last executing test programs: 2m16.139060238s ago: executing program 4 (id=901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x14, 0x18, 0x1, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)={@val={0x0, 0x17}, @void, @eth={@broadcast, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x5}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x67, 0x0, 0x8, 0x84, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010102}}}}}}, 0x2a) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x80}}, 0x0) 2m14.555029409s ago: executing program 4 (id=908): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x10c, &(0x7f0000000cc0)=""/268, 0x729c10b274fd1a11, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r1, &(0x7f0000000240)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000002000000140001800500020006070000060001000a000000"], 0x28}}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) 2m14.376065747s ago: executing program 4 (id=912): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8969, 0x0, 0x0, 0x13, 0x0, &(0x7f0000000480)="97d0dc572d3bb4b371ba0b45ae743e708f3fdc", 0x1, 0x0, 0x3}, 0x11) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000008000005c00000002000000a293f994eecf4d87aa693078fbbb67e76e213ca375378b52b0f5a7c1f91b2d39c4bf5bc862f02f13e3d855f5aac2a0f8f03894a2145f990c2caed673b78d7ad7e296e83a23796c02a3a058dfa84cc35380e4bc412ab2c9010db4261703101e136960", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) 2m14.338801533s ago: executing program 4 (id=913): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x58, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "96557917d5d82cebae9347436de1ace2fe62c079"}}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x58}}, 0x4004) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', r3, 0x4, 0xff, 0xaa, 0x0, 0x1, @private0, @remote, 0x8000, 0x40e0, 0xfffffff9, 0x4}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4001) (async) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000840)=""/228, 0xe4}, {&(0x7f0000003380)=""/4094, 0xffe}], 0x2}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x42, 0x0) 2m14.00247355s ago: executing program 4 (id=920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x20004880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000001440)={'wg1\x00', 0x0}) 2m13.921517662s ago: executing program 4 (id=923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) unshare(0x400) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x40014) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2506000000a2d5d845ca8b28760db68a4a0daedae0d022a1bfb6a29d4249f722cc990d7bfb1672ebd8373bda248ac393cca4ec9eebc97217e117ad0594192620ae1665201f6cfb861deb91c81ffcb90cbef90a2007fd7a9965532c3e21f5fc79c5c021df266a2fdbf2eae0ee30"], 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xffffffed, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r15, {0x0, 0xf}, {0x2, 0xb}, {0x2, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x7, 0x8000, 0x8, 0x9, 0xe, 0xca, 0x0, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) 1m58.76877706s ago: executing program 32 (id=923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) unshare(0x400) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x40014) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002600010026bdf000fcdbdf2506000000a2d5d845ca8b28760db68a4a0daedae0d022a1bfb6a29d4249f722cc990d7bfb1672ebd8373bda248ac393cca4ec9eebc97217e117ad0594192620ae1665201f6cfb861deb91c81ffcb90cbef90a2007fd7a9965532c3e21f5fc79c5c021df266a2fdbf2eae0ee30"], 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xffffffed, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r15, {0x0, 0xf}, {0x2, 0xb}, {0x2, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x7, 0x8000, 0x8, 0x9, 0xe, 0xca, 0x0, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) 17.971322263s ago: executing program 1 (id=2092): r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3f}, 0x1b) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3f}, 0x1b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8000}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17.822221514s ago: executing program 1 (id=2095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={r4, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r4, 0x1}, 0x8) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xc}, {0x1, 0xffe0}, {0xffe0, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd4, 0x3, 0x200, 0xc, 0x1, 0x40000002, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x10, 0x7, 0xd, 0x0, 0x4, 0x9}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xe, 0x4361, 0x7, 0xffffffff, 0x20005}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x0, 0x1}, 0x48) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 17.208538815s ago: executing program 1 (id=2105): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0000000031000000200012800b0001006d61637365630000100002800c0001006eb900000000000008000500", @ANYRES32=r2, @ANYBLOB="290efed39065cb383543ea7e4b3511659f0369447a3cc5e274a3c2462708ac3ab2b787edab16a15885a55d80c3410a7e64b4833e0f25af37c60f7add1654ea06265f79e480a5ffc8b1e5868f6e43d679dbc5ea155a"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x4010) 17.106806122s ago: executing program 1 (id=2107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@delqdisc={0x2c, 0x25, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xa, 0xfffc}, {0x3, 0x7}, {0x7, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0xa}, {0xfffa, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 16.717745295s ago: executing program 1 (id=2113): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80100002e00090023bd7000fbdbdf2505000000b4"], 0x1c8}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r4) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8fe563c459ea157870d71d9e0722d829fab57f9bdd8246c9f1a9dcd7a7f241b3d6fac9014c3a8069890789"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x2008021) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32, @ANYRES16=r7], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r4, @ANYBLOB="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", @ANYRESOCT=r4, @ANYRES8=r6], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="70908339326cc273c7991e2aeb010071e77ac7a023a87af20022cd2e9a26c6faef1d1c51174c914ca73e66170d29c47a08b0a2ab9a10c19215ad67327c05c232d82a85d5bb7a9b5721f22864ee7ea839dee2fd6343904cf4206f960f50104a5f59112dc479260d4d971d5a1fc932f69da8d9c73501cf096db8b768a8b0d4ad1ab9cb2ac3bc49b6afc8c01f6be1f2895163bae6a5b2e533ce95b0241ab155892767b1b3b27d75fc55a4a8b08637ed8f92bd14f594b1e21d58714b87631759dc49d63ca5b7f0f9d6e91aecc3bd3eb2cae1d8aae07bff9dff434f1ba961f624cbeb64560bd5051037349644497f325e0b", @ANYRES64=0x0], 0x20) (async) r11 = socket(0x5, 0x5, 0x3a) setsockopt$MRT6_INIT(r11, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x0, 0xfffffffa, {{0x6, 0x4, 0x2, 0x26, 0x18, 0x65, 0x0, 0x36, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@noop]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x43, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) (async) setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6, r12}, 0xc) (async) close(r11) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES16=r4, @ANYRESHEX], 0x50) 16.134371116s ago: executing program 1 (id=2117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000300000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 3.894294214s ago: executing program 2 (id=2233): r0 = socket$inet6(0xa, 0x0, 0x317) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000500)={0x0, 0x8, 0x7, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000a40)={0x0, 0x8000000000000000, 0x8}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001300)={0x0, "788e0f58caf9c3ee6c9e15399a2aade4"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x18, 0x38, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x66, 0x0, 0x1, [@typed={0x9, 0x7e, 0x0, 0x0, @binary="ac66d0741d"}]}]}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002300)={0x4, 0x4, {0x3, @struct={0x3, 0x7}, r1, 0x5e3e6ed2, 0x5, 0xdce, 0x4, 0x8, 0x400, @usage=0x80000000, 0x4, 0x90000000, [0x4, 0x5, 0x8000000000000001, 0x100, 0x4, 0x2]}, {0x8, @struct={0x0, 0xffffffff}, r2, 0x10, 0xd, 0x4816, 0x7, 0x5, 0x8c, @usage=0x9, 0x7, 0xa, [0x1, 0xa, 0xf, 0x4, 0xffffffffffffff92, 0x7]}, {0x8d18, @struct={0x6}, r3, 0x40, 0x9, 0x6de, 0x5, 0x2, 0x830, @usage=0x7, 0x7, 0x4, [0xaba, 0x3, 0x4, 0x8001, 0xfffffffffffffff8, 0x7ec]}, {0x3, 0x80, 0x6}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r9, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$TUNGETFEATURES(r10, 0x800454cf, &(0x7f0000000140)) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r12, 0x400452c8, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000800) 3.740875339s ago: executing program 5 (id=2234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r2, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5c4e, 0x74}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c001788", @ANYRES16=r4, @ANYBLOB="831028bd7000fcdb9f251600000018000180140002006e657464657673696d3000000000000005000200010000000500040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000740)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x9, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x200, 0x7ffffffe, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r8 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1}, 0x20002061) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@private1, 0x0}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=@dellinkprop={0x1fc, 0x6d, 0x23e, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, 0x10440, 0x80}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x6}, @IFLA_VF_PORTS={0x1a0, 0x18, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "db8b1aab4ddce639845a2e86d48a548c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d1e9d7b370beafe267392e6f6961ef2f"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ethtool\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1ff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8a904f121f228943f3f1659b9bda535a"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e045d89a4e59eafd18f5905f19a8d7f9"}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "145db0c180d2c38b5ee02851a9fd0994"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffe}, @IFLA_PORT_VF={0x8, 0x1, 0xada}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2286642b248c06418cf0f3bd49183f9a"}, @IFLA_PORT_PROFILE={0x7, 0x2, '*.\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_PROFILE={0xd, 0x2, '|,[&[@!\f\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x86, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7b6a0c75637e509002f91c53c61d5422"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8667812528197a0f9988f3d46b951ea6"}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3824207f077a501c9c5c61969221ab0c"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ethtool\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9b61b6db3f877e91525380eaa0b7e1a9"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d00e89adf31e7e67b5384e3d47fe24a4"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x80}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "b7289c176ee86a4ad456f7949b0030a4"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ea4745c91e86383e73eb9007137f3294"}]}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_CARRIER={0x5, 0x21, 0x9}, @IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}]}, 0x1fc}}, 0x44) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) 3.681246841s ago: executing program 5 (id=2235): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000003fc0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ed2ef3848fbc2506ac5b42f7efd6a5945a881291b52b85c7f892c5b8df27114df6837c52f94519a946fcdd5bc3335442822ad965fda44516aa542c7c9d41a96ef581e568fa3f4110f95fc7b4f1a64c8662ece581b7", 0x55}, {&(0x7f0000000380)="48f6b6f004535d40f552bb21dd6d21dd96f26efb2708a1c4710dceb1f79310efb70e23d868dbda8404c953ac5d9ef021808656193afc6ad6a6ef929074cd8e096e9c1732c970e04a9fc4444703966b83eaba5aba50a8566505daf033f63385b1cd9b63e4757385d384e19353ac1a76581ae76e5fe0ae463508aa210095d27f1222ae8739396deb84eab4cd", 0x8b}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/220, 0xdc}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x4450, 0xffffffffffffffff, 0x3}, 0x50) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x64, r10, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x70, r10, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x6, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @remote}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0x56, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000097000000000000000000090000000023f7f8ce31"], &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x3, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3.649613967s ago: executing program 2 (id=2236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x6020400) (async) unshare(0x6020400) r1 = socket$tipc(0x1e, 0x2, 0x0) unshare(0x34040e00) bind$bt_hci(r1, &(0x7f0000000040), 0x6) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14c, 0x15, 0xa, 0x101, 0x0, 0x0, {0xb, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x8e, 0x8, "98735f7f7875e85d17166f057b6234a0df142319c9a1db9c2544d5deeb742703482a71b2409ffd18efddb9dce6bfa4d8fe61f9367407691c8b938c2fc3af91670855837572780b0827da48b1db71e325773235eadfaefdf0af842e4d8e1a8aea9b9ac6b66c6f30cd0143579c86967795e25188b9646913d25258cdcc217003f28c25b45afa61b6b293f4"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x5c, 0x8, "0bc5331394ca0ccd06e75103fd43c811a471e4263cdc8beb3c91582275333bc1e11f7d5d3f11fba167353e6bf474645888326db5d0ffd48a8d4f4dde240447eb196288afc5ac956e9fe2afcedf67ff3b75ef0e4d37f8022c"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044001) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14c, 0x15, 0xa, 0x101, 0x0, 0x0, {0xb, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x8e, 0x8, "98735f7f7875e85d17166f057b6234a0df142319c9a1db9c2544d5deeb742703482a71b2409ffd18efddb9dce6bfa4d8fe61f9367407691c8b938c2fc3af91670855837572780b0827da48b1db71e325773235eadfaefdf0af842e4d8e1a8aea9b9ac6b66c6f30cd0143579c86967795e25188b9646913d25258cdcc217003f28c25b45afa61b6b293f4"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x5c, 0x8, "0bc5331394ca0ccd06e75103fd43c811a471e4263cdc8beb3c91582275333bc1e11f7d5d3f11fba167353e6bf474645888326db5d0ffd48a8d4f4dde240447eb196288afc5ac956e9fe2afcedf67ff3b75ef0e4d37f8022c"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x20044001) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'wg2\x00', {0x5}, 0xb}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'wg2\x00', {0x5}, 0xb}) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x15, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x0, 0x6, "c2019faf82c4213ae5a79e5374d3416aabedecb920de8db3aff2e5bd3a93d4b000398b66d177c3727a521381ac31ff912118386e0fef90ffe90c92ea0853102c8951476487725ff7863e7d28c07d9228d93a8fc7a741b58d0b8b1439819e"}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x0, 0x6, "3040a5"}, @NFTA_TABLE_FLAGS]}], {0x14}}, 0x48}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xc, 0x4) 3.441885466s ago: executing program 2 (id=2238): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0x0, 0x4) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x6165cfe57986dcc0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "7df0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010144258d26c5312b750a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000aad0cf79faeb27e49df51cf19abf921de0f172c80e589e960ed46d263c92c08d3a42583a1ebea54a7fe209ac143cf67e779648ab9a578372c9f3eae6581d569a7fb6d5f"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r8], 0x68}}, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r9) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvfrom$inet(r7, &(0x7f0000000540)=""/194, 0xc2, 0x2001, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x5b, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000001000370427bd7000000400000000000000d2840140f2390bbbbdff281d349659d2f6f6cbd86ea107a5a883bde310ef2179d419f0acba06b443078cdf6ad0b528a9a78c9634c13b0aa3e24521886852f734a414ee82ae4b5ba20d3838", @ANYRES32=r10, @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4080) sendmmsg(r1, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r10, 0x3}, 0x80, 0x0}}], 0x1, 0x80) 3.142984795s ago: executing program 2 (id=2241): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x48) splice(r1, 0x0, r3, 0x0, 0x90a, 0x100000000000000d) close(r0) 3.082790485s ago: executing program 2 (id=2243): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2c}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) 2.26683593s ago: executing program 0 (id=2248): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x44014) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x24000850) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, 0x0, 0x44014) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, 0x0, 0x24000850) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async) 2.157181125s ago: executing program 5 (id=2250): syz_emit_ethernet(0x82, &(0x7f0000000080)={@multicast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x4c, 0x2f, 0x0, @private2, @local, {[@srh={0x88, 0x0, 0x4, 0x0, 0xdc, 0x30, 0xfff}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}}}}}}}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) unshare(0x400) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) getsockopt$ax25_int(r1, 0x101, 0x4, 0x0, 0x0) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x40}}, 0x10) 1.918824662s ago: executing program 0 (id=2251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @loopback}, {0x20000010304}, 0x4, {0x2, 0x4e22, @rand_addr=0x64010102}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="7af9dcb9a27f85ce5cc01ec0804441a7349056eb6560ad1999b6de3e57", @ANYRES16=r8, @ANYRESHEX=r3, @ANYRES32=r9, @ANYBLOB="1400060064756d6d79300000000000e95c8d6c001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x8884) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r12, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r12, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01002cad7000000000000100000028000180060001000a00000014000400fe800000cea7109d40000000000000bb08000600037262ebaed2d4deec39a4f9b08161cb2de462ea6507814e293a8705b6f69e0459aabe500a7a5da108227c83b3283a273aaab4332c86403e4a38cd29591a3e03a41ee2ca503ee60f87c30d81a26e32113274a3eff54b97c829377a8d2d28dc59394f074b3842f9da37e0a9f89df2eedbcdfc675d3f524f777bd1236ee7338d2e14b92ccaf4a13e47a9d69adf7dde8dca02ae2bf316ea92707edea1e0527d00c2bd11ccfd9f647989"], 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000380)=0x8) r16 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x20, r16, 0x7, 0x70bd2b, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 1.749257815s ago: executing program 3 (id=2252): r0 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) (async) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000240)={'security\x00', 0x0, [0x80000000, 0x3, 0x10001, 0x7, 0xffff0000]}, &(0x7f00000002c0)=0x54) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}}, 0x0) 1.688975328s ago: executing program 5 (id=2253): socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x5}, [@null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) connect$pptp(r3, &(0x7f0000000180)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x800, 0xfffffffd) sendmsg$nl_generic(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x6048004) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000240)=0x7, 0x4) sendmsg$NL80211_CMD_SET_CQM(r4, 0x0, 0x10000001) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newtclass={0x38, 0x28, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0x461b4ef1d8f0d513, 0xd}, {0x0, 0x82e90a94443cf1d6}}, [@tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_sfq={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40088c5) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r0, &(0x7f00000003c0)=""/123, 0x7b) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r5], 0x14}, 0x1, 0x0, 0x0, 0x240448c1}, 0xcc01) 1.486383111s ago: executing program 3 (id=2254): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.391403306s ago: executing program 3 (id=2255): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x8001000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000880010001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000030007000000000000000000850000001900000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x84, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0xdb0b, 0x0, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc237ae0e9f6a1afd6a3ed5304d642081ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123167f010000000000000090aa235a6706"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff09e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x7}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="22c17ec3", 0x4}], 0x1}}], 0x2, 0x400c800) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0xd}, {0x0, 0x9, 0x1, 0x0, 0x8, 0x0, 0x4, 0x8}, {0x0, 0x0, 0x40000000000, 0x9}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x0, 0x796b82bf}}, 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0xc0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x1e, 0x1, 0xff) bind$rxrpc(r5, &(0x7f0000000500)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x1000, @loopback, 0x9}}, 0x24) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000440)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) recvmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x73e2bc820b367f88}, 0x2000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc040ff0b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xd, '\x00', r6, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1, 0x1, 0x8}, 0x2c) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x84, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x13401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20049848}, 0x0) 1.386905498s ago: executing program 0 (id=2256): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x80000001, 0x4, 0x6}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002800c00028005000100000000002c000180140003"], 0x50}}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) r3 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x9e2696008603fac1}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010029bd7000fd5fdf252100000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000001200)=0x96, &(0x7f0000001240)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x5, [@const={0x3, 0x0, 0x0, 0xa, 0x5}, @float={0x6, 0x0, 0x0, 0x10, 0x4}, @const={0xe, 0x0, 0x0, 0xa, 0x3}, @datasec={0xc, 0x6, 0x0, 0xf, 0x2, [{0x5, 0x9, 0xfff}, {0x3, 0xfffff001, 0xffffc489}, {0x5, 0x1000, 0xb959}, {0x5, 0xfffffeff, 0x457}, {0x1, 0x3, 0x100}, {0x4, 0xeff, 0x5}], "e69c"}]}, {0x0, [0x2e, 0x2e, 0xa1ec236501ec608b]}}, &(0x7f0000001100)=""/174, 0x99, 0xae, 0x1, 0x6}, 0x28) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000012c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001300)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'syztnl2\x00', 0x0, 0x10, 0x7800, 0x8efd, 0x4, {{0xb, 0x4, 0x1, 0x2, 0x2c, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast2, @empty, {[@noop, @timestamp_prespec={0x44, 0x14, 0x29, 0x3, 0x7, [{@private=0xa010100, 0x8}, {@private=0xa010100, 0x6}]}]}}}}}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r14, r13, 0x25, 0x0, @val=@netkit}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001400)={'batadv_slave_1\x00', 0x0}) getsockname$packet(r0, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000014c0)={'vxcan1\x00', 0x0}) r18 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_xfrm(r18, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@updpolicy={0x1e8, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, r19}, {0x0, 0xfffffffffffffffc}}, [@extra_flags={0x8, 0x18, 0x6e}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @extra_flags={0x8, 0x18, 0x5}, @algo_auth_trunc={0x9b, 0x14, {{'ghash-ce-sync\x00'}, 0x278, 0x180, "909cc5ee8836526218ac77fbe8be25081e30d75a61023c9e9ddb7a9ad7c13863314b58d983f03e832fa2671ce1e1b21ec06e60f46c10fee979347626bc552f02d0b68c5d837a6f847072b66fff37f2"}}, @sec_ctx={0x7c, 0x8, {0x78, 0x8, 0x0, 0x5e, 0x70, "e54b9bff7b853b706504fde56cb8e57d548de5531278802fd40c5750b715e98be79f90c0a8be09424beadbdcc2d2ea2080835610b74bc2b7135cbd6a4bd75cf067366e5cc34f758b2d8676dd4f8bf08150b86eadba8e923d77f5c3bee75c1524104ed340818de0412b6f54f6bc5ffc3d"}}]}, 0x1e8}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000001780)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001740)={&(0x7f0000000840)={0x23c, r9, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 962.892248ms ago: executing program 0 (id=2257): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) accept4(r0, 0x0, 0x0, 0x180000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) r1 = socket(0x8, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r3, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x64}}, 0x0) socket$inet6(0xa, 0x805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000002340)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x4000, 0xfffc, 0xff, 0x9d87, 0x102, 0xb, 0x7}, &(0x7f0000002400)=0x9c) 945.500538ms ago: executing program 33 (id=2117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000300000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 743.136651ms ago: executing program 2 (id=2259): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000004c0)=[{0x0}, {0xfffffffffffffffc}], 0x2, 0x6) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000680)={'filter\x00', 0x0, [0x8, 0x3, 0x80, 0xc, 0x10001]}, &(0x7f0000000700)=0x54) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627", 0xc) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="024068a4e7679ffd", 0x8}, {0x0}, {&(0x7f0000000300)="86fe502ecf40f04481c48b1bc08e4dc168ea18d4", 0x14}, {&(0x7f0000000500)="62729a4adfdb01a6ae312007d33401102050e7aae2be215bf2566064c95bf64d96bfa850e9c3c9cb17d5bc6247232132b58783cfe22de2f2f98173b6f19e5f739f78899c241d79991dc859e0f6cdc24e2ee429d9f54816fbdf28bfecb244169990393dd21670d43704bedff66b7ea06523a6a0d797d5c3b5aedc1bff2f11ec404c138517733d2e3ff633b1ff41165fd32baf0797652d75f9429eb60790c7addf5760faad04", 0xa5}], 0x4, 0x0, 0x0, 0x34044005}, 0x20044151) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/117, 0x75}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000840)=""/75, 0x4b}], 0x3}, 0x7fb}], 0x1, 0x40000160, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r4, 0x8932, &(0x7f0000000100)={'tunl0\x00', @ifru_map={0x2, 0x7, 0x816b, 0x6, 0x9, 0x3}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r7, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000780), &(0x7f0000000000)=0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', r6, 0xf, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x14, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x8000) 660.105944ms ago: executing program 5 (id=2260): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000680)={&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, 0x0}, 0x8080) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1e1982, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) 393.770492ms ago: executing program 5 (id=2261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8044) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000180)=0x10000) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x100400) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) 387.258945ms ago: executing program 3 (id=2262): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004}, 0x4000000) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x36, &(0x7f0000000080)={0x42, 0x1}, 0x10) 311.964288ms ago: executing program 3 (id=2263): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x6, 0x0, @val=@perf_event={0x8}}, 0x18) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001002dbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="88dd030000720100140003006272696467655f736c6176655f300000040016800a000120aaaaaaaaaa1c0000"], 0x44}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf, 0x10, r0, 0x8528c000) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b300ee007f", @ANYRES16, @ANYRESDEC=0x0], 0x48) (rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="58080000020200000000000000000000851000000600000018100000152f5c877d925b361de5e178ed00f16958e959580d74c9e7175382bdfd00f65399c93edb691602cee790bda27d27caf93bfc", @ANYRES32=r3, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="05000000000000007311400000000000851000000200000085000000ac000000950000005dd11d4c9569a505000000002f18aae44f99c3076c544cf00b69cd145273f2232d59cc72b2a050bba22d2d0e5c9598161fa97267c05e35519c98edea8204f23582c333bb609ade17233050f07716003a83a549e30000000000000800d72f52edb82acd2f6e2254677194464a25aef2f20bce5d8b680020991a295485f1011f41b352c7de7cf811c2d735ccb84d2769b7"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000680)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0100000002000000020000000400000000000000", @ANYRES32, @ANYRES16=r4, @ANYRESDEC=r1, @ANYRES64=r3, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 64) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1e000000030000000600000005000000430b0000", @ANYRES32=r6, @ANYBLOB="03004082b10854cf000000b1c4be6ad400000000000000000000000000f55afb8fca238b6b9781a6dd7c8f011c50b84b8b6cb3dd25ffb49d667c3f5b4e4f76da089d87d658f6b2bede", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0000000003000000010000000b00"/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$alg(0x26, 0x5, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838", 0x9e}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157", 0x6d}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912", 0x64}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f0000000200)=""/78, 0x4e}], 0x2}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r13, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r14, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r9, 0x0, 0x0}, 0x10) (async, rerun: 32) poll(0x0, 0x0, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000040000004c0012800e00010069703665727370616e0000003800828006000f000400000008000c00ff070000060011004e2300000400120006000e000100000006000e000100000006001000c54e230000"], 0x6c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x2, 0x0, 0x7, 0x4000, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) 170.238651ms ago: executing program 0 (id=2264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000140)=0x2001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x400002, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000340)={0x6ab6, {{0xa, 0x4e20, 0x32a0, @private0, 0x7}}, {{0xa, 0x4e24, 0x7, @local}}}, 0x108) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r11 = openat$cgroup_procs(r9, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0), 0x12) pread64(r11, &(0x7f0000002840)=""/4096, 0x1000, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x800) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r13, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 74.93286ms ago: executing program 3 (id=2265): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7f, @mcast1, 0x3}, 0x1c) unshare(0x40000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x7fff, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x51, 0xfffffffc}}], 0x18}, 0x0) (async) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x7fff, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x51, 0xfffffffc}}], 0x18}, 0x0) 0s ago: executing program 0 (id=2266): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="b40000001300280129bd7000fddbdf25060e06084e244e24fbffffff090000004ccbc51b090000000200000009000000021b000006000000", @ANYRES32=0x0, @ANYBLOB="f9ffffff00d4acefe84c2d5f7e4c1ba20c2476afed939814ff8d8c3bac1852a33cb04ae69579c9052ecae83c164f715ea7a418e308f9213ab79ce7f46bad20c6f6bd7ac2234fe3ca09ece135c52a364dbfc62c03ec604c7c03698123f481eb00c8edd59767fe0000"], 0xb4}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x4f) r5 = socket$netlink(0x10, 0x3, 0x13) write(r5, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="0021040000000000140003006261746164763000000000000000000008000400d70000000800168004000180"], 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="b40000001300280129bd7000fddbdf25060e06084e244e24fbffffff090000004ccbc51b090000000200000009000000021b000006000000", @ANYRES32=0x0, @ANYBLOB="f9ffffff00d4acefe84c2d5f7e4c1ba20c2476afed939814ff8d8c3bac1852a33cb04ae69579c9052ecae83c164f715ea7a418e308f9213ab79ce7f46bad20c6f6bd7ac2234fe3ca09ece135c52a364dbfc62c03ec604c7c03698123f481eb00c8edd59767fe0000"], 0xb4}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x4f) (async) socket$netlink(0x10, 0x3, 0x13) (async) write(r5, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="0021040000000000140003006261746164763000000000000000000008000400d70000000800168004000180"], 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) kernel console output (not intermixed with test programs): netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 115.493607][ T7294] netlink: 'syz.1.345': attribute type 15 has an invalid length. [ 115.575361][ T7284] bond3: (slave veth3): Enslaving as an active interface with a down link [ 115.735227][ T7309] netlink: 'syz.1.348': attribute type 5 has an invalid length. [ 115.997925][ T7320] netlink: ct family unspecified [ 116.004816][ T7320] netlink: 'syz.3.350': attribute type 1 has an invalid length. [ 116.184061][ T7327] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 116.187523][ T7327] netlink: 'syz.3.353': attribute type 11 has an invalid length. [ 116.205468][ T5841] block nbd0: Receive control failed (result -32) [ 116.224755][ T7327] netlink: 'syz.3.353': attribute type 23 has an invalid length. [ 116.564265][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.571782][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.591322][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 116.729261][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.745906][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.767227][ T7346] batadv_slave_1: left promiscuous mode [ 116.895621][ T7346] geneve2: left promiscuous mode [ 116.903266][ T7346] bond1: left promiscuous mode [ 116.912701][ T7346] veth0_to_bond: left allmulticast mode [ 116.918358][ T7346] macvlan2: left allmulticast mode [ 116.939012][ T7350] geneve3: entered promiscuous mode [ 116.948873][ T7350] geneve3: entered allmulticast mode [ 117.028870][ T7359] bond3: entered allmulticast mode [ 117.035137][ T7369] tipc: Started in network mode [ 117.040461][ T7369] tipc: Node identity ae2b5e5eddf3, cluster identity 4711 [ 117.047981][ T7369] tipc: Enabled bearer , priority 0 [ 117.061494][ T7364] syzkaller0: entered promiscuous mode [ 117.067002][ T7364] syzkaller0: entered allmulticast mode [ 117.075493][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 117.082081][ T5837] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 117.153480][ T7352] tipc: Resetting bearer [ 117.168468][ T7373] lo speed is unknown, defaulting to 1000 [ 117.192041][ T7351] tipc: Resetting bearer [ 117.218408][ T7351] tipc: Disabling bearer [ 117.489425][ T7407] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 117.496381][ T7410] netlink: 'syz.1.372': attribute type 32 has an invalid length. [ 117.505761][ T7410] __nla_validate_parse: 7 callbacks suppressed [ 117.505775][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 117.516577][ T7407] netlink: 224 bytes leftover after parsing attributes in process `syz.2.371'. [ 117.625878][ T7410] bond3: Setting coupled_control to off (0) [ 117.792080][ T7422] @0Ù: renamed from dummy0 (while UP) [ 118.481292][ T7464] syzkaller0: entered promiscuous mode [ 118.486899][ T7464] syzkaller0: entered allmulticast mode [ 118.723137][ T7488] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.823984][ T7491] 8021q: VLANs not supported on caif0 [ 118.889962][ T7493] netlink: 'syz.3.389': attribute type 3 has an invalid length. [ 119.101615][ T7497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.321818][ T7503] netlink: 'syz.3.393': attribute type 11 has an invalid length. [ 119.355960][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'. [ 119.367056][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'. [ 119.415216][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 119.505161][ T7507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.517929][ T7511] bond0: left promiscuous mode [ 119.523060][ T7511] bond_slave_0: left promiscuous mode [ 119.528781][ T7511] bond_slave_1: left promiscuous mode [ 119.570178][ T7514] x_tables: unsorted entry at hook 2 [ 119.582456][ T7511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.591309][ T7511] bond1: (slave bond0): Enslaving as an active interface with an up link [ 119.682140][ T7516] lo speed is unknown, defaulting to 1000 [ 119.761217][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 120.409308][ T7548] netlink: 'syz.1.406': attribute type 1 has an invalid length. [ 120.414825][ T7556] Bluetooth: MGMT ver 1.23 [ 120.980815][ T7573] syzkaller0: entered promiscuous mode [ 121.007270][ T7573] syzkaller0: entered allmulticast mode [ 121.015064][ T7574] syzkaller0: entered promiscuous mode [ 121.020563][ T7574] syzkaller0: entered allmulticast mode [ 121.390850][ T7562] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 121.629780][ T7589] netlink: 'syz.4.413': attribute type 11 has an invalid length. [ 122.071802][ T7604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.414'. [ 122.081028][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.414'. [ 124.883470][ T7622] netlink: 1 bytes leftover after parsing attributes in process `syz.2.421'. [ 124.949143][ T7622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.278643][ T7638] lo speed is unknown, defaulting to 1000 [ 125.421845][ T7667] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 125.611363][ T7675] netlink: 'syz.2.433': attribute type 16 has an invalid length. [ 125.683083][ T7675] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.433'. [ 125.807823][ T7695] netlink: 'syz.0.438': attribute type 1 has an invalid length. [ 125.938087][ T7695] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.971533][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804d35a400: rx timeout, send abort [ 125.987243][ T7696] bond4: (slave veth5): Enslaving as an active interface with a down link [ 126.020436][ T7702] bond4: (slave veth7): Enslaving as an active interface with a down link [ 126.129743][ T7707] lo speed is unknown, defaulting to 1000 [ 126.175710][ T7710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.441'. [ 126.238586][ T7713] dvmrp0: entered allmulticast mode [ 126.264736][ T7715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.443'. [ 126.411344][ T7720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.445'. [ 126.433207][ T7724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.468078][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804d35a800: rx timeout, send abort [ 126.480718][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804d35a400: abort rx timeout. Force session deactivation [ 126.515223][ T7730] netlink: 'syz.0.448': attribute type 5 has an invalid length. [ 126.525856][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 126.669399][ T7733] netlink: 27 bytes leftover after parsing attributes in process `syz.0.448'. [ 126.698581][ T7735] xt_CT: No such helper "snmp" [ 126.843332][ T7749] syzkaller0: entered promiscuous mode [ 126.849246][ T7749] syzkaller0: entered allmulticast mode [ 126.862823][ T7749] TC_ACT_REPEAT abuse ? [ 126.868988][ T7747] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.452'. [ 126.898676][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 126.968211][ T7752] syzkaller0: entered promiscuous mode [ 126.976380][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804d35a800: abort rx timeout. Force session deactivation [ 126.998180][ T7752] syzkaller0: entered allmulticast mode [ 127.008333][ T7756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.456'. [ 127.348319][ T7768] netlink: 'syz.3.459': attribute type 10 has an invalid length. [ 127.369289][ T7763] tipc: MTU too low for tipc bearer [ 127.392377][ T7763] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 128.756876][ T7786] gretap0: entered promiscuous mode [ 128.780810][ T7786] gretap0: left promiscuous mode [ 128.949344][ T7790] bridge_slave_1: left allmulticast mode [ 128.957049][ T7790] bridge_slave_1: left promiscuous mode [ 128.971474][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.994825][ T7790] bridge_slave_0: left allmulticast mode [ 129.021417][ T7790] bridge_slave_0: left promiscuous mode [ 129.041402][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.120538][ T7796] syzkaller1: entered promiscuous mode [ 129.126283][ T7796] syzkaller1: entered allmulticast mode [ 129.610621][ T7833] @0Ù: renamed from dummy0 [ 129.961715][ T7847] __nla_validate_parse: 9 callbacks suppressed [ 129.961733][ T7847] netlink: 48 bytes leftover after parsing attributes in process `syz.4.485'. [ 130.071381][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 130.091617][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 130.142084][ T7483] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.160879][ T7483] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.183199][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.489'. [ 130.223197][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 130.241761][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 130.247741][ T7878] netlink: 'syz.2.493': attribute type 8 has an invalid length. [ 130.261772][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 130.281334][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 130.420463][ T7483] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.456996][ T7879] macsec0: entered allmulticast mode [ 130.485412][ T7483] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.680649][ T7895] lo speed is unknown, defaulting to 1000 [ 130.812807][ T7908] netlink: 48 bytes leftover after parsing attributes in process `syz.1.501'. [ 130.873824][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 130.908672][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 131.002050][ T7917] openvswitch: netlink: EtherType 50a is less than min 600 [ 131.583015][ T7945] netlink: 'syz.2.510': attribute type 1 has an invalid length. [ 131.925889][ T7961] ipvlan2: entered promiscuous mode [ 132.049111][ T7969] lo speed is unknown, defaulting to 1000 [ 132.127351][ T5841] block nbd1: Receive control failed (result -32) [ 132.286889][ T7984] bridge2: port 1(ip6gretap1) entered blocking state [ 132.294420][ T7984] bridge2: port 1(ip6gretap1) entered disabled state [ 132.301876][ T7984] ip6gretap1: entered allmulticast mode [ 132.309293][ T7984] ip6gretap1: entered promiscuous mode [ 132.375196][ T7984] bridge2: port 2(veth3) entered blocking state [ 132.401569][ T7984] bridge2: port 2(veth3) entered disabled state [ 132.411409][ T7984] veth3: entered allmulticast mode [ 132.437766][ T7984] veth3: entered promiscuous mode [ 132.457829][ T7984] bridge2: port 2(veth3) entered blocking state [ 132.464257][ T7984] bridge2: port 2(veth3) entered forwarding state [ 132.577915][ T8000] bridge0: entered promiscuous mode [ 132.584100][ T8000] bridge0: entered allmulticast mode [ 132.593014][ T8000] team0: Port device bridge0 added [ 132.621949][ T7988] bridge0: port 1(team0) entered blocking state [ 132.628307][ T7988] bridge0: port 1(team0) entered disabled state [ 132.636582][ T7988] team0: entered allmulticast mode [ 132.644822][ T7988] team_slave_0: entered allmulticast mode [ 132.650690][ T7988] team_slave_1: entered allmulticast mode [ 132.662812][ T7988] team0: left allmulticast mode [ 132.671756][ T7988] team_slave_0: left allmulticast mode [ 132.680170][ T7988] team_slave_1: left allmulticast mode [ 132.863320][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.882969][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.919536][ T50] bridge2: port 2(veth3) entered disabled state [ 132.977356][ T8018] openvswitch: netlink: Message has 2 unknown bytes. [ 132.986603][ T8018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.005756][ T8028] geneve2: entered promiscuous mode [ 133.012436][ T8028] geneve2: entered allmulticast mode [ 133.048596][ T8026] lo speed is unknown, defaulting to 1000 [ 133.080298][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.199231][ T8044] netlink: 'syz.2.537': attribute type 7 has an invalid length. [ 133.219719][ T8044] netlink: 'syz.2.537': attribute type 8 has an invalid length. [ 133.475312][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.717402][ T8072] netlink: 'syz.3.544': attribute type 1 has an invalid length. [ 133.728988][ T8072] netlink: 'syz.3.544': attribute type 2 has an invalid length. [ 133.748672][ T8071] netlink: 'syz.2.545': attribute type 4 has an invalid length. [ 133.814488][ T8072] gre0: entered promiscuous mode [ 133.846208][ T8072] gre0: entered allmulticast mode [ 133.895496][ T5888] lo speed is unknown, defaulting to 1000 [ 133.912705][ T5888] syz2: Port: 1 Link DOWN [ 134.431477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.441769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.510173][ T8091] x_tables: duplicate underflow at hook 1 [ 134.701231][ T8105] netlink: 'syz.1.550': attribute type 1 has an invalid length. [ 134.739997][ T8106] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.781891][ T8106] team0: Device macvlan2 is already an upper device of the team interface [ 134.988835][ T8120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.005032][ T8120] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.031802][ T8120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.151626][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.307677][ T8145] blkio.reset_stats is deprecated [ 135.457144][ T5939] IPVS: starting estimator thread 0... [ 135.561499][ T8160] IPVS: using max 28 ests per chain, 67200 per kthread [ 135.666823][ T8178] lo: entered promiscuous mode [ 135.687234][ T8174] netlink: 'syz.2.569': attribute type 10 has an invalid length. [ 135.706427][ T8174] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 135.898549][ T8193] tipc: Enabled bearer , priority 0 [ 135.921792][ T8193] syzkaller0: entered promiscuous mode [ 135.930333][ T8193] syzkaller0: entered allmulticast mode [ 135.971708][ T8188] tipc: Resetting bearer [ 136.016138][ T8188] tipc: Disabling bearer [ 136.191563][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.340408][ T8217] __nla_validate_parse: 20 callbacks suppressed [ 136.340428][ T8217] netlink: 108 bytes leftover after parsing attributes in process `syz.4.579'. [ 136.482979][ T8173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.513131][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.564713][ T8227] netlink: 1648 bytes leftover after parsing attributes in process `syz.4.583'. [ 136.904539][ T8249] netlink: 'syz.0.588': attribute type 1 has an invalid length. [ 136.952122][ T8249] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 137.231705][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.833539][ T8273] syzkaller0: entered promiscuous mode [ 137.861227][ T8273] syzkaller0: entered allmulticast mode [ 137.938388][ T8273] netlink: 48 bytes leftover after parsing attributes in process `syz.2.596'. [ 138.085442][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.599'. [ 138.276729][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.593233][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.859705][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 139.021035][ T8347] openvswitch: netlink: Multiple metadata blocks provided [ 139.087572][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 139.108852][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 139.160976][ T8360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 139.327511][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.365549][ T8372] netlink: 56 bytes leftover after parsing attributes in process `syz.3.623'. [ 139.378225][ T8374] netlink: 'syz.4.625': attribute type 9 has an invalid length. [ 139.400184][ T8372] tipc: Enabling of bearer rejected, failed to enable media [ 139.552005][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.669792][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.630'. [ 139.715087][ T8390] lo speed is unknown, defaulting to 1000 [ 139.739373][ T8397] netlink: 'syz.1.632': attribute type 11 has an invalid length. [ 139.871659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.355389][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.683063][ T8460] x_tables: unsorted underflow at hook 4 [ 140.831872][ T8468] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 140.965709][ T8478] syzkaller0: entered promiscuous mode [ 140.975674][ T8478] syzkaller0: entered allmulticast mode [ 141.011900][ T8478] vlan2: entered promiscuous mode [ 141.016979][ T8478] syz_tun: entered promiscuous mode [ 141.394196][ T5888] net_ratelimit: 1 callbacks suppressed [ 141.394213][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.727131][ T8531] xt_hashlimit: size too large, truncated to 1048576 [ 141.819903][ T8531] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 141.909027][ T8540] lo speed is unknown, defaulting to 1000 [ 141.986841][ T8539] lo speed is unknown, defaulting to 1000 [ 142.070492][ T8561] syzkaller0: entered promiscuous mode [ 142.078445][ T8561] syzkaller0: entered allmulticast mode [ 142.127483][ T8562] hsr0: entered promiscuous mode [ 142.250101][ T8556] hsr0: left promiscuous mode [ 142.259296][ T8568] __nla_validate_parse: 15 callbacks suppressed [ 142.259313][ T8568] netlink: 128 bytes leftover after parsing attributes in process `syz.0.678'. [ 142.359792][ T8576] tipc: Enabled bearer , priority 10 [ 142.416136][ T8580] syzkaller0: entered promiscuous mode [ 142.420168][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'. [ 142.433117][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.441360][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.449636][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.483131][ T8580] syzkaller0: entered allmulticast mode [ 142.601598][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.636748][ T8586] bond5: option primary_reselect: invalid value (4) [ 142.673811][ T8603] netlink: 64 bytes leftover after parsing attributes in process `syz.0.684'. [ 142.731758][ T8586] bond5 (unregistering): Released all slaves [ 142.815221][ T8604] tipc: Resetting bearer [ 142.837271][ T8574] tipc: Resetting bearer [ 142.869601][ T8574] tipc: Disabling bearer [ 143.144487][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 143.239900][ T8623] netlink: 'syz.0.691': attribute type 3 has an invalid length. [ 143.250699][ T8587] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 143.250723][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 143.471363][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.485992][ T8631] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 143.521481][ T8641] netlink: 'syz.2.694': attribute type 9 has an invalid length. [ 143.553020][ T8631] bond4 (unregistering): Released all slaves [ 143.846116][ T8651] bridge0: entered allmulticast mode [ 143.883991][ T8653] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 143.932456][ T5939] IPVS: starting estimator thread 0... [ 143.938156][ T8651] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 144.014790][ T8662] netlink: 'syz.2.701': attribute type 1 has an invalid length. [ 144.039867][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 144.048930][ T8659] IPVS: using max 35 ests per chain, 84000 per kthread [ 144.212598][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.704'. [ 144.316728][ T8676] netlink: 'syz.2.701': attribute type 10 has an invalid length. [ 144.334467][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.705'. [ 144.384057][ T8676] netlink: 55 bytes leftover after parsing attributes in process `syz.2.701'. [ 144.431435][ T8692] gretap0: entered promiscuous mode [ 144.456664][ T8692] gretap0: left promiscuous mode [ 144.518188][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.981069][ T8719] netlink: 'syz.3.712': attribute type 89 has an invalid length. [ 145.141263][ T8725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.715'. [ 145.340935][ T8731] syzkaller0: entered promiscuous mode [ 145.355575][ T8731] syzkaller0: entered allmulticast mode [ 145.466958][ T8740] block nbd0: NBD_DISCONNECT [ 145.495707][ T8740] block nbd0: Send disconnect failed -32 [ 145.529979][ T8740] block nbd0: shutting down sockets [ 145.552740][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.629278][ T8743] netlink: 'syz.2.719': attribute type 5 has an invalid length. [ 145.641282][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.923576][ T8755] @0Ù: entered promiscuous mode [ 145.929005][ T8755] vlan4: entered promiscuous mode [ 146.591984][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.925693][ T8796] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 146.974033][ T8796] netlink: 'syz.0.728': attribute type 8 has an invalid length. [ 147.141867][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.380880][ T8802] lo speed is unknown, defaulting to 1000 [ 147.750992][ T8834] ip6tnl0: entered promiscuous mode [ 147.855210][ T8841] pimreg3: entered allmulticast mode [ 148.286312][ T8856] __nla_validate_parse: 5 callbacks suppressed [ 148.286330][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.746'. [ 149.296700][ T8906] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 149.445218][ T8908] ip6gre1: entered promiscuous mode [ 149.452405][ T8908] ip6gre1: entered allmulticast mode [ 149.480315][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 149.498780][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 149.506740][ T5939] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 149.562181][ T7477] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.588358][ T7477] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.662106][ T7477] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.695030][ T7477] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.704328][ T8914] netlink: 228 bytes leftover after parsing attributes in process `syz.0.762'. [ 149.748188][ T5939] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 149.835846][ T5939] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 149.916020][ T8928] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 149.960392][ T8928] lo: entered allmulticast mode [ 149.968147][ T8928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.147124][ T8938] tipc: Cannot configure node identity twice [ 150.232480][ T8943] 8021q: VLANs not supported on syzkaller1 [ 150.356535][ T8953] Cannot find add_set index 0 as target [ 150.437548][ T8958] netlink: 'syz.1.773': attribute type 61 has an invalid length. [ 150.447238][ T8958] netlink: 'syz.1.773': attribute type 2 has an invalid length. [ 150.707142][ T8977] netlink: 236 bytes leftover after parsing attributes in process `syz.1.778'. [ 150.813579][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.780'. [ 150.853552][ T8988] netlink: 'syz.0.781': attribute type 11 has an invalid length. [ 150.975170][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'. [ 151.163487][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 151.174697][ T9004] netlink: 44 bytes leftover after parsing attributes in process `syz.3.785'. [ 151.191319][ T9004] netlink: 43 bytes leftover after parsing attributes in process `syz.3.785'. [ 151.205443][ T9004] netlink: 'syz.3.785': attribute type 5 has an invalid length. [ 151.213976][ T9004] netlink: 43 bytes leftover after parsing attributes in process `syz.3.785'. [ 151.313857][ T9009] trusted_key: syz.3.787 sent an empty control message without MSG_MORE. [ 151.449522][ T9023] netlink: 'syz.3.787': attribute type 3 has an invalid length. [ 151.462992][ T9020] netlink: 52 bytes leftover after parsing attributes in process `syz.1.790'. [ 151.500559][ T9020] netlink: 'syz.1.790': attribute type 1 has an invalid length. [ 151.548887][ T9028] netlink: 'syz.4.791': attribute type 11 has an invalid length. [ 151.563008][ T9027] netlink: 'syz.4.791': attribute type 11 has an invalid length. [ 151.877821][ T9048] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 151.994046][ T9050] lo speed is unknown, defaulting to 1000 [ 152.032128][ T9059] IPVS: length: 188 != 24 [ 152.088345][ T9059] dvmrp0: entered allmulticast mode [ 152.136276][ T9066] bond0: entered promiscuous mode [ 152.151501][ T9066] bond_slave_0: entered promiscuous mode [ 152.169933][ T9066] bond_slave_1: entered promiscuous mode [ 152.545932][ T9071] syz.3.802 (9071) used greatest stack depth: 17656 bytes left [ 152.554744][ T9088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.957245][ T9116] lo speed is unknown, defaulting to 1000 [ 153.215628][ T9122] ieee802154 phy0 wpan0: encryption failed: -90 [ 153.231398][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.551936][ T9163] netlink: 'syz.1.822': attribute type 1 has an invalid length. [ 153.626191][ T9159] __nla_validate_parse: 11 callbacks suppressed [ 153.626208][ T9159] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.821'. [ 153.692223][ T9166] syzkaller0: entered promiscuous mode [ 153.697782][ T9166] syzkaller0: entered allmulticast mode [ 153.811696][ T9180] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 153.835283][ T9180] syzkaller0: entered promiscuous mode [ 153.841535][ T9180] syzkaller0: entered allmulticast mode [ 153.862757][ T9179] tipc: Started in network mode [ 153.872362][ T9179] tipc: Node identity fe595581652e, cluster identity 4711 [ 153.906718][ T9179] tipc: Enabled bearer , priority 0 [ 153.950592][ T9180] tipc: Resetting bearer [ 153.992526][ T9180] tipc: Disabling bearer [ 154.060762][ T9195] netlink: 88 bytes leftover after parsing attributes in process `syz.1.833'. [ 154.061957][ T9183] syzkaller0: entered promiscuous mode [ 154.082136][ T9183] syzkaller0: entered allmulticast mode [ 154.297093][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'. [ 154.316031][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 154.383566][ T9206] lo speed is unknown, defaulting to 1000 [ 155.105416][ T9249] bridge2: entered promiscuous mode [ 155.131905][ T9249] bridge2: entered allmulticast mode [ 155.140163][ T9249] team0: Port device bridge2 added [ 155.220235][ T9249] bridge0: port 3(team0) entered blocking state [ 155.235326][ T9249] bridge0: port 3(team0) entered disabled state [ 155.242079][ T9249] team0: entered allmulticast mode [ 155.247328][ T9249] team_slave_0: entered allmulticast mode [ 155.255484][ T9249] team_slave_1: entered allmulticast mode [ 155.264368][ T9249] team0: entered promiscuous mode [ 155.269630][ T9249] team_slave_0: entered promiscuous mode [ 155.276024][ T9249] team_slave_1: entered promiscuous mode [ 155.290722][ T9260] IPv6: sit1: Disabled Multicast RS [ 155.316161][ T9247] lo speed is unknown, defaulting to 1000 [ 155.478747][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 155.496157][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 156.067208][ T9277] lo speed is unknown, defaulting to 1000 [ 156.605969][ T9329] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 156.654895][ T9332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.861'. [ 156.721804][ T9329] bridge0: Device is already in use. [ 157.160930][ T9356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.865'. [ 157.177066][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 157.177262][ T9356] batadv_slave_0: entered promiscuous mode [ 157.199800][ T9356] netlink: 'syz.1.865': attribute type 2 has an invalid length. [ 157.782494][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 157.793502][ T9391] erspan0: entered promiscuous mode [ 157.813549][ T9391] xt_hashlimit: size too large, truncated to 1048576 [ 158.543068][ T9431] netlink: 'syz.4.878': attribute type 1 has an invalid length. [ 158.783988][ T9451] syzkaller1: entered promiscuous mode [ 158.789578][ T9451] syzkaller1: entered allmulticast mode [ 159.002449][ T9463] syzkaller0: entered promiscuous mode [ 159.007985][ T9463] syzkaller0: entered allmulticast mode [ 159.144802][ T9462] lo speed is unknown, defaulting to 1000 [ 159.172869][ T9474] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 159.349636][ T9483] xfrm1: entered allmulticast mode [ 159.572313][ T9492] netlink: 'syz.0.891': attribute type 10 has an invalid length. [ 159.616170][ T9492] team0: Port device dummy0 added [ 159.644429][ T9490] netlink: 'syz.0.891': attribute type 10 has an invalid length. [ 159.740794][ T9490] team0: Port device dummy0 removed [ 159.752140][ T9490] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 160.387000][ T9534] xt_hashlimit: max too large, truncated to 1048576 [ 160.402342][ T9535] xt_hashlimit: max too large, truncated to 1048576 [ 160.488559][ T9534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.759533][ T9561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.993864][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.038340][ T9575] __nla_validate_parse: 4 callbacks suppressed [ 162.038359][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 162.172339][ T9584] tipc: Enabled bearer , priority 0 [ 162.197386][ T9591] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 786440, id = 0 [ 162.197527][ T9590] IPVS: stopping backup sync thread 9591 ... [ 162.207785][ T9581] syzkaller0: entered promiscuous mode [ 162.224856][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'. [ 162.248216][ T9581] syzkaller0: entered allmulticast mode [ 162.315323][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.913'. [ 162.316023][ T9582] IPVS: Unknown mcast interface: ¬0 [ 162.342331][ T9599] IPVS: set_ctl: invalid protocol: 0 172.20.20.49:20003 [ 162.349949][ T9581] tipc: Resetting bearer [ 162.404654][ T9581] tipc: Disabling bearer [ 162.439036][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.915'. [ 162.440720][ T9607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.916'. [ 162.779974][ T9627] netlink: 'syz.4.923': attribute type 2 has an invalid length. [ 162.799560][ T9627] syzkaller0: entered promiscuous mode [ 162.808813][ T9627] syzkaller0: entered allmulticast mode [ 163.432574][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.467219][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.772240][ T9652] tipc: Enabled bearer , priority 0 [ 163.779131][ T9653] netlink: 'syz.4.923': attribute type 5 has an invalid length. [ 163.808274][ T9654] syzkaller0: entered promiscuous mode [ 163.819328][ T9654] syzkaller0: entered allmulticast mode [ 163.831244][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.868669][ T9646] tipc: Resetting bearer [ 163.903574][ T9646] tipc: Disabling bearer [ 163.941969][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.958088][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.047834][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.125489][ T9693] netlink: 128 bytes leftover after parsing attributes in process `syz.1.933'. [ 164.148136][ T9695] netlink: 128 bytes leftover after parsing attributes in process `syz.1.933'. [ 164.454127][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 164.479977][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 164.519824][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 164.804869][ T9722] lo speed is unknown, defaulting to 1000 [ 164.898242][ T9725] syzkaller1: entered promiscuous mode [ 164.904127][ T9725] syzkaller1: entered allmulticast mode [ 165.085663][ T9738] netlink: 'syz.2.942': attribute type 39 has an invalid length. [ 165.412372][ T9747] syzkaller0: entered promiscuous mode [ 165.418048][ T9747] syzkaller0: entered allmulticast mode [ 165.926587][ T9766] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 166.228834][ T9784] tipc: Can't bind to reserved service type 1 [ 166.320304][ T9786] netlink: 'syz.2.958': attribute type 8 has an invalid length. [ 166.604673][ T9804] netlink: 'syz.1.965': attribute type 12 has an invalid length. [ 166.619432][ T9804] nbd: nbd1 already in use [ 166.634387][ T9804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.644548][ T9804] bond_slave_0: left promiscuous mode [ 166.653790][ T9804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.663736][ T9804] bond_slave_1: left promiscuous mode [ 166.670506][ T9804] bond0 (unregistering): Released all slaves [ 166.690206][ T9808] syzkaller0: entered promiscuous mode [ 166.696194][ T9808] syzkaller0: entered allmulticast mode [ 166.894484][ T9825] tipc: Enabled bearer , priority 0 [ 166.903627][ T9825] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 166.916039][ T9825] tipc: Resetting bearer [ 166.933414][ T9823] tipc: Disabling bearer [ 167.108898][ T9839] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 167.197368][ T984] IPVS: starting estimator thread 0... [ 167.208306][ T9843] __nla_validate_parse: 13 callbacks suppressed [ 167.208324][ T9843] netlink: 320 bytes leftover after parsing attributes in process `syz.1.978'. [ 167.235661][ T9843] nbd: must specify at least one socket [ 167.263320][ T9846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.979'. [ 167.332670][ T9844] IPVS: using max 56 ests per chain, 134400 per kthread [ 167.362361][ T9843] nbd0: detected capacity change from 0 to 127 [ 167.372397][ T9852] netlink: 64 bytes leftover after parsing attributes in process `syz.1.978'. [ 167.394713][ T5837] block nbd0: Receive control failed (result -104) [ 167.455708][ T9858] netlink: 'syz.3.983': attribute type 4 has an invalid length. [ 167.498247][ T9858] netlink: 'syz.3.983': attribute type 4 has an invalid length. [ 168.107923][ T9908] netlink: 300 bytes leftover after parsing attributes in process `syz.1.996'. [ 168.142498][ T9912] netlink: 'syz.3.997': attribute type 3 has an invalid length. [ 171.104199][ T9920] syzkaller1: entered promiscuous mode [ 171.109706][ T9920] syzkaller1: entered allmulticast mode [ 171.190545][ T9931] IPVS: set_ctl: invalid protocol: 92 172.30.1.1:20004 [ 171.657373][ T9971] lo speed is unknown, defaulting to 1000 [ 171.916302][ T9989] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1012'. [ 172.089271][ T9998] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1014'. [ 172.101474][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1015'. [ 172.618466][T10021] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1022'. [ 172.660749][T10021] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1022'. [ 172.670660][T10021] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1022'. [ 172.698938][T10021] bond3 (unregistering): Released all slaves [ 172.701976][T10019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1021'. [ 172.739552][T10019] netlink: 'syz.3.1021': attribute type 39 has an invalid length. [ 173.065272][T10034] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1027'. [ 173.077369][T10034] netlink: 170 bytes leftover after parsing attributes in process `syz.2.1027'. [ 173.491638][T10061] netlink: 'syz.2.1035': attribute type 11 has an invalid length. [ 173.521911][T10063] sctp: [Deprecated]: syz.0.1034 (pid 10063) Use of int in max_burst socket option deprecated. [ 173.521911][T10063] Use struct sctp_assoc_value instead [ 173.561729][T10066] macsec1: entered promiscuous mode [ 173.574035][T10066] macsec1: entered allmulticast mode [ 173.590523][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1035'. [ 173.827639][T10076] netlink: 'syz.3.1038': attribute type 3 has an invalid length. [ 173.839313][T10077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1038'. [ 173.849994][T10076] netlink: 'syz.3.1038': attribute type 1 has an invalid length. [ 173.860673][T10077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1038'. [ 173.870156][T10076] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1038'. [ 174.311371][T10098] lo speed is unknown, defaulting to 1000 [ 175.433053][T10149] lo speed is unknown, defaulting to 1000 [ 175.489457][T10160] netlink: 'syz.3.1053': attribute type 30 has an invalid length. [ 175.539091][T10153] lo speed is unknown, defaulting to 1000 [ 175.711294][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.805334][T10166] lo speed is unknown, defaulting to 1000 [ 176.652891][T10197] netlink: zone id is out of range [ 176.663777][T10197] netlink: zone id is out of range [ 176.689385][T10197] netlink: zone id is out of range [ 176.699573][T10197] netlink: zone id is out of range [ 176.721279][T10197] netlink: zone id is out of range [ 176.726442][T10197] netlink: zone id is out of range [ 176.759997][T10197] netlink: zone id is out of range [ 176.766288][T10197] netlink: zone id is out of range [ 176.801409][T10197] netlink: zone id is out of range [ 176.806567][T10197] netlink: zone id is out of range [ 177.936119][T10231] netlink: 'syz.0.1066': attribute type 3 has an invalid length. [ 178.160105][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.173642][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.186795][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.195363][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.203357][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.324687][T10252] __nla_validate_parse: 3 callbacks suppressed [ 178.324707][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'. [ 178.367869][T10243] lo speed is unknown, defaulting to 1000 [ 178.426137][T10254] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1074'. [ 178.638390][T10243] chnl_net:caif_netlink_parms(): no params data found [ 178.831855][T10243] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.848365][T10243] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.865221][T10243] bridge_slave_0: entered allmulticast mode [ 178.882091][T10243] bridge_slave_0: entered promiscuous mode [ 178.900399][T10243] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.918124][T10243] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.931542][T10243] bridge_slave_1: entered allmulticast mode [ 178.939247][T10243] bridge_slave_1: entered promiscuous mode [ 179.000726][T10243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.034798][T10243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.158795][T10243] team0: Port device team_slave_0 added [ 179.177782][T10243] team0: Port device team_slave_1 added [ 179.300462][T10243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.311200][T10243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.363038][T10243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.388442][T10243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.411292][T10243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.418482][T10270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1078'. [ 179.469590][T10243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.597267][T10274] tipc: Enabled bearer , priority 0 [ 179.620416][T10243] hsr_slave_0: entered promiscuous mode [ 179.642399][T10243] hsr_slave_1: entered promiscuous mode [ 179.652426][T10243] debugfs: 'hsr0' already exists in 'hsr' [ 179.664837][T10243] Cannot create hsr debugfs directory [ 179.672230][T10274] syzkaller0: entered promiscuous mode [ 179.677832][T10274] syzkaller0: entered allmulticast mode [ 179.711651][T10280] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1081'. [ 179.810838][T10274] tipc: Resetting bearer [ 179.835942][T10272] tipc: Resetting bearer [ 179.864393][T10272] tipc: Disabling bearer [ 180.034619][T10289] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1083'. [ 180.064857][T10289] .70·: renamed from hsr0 [ 180.080748][T10289] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.112875][T10289] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.123978][T10289] .70·: entered allmulticast mode [ 180.129025][T10289] hsr_slave_0: entered allmulticast mode [ 180.138879][T10289] hsr_slave_1: entered allmulticast mode [ 180.175936][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 180.250528][T10243] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 180.279028][ T5841] Bluetooth: hci5: command tx timeout [ 180.379518][T10243] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 180.417212][T10243] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 180.461928][T10243] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 180.554041][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 180.564235][T10301] syzkaller0: entered promiscuous mode [ 180.586618][T10301] syzkaller0: entered allmulticast mode [ 180.628042][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 182.352233][ T5841] Bluetooth: hci5: command tx timeout [ 182.708320][T10331] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20000 [ 183.295612][T10334] netlink: 'syz.2.1093': attribute type 2 has an invalid length. [ 183.336044][T10338] syzkaller1: entered promiscuous mode [ 183.351999][T10338] syzkaller1: entered allmulticast mode [ 183.372855][T10243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.395448][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 183.411470][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1096'. [ 183.460518][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1093'. [ 183.482882][T10346] vlan2: entered promiscuous mode [ 183.498258][T10346] team0: entered promiscuous mode [ 183.510457][T10346] team_slave_0: entered promiscuous mode [ 183.536338][T10346] team_slave_1: entered promiscuous mode [ 183.569901][T10243] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.636273][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.643470][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.658527][T10360] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 183.685894][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.693098][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.769951][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 184.026454][T10380] lo speed is unknown, defaulting to 1000 [ 184.130989][T10388] tipc: Enabled bearer , priority 0 [ 184.254573][T10393] syzkaller0: entered promiscuous mode [ 184.260171][T10393] syzkaller0: entered allmulticast mode [ 184.276709][T10243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.421568][T10388] tipc: Resetting bearer [ 184.431398][ T5841] Bluetooth: hci5: command tx timeout [ 184.481077][T10386] tipc: Resetting bearer [ 184.577520][T10386] tipc: Disabling bearer [ 184.742282][T10430] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.752921][T10417] dummy0: entered promiscuous mode [ 184.758184][T10417] macsec0: entered promiscuous mode [ 184.800776][T10417] macsec0: entered allmulticast mode [ 184.821385][T10417] dummy0: entered allmulticast mode [ 184.848097][T10434] sctp: [Deprecated]: syz.2.1115 (pid 10434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.848097][T10434] Use struct sctp_sack_info instead [ 184.865966][T10417] dummy0: left allmulticast mode [ 184.872727][T10417] dummy0: left promiscuous mode [ 185.010864][T10426] lo speed is unknown, defaulting to 1000 [ 185.037044][T10243] veth0_vlan: entered promiscuous mode [ 185.066131][T10243] veth1_vlan: entered promiscuous mode [ 185.155695][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'. [ 185.184520][T10243] veth0_macvtap: entered promiscuous mode [ 185.343933][T10243] veth1_macvtap: entered promiscuous mode [ 185.383477][T10243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.432923][T10243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.488375][ T9668] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.504670][ T9668] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.518339][T10468] netlink: 'syz.1.1124': attribute type 22 has an invalid length. [ 185.533647][ T9668] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.543201][ T9668] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.682669][ T9666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.698202][ T9666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.808752][ T9674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.834362][ T9674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.003087][T10485] netlink: 13 bytes leftover after parsing attributes in process `syz.5.1067'. [ 186.059124][T10485] netlink: 13 bytes leftover after parsing attributes in process `syz.5.1067'. [ 186.069494][T10485] net_ratelimit: 134 callbacks suppressed [ 186.069512][T10485] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 186.290172][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 186.511465][ T5841] Bluetooth: hci5: command tx timeout [ 186.578643][T10511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.616489][T10511] syzkaller0: entered promiscuous mode [ 186.622101][T10511] syzkaller0: entered allmulticast mode [ 186.799188][T10511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1135'. [ 186.822396][T10511] nbd: must specify at least one socket [ 186.996551][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1141'. [ 187.009355][T10532] netlink: 'syz.1.1138': attribute type 2 has an invalid length. [ 187.079327][T10522] bridge_slave_1: left allmulticast mode [ 187.088804][T10522] bridge_slave_1: left promiscuous mode [ 187.099297][T10522] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.109743][T10522] bridge_slave_0: left allmulticast mode [ 187.115777][T10522] bridge_slave_0: left promiscuous mode [ 187.121985][T10522] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.149822][T10591] netlink: 'syz.0.1158': attribute type 16 has an invalid length. [ 188.169217][T10591] netlink: 'syz.0.1158': attribute type 3 has an invalid length. [ 188.449075][T10599] __nla_validate_parse: 3 callbacks suppressed [ 188.449093][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1162'. [ 188.523748][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1166'. [ 188.629403][T10632] netlink: 'syz.2.1167': attribute type 1 has an invalid length. [ 188.688017][T10622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1167'. [ 188.777551][T10632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.788367][T10622] bond3: entered allmulticast mode [ 188.838665][T10642] bond3: (slave dummy0): making interface the new active one [ 188.847980][T10642] dummy0: entered allmulticast mode [ 188.862366][T10642] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 188.957454][T10640] syzkaller0: entered promiscuous mode [ 188.969938][T10640] syzkaller0: entered allmulticast mode [ 189.375446][T10634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.396537][T10664] netlink: 'syz.0.1174': attribute type 1 has an invalid length. [ 189.423471][T10664] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1174'. [ 191.192639][T10717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1179'. [ 191.205146][T10688] lo speed is unknown, defaulting to 1000 [ 191.341711][ T9674] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.362528][ T9674] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.413311][ T9674] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.428321][T10732] IPVS: length: 35 != 24 [ 191.431224][ T9674] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.439394][T10732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1186'. [ 191.453482][T10730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1185'. [ 191.465271][T10733] IPVS: length: 35 != 24 [ 191.964768][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1193'. [ 192.062121][T10761] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 192.524055][T10779] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1199'. [ 192.618525][T10781] nft_compat: unsupported protocol 0 [ 192.765843][T10786] openvswitch: netlink: Key type 195 is out of range max 32 [ 192.857692][T10786] bond6: option lacp_active: invalid value (8) [ 192.983211][T10786] bond6 (unregistering): Released all slaves [ 193.142218][T10792] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.209755][T10797] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 193.211989][T10799] netlink: 229 bytes leftover after parsing attributes in process `syz.1.1203'. [ 193.505245][T10808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1206'. [ 193.852324][T10812] bridge0: port 3(team0) entered disabled state [ 193.859419][T10812] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.867398][T10812] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.958344][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1208'. [ 194.276615][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.300174][T10812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.343043][T10812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.872784][ T9674] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.947901][ T9674] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.987942][ T9674] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.014600][ T9674] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.250074][T10853] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1216'. [ 195.250860][T10859] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1216'. [ 195.333688][T10853] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 195.387162][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1221'. [ 195.569426][T10877] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.1225'. [ 195.584592][T10875] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1224'. [ 195.625759][T10880] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1224'. [ 195.775858][T10893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1227'. [ 195.914035][T10902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.931764][T10900] syzkaller0: entered promiscuous mode [ 195.937466][T10900] syzkaller0: entered allmulticast mode [ 196.068712][T10908] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1232'. [ 196.235470][T10918] netlink: 'syz.1.1236': attribute type 10 has an invalid length. [ 196.256926][T10918] bond2: (slave dummy0): Releasing active interface [ 196.272687][T10918] dummy0: entered promiscuous mode [ 196.279137][T10918] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 196.290085][T10924] netlink: 'syz.1.1236': attribute type 10 has an invalid length. [ 196.298568][T10918] team0: Failed to send options change via netlink (err -105) [ 196.306855][T10918] team0: Port device dummy0 added [ 196.322883][T10924] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 196.338563][T10924] dummy0: left promiscuous mode [ 196.344882][T10924] team0: Failed to send options change via netlink (err -105) [ 196.352536][ T5140] Bluetooth: hci4: command 0x0405 tx timeout [ 196.352574][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 196.355314][ T5832] Bluetooth: hci2: command 0x0401 tx timeout [ 196.362131][T10924] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 196.380301][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 196.404341][T10924] team0: Port device dummy0 removed [ 196.551014][T10934] xt_hashlimit: size too large, truncated to 1048576 [ 196.969297][T10944] syzkaller0: entered promiscuous mode [ 196.990212][T10944] syzkaller0: entered allmulticast mode [ 197.476592][ T1077] block nbd0: Possible stuck request ffff888025058000: control (read@0,1024B). Runtime 30 seconds [ 197.496588][ T1077] block nbd0: Possible stuck request ffff888025058200: control (read@1024,1024B). Runtime 30 seconds [ 197.508904][ T1077] block nbd0: Possible stuck request ffff888025058400: control (read@2048,1024B). Runtime 30 seconds [ 197.520137][ T1077] block nbd0: Possible stuck request ffff888025058600: control (read@3072,1024B). Runtime 30 seconds [ 198.636031][T10992] __nla_validate_parse: 4 callbacks suppressed [ 198.636050][T10992] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1257'. [ 198.700989][T10997] lo speed is unknown, defaulting to 1000 [ 198.814925][T11005] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1259'. [ 198.874915][T11006] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 198.897086][T11006] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1260'. [ 198.936916][T11012] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1259'. [ 199.145320][T11026] netlink: 'syz.2.1264': attribute type 9 has an invalid length. [ 199.155713][T11026] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1264'. [ 199.593756][T11005] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 199.606330][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1273'. [ 199.707095][T11070] tipc: Enabling of bearer rejected, failed to enable media [ 199.729990][T11068] tipc: Enabling of bearer rejected, failed to enable media [ 199.745156][T11073] netlink: 'syz.2.1276': attribute type 1 has an invalid length. [ 199.781717][T11073] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1276'. [ 199.803075][T11070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1274'. [ 199.812347][T11070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1274'. [ 199.831059][T11073] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1276'. [ 200.134638][T11095] netlink: 'syz.3.1282': attribute type 10 has an invalid length. [ 200.173241][T11095] vxcan1: entered promiscuous mode [ 200.178540][T11095] vxcan1: entered allmulticast mode [ 200.206456][T11095] team0: Device vxcan1 is of different type [ 200.222806][T11104] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 200.238609][T11106] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 200.366889][T11113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.433329][T11111] bridge_slave_1 (unregistering): left allmulticast mode [ 200.440417][T11111] bridge_slave_1 (unregistering): left promiscuous mode [ 200.448652][T11111] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.467719][T11108] lo speed is unknown, defaulting to 1000 [ 200.520444][T11116] lo speed is unknown, defaulting to 1000 [ 200.795508][T11128] netlink: 'syz.3.1292': attribute type 4 has an invalid length. [ 200.911913][ T5840] Bluetooth: hci2: command 0x0401 tx timeout [ 201.137210][T11141] syz_tun: entered allmulticast mode [ 201.157610][T11140] syz_tun: left allmulticast mode [ 201.659577][T11162] macvlan3: entered allmulticast mode [ 201.671413][T11163] netlink: 'syz.0.1303': attribute type 2 has an invalid length. [ 201.723446][T11163] l24): entered promiscuous mode [ 201.744063][T11167] lo speed is unknown, defaulting to 1000 [ 201.754477][T11167] lo speed is unknown, defaulting to 1000 [ 201.761084][T11167] lo speed is unknown, defaulting to 1000 [ 202.071907][T11185] openvswitch: netlink: Key 6 has unexpected len 212 expected 2 [ 202.198953][ T5955] lo speed is unknown, defaulting to 1000 [ 202.218154][T11167] infiniband syz0: set down [ 202.238088][T11167] infiniband syz0: added lo [ 202.282101][T11167] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 202.290722][T11167] infiniband syz0: Couldn't open port 1 [ 202.408056][T11167] RDS/IB: syz0: added [ 202.428111][T11167] smc: adding ib device syz0 with port count 1 [ 202.452434][T11167] smc: ib device syz0 port 1 has no pnetid [ 202.470042][ T5955] lo speed is unknown, defaulting to 1000 [ 202.503232][T11167] lo speed is unknown, defaulting to 1000 [ 203.080751][T11167] lo speed is unknown, defaulting to 1000 [ 203.709682][T11223] __nla_validate_parse: 11 callbacks suppressed [ 203.709704][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 203.735230][T11167] lo speed is unknown, defaulting to 1000 [ 203.773119][T11223] netlink: 'syz.0.1321': attribute type 2 has an invalid length. [ 203.801993][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 203.854223][T11226] tipc: Enabled bearer , priority 0 [ 203.881613][T11227] syzkaller1: entered promiscuous mode [ 203.950287][T11227] syzkaller1: entered allmulticast mode [ 203.982734][T11229] xt_hashlimit: size too large, truncated to 1048576 [ 204.012865][T11228] syzkaller0: entered promiscuous mode [ 204.046720][T11228] syzkaller0: entered allmulticast mode [ 204.253325][T11231] tipc: Resetting bearer [ 204.270260][T11167] lo speed is unknown, defaulting to 1000 [ 204.277642][T11222] tipc: Resetting bearer [ 204.307692][T11222] tipc: Disabling bearer [ 204.687686][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'. [ 204.957799][T11167] lo speed is unknown, defaulting to 1000 [ 205.139550][ T5840] block nbd2: Receive control failed (result -32) [ 205.409298][T11167] lo speed is unknown, defaulting to 1000 [ 205.604808][T11262] netlink: 'syz.3.1331': attribute type 2 has an invalid length. [ 205.715586][T11262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1331'. [ 205.791328][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.852526][T11270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.953638][T11276] tipc: Invalid UDP bearer configuration [ 205.953692][T11276] tipc: Enabling of bearer rejected, failed to enable media [ 205.967992][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'. [ 206.253486][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1338'. [ 206.264860][T11301] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 206.377095][T11295] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1338'. [ 206.516740][T11312] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 206.522850][T11312] syzkaller1: linktype set to 778 [ 206.548128][T11312] 8021q: adding VLAN 0 to HW filter on device bond6 [ 206.648950][T11323] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 208.130337][T11371] 8021q: adding VLAN 0 to HW filter on device bond7 [ 208.169864][T11371] bond0: (slave bond7): Enslaving as an active interface with an up link [ 208.471305][T11391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1368'. [ 208.493840][T11391] netlink: 560 bytes leftover after parsing attributes in process `syz.0.1368'. [ 209.293349][T11420] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1376'. [ 209.308845][T11423] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1378'. [ 209.330610][T11424] Bluetooth: MGMT ver 1.23 [ 209.338505][T11423] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1378'. [ 209.353600][T11423] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1378'. [ 209.394269][T11421] syzkaller0: entered allmulticast mode [ 209.405252][T11421] syzkaller0: entered promiscuous mode [ 209.424502][T11427] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 209.443233][T11421] syzkaller0 (unregistering): left allmulticast mode [ 209.460294][T11421] syzkaller0 (unregistering): left promiscuous mode [ 209.620423][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 209.707723][T11440] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 209.906175][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1387'. [ 209.947875][T11450] netlink: 'syz.3.1386': attribute type 2 has an invalid length. [ 209.994490][T11450] xt_hashlimit: max too large, truncated to 1048576 [ 210.005367][T11450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.048789][T11462] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1388'. [ 210.093872][T11464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1389'. [ 210.134984][T11466] netlink: 'syz.1.1390': attribute type 1 has an invalid length. [ 210.265604][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 210.454090][T11479] lo speed is unknown, defaulting to 1000 [ 210.463980][T11479] lo speed is unknown, defaulting to 1000 [ 210.885323][T11497] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1400'. [ 212.905536][T11453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.216183][T11525] netlink: 'syz.3.1407': attribute type 11 has an invalid length. [ 213.222161][T11527] lo speed is unknown, defaulting to 1000 [ 213.235905][T11529] netlink: 'syz.5.1409': attribute type 13 has an invalid length. [ 213.258601][T11527] lo speed is unknown, defaulting to 1000 [ 213.331377][T11538] xfrm0: entered promiscuous mode [ 213.344256][T11538] xfrm0: entered allmulticast mode [ 213.869528][T11572] netlink: 'syz.0.1417': attribute type 23 has an invalid length. [ 213.943212][T11575] netlink: 'syz.3.1420': attribute type 16 has an invalid length. [ 213.985892][T11576] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 214.080560][T11583] syz.5.1421 uses old SIOCAX25GETINFO [ 214.380337][T11591] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 214.984955][T11620] lo speed is unknown, defaulting to 1000 [ 215.001065][T11620] lo speed is unknown, defaulting to 1000 [ 215.038458][T11621] __nla_validate_parse: 5 callbacks suppressed [ 215.038479][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 215.063477][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 215.074414][T11621] netlink: 'syz.0.1432': attribute type 12 has an invalid length. [ 215.086575][T11621] netlink: 'syz.0.1432': attribute type 6 has an invalid length. [ 215.137380][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.150341][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 215.159327][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.168304][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.176775][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 215.185762][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.195025][T11621] netlink: 'syz.0.1432': attribute type 12 has an invalid length. [ 215.204050][T11621] netlink: 'syz.0.1432': attribute type 6 has an invalid length. [ 215.631681][T11637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1438'. [ 215.645451][T11638] openvswitch: netlink: Flow key attr not present in new flow. [ 216.796286][T11656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1444'. [ 216.834331][T11656] netlink: get zone limit has 8 unknown bytes [ 216.887159][T11655] tun0: tun_chr_ioctl cmd 1074025673 [ 216.917773][T11655] tun0: tun_chr_ioctl cmd 1074025675 [ 216.928820][T11655] tun0: persist enabled [ 216.934602][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 216.965042][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 216.974282][T11662] tun0: tun_chr_ioctl cmd 1074025675 [ 216.979799][T11662] tun0: persist enabled [ 216.985723][T11655] tun0: tun_chr_ioctl cmd 2147767506 [ 216.992029][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 217.157683][T11674] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1451'. [ 217.615039][T11696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.437825][T11743] pim6reg: entered allmulticast mode [ 218.753370][T11759] lo speed is unknown, defaulting to 1000 [ 218.795535][T11759] lo speed is unknown, defaulting to 1000 [ 218.941021][T11779] syzkaller0: entered promiscuous mode [ 218.952252][T11779] syzkaller0: entered allmulticast mode [ 219.800850][T11817] netlink: 'syz.0.1488': attribute type 6 has an invalid length. [ 219.818256][T11817] netlink: 'syz.0.1488': attribute type 5 has an invalid length. [ 219.840793][T11819] netlink: 'syz.3.1489': attribute type 39 has an invalid length. [ 219.866242][T11814] netlink: 'syz.0.1488': attribute type 4 has an invalid length. [ 219.899345][T11814] netlink: 'syz.0.1488': attribute type 4 has an invalid length. [ 220.028911][T11828] syzkaller0: left promiscuous mode [ 220.041907][T11828] syzkaller0: left allmulticast mode [ 220.121020][T11833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.503076][T11859] __nla_validate_parse: 12 callbacks suppressed [ 220.503093][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1498'. [ 220.536390][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1498'. [ 220.549644][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1498'. [ 220.606908][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1498'. [ 220.690360][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1501'. [ 220.911811][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1504'. [ 221.041841][T11893] netlink: 'syz.2.1508': attribute type 2 has an invalid length. [ 221.060898][T11893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1508'. [ 221.134694][T11905] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1508'. [ 221.213127][T11905] netlink: ct family unspecified [ 221.240859][T11893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1508'. [ 221.301635][T11893] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1508'. [ 221.338047][T11893] nbd: must specify at least one socket [ 221.582412][T11929] netlink: 'syz.5.1513': attribute type 16 has an invalid length. [ 221.592625][T11929] netlink: 'syz.5.1513': attribute type 3 has an invalid length. [ 221.948733][T11954] IPVS: Scheduler module ip_vs_sip not found [ 222.206217][T11973] lo speed is unknown, defaulting to 1000 [ 222.215370][T11973] lo speed is unknown, defaulting to 1000 [ 222.231978][T11974] netlink: 'syz.5.1526': attribute type 10 has an invalid length. [ 222.253951][T11967] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 222.290620][T11967] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 222.316191][T11981] syzkaller0: entered promiscuous mode [ 222.344039][T11981] syzkaller0: entered allmulticast mode [ 222.368892][T11980] xt_CT: No such helper "snmp" [ 222.538863][T11990] lo speed is unknown, defaulting to 1000 [ 222.575252][T12000] batadv0: entered promiscuous mode [ 222.581303][T12000] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 222.651773][T11990] lo speed is unknown, defaulting to 1000 [ 223.495537][T12031] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.570855][T12031] bridge5: entered promiscuous mode [ 223.577442][T12031] bridge5: entered allmulticast mode [ 223.596767][ T9668] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.616929][ T9668] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.662605][ T9668] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.691602][ T9668] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.893067][T12043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.900340][T12043] IPv6: NLM_F_CREATE should be set when creating new route [ 223.907691][T12043] IPv6: NLM_F_CREATE should be set when creating new route [ 224.059097][T12048] lo speed is unknown, defaulting to 1000 [ 224.067392][T12048] lo speed is unknown, defaulting to 1000 [ 224.189823][T12053] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 224.226419][T12053] 8021q: adding VLAN 0 to HW filter on device bond9 [ 224.250614][T12053] bond9: (slave gretap2): making interface the new active one [ 224.320026][T12053] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 224.380507][T12055] bond9 (unregistering): (slave gretap2): Releasing active interface [ 224.405424][T12055] bond9 (unregistering): Released all slaves [ 224.432812][T12053] tipc: Enabling of bearer rejected, failed to enable media [ 224.629837][T12049] lo speed is unknown, defaulting to 1000 [ 224.729492][T12049] lo speed is unknown, defaulting to 1000 [ 224.880953][T12081] xt_connbytes: Forcing CT accounting to be enabled [ 225.151293][T12095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.208771][T12095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.272432][T12093] lo speed is unknown, defaulting to 1000 [ 225.284612][T12093] lo speed is unknown, defaulting to 1000 [ 226.358781][T12132] syzkaller0: entered promiscuous mode [ 226.371298][T12132] syzkaller0: entered allmulticast mode [ 226.680339][T12135] lo speed is unknown, defaulting to 1000 [ 226.723947][T12139] bond9 (unregistering): Released all slaves [ 226.748897][T12135] lo speed is unknown, defaulting to 1000 [ 226.890357][T12147] __nla_validate_parse: 16 callbacks suppressed [ 226.890377][T12147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1570'. [ 227.102259][T12165] netlink: 'syz.3.1573': attribute type 10 has an invalid length. [ 227.151863][T12165] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1573'. [ 227.251830][T12174] netlink: 'syz.2.1576': attribute type 13 has an invalid length. [ 227.551744][ T1077] block nbd0: Possible stuck request ffff888025058000: control (read@0,1024B). Runtime 60 seconds [ 227.562868][ T1077] block nbd0: Possible stuck request ffff888025058200: control (read@1024,1024B). Runtime 60 seconds [ 227.574149][ T1077] block nbd0: Possible stuck request ffff888025058400: control (read@2048,1024B). Runtime 60 seconds [ 227.585090][ T1077] block nbd0: Possible stuck request ffff888025058600: control (read@3072,1024B). Runtime 60 seconds [ 227.690881][T12195] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1582'. [ 228.167489][T12225] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 228.180100][T12225] syzkaller0: entered promiscuous mode [ 228.186735][T12225] syzkaller0: entered allmulticast mode [ 228.244616][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'. [ 228.348341][T12231] netlink: 'syz.2.1590': attribute type 4 has an invalid length. [ 228.388826][T12235] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1592'. [ 228.420895][ T9674] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.446390][ T9674] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.463780][ T9674] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.488839][ T9674] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.518616][T12240] lo speed is unknown, defaulting to 1000 [ 228.542633][T12240] lo speed is unknown, defaulting to 1000 [ 228.660772][T12254] syzkaller0: entered promiscuous mode [ 228.666546][T12254] syzkaller0: entered allmulticast mode [ 228.690436][T12254] 0: reclassify loop, rule prio 0, protocol 800 [ 230.663278][T12196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.889279][T12274] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1597'. [ 230.908920][T12270] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 230.919490][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'. [ 231.149732][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1603'. [ 231.421863][T12304] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1607'. [ 231.437969][T12306] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 231.453361][T12306] bond9 (unregistering): Released all slaves [ 231.535482][T12300] netlink: 'syz.0.1605': attribute type 2 has an invalid length. [ 231.582225][T12300] : entered promiscuous mode [ 231.605334][T12319] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1613'. [ 231.799285][T12328] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 231.857799][T12328] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 231.906294][T12338] __nla_validate_parse: 3 callbacks suppressed [ 231.906314][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'. [ 231.976394][T12339] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1618'. [ 232.008758][T12338] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1618'. [ 232.213398][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1622'. [ 232.285184][T12371] netlink: 'syz.5.1623': attribute type 5 has an invalid length. [ 232.285723][T12372] netlink: 'syz.5.1623': attribute type 5 has an invalid length. [ 232.606463][T12390] syzkaller0: entered promiscuous mode [ 232.641779][T12390] syzkaller0: entered allmulticast mode [ 232.676988][T12391] netlink: 'syz.3.1628': attribute type 10 has an invalid length. [ 232.688354][T12391] @0Ù: entered allmulticast mode [ 232.710292][T12391] team0: Port device 4@0Ù added [ 232.856940][T12408] netlink: 'syz.1.1632': attribute type 10 has an invalid length. [ 232.870315][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 232.889781][T12408] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1632'. [ 232.932270][T12411] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 232.952961][T12415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1636'. [ 232.987558][T12415] netlink: 'syz.2.1636': attribute type 11 has an invalid length. [ 233.039648][T12419] openvswitch: netlink: IP tunnel dst address not specified [ 233.042888][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1636'. [ 233.239302][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 233.262163][T12430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1639'. [ 235.526778][T12465] netlink: 'syz.1.1643': attribute type 10 has an invalid length. [ 235.642675][T12474] xt_hashlimit: size too large, truncated to 1048576 [ 235.663094][T12476] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 235.677079][T12474] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 235.793757][T12482] syzkaller0: entered promiscuous mode [ 235.799356][T12482] syzkaller0: entered allmulticast mode [ 236.449583][T12451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.992988][T12506] __nla_validate_parse: 6 callbacks suppressed [ 236.993005][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 237.029534][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 237.063782][T12513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.072052][T12516] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1658'. [ 237.201685][T12530] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1665'. [ 237.219728][T12530] gretap0: entered promiscuous mode [ 237.297268][T12530] vlan0: entered allmulticast mode [ 237.316754][T12530] bridge0: port 4(vlan0) entered blocking state [ 237.330442][T12530] bridge0: port 4(vlan0) entered disabled state [ 237.368605][T12530] vlan0: entered promiscuous mode [ 237.431640][T12534] lo speed is unknown, defaulting to 1000 [ 237.468071][T12533] gretap0: left promiscuous mode [ 237.507112][T12533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.515467][T12533] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.524921][T12533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.541971][T12534] lo speed is unknown, defaulting to 1000 [ 237.550900][ T5908] lo speed is unknown, defaulting to 1000 [ 237.563059][ T5908] syz2: Port: 1 Link ACTIVE [ 237.575219][T12543] lo speed is unknown, defaulting to 1000 [ 237.706004][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1670'. [ 237.744722][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1670'. [ 237.761016][T12543] lo speed is unknown, defaulting to 1000 [ 238.096508][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 238.279851][T12568] x_tables: duplicate underflow at hook 1 [ 238.479488][T12572] tipc: Started in network mode [ 238.485394][T12572] tipc: Node identity 00000000000000404700000000000001, cluster identity 4711 [ 238.500021][T12572] tipc: Enabling of bearer rejected, failed to enable media [ 238.523139][T12576] openvswitch: netlink: IP tunnel attribute has 23 unknown bytes. [ 238.576215][T12573] lo speed is unknown, defaulting to 1000 [ 238.746232][T12573] lo speed is unknown, defaulting to 1000 [ 238.784702][T12585] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1680'. [ 238.907033][T12585] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1680'. [ 239.087321][T12596] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1684'. [ 239.286868][T12603] netlink: 'syz.0.1687': attribute type 10 has an invalid length. [ 239.484287][T12602] lo speed is unknown, defaulting to 1000 [ 239.500409][T12609] netlink: 'syz.1.1689': attribute type 1 has an invalid length. [ 239.502378][T12602] lo speed is unknown, defaulting to 1000 [ 240.216404][T12630] syzkaller0: entered promiscuous mode [ 240.231761][T12630] syzkaller0: entered allmulticast mode [ 240.613156][T12636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.677767][T12636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.752853][T12647] lo speed is unknown, defaulting to 1000 [ 240.769075][T12643] netlink: 'syz.2.1700': attribute type 29 has an invalid length. [ 240.796536][T12636] xt_CT: No such helper "pptp" [ 240.806494][T12647] lo speed is unknown, defaulting to 1000 [ 240.819822][T12635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.644529][T12680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.651804][T12680] IPv6: NLM_F_CREATE should be set when creating new route [ 241.660259][T12680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.667522][T12680] IPv6: NLM_F_CREATE should be set when creating new route [ 241.883406][T12689] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 241.904315][T12692] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 242.095730][T12700] xt_hashlimit: size too large, truncated to 1048576 [ 242.228753][T12706] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 242.247005][T12707] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 242.323635][T12706] netlink: 'syz.0.1716': attribute type 5 has an invalid length. [ 244.376990][T12667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.605147][T12729] __nla_validate_parse: 13 callbacks suppressed [ 244.605168][T12729] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.1722'. [ 244.703356][T12733] netlink: 'syz.5.1726': attribute type 1 has an invalid length. [ 244.746214][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1726'. [ 245.142676][T12762] erspan0: left promiscuous mode [ 245.157193][T12762] bridge0: left allmulticast mode [ 245.167377][T12762] .70·: left allmulticast mode [ 245.172564][T12762] hsr_slave_0: left allmulticast mode [ 245.178194][T12762] hsr_slave_1: left allmulticast mode [ 245.193673][T12762] geneve3: left promiscuous mode [ 245.198778][T12762] geneve3: left allmulticast mode [ 245.209341][T12762] xfrm1: left allmulticast mode [ 245.298948][ T9675] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.319049][ T9675] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.358150][ T9675] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.381975][ T9675] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.192037][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'. [ 246.200937][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'. [ 246.237119][T12798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1740'. [ 246.267303][T12802] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 246.267613][T12788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.642915][T12833] FAULT_INJECTION: forcing a failure. [ 246.642915][T12833] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 246.677036][T12833] CPU: 0 UID: 0 PID: 12833 Comm: syz.0.1750 Not tainted syzkaller #0 PREEMPT(full) [ 246.677062][T12833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 246.677085][T12833] Call Trace: [ 246.677091][T12833] [ 246.677099][T12833] dump_stack_lvl+0xe8/0x150 [ 246.677125][T12833] should_fail_ex+0x412/0x560 [ 246.677151][T12833] _copy_to_user+0x31/0xb0 [ 246.677177][T12833] simple_read_from_buffer+0xe1/0x170 [ 246.677202][T12833] proc_fail_nth_read+0x1bb/0x230 [ 246.677228][T12833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.677254][T12833] ? rw_verify_area+0x2a6/0x4d0 [ 246.677273][T12833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.677297][T12833] vfs_read+0x20c/0xa70 [ 246.677317][T12833] ? fdget_pos+0x246/0x320 [ 246.677340][T12833] ? __pfx___mutex_lock+0x10/0x10 [ 246.677362][T12833] ? __pfx_vfs_read+0x10/0x10 [ 246.677386][T12833] ? __fget_files+0x2a/0x420 [ 246.677408][T12833] ? __fget_files+0x3a0/0x420 [ 246.677426][T12833] ? __fget_files+0x2a/0x420 [ 246.677453][T12833] ksys_read+0x150/0x270 [ 246.677477][T12833] ? __pfx_ksys_read+0x10/0x10 [ 246.677497][T12833] ? __pfx_sock_ioctl+0x10/0x10 [ 246.677524][T12833] do_syscall_64+0xe2/0xf80 [ 246.677544][T12833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.677561][T12833] ? trace_irq_disable+0x37/0x100 [ 246.677577][T12833] ? clear_bhb_loop+0x60/0xb0 [ 246.677598][T12833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.677614][T12833] RIP: 0033:0x7f9dee15b78e [ 246.677635][T12833] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 246.677649][T12833] RSP: 002b:00007f9def13bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.677674][T12833] RAX: ffffffffffffffda RBX: 00007f9def13c6c0 RCX: 00007f9dee15b78e [ 246.677687][T12833] RDX: 000000000000000f RSI: 00007f9def13c0a0 RDI: 0000000000000004 [ 246.677697][T12833] RBP: 00007f9def13c090 R08: 0000000000000000 R09: 0000000000000000 [ 246.677708][T12833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.677718][T12833] R13: 00007f9dee416038 R14: 00007f9dee415fa0 R15: 00007ffefa97a6e8 [ 246.677748][T12833] [ 246.981760][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 247.149564][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1753'. [ 247.193858][T12853] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1754'. [ 247.206920][T12858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1755'. [ 247.493843][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1762'. [ 247.566469][T12885] bridge0: port 3(batadv0) entered blocking state [ 247.574167][T12885] bridge0: port 3(batadv0) entered disabled state [ 247.581059][T12885] batadv0: entered allmulticast mode [ 247.592455][T12885] batadv0: entered promiscuous mode [ 247.599183][T12885] bridge0: port 3(batadv0) entered blocking state [ 247.605823][T12885] bridge0: port 3(batadv0) entered forwarding state [ 247.924717][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 247.934551][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 248.343393][T12933] netlink: 'syz.2.1770': attribute type 2 has an invalid length. [ 248.390445][T12933] netlink: 'syz.2.1770': attribute type 1 has an invalid length. [ 248.599834][T12953] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 248.651322][T12953] openvswitch: netlink: Message has 8 unknown bytes. [ 248.656197][ T24] lo speed is unknown, defaulting to 1000 [ 248.711688][ T796] lo speed is unknown, defaulting to 1000 [ 248.865532][T12956] netlink: 'syz.2.1777': attribute type 1 has an invalid length. [ 249.029310][T12966] bond4: (slave gretap2): making interface the new active one [ 249.068812][T12966] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 249.099529][T12956] vlan2: entered allmulticast mode [ 249.105316][T12956] bond4: entered allmulticast mode [ 249.110505][T12956] gretap2: entered allmulticast mode [ 249.122496][T12956] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 249.655839][T13009] __nla_validate_parse: 5 callbacks suppressed [ 249.655859][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1786'. [ 250.063067][T13042] SET target dimension over the limit! [ 250.732152][T13088] lo speed is unknown, defaulting to 1000 [ 250.740148][T13088] lo speed is unknown, defaulting to 1000 [ 250.889174][T13096] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1807'. [ 251.134584][T13111] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 251.148447][T13111] pim6reg1: linktype set to 776 [ 251.207839][T13111] vxlan0: entered promiscuous mode [ 251.263419][T13111] vxlan0: entered allmulticast mode [ 251.269331][ T9676] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.283978][T13104] netlink: zone id is out of range [ 251.286575][ T9676] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.305599][T13104] netlink: zone id is out of range [ 251.343895][ T9676] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.365414][ T9676] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.634963][T13139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.755394][T13139] syzkaller0: entered promiscuous mode [ 251.760906][T13139] syzkaller0: entered allmulticast mode [ 251.816808][T13147] team_slave_0: left promiscuous mode [ 251.840630][T13147] team0: Port device team_slave_0 removed [ 251.847821][T13147] team_slave_1: left promiscuous mode [ 251.870552][T13147] team0: Port device team_slave_1 removed [ 251.892262][T13147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.912139][T13147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.935183][T13147] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 252.087878][T13158] lo speed is unknown, defaulting to 1000 [ 252.101230][T13158] lo speed is unknown, defaulting to 1000 [ 252.112928][T13167] netlink: 'syz.2.1824': attribute type 1 has an invalid length. [ 252.112928][T13168] netlink: 'syz.2.1824': attribute type 1 has an invalid length. [ 252.662335][T13192] netlink: 'syz.3.1829': attribute type 1 has an invalid length. [ 252.703235][T13192] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 253.054199][T13205] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 253.085074][T13205] : renamed from bond_slave_0 [ 253.090304][T13208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1833'. [ 253.172383][T13211] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1833'. [ 253.666447][T13242] netlink: 'syz.0.1841': attribute type 1 has an invalid length. [ 253.675136][T13242] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1841'. [ 253.675184][T13239] netlink: 'syz.1.1842': attribute type 6 has an invalid length. [ 253.692913][T13239] netlink: 'syz.1.1842': attribute type 7 has an invalid length. [ 253.701991][T13243] block nbd3: Unsupported socket: should be TCP or UNIX. [ 253.721848][T13239] netlink: 'syz.1.1842': attribute type 8 has an invalid length. [ 253.729947][T13239] netlink: 'syz.1.1842': attribute type 13 has an invalid length. [ 253.749697][T13242] netlink: 'syz.0.1841': attribute type 6 has an invalid length. [ 253.782405][T13243] netlink: 'syz.3.1843': attribute type 1 has an invalid length. [ 253.790728][T13243] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1843'. [ 253.957675][T13255] lo speed is unknown, defaulting to 1000 [ 253.973839][T13255] lo speed is unknown, defaulting to 1000 [ 254.233330][T13273] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1849'. [ 254.742265][T13294] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1854'. [ 254.768335][T13291] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1853'. [ 255.075559][T13304] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 255.721077][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.806454][T13324] lo: entered allmulticast mode [ 255.824856][T13324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.833005][T13338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1863'. [ 255.855630][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'. [ 256.089040][T13340] netem: change failed [ 256.287600][T13352] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1868'. [ 256.623565][T13368] lo speed is unknown, defaulting to 1000 [ 256.631640][T13368] lo speed is unknown, defaulting to 1000 [ 256.719374][T13378] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 256.778511][T13380] syzkaller0: entered promiscuous mode [ 256.789394][T13378] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 256.795025][T13380] syzkaller0: entered allmulticast mode [ 257.040097][T13400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1879'. [ 257.138130][T13402] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1880'. [ 257.299716][T13415] sctp: [Deprecated]: syz.0.1884 (pid 13415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.299716][T13415] Use struct sctp_sack_info instead [ 257.321950][T13416] sctp: [Deprecated]: syz.0.1884 (pid 13416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.321950][T13416] Use struct sctp_sack_info instead [ 257.427911][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'. [ 257.427911][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'. [ 257.439529][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'. [ 257.632276][ T1077] block nbd0: Possible stuck request ffff888025058000: control (read@0,1024B). Runtime 90 seconds [ 257.643208][ T1077] block nbd0: Possible stuck request ffff888025058200: control (read@1024,1024B). Runtime 90 seconds [ 257.654241][ T1077] block nbd0: Possible stuck request ffff888025058400: control (read@2048,1024B). Runtime 90 seconds [ 257.665546][ T1077] block nbd0: Possible stuck request ffff888025058600: control (read@3072,1024B). Runtime 90 seconds [ 257.715537][T13435] vlan4: entered promiscuous mode [ 257.720882][T13435] gretap0: entered promiscuous mode [ 257.933248][T13443] bond1: entered promiscuous mode [ 257.938572][T13443] bond1: entered allmulticast mode [ 257.949819][T13443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.234488][T13462] lo speed is unknown, defaulting to 1000 [ 258.245576][T13462] lo speed is unknown, defaulting to 1000 [ 258.313191][T13472] lo speed is unknown, defaulting to 1000 [ 258.520073][T13479] netlink: 'syz.5.1899': attribute type 11 has an invalid length. [ 258.565312][T13472] lo speed is unknown, defaulting to 1000 [ 259.149782][T13504] sctp: [Deprecated]: syz.5.1903 (pid 13504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.149782][T13504] Use struct sctp_sack_info instead [ 259.600364][T13514] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 259.793614][T13521] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 259.852266][T13539] __nla_validate_parse: 4 callbacks suppressed [ 259.852285][T13539] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1909'. [ 259.911668][T13539] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1909'. [ 260.128034][T13541] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 260.136617][T13541] syzkaller1: linktype set to 825 [ 260.154850][T13530] lo speed is unknown, defaulting to 1000 [ 260.279849][T13530] lo speed is unknown, defaulting to 1000 [ 260.480581][T13564] tipc: Enabling of bearer rejected, failed to enable media [ 260.517638][T13568] validate_nla: 2 callbacks suppressed [ 260.517657][T13568] netlink: 'syz.2.1919': attribute type 32 has an invalid length. [ 260.577400][T13575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.636908][T13575] bond0: (slave rose0): Enslaving as an active interface with an up link [ 260.896199][T13588] lo speed is unknown, defaulting to 1000 [ 261.416602][T13615] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 261.444373][T13617] syzkaller1: entered promiscuous mode [ 261.450044][T13617] syzkaller1: entered allmulticast mode [ 261.461290][T13615] netlink: 'syz.1.1927': attribute type 3 has an invalid length. [ 261.483463][T13615] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1927'. [ 261.567124][T13588] lo speed is unknown, defaulting to 1000 [ 261.661847][T13624] netlink: 'syz.1.1928': attribute type 6 has an invalid length. [ 261.699010][T13624] netlink: 'syz.1.1928': attribute type 6 has an invalid length. [ 262.605476][T13653] bond0: Unable to set up delay as MII monitoring is disabled [ 262.649288][T13653] bond0 (unregistering): Released all slaves [ 262.995646][T13678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1935'. [ 263.006480][T13678] openvswitch: netlink: Flow actions attr not present in new flow. [ 263.398420][T13692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.440134][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1939'. [ 263.473074][T13692] lo: entered allmulticast mode [ 263.490029][T13692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.727454][T13707] IPv6: Can't replace route, no match found [ 263.742251][T13707] IPv6: Can't replace route, no match found [ 263.823546][T13715] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1944'. [ 264.080218][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1944'. [ 264.174478][T13724] lo speed is unknown, defaulting to 1000 [ 264.203422][T13724] lo speed is unknown, defaulting to 1000 [ 264.847116][T13747] lo speed is unknown, defaulting to 1000 [ 265.041448][T13747] lo speed is unknown, defaulting to 1000 [ 265.951628][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.027962][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'. [ 266.048151][T13802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1954'. [ 266.089306][T13802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1954'. [ 266.296173][T13812] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1956'. [ 266.332439][T13813] netlink: 'syz.3.1957': attribute type 13 has an invalid length. [ 266.346328][T13813] netlink: 'syz.3.1957': attribute type 17 has an invalid length. [ 266.354925][T13813] lo: left allmulticast mode [ 266.367559][T13813] gre0: left promiscuous mode [ 266.373038][T13813] gre0: left allmulticast mode [ 266.411325][T13813] ip6tnl0: left promiscuous mode [ 266.467569][T13813] bridge0: left promiscuous mode [ 266.483747][T13813] bridge0: entered promiscuous mode [ 266.505584][T13813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.530792][T13813] bridge0: port 3(team0) entered blocking state [ 266.537235][T13813] bridge0: port 3(team0) entered forwarding state [ 266.558401][T13813] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.574306][T13813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.079419][T13834] lo speed is unknown, defaulting to 1000 [ 267.097100][T13834] lo speed is unknown, defaulting to 1000 [ 267.509393][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'. [ 267.579574][T13849] vlan0: entered allmulticast mode [ 267.591271][T13849] team0: entered allmulticast mode [ 267.596598][T13849] team_slave_0: entered allmulticast mode [ 267.611344][T13849] team_slave_1: entered allmulticast mode [ 267.617233][T13849] geneve0: entered allmulticast mode [ 267.664134][T13854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1970'. [ 267.770489][T13863] netlink: 'syz.5.1968': attribute type 1 has an invalid length. [ 267.778613][T13863] netlink: 15490 bytes leftover after parsing attributes in process `syz.5.1968'. [ 268.076653][T13872] netlink: 'syz.2.1973': attribute type 3 has an invalid length. [ 268.164794][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1974'. [ 268.178951][T13877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.220856][T13877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.521658][ T796] lo speed is unknown, defaulting to 1000 [ 268.734511][T13895] lo speed is unknown, defaulting to 1000 [ 268.759335][T13895] lo speed is unknown, defaulting to 1000 [ 268.829424][T13913] lo speed is unknown, defaulting to 1000 [ 269.120589][T13913] lo speed is unknown, defaulting to 1000 [ 269.265293][T13936] xt_l2tp: v2 tid > 0xffff: 37482740 [ 269.273918][T13936] xt_l2tp: v2 tid > 0xffff: 37482740 [ 269.297170][T13936] xt_l2tp: v2 tid > 0xffff: 37482740 [ 269.315670][T13936] xt_l2tp: v2 tid > 0xffff: 37482740 [ 269.349110][T13936] xt_l2tp: v2 tid > 0xffff: 37482740 [ 269.429411][T13936] xt_l2tp: v2 tid > 0xffff: 37482740 [ 269.472038][T13936] xt_l2tp: v2 tid > 0xffff: 37482740 [ 269.503391][T13936] xt_l2tp: v2 tid > 0xffff: 37482740 [ 269.518623][T13936] xt_l2tp: v2 tid > 0xffff: 37482740 [ 269.531464][T13940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1991'. [ 269.583486][T13936] xt_l2tp: v2 tid > 0xffff: 37482740 [ 269.872103][T13949] gretap0: entered promiscuous mode [ 270.254022][T13978] netlink: 'syz.1.2001': attribute type 1 has an invalid length. [ 270.274386][T13978] netlink: 'syz.1.2001': attribute type 3 has an invalid length. [ 270.344918][T13978] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2001'. [ 270.812091][T14001] netlink: 'syz.5.2008': attribute type 11 has an invalid length. [ 271.017144][T14017] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 271.070082][T14018] openvswitch: netlink: Key 32 has unexpected len 7 expected 2 [ 271.142579][T14026] erspan0: left promiscuous mode [ 271.181825][T14026] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.196704][T14026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.241601][ T24] lo speed is unknown, defaulting to 1000 [ 271.254445][ T24] syz0: Port: 1 Link ACTIVE [ 271.271049][ T24] lo speed is unknown, defaulting to 1000 [ 271.802535][T14066] __nla_validate_parse: 3 callbacks suppressed [ 271.802549][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 271.824275][T14066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2027'. [ 272.075412][T14074] syzkaller0: entered promiscuous mode [ 272.081256][T14074] syzkaller0: entered allmulticast mode [ 272.274593][T14081] syzkaller0: entered promiscuous mode [ 272.280115][T14081] syzkaller0: entered allmulticast mode [ 272.304300][T14087] tipc: Enabled bearer , priority 0 [ 272.394460][T14076] tipc: Resetting bearer [ 272.829998][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 272.854789][T14103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2035'. [ 274.295230][T14076] tipc: Disabling bearer [ 274.323403][T14111] erspan1: entered promiscuous mode [ 274.328655][T14111] erspan1: entered allmulticast mode [ 274.360009][T14122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2038'. [ 274.390324][ T5939] tipc: Node number set to 1943559774 [ 274.496701][T14131] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 274.877641][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2051'. [ 275.023805][T14168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2055'. [ 275.401655][T14185] lo speed is unknown, defaulting to 1000 [ 275.409041][T14185] lo speed is unknown, defaulting to 1000 [ 275.425162][T14184] lo speed is unknown, defaulting to 1000 [ 275.480748][T14192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2061'. [ 275.825219][T14184] lo speed is unknown, defaulting to 1000 [ 276.024450][T14202] lo speed is unknown, defaulting to 1000 [ 276.088643][T14215] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 276.095342][T14215] pim6reg0: linktype set to 804 [ 276.441854][T14202] lo speed is unknown, defaulting to 1000 [ 276.653171][T14231] netlink: 'syz.5.2069': attribute type 11 has an invalid length. [ 276.685811][T14231] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.2069'. [ 277.495564][T14267] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.919071][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2082'. [ 278.219025][T14296] lo speed is unknown, defaulting to 1000 [ 278.238637][T14303] xt_hashlimit: max too large, truncated to 1048576 [ 278.246150][T14303] xt_hashlimit: overflow, try lower: 13/0 [ 278.251406][T14307] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 278.291221][T14307] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 278.301535][T14296] lo speed is unknown, defaulting to 1000 [ 278.352362][T14313] sctp: [Deprecated]: syz.1.2089 (pid 14313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.352362][T14313] Use struct sctp_sack_info instead [ 278.829536][T14334] netlink: 'syz.0.2094': attribute type 1 has an invalid length. [ 278.837778][T14334] netlink: 'syz.0.2094': attribute type 1 has an invalid length. [ 278.927495][T14341] syzkaller0: entered promiscuous mode [ 278.954512][T14341] syzkaller0: entered allmulticast mode [ 279.036667][T14331] tipc: Enabled bearer , priority 0 [ 279.072170][T14330] tipc: Resetting bearer [ 279.093648][T14347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2100'. [ 279.130451][T14330] tipc: Disabling bearer [ 279.175129][T14357] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2099'. [ 279.186959][T14347] nbd: socks must be embedded in a SOCK_ITEM attr [ 279.439233][ T5835] udevd[5835]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 279.453499][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2104'. [ 279.591218][ T796] IPVS: starting estimator thread 0... [ 279.689142][T14369] syzkaller1: entered promiscuous mode [ 279.695051][T14369] syzkaller1: entered allmulticast mode [ 279.706847][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2110'. [ 279.720648][T14379] IPVS: using max 31 ests per chain, 74400 per kthread [ 279.872098][T14389] lo speed is unknown, defaulting to 1000 [ 279.879624][T14389] lo speed is unknown, defaulting to 1000 [ 279.891771][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2111'. [ 280.001738][T14398] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2113'. [ 280.571697][T14429] openvswitch: netlink: IP tunnel dst address not specified [ 280.745194][T14433] netlink: 'syz.5.2119': attribute type 10 has an invalid length. [ 280.796758][T14436] netlink: 'syz.5.2119': attribute type 10 has an invalid length. [ 280.808323][T14433] team0: Failed to send options change via netlink (err -105) [ 280.825016][T14438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2121'. [ 280.866031][T14433] team0: Port device dummy0 added [ 280.878496][T14436] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 280.906291][T14436] team0: Failed to send options change via netlink (err -105) [ 280.920573][T14436] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 280.932781][T14436] team0: Port device dummy0 removed [ 280.941891][T14436] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 280.983342][T14444] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2121'. [ 281.124338][T14450] netlink: 'syz.5.2125': attribute type 5 has an invalid length. [ 281.403719][T14453] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 281.894851][T14481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2133'. [ 282.353010][T14460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.732992][T14504] netlink: 'syz.3.2139': attribute type 32 has an invalid length. [ 282.820293][T14504] bond9: option coupled_control: invalid value (8) [ 282.870868][T14504] bond9 (unregistering): Released all slaves [ 283.205904][T14524] __nla_validate_parse: 2 callbacks suppressed [ 283.205924][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2145'. [ 283.328479][T14532] lo speed is unknown, defaulting to 1000 [ 283.358988][T14532] lo speed is unknown, defaulting to 1000 [ 283.415361][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2148'. [ 283.544086][T14541] netlink: 708 bytes leftover after parsing attributes in process `syz.5.2150'. [ 283.571404][T14541] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 283.662182][T14546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.283897][T14583] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2161'. [ 284.501084][T14592] caif0: entered allmulticast mode [ 284.573453][T14595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2165'. [ 284.721299][T14604] tipc: Started in network mode [ 284.730692][T14604] tipc: Node identity 7edc22fc5f76, cluster identity 4711 [ 284.740120][T14604] tipc: Enabled bearer , priority 0 [ 284.757244][T14604] syzkaller0: entered promiscuous mode [ 284.765311][T14604] syzkaller0: entered allmulticast mode [ 284.981035][T14619] netlink: 'syz.0.2172': attribute type 1 has an invalid length. [ 285.002264][T14619] netlink: 'syz.0.2172': attribute type 1 has an invalid length. [ 285.014261][T14602] tipc: Resetting bearer [ 285.053476][T14602] tipc: Disabling bearer [ 285.091719][T14622] netlink: 'syz.5.2173': attribute type 12 has an invalid length. [ 285.100264][T14622] netlink: 'syz.5.2173': attribute type 29 has an invalid length. [ 285.108602][T14622] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2173'. [ 285.197558][T14624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2174'. [ 285.206810][T14624] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2174'. [ 285.263339][T14626] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2175'. [ 285.304979][T14627] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 285.426610][T14643] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2178'. [ 285.914032][T14663] syzkaller0: entered promiscuous mode [ 285.943355][T14663] syzkaller0: entered allmulticast mode [ 287.714691][ T1077] block nbd0: Possible stuck request ffff888025058000: control (read@0,1024B). Runtime 120 seconds [ 287.725924][ T1077] block nbd0: Possible stuck request ffff888025058200: control (read@1024,1024B). Runtime 120 seconds [ 287.737480][ T1077] block nbd0: Possible stuck request ffff888025058400: control (read@2048,1024B). Runtime 120 seconds [ 287.748973][ T1077] block nbd0: Possible stuck request ffff888025058600: control (read@3072,1024B). Runtime 120 seconds [ 288.335674][T14727] lo speed is unknown, defaulting to 1000 [ 288.344492][T14727] lo speed is unknown, defaulting to 1000 [ 288.789576][T14761] __nla_validate_parse: 4 callbacks suppressed [ 288.789595][T14761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2204'. [ 288.853099][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2204'. [ 289.210955][T14779] syzkaller0: entered promiscuous mode [ 289.225726][T14779] syzkaller0: entered allmulticast mode [ 291.099125][T14796] lo speed is unknown, defaulting to 1000 [ 291.120146][T14796] lo speed is unknown, defaulting to 1000 [ 291.129032][T14811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2215'. [ 291.142622][T14805] lo speed is unknown, defaulting to 1000 [ 291.260538][T14815] netlink: 'syz.0.2217': attribute type 1 has an invalid length. [ 291.340005][T14815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 291.379601][T14824] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2220'. [ 291.401798][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2219'. [ 291.416764][T14815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2217'. [ 291.448937][T14819] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.459442][T14819] bond5: (slave bond6): Enslaving as an active interface with a down link [ 291.469030][T14815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 291.507490][T14805] lo speed is unknown, defaulting to 1000 [ 291.702894][T14837] tipc: Enabled bearer , priority 0 [ 291.703407][T14834] netlink: 'syz.0.2221': attribute type 1 has an invalid length. [ 291.718233][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 291.868621][T14845] netlink: 'syz.5.2224': attribute type 1 has an invalid length. [ 291.910945][T14845] netlink: 'syz.5.2224': attribute type 6 has an invalid length. [ 291.940957][T14845] netlink: 'syz.5.2224': attribute type 3 has an invalid length. [ 292.701278][ T5955] tipc: Node number set to 795455671 [ 292.760940][T14893] netlink: 'syz.2.2233': attribute type 1 has an invalid length. [ 293.141544][T14908] lo speed is unknown, defaulting to 1000 [ 293.163862][T14908] lo speed is unknown, defaulting to 1000 [ 293.225565][T14912] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2238'. [ 293.444648][T14924] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2240'. [ 293.483131][T14924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2240'. [ 293.515303][T14924] xt_hashlimit: size too large, truncated to 1048576 [ 293.626313][T14935] lo speed is unknown, defaulting to 1000 [ 293.849156][T14946] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2245'. [ 293.902746][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2245'. [ 293.971613][T14951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2245'. [ 294.008337][T14935] lo speed is unknown, defaulting to 1000 [ 294.034254][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2245'. [ 294.044972][T14954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.104096][T14951] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 294.166119][T14946] 8021q: adding VLAN 0 to HW filter on device bond7 [ 294.354670][T14963] nbd: nbd0 already in use [ 294.359377][T14963] block nbd0: NBD_DISCONNECT [ 294.372084][T14963] block nbd0: Send disconnect failed -32 [ 294.377763][T14963] block nbd0: shutting down sockets [ 294.457679][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.467453][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 294.475342][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.484869][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 294.492708][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.502207][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 294.509986][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.519510][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 294.527405][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.575784][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 294.595757][ T5838] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.619413][ T5838] Buffer I/O error on dev nbd0, logical block 1, async page read [ 294.640842][ T5838] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.656387][ T5838] Buffer I/O error on dev nbd0, logical block 2, async page read [ 294.676491][ T5838] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.697299][ T5838] Buffer I/O error on dev nbd0, logical block 3, async page read [ 294.706472][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.779313][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 294.797495][ T5838] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.827981][ T5838] Buffer I/O error on dev nbd0, logical block 1, async page read [ 294.858253][ T5838] ldm_validate_partition_table(): Disk read failed. [ 294.921728][ T5838] Dev nbd0: unable to read RDB block 0 [ 294.927836][ T5838] nbd0: unable to read partition table [ 295.028523][ T5838] ldm_validate_partition_table(): Disk read failed. [ 295.060268][ T5838] Dev nbd0: unable to read RDB block 0 [ 295.089689][ T5838] nbd0: unable to read partition table [ 295.358417][T15004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2256'. [ 295.733463][T15016] lo speed is unknown, defaulting to 1000 [ 295.750996][T15016] lo speed is unknown, defaulting to 1000 [ 295.842323][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 295.854562][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 295.864433][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 295.886805][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 295.902789][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 295.987032][T15018] lo speed is unknown, defaulting to 1000 [ 296.019569][T15022] lo speed is unknown, defaulting to 1000 [ 296.127426][T15018] lo speed is unknown, defaulting to 1000 [ 296.552885][T15022] lo speed is unknown, defaulting to 1000 [ 296.820181][T15055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2268'. [ 296.834905][T15055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2268'. [ 296.941258][T15061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2269'. [ 297.004212][T15018] chnl_net:caif_netlink_parms(): no params data found [ 297.374137][T15018] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.381900][T15018] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.389266][T15018] bridge_slave_0: entered allmulticast mode [ 297.397734][T15018] bridge_slave_0: entered promiscuous mode [ 297.409677][T15018] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.416876][T15018] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.424142][T15018] bridge_slave_1: entered allmulticast mode [ 297.431372][T15018] bridge_slave_1: entered promiscuous mode [ 297.461966][T15018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.493002][T15018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.529185][T15018] team0: Port device team_slave_0 added [ 297.537928][T15018] team0: Port device team_slave_1 added [ 297.632311][T15018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.639296][T15018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.665805][T15018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.682738][T15018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.689711][T15018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.716268][T15018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.764316][T15018] hsr_slave_0: entered promiscuous mode [ 297.770608][T15018] hsr_slave_1: entered promiscuous mode [ 297.777932][T15018] debugfs: 'hsr0' already exists in 'hsr' [ 297.783865][T15018] Cannot create hsr debugfs directory [ 297.926859][T15018] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 297.938355][T15018] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 297.947895][T15018] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 297.955342][ T5840] Bluetooth: hci6: command tx timeout [ 297.969627][T15018] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 298.029792][T15018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.049242][T15018] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.063124][ T9675] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.070206][ T9675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.084424][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.092176][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.234723][T15018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.405266][T15018] veth0_vlan: entered promiscuous mode [ 298.416313][T15018] veth1_vlan: entered promiscuous mode [ 298.442146][T15018] veth0_macvtap: entered promiscuous mode [ 298.453099][T15018] veth1_macvtap: entered promiscuous mode [ 298.469470][T15018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.482988][T15018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.497159][ T67] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.506526][ T67] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.516566][ T67] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.526320][ T67] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.587774][ T9673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.602823][ T9673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.630640][ T9673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.639125][ T9673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.042576][ T5840] Bluetooth: hci6: command tx timeout [ 302.111832][ T5840] Bluetooth: hci6: command tx timeout [ 304.201669][ T5840] Bluetooth: hci6: command tx timeout [ 317.155106][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.594550][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.951681][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 411.391694][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 421.631311][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 438.111585][ T31] INFO: task syz.1.2117:14419 blocked for more than 143 seconds. [ 438.119379][ T31] Not tainted syzkaller #0 [ 438.124458][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.133831][ T31] task:syz.1.2117 state:D stack:27016 pid:14419 tgid:14416 ppid:5820 task_flags:0x400140 flags:0x00080002 [ 438.145871][ T31] Call Trace: [ 438.149310][ T31] [ 438.152419][ T31] __schedule+0x14ea/0x5050 [ 438.156946][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 438.162375][ T31] ? schedule+0x90/0x360 [ 438.171297][ T31] schedule+0x164/0x360 [ 438.175499][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.180962][ T31] __mutex_lock+0x7fe/0x1300 [ 438.185854][ T31] ? __mutex_lock+0x5ac/0x1300 [ 438.190650][ T31] ? nfsd_nl_listener_set_doit+0x141/0x16c0 [ 438.221245][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.226341][ T31] ? __asan_memset+0x22/0x50 [ 438.230947][ T31] ? do_syscall_64+0xe2/0xf80 [ 438.305060][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.341188][ T31] nfsd_nl_listener_set_doit+0x141/0x16c0 [ 438.347058][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 438.371252][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 438.377471][ T31] ? rcu_is_watching+0x15/0xb0 [ 438.411216][ T31] ? __nla_parse+0x40/0x60 [ 438.416135][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 438.451226][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 438.456846][ T31] ? __asan_memcpy+0x40/0x70 [ 438.481204][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 438.487354][ T31] ? bpf_lsm_capable+0x9/0x20 [ 438.521665][ T31] ? security_capable+0x7e/0x2c0 [ 438.526670][ T31] genl_rcv_msg+0x61c/0x7a0 [ 438.551625][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.556703][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 438.591293][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 438.596738][ T31] netlink_rcv_skb+0x232/0x4b0 [ 438.621152][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.626325][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.651150][ T31] ? genl_rcv+0x19/0x40 [ 438.655387][ T31] ? down_read+0x272/0x2e0 [ 438.659814][ T31] ? genl_rcv+0xd/0x40 [ 438.691721][ T31] genl_rcv+0x28/0x40 [ 438.695760][ T31] netlink_unicast+0x80f/0x9b0 [ 438.700557][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 438.742592][ T31] ? netlink_sendmsg+0x650/0xb40 [ 438.751715][ T31] ? skb_put+0x11b/0x210 [ 438.756021][ T31] netlink_sendmsg+0x813/0xb40 [ 438.760810][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.801670][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 438.806666][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.822694][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.828027][ T31] ____sys_sendmsg+0xa68/0xad0 [ 438.839385][ T31] ? __might_fault+0xaf/0x130 [ 438.844945][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.850470][ T31] ? import_iovec+0x73/0xa0 [ 438.856874][ T31] ___sys_sendmsg+0x2a5/0x360 [ 438.862242][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 438.867214][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.872547][ T31] ? futex_wait+0x29a/0x380 [ 438.877087][ T31] ? __fget_files+0x2a/0x420 [ 438.881930][ T31] ? __fget_files+0x3a0/0x420 [ 438.886642][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 438.892034][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.897514][ T31] ? rcu_is_watching+0x15/0xb0 [ 438.902820][ T31] do_syscall_64+0xe2/0xf80 [ 438.907322][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.914117][ T31] ? clear_bhb_loop+0x60/0xb0 [ 438.918810][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.925180][ T31] RIP: 0033:0x7f3a4f79aeb9 [ 438.929585][ T31] RSP: 002b:00007f3a50729028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.938640][ T31] RAX: ffffffffffffffda RBX: 00007f3a4fa15fa0 RCX: 00007f3a4f79aeb9 [ 438.947190][ T31] RDX: 0000000000048000 RSI: 0000200000000000 RDI: 0000000000000004 [ 438.955557][ T31] RBP: 00007f3a4f808c1f R08: 0000000000000000 R09: 0000000000000000 [ 438.964130][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.972538][ T31] R13: 00007f3a4fa16038 R14: 00007f3a4fa15fa0 R15: 00007ffc2f4600f8 [ 438.980613][ T31] [ 438.995051][ T31] [ 438.995051][ T31] Showing all locks held in the system: [ 439.022756][ T31] 1 lock held by ksoftirqd/0/15: [ 439.027814][ T31] 3 locks held by kworker/1:0/24: [ 439.052550][ T31] 1 lock held by khungtaskd/31: [ 439.057437][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 439.067844][ T31] 2 locks held by getty/5579: [ 439.075034][ T31] #0: ffff8880309640a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 439.085187][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 439.095868][ T31] 2 locks held by syz-executor/5819: [ 439.101589][ T31] #0: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 439.110595][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 439.123262][ T31] 4 locks held by syz-executor/5821: [ 439.128560][ T31] #0: ffff888064674ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 439.139031][ T31] #1: ffff8880646740c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 439.149312][ T31] #2: ffffffff8fb38628 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 439.160737][ T31] #3: ffff8880270082f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 439.171936][ T31] 3 locks held by syz-executor/5833: [ 439.177242][ T31] #0: ffff888064660ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 439.189868][ T31] #1: ffff8880646600c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 439.200000][ T31] #2: ffffffff8fb38628 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 439.210413][ T31] 2 locks held by syz.4.923/9645: [ 439.215755][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 439.224065][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 439.234806][ T31] 5 locks held by kworker/u8:34/9673: [ 439.240194][ T31] 2 locks held by kworker/1:8/10815: [ 439.245625][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 439.257262][ T31] #1: ffffc900050b7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 439.268246][ T31] 2 locks held by syz.1.2117/14419: [ 439.273712][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 439.282423][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 439.293414][ T31] 3 locks held by syz-executor/15018: [ 439.298801][ T31] #0: ffff888058cf0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 439.308833][ T31] #1: ffff888058cf00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 439.318760][ T31] #2: ffffffff8fb38628 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 439.330895][ T31] [ 439.352891][ T31] ============================================= [ 439.352891][ T31] [ 439.366279][ T31] NMI backtrace for cpu 1 [ 439.366301][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 439.366317][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 439.366325][ T31] Call Trace: [ 439.366331][ T31] [ 439.366338][ T31] dump_stack_lvl+0xe8/0x150 [ 439.366361][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 439.366378][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 439.366400][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 439.366417][ T31] sys_info+0x135/0x170 [ 439.366429][ T31] watchdog+0xf90/0xfe0 [ 439.366451][ T31] ? watchdog+0x209/0xfe0 [ 439.366471][ T31] kthread+0x726/0x8b0 [ 439.366490][ T31] ? __pfx_watchdog+0x10/0x10 [ 439.366505][ T31] ? __pfx_kthread+0x10/0x10 [ 439.366524][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.366541][ T31] ? __pfx_kthread+0x10/0x10 [ 439.366558][ T31] ret_from_fork+0x51b/0xa40 [ 439.366576][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 439.366596][ T31] ? __switch_to+0xc82/0x1410 [ 439.366617][ T31] ? __pfx_kthread+0x10/0x10 [ 439.366635][ T31] ret_from_fork_asm+0x1a/0x30 [ 439.366667][ T31] [ 439.366674][ T31] Sending NMI from CPU 1 to CPUs 0: [ 439.489478][ C0] NMI backtrace for cpu 0 [ 439.489496][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 439.489513][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 439.489523][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 439.489546][ C0] Code: 28 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 11 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 439.489559][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000242 [ 439.489572][ C0] RAX: 0000000000233b6b RBX: ffffffff8199370d RCX: 0000000080000001 [ 439.489583][ C0] RDX: 0000000000000001 RSI: ffffffff8dcd0c10 RDI: ffffffff8c073a00 [ 439.489593][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 439.489604][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef4970 [ 439.489615][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 439.489624][ C0] FS: 0000000000000000(0000) GS:ffff8881256ea000(0000) knlGS:0000000000000000 [ 439.489636][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.489646][ C0] CR2: 00007fb723598949 CR3: 000000006446c000 CR4: 00000000003526f0 [ 439.489659][ C0] Call Trace: [ 439.489667][ C0] [ 439.489672][ C0] default_idle+0x9/0x20 [ 439.489686][ C0] default_idle_call+0x72/0xb0 [ 439.489702][ C0] do_idle+0x1bd/0x500 [ 439.489716][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 439.489735][ C0] ? __pfx_do_idle+0x10/0x10 [ 439.489752][ C0] cpu_startup_entry+0x43/0x60 [ 439.489765][ C0] rest_init+0x2de/0x300 [ 439.489780][ C0] start_kernel+0x380/0x3d0 [ 439.489800][ C0] x86_64_start_reservations+0x24/0x30 [ 439.489816][ C0] x86_64_start_kernel+0x143/0x1c0 [ 439.489831][ C0] common_startup_64+0x13e/0x147 [ 439.489856][ C0] [ 439.675917][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 439.682775][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 439.691874][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 439.701923][ T31] Call Trace: [ 439.705275][ T31] [ 439.708206][ T31] vpanic+0x1e0/0x670 [ 439.712200][ T31] panic+0xc5/0xd0 [ 439.715929][ T31] ? __pfx_panic+0x10/0x10 [ 439.720365][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 439.725774][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 439.731920][ T31] watchdog+0xfda/0xfe0 [ 439.736071][ T31] ? watchdog+0x209/0xfe0 [ 439.740392][ T31] kthread+0x726/0x8b0 [ 439.744460][ T31] ? __pfx_watchdog+0x10/0x10 [ 439.749137][ T31] ? __pfx_kthread+0x10/0x10 [ 439.754062][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.759249][ T31] ? __pfx_kthread+0x10/0x10 [ 439.763835][ T31] ret_from_fork+0x51b/0xa40 [ 439.768420][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 439.773540][ T31] ? __switch_to+0xc82/0x1410 [ 439.778221][ T31] ? __pfx_kthread+0x10/0x10 [ 439.782882][ T31] ret_from_fork_asm+0x1a/0x30 [ 439.787734][ T31] [ 439.791101][ T31] Kernel Offset: disabled [ 439.795417][ T31] Rebooting in 86400 seconds..