157438][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 245.457800][T13218] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 245.517618][T13278] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2083'. [ 245.628220][T13286] validate_nla: 3 callbacks suppressed [ 245.628241][T13286] netlink: 'syz.3.2084': attribute type 39 has an invalid length. [ 245.655654][T13286] netlink: 'syz.3.2084': attribute type 39 has an invalid length. [ 245.671372][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2085'. [ 245.691722][T13286] netlink: 'syz.3.2084': attribute type 39 has an invalid length. [ 245.738114][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2088'. [ 245.778553][T13295] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2088'. [ 245.823061][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2088'. [ 245.908243][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2091'. [ 245.963915][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'. [ 246.123015][T13315] sctp: [Deprecated]: syz.4.2096 (pid 13315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.123015][T13315] Use struct sctp_sack_info instead [ 246.171997][T13319] syz.0.2097: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 246.225879][T13319] CPU: 1 UID: 0 PID: 13319 Comm: syz.0.2097 Not tainted syzkaller #0 PREEMPT(full) [ 246.225912][T13319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.225926][T13319] Call Trace: [ 246.225935][T13319] [ 246.225944][T13319] dump_stack_lvl+0x189/0x250 [ 246.225977][T13319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.226000][T13319] ? __pfx__printk+0x10/0x10 [ 246.226023][T13319] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.226049][T13319] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.226077][T13319] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 246.226107][T13319] warn_alloc+0x214/0x310 [ 246.226135][T13319] ? stack_depot_save_flags+0x40/0x860 [ 246.226162][T13319] ? __pfx_warn_alloc+0x10/0x10 [ 246.226190][T13319] ? kasan_save_track+0x4f/0x80 [ 246.226212][T13319] ? xskq_create+0x56/0x170 [ 246.226238][T13319] ? xsk_init_queue+0xb0/0x110 [ 246.226262][T13319] ? xsk_setsockopt+0x4dc/0x8d0 [ 246.226286][T13319] ? do_sock_setsockopt+0x179/0x1b0 [ 246.226313][T13319] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 246.226339][T13319] ? do_syscall_64+0xfa/0xfa0 [ 246.226367][T13319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.226399][T13319] __vmalloc_node_range_noprof+0x125/0x12f0 [ 246.226465][T13319] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 246.226498][T13319] ? __kasan_kmalloc+0x93/0xb0 [ 246.226525][T13319] vmalloc_user_noprof+0xad/0xf0 [ 246.226550][T13319] ? xskq_create+0xbf/0x170 [ 246.226580][T13319] xskq_create+0xbf/0x170 [ 246.226612][T13319] xsk_init_queue+0xb0/0x110 [ 246.226645][T13319] xsk_setsockopt+0x4dc/0x8d0 [ 246.226675][T13319] ? __pfx_xsk_setsockopt+0x10/0x10 [ 246.226707][T13319] ? __pfx_aa_sk_perm+0x10/0x10 [ 246.226735][T13319] ? aa_sock_opt_perm+0xff/0x1b0 [ 246.226767][T13319] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 246.226795][T13319] ? __pfx_xsk_setsockopt+0x10/0x10 [ 246.226824][T13319] do_sock_setsockopt+0x179/0x1b0 [ 246.226866][T13319] __x64_sys_setsockopt+0x13f/0x1b0 [ 246.226903][T13319] do_syscall_64+0xfa/0xfa0 [ 246.226931][T13319] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.226962][T13319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.226982][T13319] ? clear_bhb_loop+0x60/0xb0 [ 246.227008][T13319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.227028][T13319] RIP: 0033:0x7f44f138eec9 [ 246.227048][T13319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.227067][T13319] RSP: 002b:00007f44f21de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 246.227090][T13319] RAX: ffffffffffffffda RBX: 00007f44f15e5fa0 RCX: 00007f44f138eec9 [ 246.227105][T13319] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 246.227118][T13319] RBP: 00007f44f1411f91 R08: 0000000000000004 R09: 0000000000000000 [ 246.227131][T13319] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.227145][T13319] R13: 00007f44f15e6038 R14: 00007f44f15e5fa0 R15: 00007ffdabbc9298 [ 246.227186][T13319] [ 246.227195][T13319] Mem-Info: [ 246.273969][T13325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2098'. [ 246.323434][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 246.323702][T13319] active_anon:7376 inactive_anon:0 isolated_anon:0 [ 246.323702][T13319] active_file:3141 inactive_file:39945 isolated_file:0 [ 246.323702][T13319] unevictable:768 dirty:40 writeback:0 [ 246.323702][T13319] slab_reclaimable:12010 slab_unreclaimable:103836 [ 246.323702][T13319] mapped:30529 shmem:2529 pagetables:1271 [ 246.323702][T13319] sec_pagetables:0 bounce:0 [ 246.323702][T13319] kernel_misc_reclaimable:0 [ 246.323702][T13319] free:1319567 free_pcp:13623 free_cma:0 [ 246.328705][ C1] lec:lec_tx_timeout: lec0 [ 246.343273][T13319] Node 0 active_anon:29504kB inactive_anon:0kB active_file:12564kB inactive_file:159576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122116kB dirty:156kB writeback:0kB shmem:8580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14440kB pagetables:4920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 246.345703][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 246.351822][T13319] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 246.419896][T13325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2098'. [ 246.441302][T13319] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.441379][T13319] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 246.779595][T13319] Node 0 DMA32 free:1365544kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36060kB inactive_anon:0kB active_file:12564kB inactive_file:157744kB unevictable:1536kB writepending:156kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:32988kB local_pcp:16708kB free_cma:0kB [ 246.846805][T13319] lowmem_reserve[]: 0 0 1 1 1 [ 246.861967][T13319] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 246.932576][T13343] vlan3: entered allmulticast mode [ 246.942686][T13343] bond0: entered allmulticast mode [ 246.946685][T13319] lowmem_reserve[]: 0 0 0 0 0 [ 246.956807][T13319] Node 1 Normal free:3895548kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16948kB local_pcp:6836kB free_cma:0kB [ 246.957284][T13343] !: entered allmulticast mode [ 247.023526][T13319] lowmem_reserve[]: 0 0 0 0 0 [ 247.028339][T13319] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 247.045171][T13319] Node 0 DMA32: 1634*4kB (UME) 493*8kB (UM) 234*16kB (UM) 519*32kB (UME) 95*64kB (UME) 83*128kB (UME) 42*256kB (UM) 28*512kB (UME) 6*1024kB (UME) 7*2048kB (UME) 312*4096kB (M) = 1371056kB [ 247.062037][T13343] bridge_slave_1: entered allmulticast mode [ 247.067306][T13319] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 247.088938][T13319] Node 1 Normal: 195*4kB (UE) 50*8kB (UME) 38*16kB (UME) 116*32kB (UME) 40*64kB (UME) 5*128kB (UME) 3*256kB (ME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3895548kB [ 247.140498][T13319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.152147][T13319] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.161845][T13319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.172273][T13319] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.183297][T13319] 44463 total pagecache pages [ 247.188274][T13319] 0 pages in swap cache [ 247.192468][T13319] Free swap = 124996kB [ 247.202150][T13319] Total swap = 124996kB [ 247.213313][T13319] 2097051 pages RAM [ 247.225249][T13319] 0 pages HighMem/MovableOnly [ 247.236433][T13319] 424452 pages reserved [ 247.240790][T13319] 0 pages cma reserved [ 247.805180][T13380] netlink: 'syz.3.2118': attribute type 1 has an invalid length. [ 247.941363][T13390] xt_l2tp: v2 tid > 0xffff: 1114244 [ 248.036208][T13400] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20002 [ 248.228771][T13415] x_tables: duplicate underflow at hook 1 [ 248.929012][T13459] veth1_to_bond: entered allmulticast mode [ 249.003922][T13466] netlink: 'syz.4.2141': attribute type 10 has an invalid length. [ 249.036333][T13459] veth1_to_bond: left allmulticast mode [ 249.562517][T13497] netlink: 'syz.3.2152': attribute type 1 has an invalid length. [ 249.671616][T13501] netlink: 'syz.4.2154': attribute type 1 has an invalid length. [ 249.807332][T13513] IPv6: sit2: Disabled Multicast RS [ 249.822461][T13513] sit2: entered allmulticast mode [ 250.065152][T13534] netlink: 'syz.4.2164': attribute type 1 has an invalid length. [ 250.146847][T13535] IPVS: Scheduler module ip_vs_sip not found [ 250.173007][T13534] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.200355][T13542] __nla_validate_parse: 12 callbacks suppressed [ 250.200387][T13542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2166'. [ 250.853095][T13563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'. [ 250.868335][T13563] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2170'. [ 250.923893][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2170'. [ 251.036139][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2173'. [ 251.080659][T13577] sctp: [Deprecated]: syz.2.2176 (pid 13577) Use of int in max_burst socket option. [ 251.080659][T13577] Use struct sctp_assoc_value instead [ 251.164257][T13582] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2173'. [ 251.244255][T13586] ip6t_rpfilter: unknown options [ 251.271059][T13578] macsec1: entered promiscuous mode [ 251.293912][T13578] macsec1: entered allmulticast mode [ 251.305603][T13578] bond3: (slave macsec1): Error -34 calling dev_set_mtu [ 251.364181][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 251.372351][ C1] lec:lec_tx_timeout: lec0 [ 251.377568][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 251.504692][T13602] syzkaller1: entered promiscuous mode [ 251.531786][T13602] syzkaller1: entered allmulticast mode [ 251.738572][T13618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.930617][T13629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2193'. [ 252.045211][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2193'. [ 252.180519][T13638] syzkaller1: entered promiscuous mode [ 252.196246][T13638] syzkaller1: entered allmulticast mode [ 252.313801][T13649] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2198'. [ 252.385113][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'. [ 252.591156][T13666] xt_CONNSECMARK: invalid mode: 0 [ 253.052806][T13691] tipc: Enabling of bearer rejected, already enabled [ 253.535614][T13726] netlink: 'syz.1.2218': attribute type 12 has an invalid length. [ 253.617926][T13726] netlink: 'syz.1.2218': attribute type 12 has an invalid length. [ 254.181812][T13763] Cannot find del_set index 4 as target [ 254.371994][T13730] vxcan1 speed is unknown, defaulting to 1000 [ 254.770563][T13796] syzkaller0: entered promiscuous mode [ 254.805762][T13796] syzkaller0: entered allmulticast mode [ 256.029068][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 256.039135][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.173676][T13842] netlink: 'syz.4.2253': attribute type 17 has an invalid length. [ 256.215158][T13842] __nla_validate_parse: 9 callbacks suppressed [ 256.215180][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2253'. [ 256.263774][T13842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2253'. [ 256.298020][T13845] netlink: 'syz.2.2254': attribute type 1 has an invalid length. [ 256.376135][T13845] bond4: entered promiscuous mode [ 256.376375][T13847] netlink: 'syz.4.2253': attribute type 17 has an invalid length. [ 256.381617][T13845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.401708][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2253'. [ 256.411225][T13847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2253'. [ 256.474033][T13849] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.484534][T13849] bond4: (slave bond5): making interface the new active one [ 256.492139][T13849] bond5: entered promiscuous mode [ 256.499480][T13849] bond4: (slave bond5): Enslaving as an active interface with an up link [ 256.520196][T13853] netlink: 'syz.0.2255': attribute type 10 has an invalid length. [ 256.530979][T13853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2255'. [ 256.540331][T13853] dummy0: entered promiscuous mode [ 256.550277][T13853] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 256.694295][T13855] netlink: 'syz.0.2256': attribute type 8 has an invalid length. [ 256.721398][T13855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2256'. [ 256.736220][T13859] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2257'. [ 256.752437][T13862] netlink: 'syz.0.2256': attribute type 8 has an invalid length. [ 256.757235][T13861] netlink: 'syz.2.2259': attribute type 1 has an invalid length. [ 256.783972][T13867] netlink: 'syz.3.2257': attribute type 17 has an invalid length. [ 256.791998][T13867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2257'. [ 256.807342][T13867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2257'. [ 256.809512][T13861] 8021q: adding VLAN 0 to HW filter on device bond6 [ 256.861413][T13861] bond6: (slave veth5): Enslaving as an active interface with a down link [ 256.878730][T13867] erspan0: entered promiscuous mode [ 256.891800][T13867] gretap0: entered promiscuous mode [ 256.899488][T13867] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 256.910087][T13867] : Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 256.964829][T13861] veth7: entered promiscuous mode [ 256.985362][T13861] bond6: (slave veth7): Enslaving as an active interface with a down link [ 257.100613][T13886] pim6reg: entered allmulticast mode [ 257.253341][T13892] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 257.303633][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5920 ms [ 257.311737][ C1] lec:lec_tx_timeout: lec0 [ 257.317814][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 257.351090][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 258.611292][ T7135] hid-generic 0005:046D:5505.0001: unknown main item tag 0x0 [ 258.628298][ T7135] hid-generic 0005:046D:5505.0001: unknown main item tag 0x0 [ 258.670734][ T7135] hid-generic 0005:046D:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 258.838024][T13989] syz.4.2299 (13989) used obsolete PPPIOCDETACH ioctl [ 259.215938][T14005] vcan0 (unregistering): left allmulticast mode [ 259.241459][T14005] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 259.261989][T14018] netlink: 'syz.1.2310': attribute type 1 has an invalid length. [ 259.363103][T14018] 8021q: adding VLAN 0 to HW filter on device bond10 [ 259.525145][T14032] netlink: 'syz.2.2315': attribute type 10 has an invalid length. [ 259.543967][T14032] geneve0: left allmulticast mode [ 259.556165][T14032] team0: Port device geneve0 added [ 259.569830][T13244] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 259.584378][T14032] netlink: 'syz.2.2315': attribute type 3 has an invalid length. [ 259.596475][T13244] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 259.608636][T13244] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 259.621665][T13244] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 260.118132][T14070] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 260.975979][T14119] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 261.772936][T14158] __nla_validate_parse: 23 callbacks suppressed [ 261.772958][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2349'. [ 261.831396][T14158] bond11: Invalid ad_actor_system MAC address. [ 261.838054][T14158] bond11: option ad_actor_system: invalid value (1) [ 261.853845][T14158] bond11 (unregistering): Released all slaves [ 261.862867][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 261.952352][T14167] netlink: 'syz.3.2353': attribute type 10 has an invalid length. [ 262.002674][T14170] netlink: 'syz.3.2353': attribute type 10 has an invalid length. [ 262.025497][T14170] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2353'. [ 262.039528][T14170] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 262.162686][T14189] netlink: 'syz.4.2357': attribute type 1 has an invalid length. [ 262.176052][T14183] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2356'. [ 262.219096][T14189] 8021q: adding VLAN 0 to HW filter on device bond8 [ 262.333590][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 262.341701][ C1] lec:lec_tx_timeout: lec0 [ 262.346564][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 262.432581][T14208] netlink: 'syz.4.2360': attribute type 1 has an invalid length. [ 262.485956][T14208] bond9 (unregistering): Released all slaves [ 262.573848][ T63] syzkaller0: tun_net_xmit 76 [ 262.579211][ T63] syzkaller0: tun_net_xmit 48 [ 262.591867][T14200] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 262.598718][T14200] syzkaller0: Linktype set failed because interface is up [ 262.613955][ T43] syzkaller0: tun_net_xmit 76 [ 262.729894][T14215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2363'. [ 262.882116][T14185] netlink: 'syz.1.2355': attribute type 1 has an invalid length. [ 262.890567][T14185] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2355'. [ 263.206202][T14225] IPVS: length: 163 != 8 [ 264.357838][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2369'. [ 264.368642][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2369'. [ 264.460348][T14244] netlink: 'syz.3.2372': attribute type 1 has an invalid length. [ 264.468997][T14243] netlink: 'syz.3.2372': attribute type 1 has an invalid length. [ 264.620783][T14258] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 264.646064][T14250] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 264.667332][T14250] bond9 (unregistering): Released all slaves [ 264.976641][T14282] dummy0: left promiscuous mode [ 264.986137][T14282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.078282][T14282] veth0_vlan: left promiscuous mode [ 265.093122][T14282] veth0_vlan: entered promiscuous mode [ 265.143257][T14282] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 265.397773][T14307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2391'. [ 265.397863][T14306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2390'. [ 265.480387][T14306] 8021q: adding VLAN 0 to HW filter on device bond9 [ 265.512731][T14311] macvlan2: entered promiscuous mode [ 265.520539][T14311] bond9: entered promiscuous mode [ 265.527000][T14311] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 265.549971][T14311] bond9: left promiscuous mode [ 265.889826][T14331] netlink: 'syz.3.2402': attribute type 2 has an invalid length. [ 265.908127][T14331] netlink: 'syz.3.2402': attribute type 8 has an invalid length. [ 265.935217][T14333] netlink: 'syz.3.2402': attribute type 2 has an invalid length. [ 265.943139][T14333] netlink: 'syz.3.2402': attribute type 8 has an invalid length. [ 266.091544][T14344] netlink: 'syz.3.2406': attribute type 4 has an invalid length. [ 266.527266][T14375] netlink: 'syz.1.2412': attribute type 39 has an invalid length. [ 266.669402][T14388] netlink: 'syz.2.2416': attribute type 14 has an invalid length. [ 266.727730][T14388] netlink: 'syz.2.2416': attribute type 13 has an invalid length. [ 266.878827][T14397] __nla_validate_parse: 6 callbacks suppressed [ 266.878850][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2419'. [ 266.898047][T14397] chnl_net:caif_netlink_parms(): no params data found [ 267.267468][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2427'. [ 267.319337][T14427] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2430'. [ 267.353567][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 267.361677][ C1] lec:lec_tx_timeout: lec0 [ 267.368065][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 267.441415][T14439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2433'. [ 267.786717][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 267.802868][T14464] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2439'. [ 268.057270][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 268.111896][T14474] sctp: [Deprecated]: syz.1.2443 (pid 14474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.111896][T14474] Use struct sctp_sack_info instead [ 268.137728][T14475] sctp: [Deprecated]: syz.1.2443 (pid 14475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.137728][T14475] Use struct sctp_sack_info instead [ 268.191656][T14477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2444'. [ 268.204541][T14477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2444'. [ 268.222857][T14477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2444'. [ 268.279609][T14482] bond10: ARP target 1.0.0.0 is already present [ 268.286152][T14482] bond10: option arp_ip_target: invalid value (1) [ 268.297940][T14482] bond10 (unregistering): Released all slaves [ 268.330178][T14486] veth1_to_bond: entered allmulticast mode [ 268.437408][T14490] veth1_to_bond (unregistering): left allmulticast mode [ 268.946093][ T5842] udevd[5842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 269.158453][T14527] siw: device registration error -23 [ 269.938088][T14563] policy can only be matched on NF_INET_PRE_ROUTING [ 269.938112][T14563] unable to load match [ 270.105744][ T25] block nbd1: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 150 seconds [ 270.120780][ T25] block nbd1: Possible stuck request ffff8880251e01c0: control (read@1024,1024B). Runtime 150 seconds [ 270.133249][ T25] block nbd1: Possible stuck request ffff8880251e0380: control (read@2048,1024B). Runtime 150 seconds [ 270.145728][ T25] block nbd1: Possible stuck request ffff8880251e0540: control (read@3072,1024B). Runtime 150 seconds [ 270.170428][T14580] delete_channel: no stack [ 270.192695][T14569] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 270.566033][T14599] sctp: [Deprecated]: syz.2.2473 (pid 14599) Use of int in maxseg socket option. [ 270.566033][T14599] Use struct sctp_assoc_value instead [ 270.619834][T14598] sctp: [Deprecated]: syz.2.2473 (pid 14598) Use of int in maxseg socket option. [ 270.619834][T14598] Use struct sctp_assoc_value instead [ 270.689430][T14605] validate_nla: 4 callbacks suppressed [ 270.689454][T14605] netlink: 'syz.0.2475': attribute type 32 has an invalid length. [ 270.772884][T14605] bond13: Setting coupled_control to off (0) [ 270.798707][T14617] netlink: 'syz.4.2479': attribute type 1 has an invalid length. [ 270.800366][T14612] netlink: 'syz.1.2477': attribute type 1 has an invalid length. [ 270.806699][T14617] netlink: 'syz.4.2479': attribute type 11 has an invalid length. [ 270.880017][T14618] nbd: must specify at least one socket [ 270.894048][T14617] nbd: must specify at least one socket [ 270.956510][T14623] bond11: (slave bridge9): making interface the new active one [ 270.965420][T14623] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 271.110201][T14638] sit0: entered promiscuous mode [ 271.134645][T14638] netlink: 'syz.3.2484': attribute type 1 has an invalid length. [ 271.391811][T14661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.014837][T14685] __nla_validate_parse: 16 callbacks suppressed [ 272.014858][T14685] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2498'. [ 272.030375][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2499'. [ 272.031740][T14687] tipc: Enabled bearer , priority 0 [ 272.128914][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2500'. [ 272.170080][T14687] syzkaller0: entered promiscuous mode [ 272.175809][T14687] syzkaller0: entered allmulticast mode [ 272.191958][T14687] tipc: Resetting bearer [ 272.261830][T14686] tipc: Resetting bearer [ 273.148187][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 273.156271][ C1] lec:lec_tx_timeout: lec0 [ 273.162044][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 273.786252][T14686] tipc: Disabling bearer [ 273.806973][T14700] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 273.859753][T14715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2506'. [ 274.034313][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'. [ 274.174353][T14734] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 274.587837][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2521'. [ 274.605669][T14768] bridge_slave_1: left allmulticast mode [ 274.611596][T14768] bridge_slave_1: left promiscuous mode [ 274.630083][T14768] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.669259][T14768] bridge_slave_0: left allmulticast mode [ 274.681182][T14768] bridge_slave_0: left promiscuous mode [ 274.691876][T14768] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.771998][T14780] vlan2: entered promiscuous mode [ 274.779224][T14780] bond0: entered promiscuous mode [ 274.785115][T14780] bond_slave_0: entered promiscuous mode [ 274.804382][T14780] bond_slave_1: entered promiscuous mode [ 274.811545][T14780] bond0: (slave vlan2): Opening slave failed [ 274.934925][T14792] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 275.296753][T14809] wg1: entered promiscuous mode [ 275.311919][T14809] wg1: entered allmulticast mode [ 275.402533][T14816] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 275.779093][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2542'. [ 275.856079][T14837] bond8 (unregistering): Released all slaves [ 276.110474][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2548'. [ 276.484000][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2555'. [ 276.956192][T14884] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2557'. [ 277.290888][T14900] __nla_validate_parse: 1 callbacks suppressed [ 277.290909][T14900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2563'. [ 277.628240][T14917] netlink: 'syz.4.2568': attribute type 10 has an invalid length. [ 277.644047][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2569'. [ 277.743764][T14917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2568'. [ 277.762303][T14917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2568'. [ 277.776293][T14917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2568'. [ 277.790016][T14917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2568'. [ 277.848807][T14933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2572'. [ 277.956946][T14939] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20000 [ 278.015714][T14941] openvswitch: netlink: IP tunnel dst address not specified [ 278.025988][T14941] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2576'. [ 278.072969][T14941] pimreg: entered allmulticast mode [ 278.121856][T14947] netlink: 'syz.0.2579': attribute type 1 has an invalid length. [ 278.140271][T14947] netlink: 'syz.0.2579': attribute type 4 has an invalid length. [ 278.150838][T14947] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2579'. [ 278.183716][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 278.191794][ C1] lec:lec_tx_timeout: lec0 [ 278.197634][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 278.228762][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2577'. [ 278.251285][T14956] netlink: 'syz.0.2580': attribute type 10 has an invalid length. [ 278.263144][T14956] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 278.546641][T14980] netlink: 'syz.1.2586': attribute type 1 has an invalid length. [ 278.608944][T14980] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 278.620507][T14980] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 278.889863][T15001] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 279.160762][T15013] º: renamed from veth1_vlan [ 279.167164][T15023] netlink: 'syz.1.2596': attribute type 1 has an invalid length. [ 279.524009][T15043] pimreg: entered allmulticast mode [ 279.539111][T15043] netlink: 'syz.2.2604': attribute type 1 has an invalid length. [ 279.765242][T15051] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 279.824826][T15051] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 279.992159][T15060] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 280.266207][T15087] netlink: 'syz.2.2612': attribute type 3 has an invalid length. [ 280.610289][T15115] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 280.666611][T15116] netlink: 'syz.2.2620': attribute type 1 has an invalid length. [ 280.765849][T15118] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 280.779236][T15118] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 280.916878][T15127] netlink: 'syz.1.2623': attribute type 12 has an invalid length. [ 283.213518][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 283.221654][ C1] lec:lec_tx_timeout: lec0 [ 283.226608][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 288.233448][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 288.241486][ C1] lec:lec_tx_timeout: lec0 [ 288.246404][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 293.253496][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 293.261625][ C1] lec:lec_tx_timeout: lec0 [ 293.266152][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.283463][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 298.291506][ C1] lec:lec_tx_timeout: lec0 [ 298.296392][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 300.185386][ T25] block nbd1: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 180 seconds [ 300.196252][ T25] block nbd1: Possible stuck request ffff8880251e01c0: control (read@1024,1024B). Runtime 180 seconds [ 300.207624][ T25] block nbd1: Possible stuck request ffff8880251e0380: control (read@2048,1024B). Runtime 180 seconds [ 300.218769][ T25] block nbd1: Possible stuck request ffff8880251e0540: control (read@3072,1024B). Runtime 180 seconds [ 301.725833][ T5194] udevd[5194]: worker [5824] /devices/virtual/block/nbd1 timeout; kill it [ 301.736304][ T5194] udevd[5194]: seq 11779 '/devices/virtual/block/nbd1' killed [ 303.313448][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 303.321685][ C1] lec:lec_tx_timeout: lec0 [ 303.326615][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 308.333910][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 308.341959][ C1] lec:lec_tx_timeout: lec0 [ 308.347650][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 313.363458][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 313.371508][ C1] lec:lec_tx_timeout: lec0 [ 313.376202][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 317.468342][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.477915][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.383452][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6010 ms [ 319.391482][ C1] lec:lec_tx_timeout: lec0 [ 319.396705][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 325.143533][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 325.151607][ C1] lec:lec_tx_timeout: lec0 [ 325.156469][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 330.183524][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 330.191556][ C1] lec:lec_tx_timeout: lec0 [ 330.196859][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 330.265261][ T25] block nbd1: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 210 seconds [ 330.276158][ T25] block nbd1: Possible stuck request ffff8880251e01c0: control (read@1024,1024B). Runtime 210 seconds [ 330.287849][ T25] block nbd1: Possible stuck request ffff8880251e0380: control (read@2048,1024B). Runtime 210 seconds [ 330.299196][ T25] block nbd1: Possible stuck request ffff8880251e0540: control (read@3072,1024B). Runtime 210 seconds [ 335.203901][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 335.211921][ C1] lec:lec_tx_timeout: lec0 [ 335.216583][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 340.223901][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 340.231921][ C1] lec:lec_tx_timeout: lec0 [ 340.236521][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 340.591451][T15158] __nla_validate_parse: 10 callbacks suppressed [ 340.591475][T15158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2633'. [ 340.609805][T15157] netlink: 'syz.4.2636': attribute type 1 has an invalid length. [ 340.719723][T15162] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 340.734053][T15162] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 340.864712][T15175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2641'. [ 340.932548][T15175] netlink: 'syz.3.2641': attribute type 11 has an invalid length. [ 340.944261][T15175] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2641'. [ 341.173770][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2649'. [ 341.182894][T15198] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2649'. [ 341.306139][T15200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2650'. [ 341.536407][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'. [ 341.557694][T15211] netlink: 'syz.3.2652': attribute type 1 has an invalid length. [ 341.997563][T15219] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 342.036661][T15219] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 342.172905][T15246] tipc: Enabled bearer , priority 0 [ 342.196702][T15246] syzkaller0: entered promiscuous mode [ 342.222582][T15246] syzkaller0: entered allmulticast mode [ 342.508089][T15244] tipc: Resetting bearer [ 342.556655][T15244] tipc: Disabling bearer [ 342.874069][T15279] bond10: entered promiscuous mode [ 342.879448][T15279] bond10: entered allmulticast mode [ 342.885764][T15279] 8021q: adding VLAN 0 to HW filter on device bond10 [ 342.900004][T15288] pim6reg: left allmulticast mode [ 342.933700][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 342.944151][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 342.954594][T15284] tipc: Enabling of bearer rejected, already enabled [ 343.011780][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 343.665997][T15328] netlink: 'syz.0.2679': attribute type 29 has an invalid length. [ 343.686201][T15328] netlink: 'syz.0.2679': attribute type 29 has an invalid length. [ 343.694585][T15329] netlink: 'syz.0.2679': attribute type 29 has an invalid length. [ 343.702780][T15328] netlink: 'syz.0.2679': attribute type 29 has an invalid length. [ 344.332927][T15359] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 344.879681][T15391] netlink: 'syz.3.2702': attribute type 1 has an invalid length. [ 345.215229][T15410] veth0_to_team: entered promiscuous mode [ 345.221027][T15410] veth0_to_team: entered allmulticast mode [ 345.243371][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 345.251502][ C1] lec:lec_tx_timeout: lec0 [ 345.256240][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 345.415675][T15422] tipc: Can't bind to reserved service type 0 [ 346.192172][T15445] __nla_validate_parse: 8 callbacks suppressed [ 346.192194][T15445] netlink: 4116 bytes leftover after parsing attributes in process `syz.0.2718'. [ 346.230256][T15450] x_tables: duplicate underflow at hook 3 [ 346.287733][T15445] vlan2: entered allmulticast mode [ 346.293132][T15445] hsr0: entered allmulticast mode [ 346.302176][T15445] hsr_slave_0: entered allmulticast mode [ 346.308502][T15445] hsr_slave_1: entered allmulticast mode [ 346.606160][T15471] bond14: entered allmulticast mode [ 346.611746][T15471] 8021q: adding VLAN 0 to HW filter on device bond14 [ 346.619431][T15471] bridge0: port 1(bond14) entered blocking state [ 346.626090][T15471] bridge0: port 1(bond14) entered disabled state [ 346.636476][T15471] bond14: entered promiscuous mode [ 347.490747][T15480] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2730'. [ 347.521650][T15477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2729'. [ 347.631162][T15486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2734'. [ 347.637887][T15488] dvmrp0: entered allmulticast mode [ 347.663703][T15486] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 347.673843][T15486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2734'. [ 347.723786][T15486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2734'. [ 347.864347][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2739'. [ 347.876295][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2739'. [ 347.890537][T15502] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 347.932380][T15513] netlink: 'syz.2.2742': attribute type 2 has an invalid length. [ 347.955263][T15513] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2742'. [ 348.131263][T15519] syzkaller0: entered promiscuous mode [ 348.137663][T15519] syzkaller0: entered allmulticast mode [ 348.316602][T15538] netlink: 'syz.0.2750': attribute type 6 has an invalid length. [ 348.331694][T15535] tipc: Trying to set illegal importance in message [ 348.363162][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2751'. [ 348.445749][T15546] netlink: 'syz.1.2752': attribute type 83 has an invalid length. [ 348.456304][T15544] netlink: 'syz.1.2752': attribute type 83 has an invalid length. [ 350.263528][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 350.271759][ C1] lec:lec_tx_timeout: lec0 [ 350.281624][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 350.527043][T15587] FAULT_INJECTION: forcing a failure. [ 350.527043][T15587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.573199][T15587] CPU: 1 UID: 0 PID: 15587 Comm: syz.2.2763 Not tainted syzkaller #0 PREEMPT(full) [ 350.573231][T15587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.573243][T15587] Call Trace: [ 350.573252][T15587] [ 350.573261][T15587] dump_stack_lvl+0x189/0x250 [ 350.573289][T15587] ? __pfx____ratelimit+0x10/0x10 [ 350.573324][T15587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.573345][T15587] ? __pfx__printk+0x10/0x10 [ 350.573382][T15587] should_fail_ex+0x414/0x560 [ 350.573409][T15587] _copy_from_user+0x2d/0xb0 [ 350.573453][T15587] __copy_msghdr+0x3c5/0x5b0 [ 350.573488][T15587] ___sys_sendmsg+0x1a5/0x2a0 [ 350.573519][T15587] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.573593][T15587] ? __fget_files+0x2a/0x420 [ 350.573615][T15587] ? __fget_files+0x3a0/0x420 [ 350.573652][T15587] __sys_sendmmsg+0x227/0x430 [ 350.573686][T15587] ? __pfx___sys_sendmmsg+0x10/0x10 [ 350.573727][T15587] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 350.573769][T15587] ? ksys_write+0x22a/0x250 [ 350.573793][T15587] ? __pfx_ksys_write+0x10/0x10 [ 350.573820][T15587] __x64_sys_sendmmsg+0xa0/0xc0 [ 350.573851][T15587] do_syscall_64+0xfa/0xfa0 [ 350.573878][T15587] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.573905][T15587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.573925][T15587] ? clear_bhb_loop+0x60/0xb0 [ 350.573949][T15587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.573968][T15587] RIP: 0033:0x7ff66278eec9 [ 350.573986][T15587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.574005][T15587] RSP: 002b:00007ff66358b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 350.574027][T15587] RAX: ffffffffffffffda RBX: 00007ff6629e5fa0 RCX: 00007ff66278eec9 [ 350.574042][T15587] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 350.574055][T15587] RBP: 00007ff66358b090 R08: 0000000000000000 R09: 0000000000000000 [ 350.574067][T15587] R10: 0000000020000810 R11: 0000000000000246 R12: 0000000000000001 [ 350.574079][T15587] R13: 00007ff6629e6038 R14: 00007ff6629e5fa0 R15: 00007ffd97e2c038 [ 350.574116][T15587] [ 351.196312][T15617] ip6gre0: Master is either lo or non-ether device [ 351.536062][T15636] FAULT_INJECTION: forcing a failure. [ 351.536062][T15636] name failslab, interval 1, probability 0, space 0, times 0 [ 351.550493][T15636] CPU: 0 UID: 0 PID: 15636 Comm: syz.4.2779 Not tainted syzkaller #0 PREEMPT(full) [ 351.550522][T15636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.550535][T15636] Call Trace: [ 351.550544][T15636] [ 351.550552][T15636] dump_stack_lvl+0x189/0x250 [ 351.550579][T15636] ? __pfx____ratelimit+0x10/0x10 [ 351.550608][T15636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.550636][T15636] ? __pfx__printk+0x10/0x10 [ 351.550665][T15636] ? __pfx___might_resched+0x10/0x10 [ 351.550693][T15636] ? fs_reclaim_acquire+0x7d/0x100 [ 351.550725][T15636] should_fail_ex+0x414/0x560 [ 351.550753][T15636] should_failslab+0xa8/0x100 [ 351.550779][T15636] __kmalloc_cache_noprof+0x70/0x3d0 [ 351.550802][T15636] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 351.550833][T15636] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 351.550867][T15636] mptcp_sendmsg_fastopen+0x17d/0x580 [ 351.550900][T15636] mptcp_sendmsg+0x1774/0x1980 [ 351.550930][T15636] ? __pfx___might_resched+0x10/0x10 [ 351.550959][T15636] ? __lock_acquire+0xab9/0xd20 [ 351.551007][T15636] ? aa_sk_perm+0x81e/0x950 [ 351.551038][T15636] ? __pfx_aa_sk_perm+0x10/0x10 [ 351.551061][T15636] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 351.551092][T15636] ? sock_rps_record_flow+0x19/0x410 [ 351.551122][T15636] ? inet_sendmsg+0x2f4/0x370 [ 351.551145][T15636] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.551177][T15636] __sock_sendmsg+0x19c/0x270 [ 351.551204][T15636] ____sys_sendmsg+0x52d/0x830 [ 351.551250][T15636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.551291][T15636] ? import_iovec+0x74/0xa0 [ 351.551325][T15636] ___sys_sendmsg+0x21f/0x2a0 [ 351.551365][T15636] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.551442][T15636] ? __fget_files+0x2a/0x420 [ 351.551465][T15636] ? __fget_files+0x3a0/0x420 [ 351.551503][T15636] __sys_sendmmsg+0x227/0x430 [ 351.551540][T15636] ? __pfx___sys_sendmmsg+0x10/0x10 [ 351.551581][T15636] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 351.551622][T15636] ? ksys_write+0x22a/0x250 [ 351.551647][T15636] ? __pfx_ksys_write+0x10/0x10 [ 351.551677][T15636] __x64_sys_sendmmsg+0xa0/0xc0 [ 351.551708][T15636] do_syscall_64+0xfa/0xfa0 [ 351.551735][T15636] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.551764][T15636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.551783][T15636] ? clear_bhb_loop+0x60/0xb0 [ 351.551808][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.551828][T15636] RIP: 0033:0x7fb37838eec9 [ 351.551848][T15636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.551865][T15636] RSP: 002b:00007fb379141038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 351.551888][T15636] RAX: ffffffffffffffda RBX: 00007fb3785e5fa0 RCX: 00007fb37838eec9 [ 351.551902][T15636] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 351.551915][T15636] RBP: 00007fb379141090 R08: 0000000000000000 R09: 0000000000000000 [ 351.551928][T15636] R10: 0000000020000810 R11: 0000000000000246 R12: 0000000000000001 [ 351.551941][T15636] R13: 00007fb3785e6038 R14: 00007fb3785e5fa0 R15: 00007ffe869373e8 [ 351.551980][T15636] [ 351.712727][T15647] netlink: 'syz.0.2783': attribute type 21 has an invalid length. [ 351.944565][T15647] __nla_validate_parse: 3 callbacks suppressed [ 351.944586][T15647] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2783'. [ 351.968186][T15657] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2785'. [ 352.089781][T15666] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2785'. [ 352.465685][T15685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2792'. [ 352.521750][T15689] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2795'. [ 352.645005][T15696] netlink: 'syz.4.2797': attribute type 11 has an invalid length. [ 352.665846][T15699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.678181][T15700] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2798'. [ 352.688920][T15696] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2797'. [ 352.700905][T15700] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2798'. [ 352.713947][T15700] netlink: 'syz.1.2798': attribute type 5 has an invalid length. [ 352.722806][T15700] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2798'. [ 353.289576][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2809'. [ 353.540831][T15751] netlink: 'syz.2.2813': attribute type 4 has an invalid length. [ 354.219318][T15784] bond15 (unregistering): Released all slaves [ 354.554825][T15815] Cannot find del_set index 49151 as target [ 355.076501][ T1132] tipc: Subscription rejected, illegal request [ 355.091880][T15829] openvswitch: netlink: Flow key attr not present in new flow. [ 355.159569][T15833] atomic_op ffff888041d95998 conn xmit_atomic 0000000000000000 [ 355.293441][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 355.301684][ C1] lec:lec_tx_timeout: lec0 [ 355.306499][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 355.438248][T15847] netlink: 'syz.2.2843': attribute type 2 has an invalid length. [ 355.765169][T15856] nbd: illegal input index -8454144 [ 355.798124][T15856] sctp: [Deprecated]: syz.0.2845 (pid 15856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.798124][T15856] Use struct sctp_sack_info instead [ 356.116145][T15866] bond11 (unregistering): Released all slaves [ 356.221779][T15871] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 356.469375][T15886] netlink: 'syz.3.2855': attribute type 3 has an invalid length. [ 356.526308][T15886] ------------[ cut here ]------------ [ 356.532104][T15886] WARNING: CPU: 0 PID: 15886 at net/ipv4/route.c:1270 ip_rt_bug+0x2c/0x110 [ 356.540811][T15886] Modules linked in: [ 356.545138][T15886] CPU: 0 UID: 0 PID: 15886 Comm: syz.3.2855 Not tainted syzkaller #0 PREEMPT(full) [ 356.554598][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 356.564734][T15886] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 356.569724][T15886] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb 31 0e f8 66 90 e8 b4 31 0e f8 31 ff 48 89 de ba 02 00 00 00 e8 35 f0 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 41 bc 96 01 cc f3 0f [ 356.589428][T15886] RSP: 0018:ffffc9001aa9f180 EFLAGS: 00010286 [ 356.595685][T15886] RAX: 15929aeaac74f300 RBX: ffff888071f07640 RCX: 15929aeaac74f300 [ 356.603911][T15886] RDX: 0000000000000002 RSI: ffffffff8d7ddd10 RDI: ffffffff8bc03b60 [ 356.611932][T15886] RBP: 0000000000000001 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 356.620068][T15886] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: dffffc0000000000 [ 356.628151][T15886] R13: dffffc0000000000 R14: ffff888071f07640 R15: ffff8881452d9e00 [ 356.636191][T15886] FS: 00007f5122de26c0(0000) GS:ffff888125d3b000(0000) knlGS:0000000000000000 [ 356.645189][T15886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.651811][T15886] CR2: 00007ffdabbc8ff8 CR3: 000000004e3ae000 CR4: 00000000003526f0 [ 356.660033][T15886] Call Trace: [ 356.663464][T15886] [ 356.666435][T15886] ip_push_pending_frames+0xbe/0x150 [ 356.671771][T15886] __icmp_send+0xfc3/0x1320 [ 356.676354][T15886] ? __icmp_send+0x1b9/0x1320 [ 356.681050][T15886] ? __pfx___icmp_send+0x10/0x10 [ 356.686049][T15886] ? pskb_expand_head+0xb3a/0x1150 [ 356.691200][T15886] ip_options_compile+0x80/0xb0 [ 356.696102][T15886] ip_rcv_finish_core+0xaa2/0x1c00 [ 356.701429][T15886] ip_rcv_finish+0x14c/0x2f0 [ 356.706079][T15886] NF_HOOK+0x30c/0x3a0 [ 356.710168][T15886] ? __pfx_ip_rcv_finish+0x10/0x10 [ 356.715330][T15886] ? NF_HOOK+0x9a/0x3a0 [ 356.719526][T15886] ? __pfx_NF_HOOK+0x10/0x10 [ 356.724158][T15886] ? ip_rcv_core+0x7f7/0xd00 [ 356.728873][T15886] ? __pfx_ip_rcv_finish+0x10/0x10 [ 356.734045][T15886] ? __pfx_ip_rcv+0x10/0x10 [ 356.738620][T15886] __netif_receive_skb+0x143/0x380 [ 356.743821][T15886] ? netif_receive_skb+0x115/0x790 [ 356.748974][T15886] netif_receive_skb+0x1cb/0x790 [ 356.753995][T15886] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 356.759957][T15886] ? __pfx_netif_receive_skb+0x10/0x10 [ 356.765522][T15886] ? tun_rx_batched+0x160/0x730 [ 356.770457][T15886] tun_rx_batched+0x1b9/0x730 [ 356.775201][T15886] ? __lock_acquire+0xab9/0xd20 [ 356.780114][T15886] ? __pfx_tun_rx_batched+0x10/0x10 [ 356.785663][T15886] ? tun_get_user+0x272f/0x3e90 [ 356.790664][T15886] tun_get_user+0x2b65/0x3e90 [ 356.795429][T15886] ? tun_get_user+0x6f6/0x3e90 [ 356.800278][T15886] ? tun_get_user+0x272f/0x3e90 [ 356.805217][T15886] ? aa_file_perm+0x44d/0x1550 [ 356.810030][T15886] ? __pfx_tun_get_user+0x10/0x10 [ 356.815255][T15886] ? ref_tracker_alloc+0x318/0x460 [ 356.820409][T15886] ? __lock_acquire+0xab9/0xd20 [ 356.825314][T15886] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 356.830793][T15886] ? tun_get+0x1c/0x2f0 [ 356.835252][T15886] ? tun_get+0x1c/0x2f0 [ 356.839498][T15886] ? tun_get+0x1c/0x2f0 [ 356.843700][T15886] tun_chr_write_iter+0x113/0x200 [ 356.848848][T15886] vfs_write+0x5c9/0xb30 [ 356.853153][T15886] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 356.858733][T15886] ? __pfx_vfs_write+0x10/0x10 [ 356.863554][T15886] ? __fget_files+0x2a/0x420 [ 356.868197][T15886] ksys_write+0x145/0x250 [ 356.872588][T15886] ? __pfx_ksys_write+0x10/0x10 [ 356.877517][T15886] ? do_syscall_64+0xbe/0xfa0 [ 356.882210][T15886] do_syscall_64+0xfa/0xfa0 [ 356.886779][T15886] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.892115][T15886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.898248][T15886] ? clear_bhb_loop+0x60/0xb0 [ 356.902973][T15886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.909010][T15886] RIP: 0033:0x7f5121f8d97f [ 356.913487][T15886] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 356.933252][T15886] RSP: 002b:00007f5122de2000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 356.941920][T15886] RAX: ffffffffffffffda RBX: 00007f51221e5fa0 RCX: 00007f5121f8d97f [ 356.950205][T15886] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 356.958296][T15886] RBP: 00007f5122011f91 R08: 0000000000000000 R09: 0000000000000000 [ 356.966310][T15886] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 356.974337][T15886] R13: 00007f51221e6038 R14: 00007f51221e5fa0 R15: 00007ffe715dc718 [ 356.982486][T15886] [ 356.985557][T15886] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 356.992848][T15886] CPU: 0 UID: 0 PID: 15886 Comm: syz.3.2855 Not tainted syzkaller #0 PREEMPT(full) [ 357.002215][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.012271][T15886] Call Trace: [ 357.015555][T15886] [ 357.018495][T15886] dump_stack_lvl+0x99/0x250 [ 357.023112][T15886] ? __asan_memcpy+0x40/0x70 [ 357.027752][T15886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.032962][T15886] ? __pfx__printk+0x10/0x10 [ 357.037582][T15886] vpanic+0x281/0x750 [ 357.041577][T15886] ? __pfx__printk+0x10/0x10 [ 357.046173][T15886] ? __pfx_vpanic+0x10/0x10 [ 357.050697][T15886] ? is_bpf_text_address+0x26/0x2b0 [ 357.055922][T15886] panic+0xb9/0xc0 [ 357.059659][T15886] ? __pfx_panic+0x10/0x10 [ 357.064206][T15886] __warn+0x31b/0x4b0 [ 357.068204][T15886] ? ip_rt_bug+0x2c/0x110 [ 357.072543][T15886] ? ip_rt_bug+0x2c/0x110 [ 357.076880][T15886] report_bug+0x2be/0x4f0 [ 357.081223][T15886] ? ip_rt_bug+0x2c/0x110 [ 357.085560][T15886] ? ip_rt_bug+0x2c/0x110 [ 357.089899][T15886] ? ip_rt_bug+0x2e/0x110 [ 357.094237][T15886] handle_bug+0x84/0x160 [ 357.098497][T15886] exc_invalid_op+0x1a/0x50 [ 357.103008][T15886] asm_exc_invalid_op+0x1a/0x20 [ 357.108036][T15886] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 357.112985][T15886] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb 31 0e f8 66 90 e8 b4 31 0e f8 31 ff 48 89 de ba 02 00 00 00 e8 35 f0 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 41 bc 96 01 cc f3 0f [ 357.132601][T15886] RSP: 0018:ffffc9001aa9f180 EFLAGS: 00010286 [ 357.138681][T15886] RAX: 15929aeaac74f300 RBX: ffff888071f07640 RCX: 15929aeaac74f300 [ 357.147106][T15886] RDX: 0000000000000002 RSI: ffffffff8d7ddd10 RDI: ffffffff8bc03b60 [ 357.155103][T15886] RBP: 0000000000000001 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 357.163175][T15886] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: dffffc0000000000 [ 357.171160][T15886] R13: dffffc0000000000 R14: ffff888071f07640 R15: ffff8881452d9e00 [ 357.179344][T15886] ip_push_pending_frames+0xbe/0x150 [ 357.184748][T15886] __icmp_send+0xfc3/0x1320 [ 357.189276][T15886] ? __icmp_send+0x1b9/0x1320 [ 357.193977][T15886] ? __pfx___icmp_send+0x10/0x10 [ 357.198961][T15886] ? pskb_expand_head+0xb3a/0x1150 [ 357.204094][T15886] ip_options_compile+0x80/0xb0 [ 357.208958][T15886] ip_rcv_finish_core+0xaa2/0x1c00 [ 357.214106][T15886] ip_rcv_finish+0x14c/0x2f0 [ 357.218710][T15886] NF_HOOK+0x30c/0x3a0 [ 357.222911][T15886] ? __pfx_ip_rcv_finish+0x10/0x10 [ 357.228129][T15886] ? NF_HOOK+0x9a/0x3a0 [ 357.232299][T15886] ? __pfx_NF_HOOK+0x10/0x10 [ 357.236900][T15886] ? ip_rcv_core+0x7f7/0xd00 [ 357.241501][T15886] ? __pfx_ip_rcv_finish+0x10/0x10 [ 357.246668][T15886] ? __pfx_ip_rcv+0x10/0x10 [ 357.251179][T15886] __netif_receive_skb+0x143/0x380 [ 357.256302][T15886] ? netif_receive_skb+0x115/0x790 [ 357.261423][T15886] netif_receive_skb+0x1cb/0x790 [ 357.266378][T15886] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 357.272202][T15886] ? __pfx_netif_receive_skb+0x10/0x10 [ 357.277674][T15886] ? tun_rx_batched+0x160/0x730 [ 357.282540][T15886] tun_rx_batched+0x1b9/0x730 [ 357.287238][T15886] ? __lock_acquire+0xab9/0xd20 [ 357.292106][T15886] ? __pfx_tun_rx_batched+0x10/0x10 [ 357.297332][T15886] ? tun_get_user+0x272f/0x3e90 [ 357.302207][T15886] tun_get_user+0x2b65/0x3e90 [ 357.306899][T15886] ? tun_get_user+0x6f6/0x3e90 [ 357.311673][T15886] ? tun_get_user+0x272f/0x3e90 [ 357.316629][T15886] ? aa_file_perm+0x44d/0x1550 [ 357.321420][T15886] ? __pfx_tun_get_user+0x10/0x10 [ 357.326499][T15886] ? ref_tracker_alloc+0x318/0x460 [ 357.331719][T15886] ? __lock_acquire+0xab9/0xd20 [ 357.336725][T15886] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 357.342223][T15886] ? tun_get+0x1c/0x2f0 [ 357.346520][T15886] ? tun_get+0x1c/0x2f0 [ 357.350769][T15886] ? tun_get+0x1c/0x2f0 [ 357.354941][T15886] tun_chr_write_iter+0x113/0x200 [ 357.359987][T15886] vfs_write+0x5c9/0xb30 [ 357.364252][T15886] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 357.369818][T15886] ? __pfx_vfs_write+0x10/0x10 [ 357.374604][T15886] ? __fget_files+0x2a/0x420 [ 357.379235][T15886] ksys_write+0x145/0x250 [ 357.384007][T15886] ? __pfx_ksys_write+0x10/0x10 [ 357.388868][T15886] ? do_syscall_64+0xbe/0xfa0 [ 357.393564][T15886] do_syscall_64+0xfa/0xfa0 [ 357.398087][T15886] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.403343][T15886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.409421][T15886] ? clear_bhb_loop+0x60/0xb0 [ 357.414550][T15886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.420457][T15886] RIP: 0033:0x7f5121f8d97f [ 357.424881][T15886] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 357.444588][T15886] RSP: 002b:00007f5122de2000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 357.453024][T15886] RAX: ffffffffffffffda RBX: 00007f51221e5fa0 RCX: 00007f5121f8d97f [ 357.460998][T15886] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 357.468977][T15886] RBP: 00007f5122011f91 R08: 0000000000000000 R09: 0000000000000000 [ 357.476956][T15886] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 357.484940][T15886] R13: 00007f51221e6038 R14: 00007f51221e5fa0 R15: 00007ffe715dc718 [ 357.492940][T15886] [ 357.496228][T15886] Kernel Offset: disabled [ 357.500596][T15886] Rebooting in 86400 seconds..