last executing test programs: 2.695120593s ago: executing program 2 (id=5319): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100, r2}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}}}, {{0xa, 0x0, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.591911171s ago: executing program 2 (id=5323): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000001180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b703000000000100850000004600000095"], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x8918, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}}, 0x4044000) 2.224730217s ago: executing program 1 (id=5327): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000047000701feffffffffff9de212cb0000080002800400ef803e5f7b154806d7e3be79b5bb40be73a3c0d2baa2f4aa80c859a289f5dc176645b82d62a574fc8cb85bc8d3961bcbbf97d8e820cb8e59baea7175e58c52153d21ab840fc46baa9d96d151a314ec8c6d336762a00aba932a0555348992ec4aff6b88b435bc899b40393cf262b8d1d83ae8d5164a5547af694ff9c8a1ae8aa780e6b0280ce11fa25ed665e90264dd7237a6b0522bf5b20c1d30435970"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000100)="99", 0x1}, {&(0x7f00000008c0)='|', 0x1}, {&(0x7f00000000c0)="fa9c", 0x2}, {&(0x7f0000000180)="b114fa", 0x3}, {&(0x7f0000000440)='\t', 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x2, 0x4048890) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@random="61fe71b72b5f", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 2.15978864s ago: executing program 1 (id=5328): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000140), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f00000000c0)=0x3, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x10001) close(r0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf250305c0fd99cd9f3cd7000000"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r8, 0x10c, 0x1, &(0x7f0000000000)=0xffffff07, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000040)={0x9}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) 2.143021937s ago: executing program 2 (id=5329): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000040035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.981577777s ago: executing program 2 (id=5332): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2ddbf525792c2319e476ec015d0d52c184378dbfc0b95b374a3df6da142d80020073be8b2f918e2b728b5688f4f4a9845fed25fe10ead35f7ad79ee3fba4fb9b79e73a6b33b69357a6c9a67f2613a47fcf4e754087fe020bc4e0dc152ea2a3f47ba63d003d5e5ea01ba925a6a032d63ae7e8dd539b240ebe699ff6428b7c88e1c846e1e7469cee760249b8dc50817aad678f54e2627797d8c1fd0031b0", 0x9d}, {&(0x7f0000000100)="da1b052c54e31765e520f1c1e393cfca381e12d68a253125927b834653f69eff1784d640c6354250e1146c80c730803fcb284483998b97dc955545cd595888d3337d62a69caef99fe6e3f721bdfe4d2bbc363db77519", 0x56}, {&(0x7f0000000180)="bf2268b7c6982181470510e6fbfaaa29e8bb869c82ba7026f60797944db1e727d31e1a68453774d3d03c66710b5e9a651fee6e86950fd3ddcfde4a68ed9ccd3657fbce19c54e0972b30ef0e821", 0x4d}, {&(0x7f0000000480)="c186a75d4684915578a4b29ab65bf1b1f10fa292c4142fa5a53df0fc0b7d3532dcaf53af91c390f9c58ff9af464cea275bf415cc63ebb5e4e53fcf2a0a75ffb0d7519ae49b027347b57238fd8e464421005acf871dccbe0e71bab4c724716f423a48284a708edaf404778e6be79d5a5d6b3bf2ca75675f564abefba5dbbd1451e774f4e05987309381a6fbc795", 0x8d}, {&(0x7f0000000440)="bed2eeb210022e857710aed084a29205370065f94678ca324e30090e2206989246ac8887a0", 0x25}, {&(0x7f00000002c0)="b39903b86a14a800fa32d0e1edeaea9f7cfcd5a580467de9168de5256c07ac5844632c889ad938e1a0c7a1842cfeabcabf8db5d2dc3cf9b09ac862801f8d3b4512c81c95c78448c78cf852064fc884714785a630c8dbbf4083056ccdc101d6969bef0b44e810e80e800bc44c66e4b26c4bfc430ff763674fc0304981cf0951b032715a6fb628fc2e057da6f19532a519fb7c2b9d0b61a56705dca3866d1558b3b4f7bf302049a13392f9c808e7505ecd793b5ec0095756a0f8190bafa7f31603e779848c484fe5e036e4b5bf6fb38a17f7b40583cf0f5de36dcfeba36414dbec55e106", 0xe3}], 0x6}, 0x0) 1.973337912s ago: executing program 3 (id=5333): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x1000000}, [@loopback]}}}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000009ac6ae89185200000000feffffff850000007b000000b7080000000000007baaf8ff00000000b508000000ecffff7a8af0ff00000000bfa100000000000007010000f8ffffffbfa40000f400000007040000f0ffffffb8020000080000001823000036da043e3c7d21898cbbb842d60391b0f814ac05df00000000cd06235a0616bdde9d8fd0de5958ae2d05c0f7b6ba102a35fb6fd39b865b59323c2df616729af116c7053b0156672b3526c8dc838909184bfdc4f7f49a7a1b22a6a905a656fa48530711be2452", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000600)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000028c0)={0x0, 0x0}) recvmmsg$unix(r4, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000002640)=""/223, 0xdf}, {&(0x7f0000002740)=""/144, 0x90}], 0x5}}], 0x1, 0x161, &(0x7f0000002900)={r7, r8+60000000}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r6, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) 1.821217263s ago: executing program 2 (id=5334): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) listen(r2, 0x800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000ac1414aa000000000000000000000000e00000010000000000000000000000004e2000004e2300000a00100033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000030000000000000004000000000000000000000000000000fcffffffffffffffd309000000000000ffffffff000000000000000000000000fdfe42ece582c2ed468fd91a3ae2621200000000000000000000000000000000fdffffffb56b6e00"/128], 0xb8}}, 0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x3b, 0x0, 0x0, 0x1f00c00e}, 0x240040c5) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x1, 0x0}, &(0x7f0000000500)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db7295", 0xa}], 0x2}, 0x0) 1.820698796s ago: executing program 4 (id=5335): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x30) epoll_create1(0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r3 = socket$inet(0x10, 0x3, 0x0) r4 = socket(0x1f, 0x803, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00000007000000570080776296292d2c22123dff04ed705c125daede430eab4b2d81eed0c24014763ee6cabcfdc88cebcc0cd7676dbebafd92e1385613ead7f47ab18e4870343167ff094670b473ad371bf782b41e588f8292ca1477f35b60bcca46"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures}) 1.80955668s ago: executing program 1 (id=5336): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) preadv(r4, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) close(0x3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x22, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x74}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x3}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1.627356998s ago: executing program 3 (id=5338): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x4, @void}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) (async) r5 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, 0x0, &(0x7f0000000080)) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r3, r4, 0x4, r0}, 0x10) 1.623326378s ago: executing program 4 (id=5339): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48814}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000000)=0x15b2bec9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x83}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="0100ffffffff00000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x64}}, 0x0) 1.536507102s ago: executing program 1 (id=5340): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="5475d738d38318ab0400"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c000}, 0x44040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket(0x10, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r6 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1.237930882s ago: executing program 1 (id=5342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) unshare(0x69a04c8e98d914be) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x10180) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.233153394s ago: executing program 3 (id=5343): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000070035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.103360719s ago: executing program 4 (id=5344): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) close(r1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) (async) close(r1) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) (async) 1.095327955s ago: executing program 3 (id=5345): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x11, 0x4b0, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x3e0, 0x2e8, 0x2e8, 0x3e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x260, 0x288, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, '\x00', {0xff}, 0xc, 0x17}}, @common=@inet=@hashlimit2={{0x150}, {'batadv0\x00', {0x5, 0x3, 0x24, 0x9, 0xd353, 0x10001, 0x0, 0x40, 0x40}, {0x5a2f}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00], [0x0, 0xffffffff], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x2c, 0x0, 0x1, 0x7b}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0xa, 0x0, 0x1, [0xff, 0x6, 0xff, 0x4608, 0x3, 0xe, 0x2, 0x8000, 0x4, 0x400, 0x800, 0x0, 0x8, 0x7, 0x0, 0x50], 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0x0, 0x8, 0x400, 'snmp\x00', 'syz1\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 1.044117648s ago: executing program 4 (id=5347): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) 975.673167ms ago: executing program 1 (id=5348): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff58, &(0x7f0000000000), 0x0, 0x0, 0x4052, 0x8, 0x0, 0x0}}, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000640)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) write$nci(r1, 0x0, 0x0) write$nci(r1, &(0x7f0000000280)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x2, {0x0, 0x4}}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000"], 0x0, 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x24000000) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r7, 0x0, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) 938.226876ms ago: executing program 3 (id=5349): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="bbad8b030a000200bb"], 0x28}}, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) 911.810641ms ago: executing program 2 (id=5350): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004091}, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000200)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000240)='[\\\x00', 0x4000, &(0x7f0000000280)={@_ha_fsid={[0xfffffff8, 0x4]}, {0x2, 0x2, 0x9, 0x9a4a000000000000}}, 0x4, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000380)=""/103, &(0x7f0000000400)=0x67) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r3, &(0x7f0000000440)="d2dde55814a7ceaa047d52d62f4ab67980ad0ad956d0918941b820d10a8339f795e02141ee890e97dfe013adadc36430d05a3071619f8af0ec4dde8e34be1fa239953e37cedb59b3ec2303db0d8ed8862b266e2edee37b06c0334dbe6842763611d73095a4288f4d19213916b8d6e20ac6a7120aac42edaa83a0913f3b683b1cdaa128b9539710d9ebcd9dfa24fd1060c59a219aa55916d7f53801881725e1767580fbff25c1d7cae7f5c954e5e6c449c2504dda681c8d27ccd201d4ebfd", &(0x7f0000000500)=""/195, 0x4}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWCHAIN={0x118, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0xf6, 0xc, "1ae8081c5a7502e190d6d0e62bb4f57a26aa698b4a9d3e356c9a7acc6177149f1bbf61fa533691da4fe30d861f15242e6f49b69395dc13cc2738dedee7301be6b8bddfb63382861b91e1ee5816f3ae6425021908f84580eb7af5025d386b66b38b213d5c809b4b6afda86273b82b064ecf1d4b4f926c2a55b05c802430fcd53d264b8cc62431c39853c34c06904bca5ec9cae3dea325eb490e98cb9f3fa7215252a8ffc6487ffb285319f22378ebff6b9ae8176140d0b47a3ca30600740d5b0772d6001c512a192c98e09169b554eba2a15d29e71c5385a95ef9215b4c7eb03abbc2684604135090f073b4abe4725f426284"}]}, @NFT_MSG_NEWTABLE={0x74, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x14, 0x6, "495a5641e94f98c616f45541ed4a7e7f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x3f, 0xc, "cc31a8efe5e66095fb942d12258c221e796cf6f1239c2ef15f39d8a0030935c40a2ee8952ca69756bded65af21afe6315280c4b0ed03f40802b1b9"}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x402, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x24c}, 0x1, 0x0, 0x0, 0x8014}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0xe, 0x8, 0x77, @dev={0xfe, 0x80, '\x00', 0x12}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x10, 0x80000001}}) sendmsg$nl_route(r3, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=@ipv6_delroute={0x7c, 0x19, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x20, 0x20, 0x9, 0xfd, 0x4, 0x0, 0x3, 0x1000}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_METRICS={0x19, 0x8, 0x0, 0x1, "90866c3df12e8e1a1028b325ce2b1c9be9baac943d"}, @RTA_EXPIRES={0x8, 0x17, 0xe8}, @RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_PREF={0x5, 0x14, 0xb}, @RTA_PREF={0x5}, @RTA_MARK={0x8, 0x10, 0x46c}, @RTA_EXPIRES={0x8, 0x17, 0x3}]}, 0x7c}}, 0x4004000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r3) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000c00)=0x0, &(0x7f0000000c40)=0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xec, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x54}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xec}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008040) write$ppp(r3, &(0x7f0000000e00)="32b6c60356b626a134f9ddde8dc182c2c2291c31b8243f6451152c615c0c9de4f14d772a473a6384a1747e6124c0339df5e14e35c5aefa928ef7e3239284d9c08fb886c3b448e3db69d53ff76a1f7a", 0x4f) recvfrom(r3, &(0x7f0000000e80), 0x0, 0x40012023, &(0x7f0000000ec0)=@generic={0x1d, "6e3426ab88faccb8a4a11b999b7fb36393e41b0d687518a652538dd09b9ecd0f53c02a5f5e16d436de114c2c439997bb5df6c89be6a0cb1002684bc0fdba8ac01fc8704817a95623eb4f845d0787a612240f5a3ca313c4b95787637aca1cb8411de7096b43fe634d95c48df56c3a289d5f74aea2467f65fc8ea9fa279283"}, 0x80) bind$alg(r3, &(0x7f0000000f40)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r7 = socket(0x1b, 0x4, 0x10000) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x5c, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)=@ipv4_newrule={0x68, 0x20, 0x400, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x80, 0x10, 0x8, 0x0, 0x0, 0x0, 0x10013}, [@FRA_DST={0x8, 0x1, @private=0xa010101}, @FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e24}}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7fffffff}, @FRA_DST={0x8, 0x1, @remote}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e22}}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x2}, @FRA_SRC={0x8, 0x2, @multicast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000044}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000001280)={0x2, 0x4e20, @private=0xa010102}, 0x10) write$cgroup_freezer_state(r3, &(0x7f00000012c0)='FREEZING\x00', 0x9) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000001300)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001340)={0x3, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001380)=r10, 0x4) ioctl$NILFS_IOCTL_GET_SUINFO(r7, 0x80186e84, &(0x7f0000001400)={&(0x7f00000013c0)=[{0x9, 0x6, 0x1}, {0x7, 0x7}], 0x2, 0x10, 0x9, 0xff}) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000001440)=0x1, 0x4) 835.932771ms ago: executing program 4 (id=5351): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2c020400) bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100014004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x980) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0xd, 0x24}, 0xfffffffffffffe3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x19, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000e3e7000000000000d4000000851000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018000000050000000000000001000000180100002020732500000008002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000200008500000006000000257308000400000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0xc2, &(0x7f00000002c0)=""/194, 0x41000, 0x4, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x0, 0xb0c, 0xfffff1da}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r6], &(0x7f0000000640)=[{0x2, 0x3, 0x9, 0x9}, {0x4, 0x3, 0xd, 0x8}, {0x3, 0x1, 0xd, 0x3}, {0x3, 0x3, 0x6, 0x7}], 0x10, 0x43b3}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) getpeername$unix(r7, &(0x7f00000004c0), &(0x7f0000000540)=0x6e) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r8) sendmsg$alg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="02d0fd4eb277ac3c3b5a57727f9786e031adf49205f3f7cb6e3990b98d1dced9d2", 0x21}], 0x1, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040081}, 0x4004080) 772.660523ms ago: executing program 3 (id=5352): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x2, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x4040) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x2, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x4040) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="f7af24bd70000e000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596f8d2c561caaa1084771e6f3ea6b67f18fb9a417e95479db73d446fa06daf7a4e3a6d93b186b035fecf7ee8"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) 567.736284ms ago: executing program 4 (id=5354): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x28) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bond\x00', 0x10) shutdown(r0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @dev}, &(0x7f00000001c0)=0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000580)={{r3, &(0x7f00000002c0)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x200, &(0x7f0000000300)={@_ha_fsid={[0x6, 0xf]}, {0xe, 0x1, 0x5, 0x5}}, 0x8, &(0x7f0000000340)={@_ha_fsid}, &(0x7f00000003c0)=0x3}, 0x2, &(0x7f0000000540)=[{0x1, 0xfffffffb, &(0x7f0000000400)='@[!(%{#.:.\x00', &(0x7f0000000440)="38eda04deb0b738e96328fa24666d1d1989e5bc1f86d19dc6150ec6d4a32ff74600b7cda0a80eb839409e5c5893f91f00c6bd35114", 0x35, 0x8}, {0x2, 0x8, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="1babc43425d9009a2e80e08f95c31114d579fce6907d8605d08e", 0x1a}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf25050000000800020008000000080003000400008c"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0xa50d9986120083c6) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r7, 0x6, 0x8, &(0x7f0000000880)=0x7fff, 0xfffffffffffffd87) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="000325b416bb22bc2c43bafe9800"/29], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8) shutdown(r3, 0x1) writev(r1, &(0x7f0000000940), 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x8002, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000840)={'vlan0\x00', 0x400}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000008c0)='hybla', 0x5) sendto(r1, &(0x7f0000000100)="78a90099c2a682fa4f95d6e1e2287448fb1df23ae4730f27698c7ac5d2556e03219a144538a46bcf3e60f9ab68053650211d08e15576a97f90bd1d44b2230d4e561bedd23e03f79b89a0c4089896eb7d8f666765cb81a3bb92c41d5d8bb72992f42371c51d2dc977db980f4659ab184d96aa60af7697f7e7feedca5dbc5beb", 0x7f, 0x40000, &(0x7f0000000200)=@ll={0x11, 0xf6, r2, 0x1, 0x1, 0x6, @multicast}, 0x80) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYRES64=r9], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 484.878292ms ago: executing program 0 (id=5355): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x87a, "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"}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r4, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)="ad", 0x1}], 0x1, &(0x7f0000000a80)=ANY=[], 0x1508}}], 0x1, 0x404c014) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r7, @ANYBLOB="28001280090001007665746800000000180002801600010000000000", @ANYRES32=0x0, @ANYBLOB="00400000400600000800200004000000"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 240.782601ms ago: executing program 0 (id=5356): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000080035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 143.713356ms ago: executing program 0 (id=5357): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001080)=@broute={'broute\x00', 0x20, 0x3, 0xc52, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000400], 0x0, &(0x7f0000000000), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x11, 0x20, 0x0, 'syz_tun\x00', 'pim6reg1\x00', 'rose0\x00', 'veth1_to_team\x00', @random="15ff096c0055", [0x0, 0x0, 0x101, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0x0, 0x1fe], 0x116, 0x146, 0x176, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'dvmrp1\x00', {0xff}, 'lo\x00'}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0x2, 0x40, 0x1}}}], [@common=@AUDIT={'AUDIT\x00', 0x8}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}, {0x9, 0x46, 0x6001, 'ip6tnl0\x00', 'pimreg1\x00', 'team_slave_1\x00', 'veth1_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x856, 0x8a6, 0x8d6, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x200}, {0x180000}, {0x9, 0x3}, {0x8}, {0x9, 0x1}, {0x80000000, 0x3}, {0x9, 0x2}, {0x80}, {0x5, 0x1}, {0x0, 0x2}], [{0x2, 0x503}, {0x4, 0x81}, {0x3}, {0xfffffe00, 0xb13}, {0x44f, 0xfffffffb}, {0x7, 0xeefb}, {0x6, 0x1}, {0x4a5e, 0xbd6b}, {0x700000, 0xbe}, {0x9, 0x2b06}, {0x8, 0x7}], 0x1, 0x4}, {[{0x4, 0x2}, {0xb, 0x1}, {0x4, 0x2}, {0x0, 0x1}, {0x800, 0x1}, {0x7f}, {0x7, 0x2}, {0x4}, {0x1, 0x1}, {0xf4, 0x2}, {0x6}], [{0x80000000, 0x7}, {0x9, 0x5}, {}, {0x200, 0x4}, {0x8000, 0x1060000}, {0x1, 0x80}, {0x9, 0x10e5}, {0x1, 0x3ff}, {0x9, 0x5}, {0xeb, 0x7}, {0x8, 0x1}], 0x4, 0x5}, {[{0x3, 0x3}, {0x5fbd31b1, 0x2}, {0x8, 0x1}, {0x6, 0x1}, {}, {0x3, 0x3}, {0x1, 0x3}, {0xd, 0x1}, {0x0, 0x3}, {0x9, 0x1}, {0xdd3a, 0x3}], [{0x4}, {0x9, 0x4}, {0x5, 0x1}, {0x1, 0xf3}, {0xfffffffb}, {0xffffff00, 0x1}, {0x10000, 0xfff}, {0x7, 0x8}, {0x1, 0x7}, {0x1000, 0x6}, {0x9}], 0x5, 0x5}, {[{0x8, 0x2}, {0x2, 0x3}, {0x0, 0x3}, {0xe, 0x1}, {0x7}, {0x9, 0x1}, {0x6}, {0x3}, {0x8, 0x3}, {0x8}, {0x7, 0x2}], [{0x80000000, 0x80000000}, {0xe, 0x40}, {0x6, 0x33}, {0x7, 0x9}, {0x40, 0x446}, {0x1000, 0x8}, {0x4, 0x9}, {0x2, 0x23}, {0x7fffffff, 0x584}, {0x0, 0x2}, {0x7, 0x4}], 0x6, 0x4}, {[{0x3, 0x2}, {}, {0xb08, 0x2}, {0x9, 0x3}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x2}, {}, {0xf}, {0xf07d}, {0x0, 0x1}], [{0x2, 0xe}, {0xfffffffd, 0x10}, {0x9, 0x79}, {0x3, 0xaec}, {0x4, 0x3}, {0x493, 0x8}, {0x6, 0xa}, {0xfffffffd, 0x3}, {0x3, 0x6}, {0x8, 0x7}, {0x6, 0x1}], 0xb}, {[{0x2, 0x2}, {0xe, 0x2}, {0x9, 0x3}, {0x7fff, 0x3}, {0x4, 0x1}, {0x4, 0x3}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0xb9}, {0x3}], [{0x2, 0x7}, {0x7}, {0xffffff80, 0x5}, {0xa65, 0xc9}, {0x1000, 0x1}, {0x6, 0xfffffff7}, {0x0, 0x9}, {0x0, 0xd4}, {0x4, 0x10000}, {0x0, 0x8}, {0x2}], 0x3, 0x2}, {[{0x100}, {0x4, 0x2}, {0x4, 0x3}, {0x80000000}, {0x4, 0x3}, {0x2, 0x3}, {0x7, 0x2}, {0xfffffffc, 0x3}, {0x6, 0x3}, {0x717c}, {0x100, 0x3}], [{0xffffffff, 0x6}, {0x3, 0x5}, {0xa0, 0x3}, {0x8, 0x360e}, {0x3, 0xa}, {0x870d, 0x8}, {0x40f, 0x8}, {0xfffff5a4, 0x62fa}, {0x76, 0x5}, {0x5, 0x17400000}, {0x200, 0x96}], 0xb, 0x7}, {[{0x6, 0x2}, {0x2, 0x3}, {0x1, 0x1}, {0x83b, 0x3}, {0x2, 0x1}, {0x7, 0x2}, {0xb4, 0x2}, {0x8fe, 0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x3ff}], [{0x3ff, 0x7513}, {0x6a4, 0x7}, {0x4, 0x9}, {0x48000, 0x9}, {0x8, 0x6}, {0x1ff, 0xae}, {0x101, 0xffff}, {0x0, 0x9}, {0x6, 0x9}, {0x800, 0xfffffff7}, {0xc, 0x9c72}], 0x6, 0x5}, {[{0x4, 0x2}, {0x7, 0x2}, {0xd03, 0x2}, {0x8, 0x1}, {0x3, 0x3}, {0x3, 0x3}, {0x7ff, 0x1}, {0x101, 0x2}, {0x3d, 0x1}, {0x1, 0x3}, {0x80000001, 0x1}], [{0x100, 0x2}, {0x8}, {0x7, 0x40}, {0x7ff, 0x6a85680f}, {0x81, 0xfff}, {0x1, 0x8}, {0xe178, 0x7}, {0x0, 0x1}, {0xfffffffc, 0x1}, {0x3, 0x9}, {0x83, 0xb}], 0xa, 0x4}, {[{0x6c4, 0x1}, {0x6, 0x2}, {0x7ff, 0x3}, {0x2, 0x3}, {0x7, 0x1}, {0x2, 0x3}, {0x1, 0x3}, {}, {0xc9911296, 0x2}, {0xbb4, 0x3}, {0x4000, 0x3}], [{0x9, 0x5}, {0x6}, {0x8, 0x1ff}, {0xca15, 0x8000}, {0x3, 0xc2e6}, {0x1, 0xa0000}, {0xffffffff, 0x6}, {0x7f, 0x6}, {0x0, 0xffffffff}, {0xfffffff8, 0xeadd}, {0x3, 0x4}], 0xa, 0x6}, {[{0x0, 0x2}, {0x1000, 0x1}, {0x1, 0x2}, {0x4777, 0x1}, {0x1}, {0x10}, {0x9}, {0xaff}, {0x5, 0x3}, {0x6, 0x1}, {0x6}], [{0xffffffff, 0x3}, {0x0, 0xfffffffa}, {0x40, 0x5}, {0x3, 0x24}, {0xfff, 0x2}, {0xfffffe00, 0x1}, {0x8, 0x6}, {0x4, 0xb9}, {0x7fffffff, 0x93}, {0x8, 0x7}, {0x0, 0x9}], 0x7, 0x2}], 0x6}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz1\x00', {0x5}}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x11, 0x0, 0x4, 'vlan0\x00', 'veth0_to_team\x00', 'xfrm0\x00', 'veth0_to_bond\x00', @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @random="cc49fe6c1c9a", [0xff, 0x0, 0xff], 0x6e, 0x12e, 0x176, [], [@common=@ERROR={'ERROR\x00', 0x20, {"fdfc17461f4ffda5d2532ec56b123b913bb34d8ba579fc2734cd5e56da33"}}, @common=@nflog={'nflog\x00', 0x50, {{0x6, 0x8000, 0xfffd, 0x0, 0x0, "4717683241ac00b97b829b59ff99d048532faa27aaeb2507f6e04c41b7cd9bfee601cf4f8e664dd0f679e81cda87420a1e49be9066d9897bd137d2fb04c659d8"}}}], @common=@ERROR={'ERROR\x00', 0x20, {"12637b08dff36e91bd43e725c2c6bb8996c9ea42fef0d2fe1b67eab66da2"}}}]}]}, 0xcca) 138.263655ms ago: executing program 0 (id=5358): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x0, r2}, 0x10) 91.286937ms ago: executing program 0 (id=5359): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x3e0, 0x2e8, 0x2e8, 0x3e0, 0x2e8, 0x11, 0x0, {[{{@uncond, 0x0, 0x260, 0x288, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, '\x00', {0xff}, 0xc, 0x17}}, @common=@inet=@hashlimit2={{0x150}, {'batadv0\x00', {0x5, 0x3, 0x24, 0x9, 0xd353, 0x10001, 0x0, 0x40, 0x40}, {0x5a2f}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00], [0x0, 0xffffffff], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x2c, 0x0, 0x1, 0x7b}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0xa, 0x0, 0x1, [0xff, 0x6, 0xff, 0x4608, 0x3, 0xe, 0x2, 0x8000, 0x4, 0x400, 0x800, 0x0, 0x8, 0x7, 0x0, 0x50], 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0x0, 0x8, 0x400, 'snmp\x00', 'syz1\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 0s ago: executing program 0 (id=5360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000004) (async) recvmmsg(r1, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x40010021, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) kernel console output (not intermixed with test programs): blocking state [ 517.570855][ T6206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.637272][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.644521][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.429654][T18863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.447704][T19250] lo: Caught tx_queue_len zero misconfig [ 518.457507][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 518.585048][T18863] veth0_vlan: entered promiscuous mode [ 518.648008][T19170] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 51199 - 0 [ 518.704255][T18863] veth1_vlan: entered promiscuous mode [ 518.812470][T19170] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 51199 - 0 [ 518.917326][T18863] veth0_macvtap: entered promiscuous mode [ 519.001191][T19170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 51199 - 0 [ 519.101278][T18863] veth1_macvtap: entered promiscuous mode [ 519.240876][T18863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.294592][T18863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.336336][T19282] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 519.353362][ T9212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.386573][ T9212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.437190][ T9212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.455318][ T9212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.647647][ T9212] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 51199 - 0 [ 519.678048][ T177] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 51199 - 0 [ 519.787332][ T9212] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 51199 - 0 [ 519.959146][ T9212] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 51199 - 0 [ 520.016564][ T9201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.056560][ T9201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.226926][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.268399][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.776309][T19380] __nla_validate_parse: 1 callbacks suppressed [ 522.776329][T19380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3308'. [ 522.842919][T19389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3308'. [ 522.946464][T19389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 523.033509][T19391] xt_TPROXY: Can be used only with -p tcp or -p udp [ 523.061857][T19380] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 523.238445][T19403] netlink: 'syz.0.3312': attribute type 11 has an invalid length. [ 523.510530][T19418] tipc: Enabling of bearer rejected, failed to enable media [ 523.557963][T19421] tipc: Started in network mode [ 523.571313][T19425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3319'. [ 523.597239][T19421] tipc: Node identity ac14140f, cluster identity 4711 [ 523.604024][T19424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3319'. [ 523.627602][T19421] tipc: New replicast peer: 172.20.20.170 [ 523.646390][T19421] tipc: Enabled bearer , priority 10 [ 523.693866][T18883] IPVS: starting estimator thread 0... [ 523.782140][T19432] IPVS: using max 27 ests per chain, 64800 per kthread [ 523.878885][T19436] netlink: 'syz.4.3322': attribute type 21 has an invalid length. [ 524.151063][T19451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.185279][T19451] team0: left promiscuous mode [ 524.200621][T19451] team_slave_0: left promiscuous mode [ 524.210342][T19451] team_slave_1: left promiscuous mode [ 524.218612][T19451] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.235216][T19451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.358324][T19466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3330'. [ 524.450993][T19477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3333'. [ 524.525413][T19481] tap0: tun_chr_ioctl cmd 1074025681 [ 524.536900][T19481] ip_vti0: entered promiscuous mode [ 524.547587][T19481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3334'. [ 524.712908][T19489] netlink: 'syz.2.3337': attribute type 1 has an invalid length. [ 524.728625][T19489] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3337'. [ 524.782143][T10373] tipc: Node number set to 2886997007 [ 524.788451][T19489] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3337'. [ 524.900581][T19505] netlink: 'syz.3.3339': attribute type 10 has an invalid length. [ 524.908873][T19504] netlink: 'syz.3.3339': attribute type 10 has an invalid length. [ 524.935452][T19505] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3339'. [ 524.950416][T19504] hsr0: entered promiscuous mode [ 524.961097][T19504] bridge0: port 3(hsr0) entered blocking state [ 524.970212][T19504] bridge0: port 3(hsr0) entered disabled state [ 524.979925][T19504] hsr0: entered allmulticast mode [ 524.988415][T19504] hsr_slave_0: entered allmulticast mode [ 525.004753][T19504] hsr_slave_1: entered allmulticast mode [ 525.025638][T19504] bridge0: port 3(hsr0) entered blocking state [ 525.032475][T19504] bridge0: port 3(hsr0) entered forwarding state [ 525.191223][T19518] geneve2: entered promiscuous mode [ 525.235218][T19523] netlink: 'syz.3.3343': attribute type 3 has an invalid length. [ 525.267232][T19523] netlink: 'syz.3.3343': attribute type 3 has an invalid length. [ 525.312902][T19525] netlink: 'syz.3.3343': attribute type 3 has an invalid length. [ 525.356754][T19525] netlink: 'syz.3.3343': attribute type 3 has an invalid length. [ 525.374071][T19527] netlink: 'syz.1.3345': attribute type 1 has an invalid length. [ 525.846677][T19541] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 525.931562][T19541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 526.350034][T19560] x_tables: duplicate underflow at hook 1 [ 526.452591][T19563] netlink: 'syz.0.3357': attribute type 2 has an invalid length. [ 526.525611][T19564] batman_adv: batadv0: Adding interface: gretap1 [ 526.542867][T19564] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.651816][T19564] batman_adv: batadv0: Interface activated: gretap1 [ 527.804916][T19624] __nla_validate_parse: 19 callbacks suppressed [ 527.804938][T19624] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3372'. [ 527.898794][T19624] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3372'. [ 527.913053][T19624] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3372'. [ 528.166378][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3374'. [ 528.290714][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3377'. [ 528.308919][T19637] vlan2: entered promiscuous mode [ 528.345868][T19637] bridge0: entered promiscuous mode [ 528.399697][T19641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3378'. [ 528.493221][T19648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'. [ 528.596060][T19641] bond4: entered promiscuous mode [ 528.606090][T19641] 8021q: adding VLAN 0 to HW filter on device bond4 [ 528.752977][T19648] 8021q: adding VLAN 0 to HW filter on device bond4 [ 528.794154][T19648] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 528.836707][T19648] bond4: (slave sit1): Error -95 calling set_mac_address [ 528.897729][T19641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3378'. [ 528.971763][T19654] validate_nla: 3 callbacks suppressed [ 528.971785][T19654] netlink: 'syz.0.3381': attribute type 309 has an invalid length. [ 529.310729][T19672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3386'. [ 529.485306][T19678] netlink: 804 bytes leftover after parsing attributes in process `syz.3.3388'. [ 530.248681][T19704] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 530.332486][T19704] bond2 (unregistering): Released all slaves [ 530.858654][T19737] netlink: 'syz.2.3403': attribute type 1 has an invalid length. [ 531.279845][T19759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.689590][T19740] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 532.205330][T19799] syzkaller1: entered promiscuous mode [ 532.211016][T19799] syzkaller1: entered allmulticast mode [ 532.731207][ T29] audit: type=1800 audit(1776562744.709:13): pid=19807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3418" name="memory.events" dev="tmpfs" ino=164 res=0 errno=0 [ 532.754481][T19815] netlink: 'syz.0.3420': attribute type 4 has an invalid length. [ 532.824171][T19821] __nla_validate_parse: 44 callbacks suppressed [ 532.824194][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'. [ 532.841263][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3421'. [ 532.850751][T19821] netlink: 'syz.1.3421': attribute type 14 has an invalid length. [ 532.870764][T19821] netlink: 'syz.1.3421': attribute type 12 has an invalid length. [ 532.964830][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'. [ 533.000479][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3420'. [ 533.010307][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3421'. [ 533.028372][T19832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3422'. [ 533.047080][T19821] netlink: 'syz.1.3421': attribute type 14 has an invalid length. [ 533.069863][T19832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3422'. [ 533.087758][T19821] netlink: 'syz.1.3421': attribute type 12 has an invalid length. [ 533.129834][ T177] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.268595][T19822] bond1: option broadcast_neighbor: invalid value (30) [ 533.296324][T19822] bond1 (unregistering): Released all slaves [ 533.317581][T19844] netlink: 'syz.2.3425': attribute type 10 has an invalid length. [ 533.358250][T19849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3426'. [ 533.411758][ T177] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.431809][ T177] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.484388][T19844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.495383][T19815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.551184][T19844] team0: Port device netdevsim0 added [ 533.599829][ T177] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.755567][T19864] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3429'. [ 533.787872][T19864] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3429'. [ 533.818980][T19864] netlink: 'syz.4.3429': attribute type 5 has an invalid length. [ 534.233093][T19898] netlink: 'syz.2.3437': attribute type 4 has an invalid length. [ 534.269021][T19897] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 534.305698][T19900] netlink: 'syz.2.3437': attribute type 4 has an invalid length. [ 534.844030][T19928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.891279][T19928] sctp: [Deprecated]: syz.3.3446 (pid 19928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 534.891279][T19928] Use struct sctp_sack_info instead [ 534.974197][T19939] bond0: option packets_per_slave: invalid value (18446744072210219584) [ 534.983111][T19939] bond0: option packets_per_slave: allowed values 0 - 65535 [ 535.571571][T19966] unsupported nlmsg_type 40 [ 536.238195][T19986] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 537.833384][T20042] x_tables: duplicate underflow at hook 1 [ 538.058428][T20053] __nla_validate_parse: 8 callbacks suppressed [ 538.058449][T20053] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3473'. [ 538.101913][T20053] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3473'. [ 538.114718][T20053] netlink: 'syz.0.3473': attribute type 6 has an invalid length. [ 538.123126][T20053] netlink: 'syz.0.3473': attribute type 6 has an invalid length. [ 538.362880][T20059] netlink: 'syz.0.3475': attribute type 8 has an invalid length. [ 538.598722][T20069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3478'. [ 538.645319][T20071] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3479'. [ 538.917266][T20088] team_slave_1: Caught tx_queue_len zero misconfig [ 539.090269][T20091] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 539.363591][T20091] bond1 (unregistering): Released all slaves [ 539.708647][T20098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3487'. [ 540.191336][T20117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3492'. [ 540.756702][T20142] netlink: 'syz.0.3500': attribute type 1 has an invalid length. [ 540.811157][T20142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.861620][T20142] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3500'. [ 558.322466][T20180] xt_TPROXY: Can be used only with -p tcp or -p udp [ 558.355498][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3502'. [ 558.383903][T20195] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3507'. [ 558.663991][T20200] bond1: entered allmulticast mode [ 558.676429][T20200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.811778][T20210] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3512'. [ 558.904488][T20210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.937750][T20214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3515'. [ 558.949119][T20210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.983153][T20210] bond0 (unregistering): Released all slaves [ 559.138133][T20221] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3517'. [ 559.459493][T20238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 559.527620][T20234] xt_CT: No such helper "syz0" [ 559.721251][T20249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3523'. [ 559.823127][T20250] netlink: 'syz.2.3524': attribute type 10 has an invalid length. [ 559.834355][T20250] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3524'. [ 559.845657][T20255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3523'. [ 559.901261][T20254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3525'. [ 559.922095][T20255] nbd: device at index 64 is going down [ 560.071254][T20265] xt_l2tp: v2 doesn't support IP mode [ 560.127695][T20259] udevd[20259]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 560.194299][T20187] udevd[20187]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 560.257549][T20279] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3530'. [ 560.331880][T20281] "syz.4.3530" (20281) uses obsolete ecb(arc4) skcipher [ 560.371042][T20281] netlink: 'syz.4.3530': attribute type 1 has an invalid length. [ 560.541573][T20291] macsec2: entered promiscuous mode [ 560.555630][T20291] macvlan1: entered promiscuous mode [ 560.587787][T20291] macvlan1: left promiscuous mode [ 560.814903][T20302] netlink: 'syz.0.3535': attribute type 3 has an invalid length. [ 560.928363][T20309] netlink: 'syz.1.3536': attribute type 1 has an invalid length. [ 561.676838][T20346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.690639][T20342] tipc: Enabled bearer , priority 0 [ 561.713271][T20344] netlink: 'syz.3.3546': attribute type 1 has an invalid length. [ 561.721789][T20348] syzkaller0: entered promiscuous mode [ 561.741262][T20348] syzkaller0: entered allmulticast mode [ 561.887043][T20340] tipc: Resetting bearer [ 561.984233][T20335] tipc: Resetting bearer [ 562.034094][T20335] tipc: Disabling bearer [ 562.196148][T20363] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 562.646355][T20378] veth0_macvtap: left promiscuous mode [ 562.810948][T20396] syz_tun: entered allmulticast mode [ 562.856448][T20396] dvmrp6: entered allmulticast mode [ 562.974535][T20403] syz_tun: left allmulticast mode [ 563.289022][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.302973][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.328633][T20413] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 563.836178][T20441] __nla_validate_parse: 15 callbacks suppressed [ 563.836197][T20441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3574'. [ 563.873215][T20443] netlink: 'syz.0.3575': attribute type 44 has an invalid length. [ 563.887353][T20441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3574'. [ 564.109447][T20454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3579'. [ 564.339495][T20454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.488964][T20472] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 564.731833][T20490] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 564.971149][T20505] netlink: 732 bytes leftover after parsing attributes in process `syz.2.3592'. [ 564.996779][T20505] netlink: 732 bytes leftover after parsing attributes in process `syz.2.3592'. [ 565.135393][T20514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3594'. [ 565.166710][T20518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3595'. [ 565.177967][T20518] netlink: 'syz.2.3595': attribute type 22 has an invalid length. [ 565.187197][T20518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3595'. [ 565.357800][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 565.675599][T20545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3601'. [ 565.784030][T20554] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3600'. [ 566.886237][T20597] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 567.597064][T20638] netlink: 'syz.1.3621': attribute type 12 has an invalid length. [ 567.643900][T20638] tipc: Started in network mode [ 567.656297][T20638] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 567.675182][T20638] tipc: Enabled bearer , priority 14 [ 568.106730][T20666] sctp: [Deprecated]: syz.1.3629 (pid 20666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.106730][T20666] Use struct sctp_sack_info instead [ 568.366591][T20671] syzkaller0: entered promiscuous mode [ 568.375135][T20671] syzkaller0: entered allmulticast mode [ 568.629146][T20683] Bluetooth: MGMT ver 1.23 [ 568.876487][T18884] tipc: Node number set to 10463914 [ 568.885348][T20697] __nla_validate_parse: 7 callbacks suppressed [ 568.885370][T20697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3634'. [ 569.122371][T20702] tipc: Started in network mode [ 569.130599][T20702] tipc: Node identity ca611685a13d, cluster identity 4711 [ 569.150702][T20702] tipc: Enabled bearer , priority 0 [ 569.346801][T20702] syzkaller0: entered promiscuous mode [ 569.364319][T20702] syzkaller0: entered allmulticast mode [ 569.379409][T20702] tipc: Resetting bearer [ 569.408611][T20725] netlink: 'syz.0.3645': attribute type 1 has an invalid length. [ 569.483209][T20725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 569.566835][T20727] bond2: (slave veth5): Enslaving as an active interface with a down link [ 569.716889][ T12] tipc: Resetting bearer [ 569.858571][T20701] tipc: Resetting bearer [ 570.114351][T20743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3650'. [ 570.168536][T20745] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3650'. [ 570.284784][T20750] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3653'. [ 570.285698][T20752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3654'. [ 570.684467][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'. [ 570.752435][T20769] netlink: 211824 bytes leftover after parsing attributes in process `syz.1.3658'. [ 572.011789][T20716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.033834][T20754] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3650'. [ 572.649799][T20701] tipc: Disabling bearer [ 572.674769][T10374] tipc: Node number set to 1801197189 [ 572.775623][T20773] veth1_macvtap: renamed from macsec0 [ 573.088115][T20791] syzkaller0: entered promiscuous mode [ 573.123037][T20791] syzkaller0: entered allmulticast mode [ 573.197213][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3667'. [ 573.228218][T20804] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3667'. [ 573.240262][T20791] Bluetooth: MGMT ver 1.23 [ 574.188326][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3676'. [ 574.227708][T20852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.367479][T20864] syzkaller0: entered promiscuous mode [ 574.376002][T20864] syzkaller0: entered allmulticast mode [ 574.464053][T20866] netlink: 'syz.2.3679': attribute type 1 has an invalid length. [ 576.624212][T20845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 577.185549][T20902] netlink: zone id is out of range [ 577.201016][T20902] netlink: zone id is out of range [ 577.208569][T20902] netlink: zone id is out of range [ 577.222667][T20902] netlink: zone id is out of range [ 577.230815][T20902] netlink: zone id is out of range [ 577.258110][T20902] netlink: zone id is out of range [ 577.290900][T20902] netlink: zone id is out of range [ 577.308206][T20902] netlink: zone id is out of range [ 577.338227][T20902] netlink: zone id is out of range [ 577.363166][T20902] netlink: zone id is out of range [ 577.441385][T20902] netlink: 'syz.3.3688': attribute type 2 has an invalid length. [ 577.458836][T20920] team0: entered promiscuous mode [ 577.472801][T20920] team_slave_0: entered promiscuous mode [ 577.485303][T20920] team_slave_1: entered promiscuous mode [ 577.498139][T20910] netlink: 'syz.3.3688': attribute type 2 has an invalid length. [ 577.516099][T20920] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 577.580949][T20902] : entered promiscuous mode [ 578.107233][T20944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.528908][T20944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.614258][T20953] syzkaller0: entered promiscuous mode [ 578.754916][T20944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.846875][T20988] netlink: 'syz.0.3706': attribute type 3 has an invalid length. [ 578.866722][T20988] netlink: 'syz.0.3706': attribute type 1 has an invalid length. [ 578.875643][T20988] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3706'. [ 578.901227][T20988] NCSI netlink: No device for ifindex 808464432 [ 578.926710][T20988] netlink: 'syz.0.3706': attribute type 83 has an invalid length. [ 578.980843][T20988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3706'. [ 579.139300][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3706'. [ 581.804583][T20944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.998005][T21004] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 582.072713][ T6197] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.144343][ T9201] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.208371][ T9201] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.273544][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.619085][T21037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3717'. [ 582.697846][T21041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3720'. [ 583.064985][T21058] netlink: 87 bytes leftover after parsing attributes in process `syz.1.3726'. [ 583.157288][T21058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3726'. [ 583.298304][T21074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3730'. [ 583.355703][T21074] IPVS: length: 110 != 24 [ 583.373795][T21077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3732'. [ 583.412399][T21077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.467012][T21077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.563755][T21085] syzkaller0: entered promiscuous mode [ 583.574853][T21085] syzkaller0: entered allmulticast mode [ 584.364586][T21099] ip_vti0: left promiscuous mode [ 584.428257][T21099] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.436308][T21099] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.651466][T21099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.711162][T21099] tipc: Resetting bearer [ 584.783787][T21099] macsec1: left promiscuous mode [ 584.799306][T18883] IPVS: starting estimator thread 0... [ 584.890062][T21091] tipc: Resetting bearer [ 584.903273][T21124] IPVS: using max 28 ests per chain, 67200 per kthread [ 585.006833][ T177] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.024740][ T177] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.062643][ T177] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.113129][ T177] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.667592][T21151] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3748'. [ 585.691265][T21151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3748'. [ 585.706930][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3748'. [ 585.720834][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3748'. [ 585.832273][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 586.005796][T21165] syzkaller0: entered promiscuous mode [ 586.025977][T21165] syzkaller0: entered allmulticast mode [ 586.167597][T21172] netlink: 'syz.4.3754': attribute type 1 has an invalid length. [ 586.234441][T21174] nbd0: detected capacity change from 0 to 96 [ 586.270244][T21028] block nbd0: Dead connection, failed to find a fallback [ 586.489145][T21181] bond0 (unregistering): Released all slaves [ 587.058713][T21217] netlink: 'syz.1.3764': attribute type 1 has an invalid length. [ 587.130063][T21219] SET target dimension over the limit! [ 587.722266][T21263] netlink: 'syz.0.3775': attribute type 1 has an invalid length. [ 587.762481][T21263] __nla_validate_parse: 13 callbacks suppressed [ 587.762501][T21263] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3775'. [ 587.879097][T21267] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3776'. [ 587.950414][T21267] xt_HMARK: spi-set and port-set can't be combined [ 587.973945][T21269] netlink: 'syz.0.3777': attribute type 1 has an invalid length. [ 587.984399][T21269] netlink: 'syz.0.3777': attribute type 6 has an invalid length. [ 587.996730][T21269] netlink: 'syz.0.3777': attribute type 3 has an invalid length. [ 590.613546][T21283] netlink: 'syz.3.3780': attribute type 2 has an invalid length. [ 590.640659][T21282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3781'. [ 590.661740][T21282] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3781'. [ 590.675610][T21282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3781'. [ 590.739938][T21290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3784'. [ 591.041080][T21302] netlink: 'syz.1.3788': attribute type 2 has an invalid length. [ 591.054484][T21302] netlink: 'syz.1.3788': attribute type 1 has an invalid length. [ 591.074580][T21302] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3788'. [ 591.218072][T21312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3791'. [ 591.507524][T21331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3796'. [ 591.860079][T21348] team0: entered promiscuous mode [ 591.874117][T21348] team_slave_0: entered promiscuous mode [ 591.880166][T21348] team_slave_1: entered promiscuous mode [ 591.886864][T21348] net_ratelimit: 355 callbacks suppressed [ 591.886883][T21348] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 592.046240][T21361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3804'. [ 592.529550][T21383] netlink: 'syz.4.3812': attribute type 21 has an invalid length. [ 592.603859][T21389] veth1_macvtap: left promiscuous mode [ 592.793847][T21392] syzkaller1: entered promiscuous mode [ 592.809781][T21392] syzkaller1: entered allmulticast mode [ 592.833763][T21392] __nla_validate_parse: 3 callbacks suppressed [ 592.833784][T21392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3813'. [ 592.879840][T21392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3813'. [ 592.905906][T21392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3813'. [ 593.104777][T21409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3817'. [ 593.803999][T21434] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 593.825362][T21434] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 593.911158][ T13] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 593.972926][T21445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3824'. [ 594.557272][T21460] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 594.565306][T21460] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 595.436440][T21466] syzkaller0: entered promiscuous mode [ 595.442246][T21466] syzkaller0: entered allmulticast mode [ 596.723009][T21437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 596.988501][T21479] netlink: 'syz.1.3834': attribute type 1 has an invalid length. [ 596.997330][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 597.006708][T21482] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3832'. [ 597.086961][T21479] 8021q: adding VLAN 0 to HW filter on device bond3 [ 597.094943][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3832'. [ 597.103713][T21489] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3832'. [ 597.126132][T21491] bond3: (slave ip6erspan0): making interface the new active one [ 597.139090][T21491] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 597.167113][T21489] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3832'. [ 597.756113][T21516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.809440][T21517] bond2: (slave batadv1): Opening slave failed [ 598.283230][T21545] __nla_validate_parse: 1 callbacks suppressed [ 598.283253][T21545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3845'. [ 598.314791][T21531] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3842'. [ 598.391070][T21550] tipc: Enabling of bearer rejected, failed to enable media [ 598.520378][ T5489] veth1_macvtap: entered promiscuous mode [ 598.724114][T21558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3847'. [ 598.823029][T21563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3848'. [ 598.884169][T21566] netlink: 'syz.1.3847': attribute type 2 has an invalid length. [ 598.966552][T21566] netlink: 'syz.1.3847': attribute type 2 has an invalid length. [ 599.390829][T21579] syzkaller0: entered promiscuous mode [ 599.414360][T21579] syzkaller0: entered allmulticast mode [ 599.450001][T21586] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3854'. [ 600.329226][T21612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3859'. [ 602.342660][T21586] netlink: 'syz.2.3854': attribute type 29 has an invalid length. [ 602.363707][T21609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3859'. [ 602.374111][T21609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3859'. [ 602.551202][T21618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3862'. [ 602.668770][T21633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3866'. [ 602.865751][T21639] netlink: 'syz.2.3869': attribute type 1 has an invalid length. [ 602.947558][T21650] netlink: 'syz.4.3875': attribute type 1 has an invalid length. [ 603.168206][T21671] wg1 speed is unknown, defaulting to 1000 [ 603.581564][T21671] wg1 speed is unknown, defaulting to 1000 [ 603.737331][T21671] wg1 speed is unknown, defaulting to 1000 [ 603.800334][T21671] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 603.913238][T21693] netlink: 'syz.0.3883': attribute type 1 has an invalid length. [ 603.928076][T21671] wg1 speed is unknown, defaulting to 1000 [ 604.009109][T21693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 604.019826][T21671] wg1 speed is unknown, defaulting to 1000 [ 604.110808][T21699] bond3: (slave veth7): Enslaving as an active interface with a down link [ 604.142705][T21671] wg1 speed is unknown, defaulting to 1000 [ 604.152902][T21671] wg1 speed is unknown, defaulting to 1000 [ 604.224544][T21699] __nla_validate_parse: 3 callbacks suppressed [ 604.224575][T21699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3883'. [ 604.260093][T21693] bond3: (slave veth9): Enslaving as an active interface with a down link [ 604.300530][T21671] wg1 speed is unknown, defaulting to 1000 [ 604.379235][T21699] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 604.393752][T21671] wg1 speed is unknown, defaulting to 1000 [ 604.555487][T21713] xt_CT: No such helper "snmp_trap" [ 604.600566][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3890'. [ 604.627666][T21722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3888'. [ 604.865122][T21735] sctp: [Deprecated]: syz.4.3893 (pid 21735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.865122][T21735] Use struct sctp_sack_info instead [ 604.883528][T21735] sctp: [Deprecated]: syz.4.3893 (pid 21735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.883528][T21735] Use struct sctp_sack_info instead [ 604.907373][T21736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3894'. [ 604.956034][T21731] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 604.966124][T21728] bridge0: port 3(hsr0) entered disabled state [ 604.972713][T21728] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.980621][T21728] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.094000][T21740] netlink: 'syz.0.3895': attribute type 1 has an invalid length. [ 605.102642][T21740] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3895'. [ 605.187773][T21728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.208303][T21728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.367470][T21728] batman_adv: batadv0: Interface deactivated: gretap1 [ 605.388161][T21728] bond1: left allmulticast mode [ 605.472187][T21735] gre1: entered promiscuous mode [ 605.496414][ T9201] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.532736][ T9201] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.555640][ T9201] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.573841][ T9201] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.676315][T21752] netlink: 'syz.1.3899': attribute type 1 has an invalid length. [ 605.785625][T21758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3901'. [ 605.908327][T21762] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3903'. [ 606.063665][T21766] xt_hashlimit: size too large, truncated to 1048576 [ 606.096734][T21742] tipc: Enabling of bearer rejected, already enabled [ 606.126210][T21742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3896'. [ 606.189648][T21769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3905'. [ 606.287438][T21769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3905'. [ 606.909409][T21794] syzkaller1: entered promiscuous mode [ 606.922273][T21794] syzkaller1: entered allmulticast mode [ 607.768763][T21821] batadv1: entered promiscuous mode [ 607.783557][T21821] batadv1: entered allmulticast mode [ 608.179761][T21837] netlink: 'syz.0.3922': attribute type 6 has an invalid length. [ 608.251628][T21842] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 609.079326][T21876] dvmrp1: entered allmulticast mode [ 609.167770][T21888] vcan0: tx drop: invalid da for name 0x0000000000000008 [ 609.278073][T21890] netlink: 'syz.0.3936': attribute type 21 has an invalid length. [ 609.292082][T21890] __nla_validate_parse: 13 callbacks suppressed [ 609.292103][T21890] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3936'. [ 609.310637][T21890] netlink: 'syz.0.3936': attribute type 4 has an invalid length. [ 609.319386][T21890] netlink: 'syz.0.3936': attribute type 3 has an invalid length. [ 609.327964][T21890] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3936'. [ 609.458978][T21901] netlink: 9792 bytes leftover after parsing attributes in process `syz.2.3940'. [ 609.469731][T21901] netlink: 9792 bytes leftover after parsing attributes in process `syz.2.3940'. [ 609.479563][T21901] netlink: 9792 bytes leftover after parsing attributes in process `syz.2.3940'. [ 609.489828][T21901] netlink: 9792 bytes leftover after parsing attributes in process `syz.2.3940'. [ 609.499909][T21901] netlink: 9792 bytes leftover after parsing attributes in process `syz.2.3940'. [ 609.521149][T21901] netlink: 9792 bytes leftover after parsing attributes in process `syz.2.3940'. [ 609.537677][T21901] netlink: 9792 bytes leftover after parsing attributes in process `syz.2.3940'. [ 609.562694][T21901] netlink: 9792 bytes leftover after parsing attributes in process `syz.2.3940'. [ 609.993597][T21922] netlink: 'syz.2.3945': attribute type 32 has an invalid length. [ 610.028981][T21922] bond5: Setting coupled_control to off (0) [ 610.379437][T21934] netlink: 'syz.4.3949': attribute type 10 has an invalid length. [ 610.800057][T21952] bond7: entered promiscuous mode [ 610.832116][T21952] bond7: entered allmulticast mode [ 611.065684][T21963] 8021q: VLANs not supported on ip_vti0 [ 611.157233][T21966] Unknown metaid 0 dlen 28 [ 611.175282][T21965] Unknown metaid 0 dlen 28 [ 611.477448][T21975] xt_hashlimit: size too large, truncated to 1048576 [ 611.823318][T21990] netlink: 'syz.1.3966': attribute type 2 has an invalid length. [ 612.406318][T22005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.740870][T22029] tunl0: Caught tx_queue_len zero misconfig [ 614.108475][T22036] syzkaller1: entered promiscuous mode [ 614.127372][T22036] syzkaller1: entered allmulticast mode [ 614.847988][T22045] netlink: 'syz.2.3978': attribute type 1 has an invalid length. [ 615.805935][T22056] __nla_validate_parse: 38 callbacks suppressed [ 615.805951][T22056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3982'. [ 616.363664][T22069] netlink: 'syz.2.3984': attribute type 1 has an invalid length. [ 616.489038][T22075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3984'. [ 616.539325][T22070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3984'. [ 616.562196][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 616.808449][T22069] bond8: entered promiscuous mode [ 616.823025][T22069] 8021q: adding VLAN 0 to HW filter on device bond8 [ 616.940403][T22073] wg1 speed is unknown, defaulting to 1000 [ 617.020937][T22088] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3988'. [ 617.076376][T22088] netlink: 'syz.2.3988': attribute type 1 has an invalid length. [ 617.106085][T22092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3989'. [ 617.309992][T22095] ±ÿ: renamed from lo [ 617.394008][T22107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3992'. [ 617.493166][T22112] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3994'. [ 617.577541][T22107] 8021q: adding VLAN 0 to HW filter on device bond4 [ 617.617431][T22114] lo: Caught tx_queue_len zero misconfig [ 617.827012][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3996'. [ 617.972596][T22138] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3996'. [ 617.994325][T22138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3996'. [ 619.400701][T22186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.134753][T18882] IPVS: starting estimator thread 0... [ 620.166730][T22210] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20002 [ 620.238337][T22208] IPVS: using max 25 ests per chain, 60000 per kthread [ 620.638383][T22218] bond5: option arp_all_targets: invalid value (129) [ 620.661828][T22218] bond5 (unregistering): Released all slaves [ 620.746764][T22231] bpq0: entered promiscuous mode [ 620.776772][T22231] bpq0: entered allmulticast mode [ 620.813590][T22230] __nla_validate_parse: 7 callbacks suppressed [ 620.813611][T22230] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4024'. [ 621.000994][T22240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4025'. [ 621.047671][T22240] sctp: [Deprecated]: syz.2.4025 (pid 22240) Use of int in max_burst socket option. [ 621.047671][T22240] Use struct sctp_assoc_value instead [ 621.158908][T22240] pimreg: entered allmulticast mode [ 621.188305][T22237] pimreg: left allmulticast mode [ 621.307878][T22255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4030'. [ 621.528590][T22263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4033'. [ 621.689373][T22266] netlink: 'syz.0.4034': attribute type 4 has an invalid length. [ 621.725652][T22266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4034'. [ 621.739551][T22274] syzkaller0: entered promiscuous mode [ 621.760330][T22274] syzkaller0: entered allmulticast mode [ 622.272147][T22299] netlink: 'syz.3.4043': attribute type 12 has an invalid length. [ 622.280877][T22299] netlink: 'syz.3.4043': attribute type 29 has an invalid length. [ 622.290162][T22299] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4043'. [ 622.299939][T22299] netlink: 'syz.3.4043': attribute type 1 has an invalid length. [ 622.308524][T22299] netlink: 47 bytes leftover after parsing attributes in process `syz.3.4043'. [ 622.320626][T22299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4043'. [ 622.332779][T22302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4043'. [ 622.342810][T22299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4043'. [ 623.367611][T22346] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 623.654319][T22360] openvswitch: netlink: IP tunnel dst address not specified [ 623.704125][T22362] netlink: 'syz.3.4063': attribute type 1 has an invalid length. [ 623.724724][T22364] FAULT_INJECTION: forcing a failure. [ 623.724724][T22364] name failslab, interval 1, probability 0, space 0, times 0 [ 623.778186][T22366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.795452][T22364] CPU: 1 UID: 0 PID: 22364 Comm: syz.2.4064 Not tainted syzkaller #0 PREEMPT(full) [ 623.795484][T22364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 623.795498][T22364] Call Trace: [ 623.795507][T22364] [ 623.795517][T22364] dump_stack_lvl+0xe8/0x150 [ 623.795557][T22364] should_fail_ex+0x412/0x560 [ 623.795595][T22364] should_failslab+0xa8/0x100 [ 623.795622][T22364] __kmalloc_cache_noprof+0x88/0x660 [ 623.795654][T22364] ? __pfx___mutex_trylock_common+0x10/0x10 [ 623.795689][T22364] ? nft_netdev_hook_alloc+0x5a/0x570 [ 623.795726][T22364] nft_netdev_hook_alloc+0x5a/0x570 [ 623.795768][T22364] nf_tables_parse_netdev_hooks+0x138/0x950 [ 623.795811][T22364] nft_flowtable_parse_hook+0x46a/0x920 [ 623.795852][T22364] ? queue_delayed_work_on+0x12f/0x1e0 [ 623.795885][T22364] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 623.795929][T22364] ? nf_flow_table_init+0x280/0x2a0 [ 623.795960][T22364] nf_tables_newflowtable+0x14e4/0x23d0 [ 623.796006][T22364] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 623.796083][T22364] ? nfnl_pernet+0x23/0x240 [ 623.796123][T22364] ? __nla_parse+0x40/0x60 [ 623.796148][T22364] nfnetlink_rcv+0x123e/0x27b0 [ 623.796210][T22364] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 623.796254][T22364] ? ref_tracker_free+0x693/0x840 [ 623.796321][T22364] ? __netlink_deliver_tap+0x807/0x850 [ 623.796364][T22364] ? netlink_deliver_tap+0x2e/0x1b0 [ 623.796395][T22364] ? netlink_deliver_tap+0x2e/0x1b0 [ 623.796433][T22364] netlink_unicast+0x75c/0x8e0 [ 623.796480][T22364] netlink_sendmsg+0x813/0xb40 [ 623.796523][T22364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.796560][T22364] ? aa_sock_msg_perm+0xf1/0x1b0 [ 623.796592][T22364] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 623.796629][T22364] ____sys_sendmsg+0x972/0x9f0 [ 623.796662][T22364] ? __might_fault+0xaf/0x130 [ 623.796700][T22364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 623.796744][T22364] ? import_iovec+0x73/0xa0 [ 623.796772][T22364] ___sys_sendmsg+0x2a5/0x360 [ 623.796804][T22364] ? __lock_acquire+0x6b5/0x2cf0 [ 623.796838][T22364] ? __pfx____sys_sendmsg+0x10/0x10 [ 623.796915][T22364] ? __fget_files+0x2a/0x420 [ 623.796942][T22364] ? __fget_files+0x3a0/0x420 [ 623.796983][T22364] __x64_sys_sendmsg+0x1bd/0x2a0 [ 623.797026][T22364] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 623.797067][T22364] ? __pfx_ksys_write+0x10/0x10 [ 623.797106][T22364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.797128][T22364] do_syscall_64+0x15f/0xf80 [ 623.797152][T22364] ? trace_irq_disable+0x3b/0x140 [ 623.797174][T22364] ? clear_bhb_loop+0x40/0x90 [ 623.797199][T22364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.797220][T22364] RIP: 0033:0x7f63f819c819 [ 623.797241][T22364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.797259][T22364] RSP: 002b:00007f63f9008028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.797283][T22364] RAX: ffffffffffffffda RBX: 00007f63f8415fa0 RCX: 00007f63f819c819 [ 623.797299][T22364] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003 [ 623.797314][T22364] RBP: 00007f63f9008090 R08: 0000000000000000 R09: 0000000000000000 [ 623.797328][T22364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 623.797341][T22364] R13: 00007f63f8416038 R14: 00007f63f8415fa0 R15: 00007fff99ba09a8 [ 623.797379][T22364] [ 624.207434][T22362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 624.339364][T22373] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 624.368702][T22373] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 624.718529][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.727511][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.806772][T22400] netlink: 'syz.4.4074': attribute type 11 has an invalid length. [ 624.839407][T22403] netlink: 'syz.4.4074': attribute type 11 has an invalid length. [ 624.945362][T22408] FAULT_INJECTION: forcing a failure. [ 624.945362][T22408] name failslab, interval 1, probability 0, space 0, times 0 [ 624.968934][T22408] CPU: 1 UID: 0 PID: 22408 Comm: syz.0.4077 Not tainted syzkaller #0 PREEMPT(full) [ 624.968965][T22408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 624.968979][T22408] Call Trace: [ 624.968989][T22408] [ 624.968999][T22408] dump_stack_lvl+0xe8/0x150 [ 624.969037][T22408] should_fail_ex+0x412/0x560 [ 624.969075][T22408] should_failslab+0xa8/0x100 [ 624.969100][T22408] __kmalloc_cache_noprof+0x88/0x660 [ 624.969134][T22408] ? nft_netdev_hook_alloc+0x220/0x570 [ 624.969169][T22408] nft_netdev_hook_alloc+0x220/0x570 [ 624.969209][T22408] nf_tables_parse_netdev_hooks+0x138/0x950 [ 624.969252][T22408] nft_flowtable_parse_hook+0x46a/0x920 [ 624.969294][T22408] ? queue_delayed_work_on+0x12f/0x1e0 [ 624.969328][T22408] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 624.969371][T22408] ? nf_flow_table_init+0x280/0x2a0 [ 624.969402][T22408] nf_tables_newflowtable+0x14e4/0x23d0 [ 624.969446][T22408] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 624.969474][T22408] ? nfnl_pernet+0x23/0x240 [ 624.969517][T22408] ? __nla_parse+0x40/0x60 [ 624.969544][T22408] nfnetlink_rcv+0x123e/0x27b0 [ 624.969611][T22408] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 624.969693][T22408] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.969736][T22408] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.969767][T22408] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.969804][T22408] netlink_unicast+0x75c/0x8e0 [ 624.969845][T22408] netlink_sendmsg+0x813/0xb40 [ 624.969887][T22408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.969929][T22408] ? aa_sock_msg_perm+0xf1/0x1b0 [ 624.969961][T22408] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 624.969997][T22408] ____sys_sendmsg+0x972/0x9f0 [ 624.970030][T22408] ? __might_fault+0xaf/0x130 [ 624.970067][T22408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.970111][T22408] ? import_iovec+0x73/0xa0 [ 624.970138][T22408] ___sys_sendmsg+0x2a5/0x360 [ 624.970170][T22408] ? __lock_acquire+0x6b5/0x2cf0 [ 624.970204][T22408] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.970282][T22408] ? __fget_files+0x2a/0x420 [ 624.970308][T22408] ? __fget_files+0x3a0/0x420 [ 624.970348][T22408] __x64_sys_sendmsg+0x1bd/0x2a0 [ 624.970385][T22408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.970429][T22408] ? __pfx_ksys_write+0x10/0x10 [ 624.970470][T22408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.970494][T22408] do_syscall_64+0x15f/0xf80 [ 624.970520][T22408] ? trace_irq_disable+0x3b/0x140 [ 624.970543][T22408] ? clear_bhb_loop+0x40/0x90 [ 624.970570][T22408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.970592][T22408] RIP: 0033:0x7fe9f079c819 [ 624.970613][T22408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.970632][T22408] RSP: 002b:00007fe9f158f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.970657][T22408] RAX: ffffffffffffffda RBX: 00007fe9f0a15fa0 RCX: 00007fe9f079c819 [ 624.970673][T22408] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003 [ 624.970687][T22408] RBP: 00007fe9f158f090 R08: 0000000000000000 R09: 0000000000000000 [ 624.970700][T22408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 624.970713][T22408] R13: 00007fe9f0a16038 R14: 00007fe9f0a15fa0 R15: 00007ffd593f9998 [ 624.970749][T22408] [ 625.508485][T22420] sctp: [Deprecated]: syz.1.4081 (pid 22420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 625.508485][T22420] Use struct sctp_sack_info instead [ 625.699958][T22434] 0ªX¹¦À: renamed from caif0 [ 625.721806][T22434] 0ªX¹¦À: entered allmulticast mode [ 625.734081][T22434] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 625.932664][T22444] netlink: 'syz.1.4086': attribute type 7 has an invalid length. [ 625.940576][T22444] __nla_validate_parse: 26 callbacks suppressed [ 625.940596][T22444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4086'. [ 626.214262][T22458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4090'. [ 626.275312][T22462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4091'. [ 626.286528][T22465] netlink: 'syz.1.4090': attribute type 1 has an invalid length. [ 626.334189][T22465] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4090'. [ 626.524549][T22478] syzkaller0: entered promiscuous mode [ 626.537902][T22478] syzkaller0: entered allmulticast mode [ 626.693646][T22487] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4099'. [ 626.774474][T22495] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 626.784072][T22495] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 626.799013][T22498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4100'. [ 626.833016][T22495] bridge0: port 3(syz_tun) entered blocking state [ 626.839764][T22495] bridge0: port 3(syz_tun) entered disabled state [ 626.852641][T22495] syz_tun: entered allmulticast mode [ 626.863783][T22495] syz_tun: entered promiscuous mode [ 626.881080][T22502] netlink: 'syz.2.4101': attribute type 30 has an invalid length. [ 626.896926][T22483] bridge_slave_0 (unregistering): left allmulticast mode [ 626.904568][T22483] bridge_slave_0 (unregistering): left promiscuous mode [ 626.911824][T22483] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.116004][T22502] bond9: option arp_missed_max: invalid value (0) [ 627.123154][T22502] bond9: option arp_missed_max: allowed values 1 - 255 [ 627.145540][T22502] bond9 (unregistering): Released all slaves [ 627.390883][T22517] netlink: 'syz.3.4104': attribute type 21 has an invalid length. [ 627.426701][T22517] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4104'. [ 627.451164][T22520] wg1 speed is unknown, defaulting to 1000 [ 627.504691][T22517] netlink: 'syz.3.4104': attribute type 5 has an invalid length. [ 627.524603][T22517] netlink: 'syz.3.4104': attribute type 6 has an invalid length. [ 627.542278][T22517] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4104'. [ 627.695710][T22531] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4107'. [ 628.215171][T22555] netlink: 'syz.0.4115': attribute type 1 has an invalid length. [ 628.295269][T22561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4115'. [ 628.404041][T22555] bond5: entered promiscuous mode [ 628.413339][T22563] xt_nat: multiple ranges no longer supported [ 628.426319][T22555] 8021q: adding VLAN 0 to HW filter on device bond5 [ 628.836337][T22573] ip6gre1: entered promiscuous mode [ 629.923232][T22620] openvswitch: netlink: Message has 16 unknown bytes. [ 630.140422][T22627] ipvlan3: entered promiscuous mode [ 630.155505][T22627] bridge0: port 4(ipvlan3) entered blocking state [ 630.172516][T22627] bridge0: port 4(ipvlan3) entered disabled state [ 630.186640][T22627] ipvlan3: entered allmulticast mode [ 630.193896][T22627] bridge0: entered allmulticast mode [ 630.203261][T22627] ipvlan3: left allmulticast mode [ 630.208440][T22627] bridge0: left allmulticast mode [ 630.227242][T22634] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 630.231532][T22632] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 630.489827][T22651] wg1 speed is unknown, defaulting to 1000 [ 630.522117][T22659] macsec1: entered promiscuous mode [ 630.535000][T22659] macsec1: entered allmulticast mode [ 630.563262][T22659] team0: entered allmulticast mode [ 630.571358][T22659] team_slave_0: entered allmulticast mode [ 630.577745][T22659] team_slave_1: entered allmulticast mode [ 630.609138][T22659] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 630.628860][T22659] team0: Device macsec1 is already an upper device of the team interface [ 630.671345][T22659] team0: left allmulticast mode [ 630.688774][T22659] team_slave_0: left allmulticast mode [ 630.711775][T22659] team_slave_1: left allmulticast mode [ 631.224070][T22691] "syz.3.4151" (22691) uses obsolete ecb(arc4) skcipher [ 631.422982][T22705] __nla_validate_parse: 10 callbacks suppressed [ 631.423003][T22705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4154'. [ 631.627412][T22714] x_tables: duplicate entry at hook 3 [ 631.675264][T22717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.946757][ T13] bond0: (slave bond_slave_0): interface is now down [ 631.979813][ T13] bond0: (slave bond_slave_1): interface is now down [ 632.056615][ T13] bond0: now running without any active interface! [ 632.149401][T22730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4163'. [ 632.302842][T22739] netlink: 'syz.1.4165': attribute type 2 has an invalid length. [ 632.321410][T22739] netlink: 'syz.1.4165': attribute type 1 has an invalid length. [ 632.504238][T22754] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 632.621600][T22761] IPVS: length: 230 != 24 [ 632.694025][T22763] sctp: [Deprecated]: syz.1.4171 (pid 22763) Use of int in max_burst socket option. [ 632.694025][T22763] Use struct sctp_assoc_value instead [ 633.024358][T22768] netlink: 'syz.2.4173': attribute type 1 has an invalid length. [ 633.208229][T22768] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 639.247010][T22809] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 639.521313][T22835] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 639.658513][T22816] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.670679][T22816] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.730081][T22823] netlink: 'syz.2.4187': attribute type 28 has an invalid length. [ 639.946528][T22816] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.988417][T22816] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.990603][T22851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4191'. [ 640.033810][T22851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4191'. [ 640.071141][T22854] 8021q: VLANs not supported on ip6_vti0 [ 640.369137][T22816] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.403956][T22816] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.522303][T22867] tap0: tun_chr_ioctl cmd 1074025692 [ 640.636956][T22816] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.648229][T22870] netlink: 'syz.2.4195': attribute type 89 has an invalid length. [ 640.666087][T22816] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.935707][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4197'. [ 641.170634][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4201'. [ 641.209708][T22894] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4201'. [ 641.319295][T22903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4204'. [ 641.350073][ T6201] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.371201][ T6201] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.709913][ T6197] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.732749][ T6197] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.915567][ T6197] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.940578][ T6197] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.988762][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.024271][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.304176][T22936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4211'. [ 642.450766][T22946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4213'. [ 642.529590][T22948] vlan3: entered promiscuous mode [ 642.553851][T22948] dummy0: entered promiscuous mode [ 643.365476][T22995] wg1 speed is unknown, defaulting to 1000 [ 643.661199][T23009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.707791][T22991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4224'. [ 643.737613][T23012] tap0: tun_chr_ioctl cmd 1074025676 [ 643.750825][T23012] tap0: owner set to 0 [ 644.091091][T23030] tipc: Enabled bearer , priority 0 [ 644.218293][T23030] syzkaller0: entered promiscuous mode [ 644.225124][T23030] syzkaller0: entered allmulticast mode [ 644.234120][T23030] tipc: Resetting bearer [ 644.254147][T23021] wg1 speed is unknown, defaulting to 1000 [ 644.309102][T23028] tipc: Resetting bearer [ 644.360783][T23035] netlink: 'syz.0.4235': attribute type 15 has an invalid length. [ 646.950717][T23028] tipc: Disabling bearer [ 647.374823][T23071] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4245'. [ 647.391565][T23071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.414532][T23071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.436953][T23072] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4245'. [ 647.463523][T23071] bond0 (unregistering): (slave veth3): Releasing backup interface [ 647.489186][T23071] bond0 (unregistering): Released all slaves [ 647.826975][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4251'. [ 647.903643][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4251'. [ 647.963586][T23095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4253'. [ 647.993281][T23095] openvswitch: netlink: Flow key attr not present in new flow. [ 648.299822][T23116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4258'. [ 648.364140][T23117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4258'. [ 648.402241][T23116] bridge4: entered promiscuous mode [ 648.413229][T23116] bridge4: port 1(macvtap0) entered blocking state [ 648.420248][T23116] bridge4: port 1(macvtap0) entered disabled state [ 648.428464][T23116] macvtap0: entered allmulticast mode [ 648.435378][T23116] bridge4: entered allmulticast mode [ 648.449172][T23116] macvtap0: left allmulticast mode [ 648.458201][T23116] bridge4: left allmulticast mode [ 648.467681][T23116] bridge4: left promiscuous mode [ 648.521660][T23114] wg1 speed is unknown, defaulting to 1000 [ 648.773972][T23140] IPv6: NLM_F_CREATE should be specified when creating new route [ 648.782510][T23140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 648.789836][T23140] IPv6: NLM_F_CREATE should be set when creating new route [ 648.797247][T23140] IPv6: NLM_F_CREATE should be set when creating new route [ 648.804611][T23140] IPv6: NLM_F_CREATE should be set when creating new route [ 648.903741][T23145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4267'. [ 648.994305][T23141] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.004538][T23141] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.118552][T23141] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.138866][T23141] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.366464][T23141] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.392899][T23141] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.484091][T23154] wg1 speed is unknown, defaulting to 1000 [ 649.505096][T23141] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.519286][T23155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4269'. [ 649.544313][T23141] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.915371][T23170] syzkaller1: entered promiscuous mode [ 649.926106][T23170] syzkaller1: entered allmulticast mode [ 650.518669][T23180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4277'. [ 650.558922][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.584321][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.594952][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.604921][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.689234][T23189] netlink: 'syz.3.4279': attribute type 21 has an invalid length. [ 650.810187][ T9212] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.844791][ T9212] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.950963][T23198] dvmrp1: entered allmulticast mode [ 650.966776][T23197] netlink: 'syz.0.4280': attribute type 29 has an invalid length. [ 650.982889][ T66] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.004814][ T66] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.046384][T23194] bridge0: port 3(macvlan2) entered blocking state [ 651.056326][T23194] bridge0: port 3(macvlan2) entered disabled state [ 651.072057][T23194] macvlan2: entered allmulticast mode [ 651.077760][T23194] ip6gretap0: entered allmulticast mode [ 651.086047][T23194] macvlan2: entered promiscuous mode [ 651.092693][T23194] bridge0: port 3(macvlan2) entered blocking state [ 651.102010][T23194] bridge0: port 3(macvlan2) entered forwarding state [ 651.145615][T23213] netlink: 'syz.0.4285': attribute type 1 has an invalid length. [ 651.156543][T23199] dvmrp1: left allmulticast mode [ 651.287130][T23213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.384486][T23216] bond0: (slave gretap1): making interface the new active one [ 651.396002][T23216] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 651.984718][T23258] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 652.077682][T23269] netlink: 'syz.1.4300': attribute type 15 has an invalid length. [ 652.445932][T23273] wg1 speed is unknown, defaulting to 1000 [ 652.483926][T23280] __nla_validate_parse: 8 callbacks suppressed [ 652.483948][T23280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4302'. [ 652.581043][T23280] veth0_to_batadv: entered promiscuous mode [ 652.589147][T23280] veth0_to_batadv: entered allmulticast mode [ 652.878316][T23293] tipc: Enabled bearer , priority 0 [ 653.036945][T23293] syzkaller0: entered promiscuous mode [ 653.047025][T23293] syzkaller0: entered allmulticast mode [ 653.060080][T23293] tipc: Resetting bearer [ 653.138372][T23291] tipc: Resetting bearer [ 653.319739][T23315] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4314'. [ 653.437900][T23315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4314'. [ 654.871568][T23359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4322'. [ 656.256615][ T5194] udevd[5194]: worker [21028] /devices/virtual/block/nbd0 is taking a long time [ 656.938065][T23291] tipc: Disabling bearer [ 657.040223][T23315] macvlan2: entered allmulticast mode [ 657.047433][T23315] hsr0: entered allmulticast mode [ 657.053110][T23315] hsr_slave_0: entered allmulticast mode [ 657.058963][T23315] hsr_slave_1: entered allmulticast mode [ 657.078556][T23320] syzkaller0: entered promiscuous mode [ 657.084443][T23320] syzkaller0: entered allmulticast mode [ 657.100333][T23331] netlink: 1622 bytes leftover after parsing attributes in process `syz.3.4312'. [ 657.215624][T23363] tipc: Enabling of bearer rejected, failed to enable media [ 657.243418][T23356] wg1 speed is unknown, defaulting to 1000 [ 657.325257][T23371] netlink: 67 bytes leftover after parsing attributes in process `syz.0.4325'. [ 657.345334][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4323'. [ 657.694162][T23385] bond0: Caught tx_queue_len zero misconfig [ 657.867497][T23392] gre2: entered allmulticast mode [ 658.122377][T23402] netlink: 'syz.0.4331': attribute type 1 has an invalid length. [ 658.204343][T23402] bond6: entered promiscuous mode [ 658.210178][T23402] 8021q: adding VLAN 0 to HW filter on device bond6 [ 658.255507][T23410] netlink: 'syz.3.4339': attribute type 1 has an invalid length. [ 658.276684][T23410] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4339'. [ 658.289755][T23417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4340'. [ 658.399831][T23420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4342'. [ 658.486325][T23425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4343'. [ 658.510037][T23420] veth7: entered allmulticast mode [ 658.524300][T23420] bond4: (slave veth7): Enslaving as an active interface with an up link [ 658.600025][T23425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4343'. [ 658.625315][T23425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4343'. [ 658.671872][T23425] netlink: 'syz.2.4343': attribute type 2 has an invalid length. [ 658.691486][T23425] netlink: 'syz.2.4343': attribute type 2 has an invalid length. [ 658.731352][T23425] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4343'. [ 658.766462][T23438] netlink: 'syz.3.4346': attribute type 1 has an invalid length. [ 658.797767][T23440] netlink: 'syz.3.4346': attribute type 1 has an invalid length. [ 659.010510][T23442] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 659.043425][T23442] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 659.148963][T23447] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 659.239521][T23455] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4347'. [ 659.256762][T23455] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 659.571210][T23472] Bluetooth: MGMT ver 1.23 [ 659.690793][T23476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4356'. [ 659.708864][T23479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4357'. [ 660.224631][T23499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.251506][T23499] tunl0: Caught tx_queue_len zero misconfig [ 660.322861][T23505] netlink: 'syz.2.4363': attribute type 1 has an invalid length. [ 660.454189][T23509] bond0: ARP target 170.170.170.170 is already present [ 660.470901][T23509] bond0: option arp_ip_target: invalid value (2863311530) [ 660.683859][T23521] netlink: 'syz.0.4368': attribute type 8 has an invalid length. [ 660.782565][T23527] netlink: 'syz.1.4370': attribute type 58 has an invalid length. [ 661.013771][T23536] netlink: 'syz.2.4374': attribute type 1 has an invalid length. [ 661.215670][T10378] wg1 speed is unknown, defaulting to 1000 [ 661.257771][T23548] ip6tnl0: Caught tx_queue_len zero misconfig [ 661.304275][T23555] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 661.399463][T23553] nbd: device at index 64 is going down [ 661.628972][T23562] wg1 speed is unknown, defaulting to 1000 [ 661.735938][T21027] udevd[21027]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 661.804727][T23577] tipc: Enabled bearer , priority 0 [ 661.916370][T23577] tipc: Disabling bearer [ 662.277751][T23596] wg1 speed is unknown, defaulting to 1000 [ 662.466984][T23616] team_slave_1: Caught tx_queue_len zero misconfig [ 662.741216][T23624] wg1 speed is unknown, defaulting to 1000 [ 662.943468][T23636] syzkaller1: entered promiscuous mode [ 662.961764][T23636] syzkaller1: entered allmulticast mode [ 663.173557][T23645] validate_nla: 1 callbacks suppressed [ 663.173576][T23645] netlink: 'syz.2.4399': attribute type 1 has an invalid length. [ 663.495725][T23662] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 663.785809][T23678] __nla_validate_parse: 26 callbacks suppressed [ 663.785831][T23678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4404'. [ 663.972113][T23692] netlink: 'syz.3.4408': attribute type 10 has an invalid length. [ 664.024830][T23692] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4408'. [ 664.272885][T23711] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4413'. [ 664.347088][T23716] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4414'. [ 664.407862][T23716] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4414'. [ 664.591160][T23726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4418'. [ 665.424677][T23780] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4429'. [ 665.438768][T23783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4428'. [ 665.478454][T23787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4431'. [ 665.520821][T23783] bond6: entered promiscuous mode [ 665.526621][T23783] 8021q: adding VLAN 0 to HW filter on device bond6 [ 665.546270][T23783] bond6 (unregistering): Released all slaves [ 665.615127][T23790] wg1 speed is unknown, defaulting to 1000 [ 665.710515][T23794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4432'. [ 665.850213][T23805] xt_hashlimit: size too large, truncated to 1048576 [ 666.192654][T23815] openvswitch: netlink: Flow key attr not present in new flow. [ 666.448174][T23822] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.475658][T23822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 666.532547][T18882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 666.559583][T23823] syzkaller0: entered promiscuous mode [ 666.568462][T23823] syzkaller0: entered allmulticast mode [ 666.749600][T23842] vlan2: entered allmulticast mode [ 666.755129][T23842] bridge2: entered allmulticast mode [ 666.813243][T23842] bond6 (unregistering): Released all slaves [ 666.865611][ T177] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 667.012595][T18882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 667.090771][T23859] netlink: 'syz.2.4448': attribute type 1 has an invalid length. [ 667.371531][T23870] syzkaller0: entered promiscuous mode [ 667.401437][T23870] syzkaller0: entered allmulticast mode [ 667.478163][T23880] syzkaller1: entered promiscuous mode [ 667.497700][T23880] syzkaller1: entered allmulticast mode [ 667.656508][T23881] wg1 speed is unknown, defaulting to 1000 [ 668.105081][ T66] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 668.124576][ T66] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 668.256210][T23903] vlan3: entered allmulticast mode [ 668.274346][T23903] bridge5: entered allmulticast mode [ 668.385637][T23905] bridge5: port 1(bond0) entered blocking state [ 668.404546][T23905] bridge5: port 1(bond0) entered disabled state [ 668.422991][T23905] bond0: entered allmulticast mode [ 668.430853][T23905] bond0: entered promiscuous mode [ 668.572579][T23916] netlink: 'syz.3.4463': attribute type 14 has an invalid length. [ 668.874637][T10378] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 669.224033][T23946] netlink: 'syz.4.4472': attribute type 4 has an invalid length. [ 669.314157][T23954] __nla_validate_parse: 11 callbacks suppressed [ 669.314179][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4475'. [ 669.335725][T23956] netlink: 'syz.3.4476': attribute type 15 has an invalid length. [ 669.344646][T23956] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4476'. [ 669.476405][T23962] netlink: 181244 bytes leftover after parsing attributes in process `syz.0.4478'. [ 669.500390][T23963] netlink: 'syz.2.4480': attribute type 1 has an invalid length. [ 669.590971][T23963] 8021q: adding VLAN 0 to HW filter on device bond10 [ 669.612223][T23963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4480'. [ 669.632955][T23963] bond10 (unregistering): Released all slaves [ 670.253324][T23997] wg1 speed is unknown, defaulting to 1000 [ 670.306893][T24002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4487'. [ 670.362537][T24003] netlink: 'syz.0.4488': attribute type 3 has an invalid length. [ 670.612670][T24021] netlink: 'syz.4.4490': attribute type 3 has an invalid length. [ 670.744464][T24022] wg1 speed is unknown, defaulting to 1000 [ 670.997417][T24030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4493'. [ 671.419136][T24049] wg1 speed is unknown, defaulting to 1000 [ 671.547793][T24061] macsec0: entered allmulticast mode [ 671.596707][T24061] netlink: 'syz.0.4502': attribute type 1 has an invalid length. [ 671.606105][T24061] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4502'. [ 671.902954][T24075] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4506'. [ 672.109470][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4509'. [ 672.139557][T24083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4509'. [ 672.341116][ T9212] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.373074][ T9212] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.398974][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 672.425775][ T9212] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.454590][ T9212] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.508094][T24107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.627924][T24119] sock: sock_timestamping_bind_phc: sock not bind to device [ 672.734565][T24120] wg1 speed is unknown, defaulting to 1000 [ 672.811282][T24127] netlink: 'syz.2.4521': attribute type 14 has an invalid length. [ 672.930756][T24131] wg1 speed is unknown, defaulting to 1000 [ 673.314144][T24145] nbd2: detected capacity change from 0 to 63 [ 673.369118][ T5835] block nbd2: Receive control failed (result -104) [ 674.605577][T24214] __nla_validate_parse: 6 callbacks suppressed [ 674.605598][T24214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4544'. [ 674.680136][T24215] pim6reg1: entered promiscuous mode [ 674.686132][T24215] pim6reg1: entered allmulticast mode [ 674.853114][T24214] nbd: socks must be embedded in a SOCK_ITEM attr [ 674.862709][T24221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4544'. [ 674.874011][T24221] nbd: nbd64 already in use [ 674.889356][T24230] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.4550'. [ 674.911122][T21554] block nbd64: NBD_DISCONNECT [ 675.171140][T21344] udevd[21344]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 675.795397][T24259] tipc: Resetting bearer [ 675.990065][T24270] ±ÿ: renamed from lo (while UP) [ 676.027082][T24271] netlink: 'syz.3.4559': attribute type 13 has an invalid length. [ 676.045423][T24271] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4559'. [ 676.251863][T24275] netlink: 'syz.0.4560': attribute type 5 has an invalid length. [ 676.434422][T24280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4562'. [ 676.502043][T24280] bond10: entered promiscuous mode [ 676.507687][T24280] 8021q: adding VLAN 0 to HW filter on device bond10 [ 676.574237][T24280] 8021q: adding VLAN 0 to HW filter on device bond10 [ 676.640753][T24280] bond10: (slave sit2): The slave device specified does not support setting the MAC address [ 676.673429][T24288] IPv6: NLM_F_CREATE should be specified when creating new route [ 676.683600][T24280] bond10: (slave sit2): Error -95 calling set_mac_address [ 676.691088][T24288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 676.698658][T24288] IPv6: NLM_F_CREATE should be set when creating new route [ 676.706004][T24288] IPv6: NLM_F_CREATE should be set when creating new route [ 676.713886][T24288] IPv6: NLM_F_CREATE should be set when creating new route [ 676.727000][T24289] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4564'. [ 677.058660][T24299] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 677.089575][T24299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 677.199157][ T5835] Bluetooth: hci1: link tx timeout [ 677.207793][ T5835] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 677.316511][T24327] netlink: 'syz.2.4577': attribute type 9 has an invalid length. [ 677.339482][T24327] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.4577'. [ 677.414985][T24334] macsec0: entered allmulticast mode [ 677.424876][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4580'. [ 677.435858][T24329] veth1_macvtap: entered allmulticast mode [ 677.445932][T24331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4579'. [ 677.460607][T24329] macsec0: left allmulticast mode [ 677.471706][T24329] veth1_macvtap: left allmulticast mode [ 677.727458][T24351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.748820][T24351] netlink: 'syz.3.4584': attribute type 9 has an invalid length. [ 677.765096][T24352] syzkaller0: entered promiscuous mode [ 677.780371][T24352] syzkaller0: entered allmulticast mode [ 677.796780][T24353] netlink: 'syz.3.4584': attribute type 9 has an invalid length. [ 677.845569][T24355] netlink: 'syz.2.4586': attribute type 1 has an invalid length. [ 677.862293][T24355] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4586'. [ 678.097603][T24366] openvswitch: netlink: Flow key attr not present in new flow. [ 678.144003][T24366] openvswitch: netlink: Flow key attr not present in new flow. [ 678.173914][T24373] openvswitch: netlink: Actions may not be safe on all matching packets [ 678.315779][T24380] netlink: 'syz.0.4593': attribute type 58 has an invalid length. [ 678.601472][T24396] 8021q: adding VLAN 0 to HW filter on device bond6 [ 678.994390][T24434] wg1 speed is unknown, defaulting to 1000 [ 679.262150][T24447] bond11: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 679.282792][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 679.311737][T24447] bond11 (unregistering): Released all slaves [ 679.728023][T24472] __nla_validate_parse: 12 callbacks suppressed [ 679.728043][T24472] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4614'. [ 679.801658][T24468] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4613'. [ 679.819866][T24468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4613'. [ 679.848075][T24475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4616'. [ 679.885711][T24471] wg1 speed is unknown, defaulting to 1000 [ 680.638681][T10374] IPVS: starting estimator thread 0... [ 680.752067][T24504] IPVS: using max 32 ests per chain, 76800 per kthread [ 681.032421][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 681.257795][T24538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4634'. [ 681.366773][T24536] wg1 speed is unknown, defaulting to 1000 [ 681.413202][T24543] netlink: 'syz.1.4635': attribute type 4 has an invalid length. [ 681.893284][T24568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4642'. [ 682.377226][T24597] netlink: 'syz.3.4645': attribute type 1 has an invalid length. [ 682.557886][T24597] bond7: entered promiscuous mode [ 682.600855][T24597] 8021q: adding VLAN 0 to HW filter on device bond7 [ 682.662974][T24609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4647'. [ 682.742824][T24614] netlink: 'syz.2.4647': attribute type 13 has an invalid length. [ 682.761111][T24614] netlink: 'syz.2.4647': attribute type 17 has an invalid length. [ 682.918861][T24624] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4651'. [ 683.116173][T24614] team0: left promiscuous mode [ 683.129192][T24614] team_slave_0: left promiscuous mode [ 683.143493][T24614] team_slave_1: left promiscuous mode [ 683.162591][T24614] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 683.184427][T24614] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.214932][T24614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 683.327129][T24633] gtp1: entered promiscuous mode [ 683.345494][T24633] gtp1: entered allmulticast mode [ 684.671141][T24665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4660'. [ 684.693357][T24675] atomic_op ffff88805399d998 conn xmit_atomic 0000000000000000 [ 684.730223][T24675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4662'. [ 684.768606][T24668] wg1 speed is unknown, defaulting to 1000 [ 685.120136][T24654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4658'. [ 686.160137][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.170733][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.355137][T24700] vxcan1: entered allmulticast mode [ 686.428219][T24704] x_tables: duplicate underflow at hook 1 [ 686.849803][T24711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4668'. [ 686.899749][T24710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4668'. [ 687.194494][T24723] netlink: 'syz.3.4670': attribute type 1 has an invalid length. [ 687.203260][T24723] netlink: 'syz.3.4670': attribute type 2 has an invalid length. [ 687.220223][T24723] netlink: 'syz.3.4670': attribute type 1 has an invalid length. [ 687.237524][T24723] netlink: 'syz.3.4670': attribute type 3 has an invalid length. [ 687.255755][T24724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4671'. [ 687.434600][T24725] wg1 speed is unknown, defaulting to 1000 [ 687.824579][T24740] wg1 speed is unknown, defaulting to 1000 [ 688.788433][T24780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4682'. [ 688.938768][T24619] Set syz1 is full, maxelem 65536 reached [ 688.984568][T24780] wg1 speed is unknown, defaulting to 1000 [ 689.309299][T24808] netlink: 'syz.0.4688': attribute type 4 has an invalid length. [ 689.341859][T24808] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4688'. [ 689.558550][T24816] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4690'. [ 689.669510][T24826] netlink: 'syz.0.4691': attribute type 1 has an invalid length. [ 689.706481][T24811] sit1: entered allmulticast mode [ 689.906152][T24837] netlink: 'syz.0.4693': attribute type 2 has an invalid length. [ 689.914544][T24837] netlink: 'syz.0.4693': attribute type 8 has an invalid length. [ 689.923127][T24837] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4693'. [ 689.978216][T24838] netlink: 'syz.3.4694': attribute type 10 has an invalid length. [ 690.071263][T24847] team0: left promiscuous mode [ 690.096689][T24847] team_slave_0: left promiscuous mode [ 690.125967][T24847] team_slave_1: left promiscuous mode [ 690.196060][T24856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.220812][T24847] veth0_to_batadv: left promiscuous mode [ 690.256364][T24847] veth0_to_batadv: left allmulticast mode [ 690.269209][T24863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4699'. [ 690.363681][T24847] macsec0: left allmulticast mode [ 690.401719][T24847] geneve2: left promiscuous mode [ 690.414962][T24847] geneve2: left allmulticast mode [ 690.525882][T24847] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 690.533537][T24847] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 690.549936][T24847] bond5: left promiscuous mode [ 690.556882][T24847] ip6gre1: left promiscuous mode [ 690.577092][T24847] hsr0: left allmulticast mode [ 690.582651][T24847] hsr_slave_0: left allmulticast mode [ 690.588226][T24847] hsr_slave_1: left allmulticast mode [ 690.594536][T24847] macvlan2: left allmulticast mode [ 690.601225][T24847] bond6: left promiscuous mode [ 690.639773][T24403] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 51199 - 0 [ 690.666592][T24403] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 51199 - 0 [ 690.744882][T24403] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 51199 - 0 [ 690.765201][T24422] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 51199 - 0 [ 690.963474][T24892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4709'. [ 691.098393][T24898] bond8: option ad_user_port_key: invalid value (65535) [ 691.110186][T24898] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 691.121127][T24898] bond8 (unregistering): Released all slaves [ 691.155042][T24902] team0: Port device veth1_to_bridge added [ 691.363217][T24913] netlink: 'syz.1.4715': attribute type 1 has an invalid length. [ 691.537348][T24913] 8021q: adding VLAN 0 to HW filter on device bond8 [ 691.596330][T24920] bond8: (slave veth9): Enslaving as an active interface with an up link [ 691.635540][T24909] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 691.645194][T24909] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 691.694276][T24916] wg1 speed is unknown, defaulting to 1000 [ 691.788271][T24933] syzkaller1: entered promiscuous mode [ 691.794370][T24933] syzkaller1: entered allmulticast mode [ 692.118652][T24956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4724'. [ 692.758393][T24993] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4736'. [ 692.817440][T24994] pim6reg1: entered promiscuous mode [ 692.829690][T24994] pim6reg1: entered allmulticast mode [ 692.959109][T24998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4737'. [ 692.968199][T10375] IPVS: starting estimator thread 0... [ 692.994869][T24997] wg1 speed is unknown, defaulting to 1000 [ 692.998679][T24998] netlink: 'syz.0.4737': attribute type 26 has an invalid length. [ 693.027727][T24998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4737'. [ 693.050466][T25006] IPVS: sh: FWM 3 0x00000003 - no destination available [ 693.072012][T24999] IPVS: using max 27 ests per chain, 64800 per kthread [ 693.279858][T25015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4741'. [ 693.375095][T25012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4741'. [ 693.611039][T25030] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4749'. [ 693.631828][T25030] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4749'. [ 693.643262][T25030] netlink: 'syz.3.4749': attribute type 5 has an invalid length. [ 693.840760][T25042] netlink: 'syz.4.4753': attribute type 1 has an invalid length. [ 693.890732][T25044] bond9: option miimon: invalid value (18446744073709551607) [ 693.898707][T25044] bond9: option miimon: allowed values 0 - 2147483647 [ 693.913814][T25044] bond9 (unregistering): Released all slaves [ 694.007934][T25040] netlink: 'syz.3.4752': attribute type 1 has an invalid length. [ 694.187293][T25040] 8021q: adding VLAN 0 to HW filter on device bond8 [ 694.248356][T25052] wg1 speed is unknown, defaulting to 1000 [ 694.421349][T25079] netlink: 'syz.1.4759': attribute type 3 has an invalid length. [ 694.441840][T25079] netlink: 'syz.1.4759': attribute type 1 has an invalid length. [ 695.384646][ T29] audit: type=1804 audit(1776562907.369:14): pid=25136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4774" name="/newroot/403/cgroup.controllers" dev="tmpfs" ino=2074 res=1 errno=0 [ 695.456153][ T29] audit: type=1800 audit(1776562907.369:15): pid=25136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4774" name="cgroup.controllers" dev="tmpfs" ino=2074 res=0 errno=0 [ 695.532356][T25142] wg1 speed is unknown, defaulting to 1000 [ 695.699705][T25144] netlink: 'syz.4.4773': attribute type 1 has an invalid length. [ 695.722667][T25148] dummy0: entered promiscuous mode [ 695.728617][T25148] dummy0: entered allmulticast mode [ 695.753292][T25146] bridge0: port 4(veth0_to_bridge) entered blocking state [ 695.760924][T25146] bridge0: port 4(veth0_to_bridge) entered disabled state [ 695.769806][T25146] veth0_to_bridge: entered allmulticast mode [ 695.779888][T25146] veth0_to_bridge: entered promiscuous mode [ 695.855967][T25154] x_tables: duplicate underflow at hook 1 [ 696.041651][T25137] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 696.060108][T25137] bond3 (unregistering): Released all slaves [ 696.174136][T25170] netlink: 'syz.1.4781': attribute type 1 has an invalid length. [ 696.212728][T25169] ip6tnl0: Caught tx_queue_len zero misconfig [ 696.243731][T25167] __nla_validate_parse: 7 callbacks suppressed [ 696.243753][T25167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4781'. [ 696.308869][T25167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4781'. [ 696.433762][T25175] wg1 speed is unknown, defaulting to 1000 [ 696.876442][T25203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4790'. [ 697.227074][T25215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4794'. [ 697.239921][T25217] xt_hashlimit: overflow, rate too high: 0 [ 697.430805][T25224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4797'. [ 697.488396][T25225] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 697.686844][T25237] netlink: 'syz.4.4800': attribute type 2 has an invalid length. [ 697.716257][T25237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4800'. [ 698.160236][T25255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4804'. [ 698.210089][T25257] netlink: 'syz.1.4803': attribute type 1 has an invalid length. [ 698.284685][T25261] sctp: [Deprecated]: syz.0.4805 (pid 25261) Use of int in max_burst socket option deprecated. [ 698.284685][T25261] Use struct sctp_assoc_value instead [ 698.312150][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 698.377768][T25268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4803'. [ 698.419079][T25268] 8021q: adding VLAN 0 to HW filter on device bond10 [ 698.585573][T25262] bond10: (slave geneve3): making interface the new active one [ 698.640325][T25262] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 698.674088][T24403] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 698.699664][T24403] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 698.730512][T24403] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 698.754357][T24403] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 698.995767][T25297] netlink: 'syz.0.4814': attribute type 58 has an invalid length. [ 699.035865][T25295] geneve1: Caught tx_queue_len zero misconfig [ 699.067119][T25297] netlink: 'syz.0.4814': attribute type 58 has an invalid length. [ 699.448248][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 699.515962][T25319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4819'. [ 699.736090][T25316] tipc: Resetting bearer [ 699.860811][T25316] tipc: Disabling bearer [ 700.138559][T25346] veth0: Caught tx_queue_len zero misconfig [ 700.219710][T25347] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4823'. [ 700.617663][T25376] netlink: 'syz.0.4830': attribute type 1 has an invalid length. [ 700.628101][T25376] netlink: 'syz.0.4830': attribute type 2 has an invalid length. [ 700.778992][T25380] netlink: 'syz.0.4831': attribute type 1 has an invalid length. [ 700.933806][T25387] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 701.375722][T25415] netlink: 'syz.1.4839': attribute type 29 has an invalid length. [ 701.396128][T25415] netlink: 'syz.1.4839': attribute type 1 has an invalid length. [ 701.584857][T25425] __nla_validate_parse: 4 callbacks suppressed [ 701.584879][T25425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4842'. [ 701.637703][T25433] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4842'. [ 701.690116][T25424] bond3: option tlb_dynamic_lb: invalid value (3) [ 701.731186][T25424] bond3 (unregistering): Released all slaves [ 701.861249][T25439] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4842'. [ 702.086407][T25453] x_tables: unsorted underflow at hook 4 [ 702.185200][T25455] syzkaller0: entered promiscuous mode [ 702.203409][T25455] syzkaller0: entered allmulticast mode [ 702.456148][T25478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4851'. [ 702.514955][T25478] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4851'. [ 702.586272][T25478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4851'. [ 702.655755][T25478] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4851'. [ 702.715058][T25478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4851'. [ 703.332761][T25486] wg1 speed is unknown, defaulting to 1000 [ 703.435112][ T1594] block nbd2: Possible stuck request ffff888026f7e000: control (read@0,1024B). Runtime 30 seconds [ 703.450551][ T1594] block nbd2: Possible stuck request ffff888026f7e1c0: control (read@1024,1024B). Runtime 30 seconds [ 703.467038][ T1594] block nbd2: Possible stuck request ffff888026f7e380: control (read@2048,1024B). Runtime 30 seconds [ 703.478261][ T1594] block nbd2: Possible stuck request ffff888026f7e540: control (read@3072,1024B). Runtime 30 seconds [ 703.625614][T25525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.710369][T25531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4858'. [ 703.742200][T25531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4858'. [ 704.074731][T25537] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 704.099385][T25537] bond9 (unregistering): Released all slaves [ 704.254584][T25544] tipc: Enabling of bearer rejected, failed to enable media [ 704.444139][T25555] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 704.462525][T25555] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 704.865660][T25571] wg1 speed is unknown, defaulting to 1000 [ 705.374881][T25608] syzkaller0: entered promiscuous mode [ 705.408787][T25608] syzkaller0: entered allmulticast mode [ 705.631409][T25624] netlink: zone id is out of range [ 705.668380][T25624] netlink: zone id is out of range [ 705.680862][T25624] netlink: zone id is out of range [ 705.697527][T25624] netlink: zone id is out of range [ 705.711176][T25624] netlink: zone id is out of range [ 705.726023][T25624] netlink: zone id is out of range [ 705.738805][T25624] netlink: zone id is out of range [ 705.753937][T25624] netlink: zone id is out of range [ 705.766484][T25624] netlink: zone id is out of range [ 705.782762][T25624] netlink: zone id is out of range [ 706.056648][T25647] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 706.460295][T25668] netlink: 'syz.4.4887': attribute type 10 has an invalid length. [ 706.506622][T25668] bond1: (slave dummy0): Releasing backup interface [ 706.670659][T25668] team0: Port device dummy0 added [ 706.977144][T25680] wg1 speed is unknown, defaulting to 1000 [ 707.051162][T25691] __nla_validate_parse: 8 callbacks suppressed [ 707.051185][T25691] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4892'. [ 707.137302][T25693] xt_connbytes: Forcing CT accounting to be enabled [ 707.164313][T25693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 707.469579][T25705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4895'. [ 707.574698][T25717] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4896'. [ 708.214786][T25728] wg1 speed is unknown, defaulting to 1000 [ 708.379173][T25750] veth1_to_bond: entered allmulticast mode [ 708.460759][T25750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4905'. [ 708.516706][T25750] veth1_to_bond (unregistering): left allmulticast mode [ 708.537724][T25750] bond0: (slave bond_slave_1): Releasing backup interface [ 708.773724][T25766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4907'. [ 709.207217][T25779] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 709.242556][T25779] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 709.284817][T25795] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 709.354654][T25794] ip6gre1: entered promiscuous mode [ 709.360455][T25794] ip6gre1: entered allmulticast mode [ 709.370767][T25791] wg1 speed is unknown, defaulting to 1000 [ 711.034926][T25872] sctp: [Deprecated]: syz.1.4932 (pid 25872) Use of int in max_burst socket option deprecated. [ 711.034926][T25872] Use struct sctp_assoc_value instead [ 711.114245][T25872] mac80211_hwsim hwsim27 wlan0: Caught tx_queue_len zero misconfig [ 711.156563][T25883] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4934'. [ 712.611690][T25969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4951'. [ 712.701118][T25974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4953'. [ 712.730499][T25974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4953'. [ 713.182150][ C1] net_ratelimit: 6 callbacks suppressed [ 713.182170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.255602][T26008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.598454][T26024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4965'. [ 713.617508][T26026] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4967'. [ 713.635362][T26026] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 713.885527][T26039] netlink: 'syz.2.4970': attribute type 10 has an invalid length. [ 713.898998][T26040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4969'. [ 713.947341][T26042] netlink: 'syz.2.4970': attribute type 3 has an invalid length. [ 713.971339][T26039] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.007091][T26039] bond0: (slave team0): Enslaving as an active interface with an up link [ 714.110177][T26047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4972'. [ 714.209825][T26052] xt_hashlimit: size too large, truncated to 1048576 [ 715.613962][T26079] veth0_virt_wifi: entered allmulticast mode [ 715.745541][T26085] netlink: 'syz.1.4983': attribute type 8 has an invalid length. [ 715.894991][T26092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4985'. [ 715.940907][T26092] bond9: option primary_reselect: invalid value (133) [ 715.958412][T26092] bond9 (unregistering): Released all slaves [ 716.113617][T26101] bond11: entered promiscuous mode [ 716.132512][T26101] bond11: entered allmulticast mode [ 716.142980][T26101] 8021q: adding VLAN 0 to HW filter on device bond11 [ 716.180791][T26102] wg1 speed is unknown, defaulting to 1000 [ 716.252749][T26114] netlink: 'syz.3.4991': attribute type 4 has an invalid length. [ 716.260832][T26114] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4991'. [ 716.533411][T26122] IPVS: persistence engine module ip_vs_pe_… not found [ 716.976878][T26141] syzkaller1: entered promiscuous mode [ 716.997570][T26141] syzkaller1: entered allmulticast mode [ 717.008394][T26145] nbd: must specify at least one socket [ 717.048086][T26141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4996'. [ 717.086388][T26141] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 717.750121][T26168] syz.0.5001 (26168) used obsolete PPPIOCDETACH ioctl [ 717.862251][T26172] wg1 speed is unknown, defaulting to 1000 [ 718.464141][T26201] netlink: 'syz.0.5014': attribute type 1 has an invalid length. [ 718.489205][T26201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5014'. [ 718.590524][T26203] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 718.879390][T26223] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5019'. [ 718.912348][T26218] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5019'. [ 718.957962][T26172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5007'. [ 719.363524][T26237] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5024'. [ 719.406714][T26237] bridge0: port 3(macvlan2) entered disabled state [ 719.433665][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.454733][T26240] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5024'. [ 720.101542][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5029'. [ 720.120682][T26258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5028'. [ 720.135217][T26260] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5029'. [ 720.179602][T26258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5028'. [ 720.716474][T26296] netlink: 'syz.0.5035': attribute type 1 has an invalid length. [ 720.888963][T26284] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 721.056639][T26299] bond9: (slave geneve3): making interface the new active one [ 721.088518][T26299] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 721.126524][T26300] 8021q: adding VLAN 0 to HW filter on device bond9 [ 721.599677][T24408] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 721.703439][T24408] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 721.803431][T24408] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 721.844707][T24408] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 722.040392][T26338] wg1 speed is unknown, defaulting to 1000 [ 722.335605][T26352] netlink: 'syz.3.5044': attribute type 21 has an invalid length. [ 722.362324][T26348] wg1 speed is unknown, defaulting to 1000 [ 722.370215][T26352] netlink: 'syz.3.5044': attribute type 5 has an invalid length. [ 722.411004][T26352] netlink: 'syz.3.5044': attribute type 6 has an invalid length. [ 722.605258][T26351] wg1 speed is unknown, defaulting to 1000 [ 722.930429][T26370] netlink: 'syz.3.5050': attribute type 6 has an invalid length. [ 722.953000][T26370] netlink: 'syz.3.5050': attribute type 7 has an invalid length. [ 722.961186][T26370] netlink: 'syz.3.5050': attribute type 8 has an invalid length. [ 723.020731][T26366] syzkaller0: entered promiscuous mode [ 723.035288][T26366] syzkaller0: entered allmulticast mode [ 723.883539][T26412] __nla_validate_parse: 217 callbacks suppressed [ 723.883558][T26412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5069'. [ 724.217372][T26430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.669713][T26462] delete_channel: no stack [ 724.762652][T26467] bond0: (slave batadv_slave_1): Error: Device can not be enslaved while up [ 725.035190][T26433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.053904][T26461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.136979][T26483] tipc: Enabled bearer , priority 0 [ 725.167004][T26483] syzkaller0: entered promiscuous mode [ 725.179035][T26483] syzkaller0: entered allmulticast mode [ 725.235007][T26483] tipc: Resetting bearer [ 725.255045][T26482] tipc: Resetting bearer [ 725.290862][T26482] tipc: Disabling bearer [ 725.737684][T26509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.771724][T26509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.785554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.096560][T26530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5113'. [ 726.159456][T26529] tap0: tun_chr_ioctl cmd 1074025681 [ 726.960523][T26574] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.5134'. [ 727.175671][T26586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5140'. [ 727.185337][T26586] netlink: 'syz.2.5140': attribute type 2 has an invalid length. [ 727.193851][T26586] netlink: 'syz.2.5140': attribute type 1 has an invalid length. [ 727.266005][T26588] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 727.278460][T26588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.432559][T26651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5169'. [ 728.679014][T26662] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 729.095964][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5186'. [ 729.107117][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5186'. [ 729.117477][T26688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5186'. [ 729.466068][T26706] lo: Caught tx_queue_len zero misconfig [ 729.496005][T26708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5196'. [ 729.526758][T26708] bond_slave_0: entered promiscuous mode [ 729.532604][T26708] bond_slave_1: entered promiscuous mode [ 729.538989][T26708] macvtap0: entered promiscuous mode [ 729.545337][T26708] bond0: entered promiscuous mode [ 729.552880][T26708] macvtap0: entered allmulticast mode [ 729.558188][T26710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5196'. [ 729.558822][T26708] bond0: entered allmulticast mode [ 729.574097][T26708] bond_slave_0: entered allmulticast mode [ 729.580098][T26708] bond_slave_1: entered allmulticast mode [ 729.587424][T26708] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 729.615140][T26710] bond0: left allmulticast mode [ 729.620378][T26710] bond_slave_0: left allmulticast mode [ 729.626536][T26710] bond_slave_1: left allmulticast mode [ 729.632804][T26710] bond0: left promiscuous mode [ 729.638430][T26710] bond_slave_0: left promiscuous mode [ 729.646004][T26710] bond_slave_1: left promiscuous mode [ 730.222898][T26743] syzkaller0: entered promiscuous mode [ 730.234816][T26743] syzkaller0: entered allmulticast mode [ 730.234838][T26747] netlink: 'syz.0.5212': attribute type 13 has an invalid length. [ 730.274483][T26747] gretap0: refused to change device tx_queue_len [ 730.294832][T26747] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 730.447388][T26755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5217'. [ 730.604608][T26760] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5220'. [ 730.783240][T26761] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5219'. [ 730.860127][T26761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5219'. [ 730.916617][T26771] delete_channel: no stack [ 730.930780][T26764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 730.950467][T26780] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5224'. [ 730.987562][T26766] wg1 speed is unknown, defaulting to 1000 [ 731.099641][T26777] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 731.601535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.047422][T26844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 732.773447][T26877] netlink: 'syz.0.5248': attribute type 9 has an invalid length. [ 733.215090][T26910] nbd: socks must be embedded in a SOCK_ITEM attr [ 733.514266][ T1594] block nbd2: Possible stuck request ffff888026f7e000: control (read@0,1024B). Runtime 60 seconds [ 733.525207][ T1594] block nbd2: Possible stuck request ffff888026f7e1c0: control (read@1024,1024B). Runtime 60 seconds [ 733.536934][ T1594] block nbd2: Possible stuck request ffff888026f7e380: control (read@2048,1024B). Runtime 60 seconds [ 733.548629][ T1594] block nbd2: Possible stuck request ffff888026f7e540: control (read@3072,1024B). Runtime 60 seconds [ 733.773189][T26928] netlink: 'syz.2.5260': attribute type 322 has an invalid length. [ 733.980146][T24412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.001734][T24412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.213011][T26949] __nla_validate_parse: 10 callbacks suppressed [ 734.213033][T26949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5266'. [ 734.274451][T26949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5266'. [ 734.315346][T26949] netlink: 'syz.3.5266': attribute type 12 has an invalid length. [ 734.353026][T26949] netlink: 'syz.3.5266': attribute type 13 has an invalid length. [ 734.658090][T26970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5271'. [ 734.702434][T26970] netlink: 'syz.3.5271': attribute type 1 has an invalid length. [ 734.769475][T26975] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5273'. [ 734.881710][T26980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'. [ 734.903168][T26975] nbd3: detected capacity change from 0 to 127 [ 734.930939][ T5835] block nbd3: Receive control failed (result -104) [ 735.523057][T27016] syzkaller0: entered promiscuous mode [ 735.538881][T27016] syzkaller0: entered allmulticast mode [ 735.587060][T27016] tc action pedit offset 67108864 out of bounds [ 735.594919][T27016] tc action pedit offset 67108864 out of bounds [ 735.601404][T27016] tc action pedit offset 67108864 out of bounds [ 735.607762][T27016] tc action pedit offset 67108864 out of bounds [ 735.614179][T27016] tc action pedit offset 67108864 out of bounds [ 735.620493][T27016] tc action pedit offset 67108864 out of bounds [ 735.626903][T27016] tc action pedit offset 67108864 out of bounds [ 735.633233][T27016] tc action pedit offset 67108864 out of bounds [ 735.639558][T27016] tc action pedit offset 67108864 out of bounds [ 735.645877][T27016] tc action pedit offset 67108864 out of bounds [ 735.652220][T27016] TC_ACT_REPEAT abuse ? [ 736.146390][T27042] macsec1: entered promiscuous mode [ 736.174508][T27042] bridge0: entered promiscuous mode [ 736.198958][T27040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5286'. [ 736.408325][T27063] netlink: 'syz.4.5295': attribute type 1 has an invalid length. [ 736.446125][T27063] netlink: 760 bytes leftover after parsing attributes in process `syz.4.5295'. [ 736.737572][T27087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5298'. [ 736.951821][T27094] bridge0: left promiscuous mode [ 736.970708][T24411] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 736.996368][T27094] netlink: 'syz.0.5300': attribute type 13 has an invalid length. [ 737.009046][T24411] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 737.026385][T27094] netlink: 'syz.0.5300': attribute type 17 has an invalid length. [ 737.039099][T24411] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 737.058597][T24411] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 737.223299][T27098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5300'. [ 737.259763][T27094] bridge0: port 3(syz_tun) entered blocking state [ 737.266734][T27094] bridge0: port 3(syz_tun) entered listening state [ 737.305418][T27094] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.325130][T27094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 737.390823][T27097] wg1 speed is unknown, defaulting to 1000 [ 737.690495][T27118] netlink: 'syz.4.5305': attribute type 2 has an invalid length. [ 737.703648][T27118] netlink: 'syz.4.5305': attribute type 1 has an invalid length. [ 737.904942][T27116] wg1 speed is unknown, defaulting to 1000 [ 737.912546][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.923839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.925509][T27127] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 737.956476][T27126] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5308'. [ 738.237847][ T1594] block nbd3: Connection timed out, retrying (0/1 alive) [ 738.246644][ T1594] block nbd3: Connection timed out, retrying (0/1 alive) [ 738.254692][ T1594] block nbd3: Connection timed out, retrying (0/1 alive) [ 738.262945][ T25] block nbd3: Dead connection, failed to find a fallback [ 738.289450][ T25] block nbd3: shutting down sockets [ 738.296136][ T1594] block nbd3: Connection timed out, retrying (0/1 alive) [ 738.306134][ T25] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.327424][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 738.335470][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.344816][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 738.352869][ T25] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.362194][ T25] Buffer I/O error on dev nbd3, logical block 3, async page read [ 738.372129][ T25] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.381744][ T25] Buffer I/O error on dev nbd3, logical block 2, async page read [ 738.392165][T24639] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.407956][T24639] Buffer I/O error on dev nbd3, logical block 0, async page read [ 738.416419][T24639] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.425886][T24639] Buffer I/O error on dev nbd3, logical block 1, async page read [ 738.435950][T24639] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.445263][T24639] Buffer I/O error on dev nbd3, logical block 2, async page read [ 738.456107][T24639] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.465523][T24639] Buffer I/O error on dev nbd3, logical block 3, async page read [ 738.475567][T24639] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.480353][T27146] validate_nla: 4 callbacks suppressed [ 738.480420][T27146] netlink: 'syz.1.5312': attribute type 1 has an invalid length. [ 738.484989][T24639] Buffer I/O error on dev nbd3, logical block 0, async page read [ 738.485199][T24639] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 738.485227][T24639] Buffer I/O error on dev nbd3, logical block 1, async page read [ 738.502655][T24639] ldm_validate_partition_table(): Disk read failed. [ 738.535793][T24639] Dev nbd3: unable to read RDB block 0 [ 738.551250][T27149] ip6tnl4: entered promiscuous mode [ 738.565304][T24639] nbd3: unable to read partition table [ 738.573606][T27149] ip6tnl4: entered allmulticast mode [ 738.615581][T24639] ldm_validate_partition_table(): Disk read failed. [ 738.637198][T24639] Dev nbd3: unable to read RDB block 0 [ 738.645650][T24639] nbd3: unable to read partition table [ 738.952027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.961229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.001035][T27163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.871308][T27177] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 739.992125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.000784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.086638][T27195] FAULT_INJECTION: forcing a failure. [ 740.086638][T27195] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 740.103860][T27194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.122384][T27195] CPU: 0 UID: 0 PID: 27195 Comm: syz.1.5322 Not tainted syzkaller #0 PREEMPT(full) [ 740.122416][T27195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 740.122430][T27195] Call Trace: [ 740.122438][T27195] [ 740.122448][T27195] dump_stack_lvl+0xe8/0x150 [ 740.122486][T27195] should_fail_ex+0x412/0x560 [ 740.122523][T27195] _copy_from_user+0x2d/0xb0 [ 740.122548][T27195] do_ip6t_set_ctl+0x6ae/0xe10 [ 740.122580][T27195] ? rcu_is_watching+0x15/0xb0 [ 740.122613][T27195] ? trace_contention_end+0x3d/0x140 [ 740.122635][T27195] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 740.122683][T27195] ? __pfx___mutex_lock+0x10/0x10 [ 740.122712][T27195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 740.122748][T27195] ? __pfx_aa_sk_perm+0x10/0x10 [ 740.122782][T27195] nf_setsockopt+0x26f/0x290 [ 740.122809][T27195] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 740.122839][T27195] do_sock_setsockopt+0x17c/0x1b0 [ 740.122877][T27195] __x64_sys_setsockopt+0x13d/0x1b0 [ 740.122910][T27195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.122934][T27195] do_syscall_64+0x15f/0xf80 [ 740.122960][T27195] ? trace_irq_disable+0x3b/0x140 [ 740.122983][T27195] ? clear_bhb_loop+0x40/0x90 [ 740.123010][T27195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.123031][T27195] RIP: 0033:0x7f5bfed9c819 [ 740.123052][T27195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.123071][T27195] RSP: 002b:00007f5bffc38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 740.123095][T27195] RAX: ffffffffffffffda RBX: 00007f5bff015fa0 RCX: 00007f5bfed9c819 [ 740.123111][T27195] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 740.123133][T27195] RBP: 00007f5bffc38090 R08: 0000000000000510 R09: 0000000000000000 [ 740.123147][T27195] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 740.123161][T27195] R13: 00007f5bff016038 R14: 00007f5bff015fa0 R15: 00007fff375d2038 [ 740.123197][T27195] [ 740.361264][T27201] __nla_validate_parse: 4 callbacks suppressed [ 740.361284][T27201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5325'. [ 740.597016][T27215] sctp: [Deprecated]: syz.4.5330 (pid 27215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.597016][T27215] Use struct sctp_sack_info instead [ 740.789483][T27225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.832585][T27223] block nbd4: server does not support multiple connections per device. [ 740.845327][T27223] block nbd4: shutting down sockets [ 740.859315][T27232] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5334'. [ 741.479741][T27259] netlink: 'syz.1.5342': attribute type 1 has an invalid length. [ 741.505618][T27259] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5342'. [ 741.684942][T27266] wg1 speed is unknown, defaulting to 1000 [ 741.815282][T27280] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 741.865050][T27282] syzkaller1: entered promiscuous mode [ 741.871746][T27282] syzkaller1: entered allmulticast mode [ 742.173462][T27299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5355'. [ 742.215926][T27299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5355'. [ 742.241226][T27299] veth11: entered allmulticast mode [ 742.251819][T27299] bond10: (slave veth11): Enslaving as an active interface with an up link [ 742.268611][T27299] bond10 (unregistering): (slave veth11): Releasing backup interface [ 742.282354][T27299] bond10 (unregistering): Released all slaves [ 743.112859][ C0] net_ratelimit: 4 callbacks suppressed [ 743.112885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.127858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.762778][ T30] INFO: task udevd:21028 blocked for more than 143 seconds. [ 743.770410][ T30] Not tainted syzkaller #0 [ 743.775866][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 743.784997][ T30] task:udevd state:D stack:23400 pid:21028 tgid:21028 ppid:5194 task_flags:0x400140 flags:0x00080000 [ 743.797275][ T30] Call Trace: [ 743.800631][ T30] [ 743.803825][ T30] __schedule+0x17b4/0x5680 [ 743.808528][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 743.815361][ T30] ? __blk_flush_plug+0x416/0x4d0 [ 743.820604][ T30] ? __pfx___schedule+0x10/0x10 [ 743.825924][ T30] ? schedule+0x90/0x360 [ 743.830372][ T30] schedule+0x164/0x360 [ 743.835005][ T30] schedule_timeout+0x158/0x2c0 [ 743.839996][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 743.847194][ T30] ? __pfx_process_timeout+0x10/0x10 [ 743.853032][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 743.859250][ T30] ? prepare_to_wait_event+0x436/0x480 [ 743.865030][ T30] nbd_queue_rq+0x857/0x1100 [ 743.869799][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 743.875364][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 743.881606][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 743.887777][ T30] ? sbitmap_get+0x1b3/0x390 [ 743.892751][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 743.898900][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 743.905333][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 743.912571][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 743.919888][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 743.926074][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 743.931584][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 743.937808][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 743.943560][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 743.948805][ T30] blk_mq_dispatch_list+0xd16/0xe10 [ 743.954945][ T30] ? bdev_count_inflight+0x1cf/0x210 [ 743.960390][ T30] ? blk_mq_dispatch_list+0x1f0/0xe10 [ 743.966198][ T30] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 743.972574][ T30] ? rcu_is_watching+0x15/0xb0 [ 743.977397][ T30] blk_mq_flush_plug_list+0x48d/0x570 [ 743.983411][ T30] ? blk_add_rq_to_plug+0x300/0x450 [ 743.988974][ T30] ? blk_mq_submit_bio+0x1acf/0x28e0 [ 743.994769][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 744.000952][ T30] __blk_flush_plug+0x3ed/0x4d0 [ 744.006462][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 744.012039][ T30] __submit_bio+0x28d/0x580 [ 744.016854][ T30] ? __pfx___submit_bio+0x10/0x10 [ 744.021999][ T30] ? bio_associate_blkg+0x6d/0x230 [ 744.027561][ T30] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 744.033970][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 744.040237][ T30] block_read_full_folio+0x7b7/0x830 [ 744.046158][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 744.051603][ T30] filemap_read_folio+0x137/0x3b0 [ 744.056920][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 744.062988][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 744.068604][ T30] ? filemap_add_folio+0x356/0x530 [ 744.074570][ T30] do_read_cache_folio+0x358/0x590 [ 744.079964][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 744.085865][ T30] read_part_sector+0xb6/0x2b0 [ 744.090810][ T30] adfspart_check_ICS+0xb1/0x960 [ 744.096410][ T30] ? seq_buf_printf+0x212/0x2d0 [ 744.101594][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 744.108786][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 744.114801][ T30] bdev_disk_changed+0x817/0x1770 [ 744.120784][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 744.127001][ T30] blkdev_get_whole+0x380/0x510 [ 744.132049][ T30] bdev_open+0x31e/0xd30 [ 744.136446][ T30] blkdev_open+0x470/0x610 [ 744.140899][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 744.145963][ T30] do_dentry_open+0x785/0x14e0 [ 744.150917][ T30] vfs_open+0x3b/0x340 [ 744.155281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.164328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.173042][ T30] ? path_openat+0x2df0/0x3860 [ 744.177904][ T30] path_openat+0x2e08/0x3860 [ 744.182942][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 744.188483][ T30] ? stack_depot_save_flags+0x33/0x810 [ 744.194411][ T30] ? __pfx_path_openat+0x10/0x10 [ 744.199500][ T30] ? __x64_sys_openat+0x138/0x170 [ 744.204711][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 744.209943][ T30] do_file_open+0x23e/0x4a0 [ 744.214876][ T30] ? __pfx_do_file_open+0x10/0x10 [ 744.219996][ T30] ? _raw_spin_unlock+0x28/0x50 [ 744.225034][ T30] ? alloc_fd+0x64b/0x6c0 [ 744.229449][ T30] do_sys_openat2+0x113/0x200 [ 744.234825][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 744.240491][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 744.246326][ T30] ? rcu_is_watching+0x15/0xb0 [ 744.251266][ T30] __x64_sys_openat+0x138/0x170 [ 744.256241][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.262509][ T30] do_syscall_64+0x15f/0xf80 [ 744.267252][ T30] ? clear_bhb_loop+0x40/0x90 [ 744.272545][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.278531][ T30] RIP: 0033:0x7f9d348a7407 [ 744.283372][ T30] RSP: 002b:00007ffe1511f820 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 744.291910][ T30] RAX: ffffffffffffffda RBX: 00007f9d34fc3880 RCX: 00007f9d348a7407 [ 744.300173][ T30] RDX: 00000000000a0800 RSI: 000055616b6d5340 RDI: ffffffffffffff9c [ 744.308875][ T30] RBP: 000055616b6d4910 R08: 0000000000000000 R09: 0000000000000000 [ 744.317327][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055616b6f9970 [ 744.325787][ T30] R13: 000055616b6e2190 R14: 0000000000000000 R15: 000055616b6f9970 [ 744.334279][ T30] [ 744.337419][ T30] [ 744.337419][ T30] Showing all locks held in the system: [ 744.345265][ T30] 1 lock held by khungtaskd/30: [ 744.350154][ T30] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 744.360271][ T30] 1 lock held by syslogd/5176: [ 744.365440][ T30] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 744.375515][ T30] 2 locks held by getty/5581: [ 744.380230][ T30] #0: ffff888036fdf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 744.390558][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 744.401457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.411004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.420162][ T30] 2 locks held by kworker/1:12/18885: [ 744.426158][ T30] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 744.436311][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 744.445517][ T30] 1 lock held by udevd/21027: [ 744.450253][ T30] #0: ffff888026e66350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 744.459994][ T30] 3 locks held by udevd/21028: [ 744.465172][ T30] #0: ffff888026dff350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 744.474757][ T30] #1: ffff88802642ee98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 744.484799][ T30] #2: ffff888026eb51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 744.494196][ T30] 1 lock held by syz.1.5348/27271: [ 744.499480][ T30] #0: ffff888038411140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280 [ 744.509370][ T30] 4 locks held by syz.1.5348/27273: [ 744.515013][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.523462][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.532669][ T30] #2: ffff888038411140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3f/0x350 [ 744.541548][ T30] #3: ffff8880b1f50348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdd0 [ 744.551255][ T30] 2 locks held by syz.2.5350/27279: [ 744.556931][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.565365][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.574856][ T30] 2 locks held by syz.2.5350/27284: [ 744.580071][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.588411][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.597569][ T30] 2 locks held by syz.2.5350/27289: [ 744.603535][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.612110][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.622180][ T30] 2 locks held by syz.3.5352/27286: [ 744.627423][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.640308][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.649536][ T30] 2 locks held by syz.3.5352/27287: [ 744.655042][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.663704][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.673142][ T30] 2 locks held by syz.4.5354/27297: [ 744.678442][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.686993][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.696619][ T30] 2 locks held by syz.0.5360/27311: [ 744.702058][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 744.706255][T27273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.710800][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 744.742176][ T30] 2 locks held by syz.0.5360/27312: [ 744.751328][ T30] [ 744.754387][ T30] ============================================= [ 744.754387][ T30] [ 744.763052][ T30] NMI backtrace for cpu 0 [ 744.763071][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 744.763103][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 744.763114][ T30] Call Trace: [ 744.763123][ T30] [ 744.763133][ T30] dump_stack_lvl+0xe8/0x150 [ 744.763164][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 744.763193][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 744.763258][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 744.763288][ T30] sys_info+0x135/0x170 [ 744.763312][ T30] watchdog+0xfaa/0x1000 [ 744.763336][ T30] ? watchdog+0x209/0x1000 [ 744.763360][ T30] kthread+0x388/0x470 [ 744.763378][ T30] ? __pfx_watchdog+0x10/0x10 [ 744.763395][ T30] ? __pfx_kthread+0x10/0x10 [ 744.763414][ T30] ret_from_fork+0x514/0xb70 [ 744.763442][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 744.763467][ T30] ? __switch_to+0xc79/0x1410 [ 744.763497][ T30] ? __pfx_kthread+0x10/0x10 [ 744.763516][ T30] ret_from_fork_asm+0x1a/0x30 [ 744.763557][ T30] [ 744.763564][ T30] Sending NMI from CPU 0 to CPUs 1: [ 744.880441][ C1] NMI backtrace for cpu 1 [ 744.880461][ C1] CPU: 1 UID: 0 PID: 27289 Comm: syz.2.5350 Not tainted syzkaller #0 PREEMPT(full) [ 744.880482][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 744.880495][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x70 [ 744.880519][ C1] Code: a8 16 00 00 83 fa 02 75 21 48 8b 91 b0 16 00 00 48 8b 32 48 8d 7e 01 8b 89 ac 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 8f a9 f0 09 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 744.880536][ C1] RSP: 0018:ffffc9000e0ff310 EFLAGS: 00000293 [ 744.880553][ C1] RAX: ffffffff823d7cf3 RBX: 0000000000000001 RCX: ffff888061221ec0 [ 744.880566][ C1] RDX: 0000000000000000 RSI: 000000000008d4dd RDI: 0000000400000000 [ 744.880577][ C1] RBP: ffffc9000e0ff670 R08: ffffea0002353747 R09: 1ffffd400046a6e8 [ 744.880590][ C1] R10: dffffc0000000000 R11: fffff9400046a6e9 R12: dffffc0000000000 [ 744.880604][ C1] R13: dffffc0000000000 R14: 000000000008d4dd R15: 000000000008d4dd [ 744.880616][ C1] FS: 0000000000000000(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 744.880631][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 744.880643][ C1] CR2: 00007f4b34be7158 CR3: 0000000077206000 CR4: 00000000003526f0 [ 744.880659][ C1] Call Trace: [ 744.880666][ C1] [ 744.880672][ C1] pfn_valid+0x463/0x480 [ 744.880704][ C1] page_table_check_clear+0x21/0x5f0 [ 744.880731][ C1] ? vm_normal_page+0x10d/0x240 [ 744.880751][ C1] unmap_page_range+0x33b3/0x48f0 [ 744.880803][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 744.880827][ C1] ? mas_find+0xb0e/0xd30 [ 744.880847][ C1] ? unmap_vmas+0x1c4/0x6a0 [ 744.880866][ C1] unmap_vmas+0x48f/0x6a0 [ 744.880889][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 744.880921][ C1] exit_mmap+0x280/0x9e0 [ 744.880948][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 744.880978][ C1] ? uprobe_clear_state+0x53/0x290 [ 744.881002][ C1] ? __pfx_exit_aio+0x10/0x10 [ 744.881034][ C1] ? uprobe_clear_state+0x27c/0x290 [ 744.881055][ C1] __mmput+0x118/0x430 [ 744.881079][ C1] exit_mm+0x18e/0x250 [ 744.881099][ C1] do_exit+0x6a2/0x23c0 [ 744.881122][ C1] ? __pfx_do_exit+0x10/0x10 [ 744.881142][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 744.881167][ C1] do_group_exit+0x21b/0x2d0 [ 744.881186][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 744.881207][ C1] get_signal+0x1284/0x1330 [ 744.881243][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 744.881268][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 744.881295][ C1] ? fd_install+0x94/0x3d0 [ 744.881320][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.881340][ C1] exit_to_user_mode_loop+0x86/0x480 [ 744.881366][ C1] ? rcu_is_watching+0x15/0xb0 [ 744.881392][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.881411][ C1] do_syscall_64+0x33e/0xf80 [ 744.881433][ C1] ? trace_irq_disable+0x3b/0x140 [ 744.881451][ C1] ? clear_bhb_loop+0x40/0x90 [ 744.881472][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.881490][ C1] RIP: 0033:0x7f63f815d04e [ 744.881504][ C1] Code: Unable to access opcode bytes at 0x7f63f815d024. [ 744.881514][ C1] RSP: 002b:00007f63f8fc4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 744.881532][ C1] RAX: 0000000000000020 RBX: 00007f63f8fc66c0 RCX: 00007f63f815d04e [ 744.881544][ C1] RDX: 0000000000000020 RSI: 00007f63f8fc5000 RDI: 0000000000000006 [ 744.881556][ C1] RBP: 0000000000000000 R08: 00007f63f8fc4f04 R09: 000000000000000c [ 744.881567][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 744.881577][ C1] R13: 00007f63f8fc4f58 R14: 00007f63f8fc5000 R15: 0000000000000000 [ 744.881599][ C1] [ 745.193379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.248794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.258996][T27312] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 745.272189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.296531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.379326][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 745.386376][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 745.395816][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 745.406010][ T30] Call Trace: [ 745.409334][ T30] [ 745.412293][ T30] vpanic+0x56c/0xa60 [ 745.416629][ T30] ? __pfx___schedule+0x10/0x10 [ 745.421547][ T30] ? __pfx_vpanic+0x10/0x10 [ 745.426123][ T30] panic+0xc5/0xd0 [ 745.430101][ T30] ? __pfx_panic+0x10/0x10 [ 745.434561][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 745.440028][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 745.446433][ T30] watchdog+0xff4/0x1000 [ 745.450744][ T30] ? watchdog+0x209/0x1000 [ 745.455298][ T30] kthread+0x388/0x470 [ 745.459601][ T30] ? __pfx_watchdog+0x10/0x10 [ 745.464313][ T30] ? __pfx_kthread+0x10/0x10 [ 745.468936][ T30] ret_from_fork+0x514/0xb70 [ 745.473566][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 745.478727][ T30] ? __switch_to+0xc79/0x1410 [ 745.483481][ T30] ? __pfx_kthread+0x10/0x10 [ 745.488191][ T30] ret_from_fork_asm+0x1a/0x30 [ 745.493266][ T30] [ 745.496917][ T30] Kernel Offset: disabled [ 745.501261][ T30] Rebooting in 86400 seconds..