last executing test programs: 51.136233459s ago: executing program 0 (id=2605): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000580)=[@window={0x3, 0x8, 0x2}, @sack_perm, @window={0x3, 0x207}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm, @mss={0x2, 0x988d}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) 49.193998396s ago: executing program 0 (id=2612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffa3c, 0x2, 0x4, 0x80000001}}]}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x54}}]}, 0x88}}, 0x20040054) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000085000000130000009500000000000000f9cebdd470a9fa5e5a355de57cd733b4f8fe"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r9, 0x3c}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)="55ee4addb0838779ff7a51df", 0xc}, {&(0x7f00000005c0)="1cb7", 0x2}], 0x2}, 0x8810) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r11, 0x6, 0x15, &(0x7f00000001c0), 0x4) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r13, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r12, 0x0) 46.645039823s ago: executing program 4 (id=2627): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x180}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}, 0x1, 0x2, 0x0, 0x8000}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@float={0x10, 0x0, 0x0, 0x10, 0x10}, @union={0x1, 0x4, 0x0, 0x5, 0x1, 0x8, [{0x6, 0x2, 0x84e}, {0xb, 0x2, 0xe85b}, {0x0, 0x2, 0x5}, {0x6, 0x2, 0x1}]}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0x9}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x61]}}, &(0x7f0000000100)=""/53, 0x7f, 0x35, 0x1, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x100000, 0x10001, 0x1180, r3, 0x3f6c16cd, '\x00', 0x0, r4, 0x0, 0x1, 0x5, 0x9}, 0x50) 46.531000138s ago: executing program 4 (id=2628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000001000000000022987fdba5000000000000000000004e2300000a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00"/112], 0xb8}}, 0x0) syz_emit_ethernet(0x81, &(0x7f00000004c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e004b3afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4451ac00", @ANYRES16=r2, @ANYBLOB="02002bbd7000fbdbdf25210000000a0001007770616e330000000c00050000000000000000000c0005000203aaaaaaaaaaaa09001f007068793000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) epoll_create(0xd) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x604040, 0x0) mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x8, 0x30, r4, 0x3000) r5 = socket(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="b1840e53f9a2e1473916f31a04857ae5bf664133f1dacfd8c4467408fd0ee841b472b08dca111a5300ced50b31", @ANYRES16=r7, @ANYBLOB="070000000000000000000200000004000180"], 0x18}}, 0x40080) r9 = socket$packet(0x11, 0x2, 0x300) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44881}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000440)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f00000000c0)=ANY=[], 0x6a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @multicast2}, 0x2, 0x2, 0x2, 0x1}}, 0x2e) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x1a, 0x0, "ae953efc498d376bb5f6141638770a4748932888a92a49db61ae5db85b8fbaef354bda9a09170107e755bbbc4f2ed4f79b5dea509851944ff31fc57a8a039200c9e4a13f772779938dd1760f79820d41"}, 0xd8) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="80020000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250000000008000100", @ANYRES32=r12, @ANYBLOB="2801028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000e00000008000100", @ANYRES32=0x0, @ANYBLOB="3401028040000100240001007072696f72697479000000050000000000000000000000000000000000000000050700040e00000008000400ffffffff08000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=r12, @ANYBLOB="3c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000"], 0x280}, 0x1, 0x0, 0x0, 0x40}, 0x40041) 45.04734811s ago: executing program 4 (id=2636): socket$inet(0x2, 0x3, 0x2) (async) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000e80)={&(0x7f0000000240)=0x300000000000000, 0x8, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000e40)}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r7, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040842) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@sack={0x1d, 0x2, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) sendto$inet(r0, &(0x7f0000000680)="4801000000a70bdbbe", 0x9, 0x4800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) (async) sendto$inet(r0, &(0x7f0000000680)="4801000000a70bdbbe", 0x9, 0x4800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 45.045989749s ago: executing program 0 (id=2637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf253400000008000300", @ANYRES32=r7, @ANYBLOB="140055"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x8004) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800ec836db1d265ae445b0e2ae38000", @ANYRES16=r1, @ANYBLOB="010000000000040000003900000008000300", @ANYRES32=r2, @ANYBLOB="0c005a800800038004000100"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) 45.045132749s ago: executing program 1 (id=2638): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0xfffffffb}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0xfffffffb}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)=@ethtool_channels={0x50}}) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe00006600"], 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe00006600"], 0xfe33) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 44.379684786s ago: executing program 0 (id=2639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 44.352312226s ago: executing program 1 (id=2640): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 44.058018019s ago: executing program 1 (id=2643): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0xb0, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x9c, 0x4, 0x0, 0x1, [@nested={0x95, 0x68, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @str='GPL\x00'}, @generic="55ed2c84fe33af6a667218e36e9cfb765f085c523587bd905079af759fa9f0859cb8fad5ac1771c3b2883b24c0e05959f7494d38d5ec48a6e03e446eac", @nested={0x4c, 0x5c, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @pid}, @typed={0x4, 0x137}, @typed={0x39, 0x127, 0x0, 0x0, @binary="cd07c93a0d81fa0ea800969f0ad45a9603a2ddd947c0105cec987527e4720983a886e778ec28edd93cbcf6726c6fdaeab4edcec701"}]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x30, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x39, 0x0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r2}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}]}]}, 0x30}], 0x1}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x808000, 0x0) unshare(0x6020400) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000300)=0x1) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000000)={0x29, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x128, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffff04}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_MARK={0x8}, @CTA_LABELS_MASK={0x14, 0x17, [0x6, 0x34db, 0xbe91, 0x5]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfeac}]}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x805}, 0x20008000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x64, 0x0, 0x80, 0x4, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0x3c, 0xc3, 0x1, 0x0, [{@loopback, 0xd5}, {@multicast1, 0x100}, {@multicast2, 0x4}, {@loopback, 0x8}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x43}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x2}]}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x7, 0xe, "47b195d076a3de1bc01330f6"}, {0x5, 0x3, '['}, {0x2, 0xe, "f8bb27f5c038e95263d014cb"}]}, @lsrr={0x83, 0x7, 0xdf, [@broadcast]}, @cipso={0x86, 0x31, 0x7ffffffffffffffe, [{0x0, 0xd, "ab79143d1ca1330f483946"}, {0x0, 0x10, "0016dc0b17057f8144285d76ed7c"}, {0x1, 0xe, "133ebc7dcab1923bfedc807b"}]}]}}}}}) 44.038311245s ago: executing program 0 (id=2644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031612d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r9, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x80) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x480c0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x80, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x1f00}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x1ff}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0xfffffff8}]}}}, @IFLA_MAP={0x24, 0xe, {0x6, 0x1, 0x5, 0x19a, 0x74, 0x81}}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 43.756728309s ago: executing program 2 (id=2645): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffee0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002e00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0xb8, 0xb, 0x148, 0x0, 0x148, 0x1a8, 0x230, 0x242, 0x1a8, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0x0, 0x0, 'team_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73, 0x0, 0x58}, 0x0, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xf6, 0xb5, 0xf3e1, 'syz0\x00', {0x7fffffff}}}}, {{@ip={@broadcast, @broadcast, 0xffffff00, 0xff000000, 'netpci0\x00', 'sit0\x00', {0xff}, {}, 0x73, 0x1, 0x41}, 0xec010000, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x401, 0x0, 0x1}}, @common=@ah={{0x30}, {[0x1, 0x7d5]}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x6, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in6=@loopback, 0x4e22, 0x0, 0x4e23, 0xed1, 0xa, 0x20, 0x20, 0x3b}, {0x7, 0x10, 0x9, 0x0, 0x6, 0xe6, 0xffffffffffffffff, 0x400}, {0x4, 0x7, 0xfffffffffffffffe, 0x10000}, 0xfffffff9, 0x0, 0x2, 0x1, 0x2, 0x1}, {{@in=@multicast2, 0x4d5, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x2, 0x4, 0x7, 0x5, 0x1}}, 0xe8) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x718, 0x0, 0x0, 0x3f0, 0x210, 0x118, 0x648, 0x648, 0x648, 0x648, 0x648, 0x6, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x26}, @ipv6=@loopback, 0x33, 0x1b, 0x2}}}, {{@ipv6={@remote, @private1, [0xff, 0x0, 0xff], [0xff, 0x0, 0xff000000, 0xffffffff], 'veth1\x00', 'wg1\x00', {}, {0xff}, 0x16, 0x7, 0x5, 0x60}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xe9}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0xf}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@multicast1, 0xa, 0x3, 0x29e6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1, 0x4, 0x2f, 0x1}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2c}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff0000ff, 0xffffff80, 0xff000000, 0xffffff00], [0xffffff00, 0xff0000ff, 0xffffff00, 0xff000000], 'netpci0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0xe9, 0xd2, 0x4, 0x23}, 0x0, 0x210, 0x258, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x9, 0x0, 0x3}}, @common=@rt={{0x138}, {0x9c, [0xfc56, 0xa], 0xb, 0x8, 0x5, [@loopback, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @empty, @local, @ipv4={'\x00', '\xff\xff', @empty}, @private0, @dev={0xfe, 0x80, '\x00', 0x13}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'], 0x7}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@local, 0x10, 0x23, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x3d, &(0x7f0000000640)=""/140, &(0x7f0000000700)=0x8c) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000800) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffff4, @vifc_lcl_ifindex, @loopback}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000040)={0x5, {{0xa, 0x4e21, 0x4042, @mcast1, 0x6}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={0x0}, 0x1, 0x0, 0x0, 0x4008005}, 0x44000) 43.689144355s ago: executing program 3 (id=2646): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) connect$bt_l2cap(r1, &(0x7f0000000440)={0x1f, 0x2, @none, 0xfffe, 0x2}, 0xe) (async, rerun: 32) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0xf4, {{0xa, 0x4e22, 0xc, @private1, 0x2f}}, {{0xa, 0x4e21, 0x80000000, @mcast1, 0x2}}}, 0x108) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000000)="3f000000010000", 0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0}, 0x18) (rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) (async) r7 = socket$kcm(0x10, 0x2, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) recvfrom$phonet(r0, &(0x7f0000000200)=""/156, 0x9c, 0x40002102, &(0x7f00000002c0)={0x23, 0x2, 0x9, 0x26}, 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x401}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r8, 0x4}, &(0x7f0000000300)=0x8) 43.368192383s ago: executing program 3 (id=2647): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @remote}]}}}]}, 0x3c}}, 0x20004804) 43.307434385s ago: executing program 2 (id=2648): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000600050003"], 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf25100000001400010002"], 0x28}}, 0x4000080) 43.232440121s ago: executing program 2 (id=2649): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10000000}) r3 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 42.920035684s ago: executing program 2 (id=2650): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18001dc500000000000000000000000062010f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000003c0)=0x2, 0x4) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x24000080}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x800, 0x70bd2b, 0x8, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000380)=0x6, 0x4) 42.541781823s ago: executing program 4 (id=2651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)='*', 0x1}], 0x1}}], 0x1, 0x48040) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x401c010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x8, @mcast1, 0xf56}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}]}}]}, 0x45c}}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0xb, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040811}, 0x0) 41.229064438s ago: executing program 1 (id=2652): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, &(0x7f0000000080)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xd) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="965437769b613b62431c89521d078cd4a7d8ba913a2fdbf95c9e3eb0a7df341e4ba28e2d9c0b6b51ac65094090ea5a0a9ddf383b79c27006657404271bdf74c4261c6f37f2d1794eeb70830fb67d247c996188053ff28e41548f0506b5bd9a760f48f9ed40c8c4543dc81f83d49fc2d5d8d19d07852137a2468be41a5f3f6fb7d7ce0ed2fde9fd0636c5ec19ba80aa7da9889b766cf76f8a0b130ed39d95018fa228e1ee4348c2149730569249946dd2dc782264352f0b05221ab2d4663123c08f14c9ff12a9f3c4c2ae808189a115107aed9b118300d088a7e499b49f1ae843a6c9ea23fc3780f61dfb2f615cac417aac9d526909", 0xf5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000380), &(0x7f0000000480)=0x27) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x1ff, 0xfffffe00, 0x10}, &(0x7f0000000440)=0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x4844) 41.099702718s ago: executing program 0 (id=2653): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000004c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000580)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xb3a0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x1, 0x0, 0x8, 0x6, 0x6}, @generic={0xe9, 0x3, 0x7, 0xb0, 0x5}], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f00000002c0)) sendto$inet(r5, &(0x7f0000000080)="02dfd3c16c5f49ca1bc62e5eb608f73af812cddc35397ea30e2e185bcda3eee498388d0eec882788df2f80844b813f1dc532f4e165f40cbf276488b93b859110d38dcd73c39b505bccf5cb9ca42ca14fb99ed392c74df0eb17dfdb248a695114ae1e2328c5b36c0b709ef3906225e09052b4ca1cb321e3c961f7b28cab90ab54fc2672864692abc2a5bbdc780e9f778a14a48827377760d22741eea7526329612bb1b68d93e2930f594a348465fb1e2f7eae8a02472f70d95df151ab6ccfdb", 0xbf, 0x0, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) accept4(r0, 0x0, 0x0, 0x80000) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='scalable', 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r10, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 41.097983899s ago: executing program 3 (id=2654): unshare(0x20400) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async, rerun: 32) r9 = socket(0x11, 0x2, 0x0) (rerun: 32) bind$packet(r9, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0xe}, 0x14) (async) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async, rerun: 64) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (rerun: 64) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x6a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r10) (async) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xf7fffffb, 0x0, {0x0, 0x0, 0x0, r11, {0xffe0, 0x8}, {0xd, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x24}, 0x94) 40.887829307s ago: executing program 1 (id=2655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0xa00, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc30e}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000440)={r4, r5/1000+60000}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r6, 0xf00, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x101, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xf, 0x34, @random="2395a5f1ad3d2fdf46fb38"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x61}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="84c8e33eb0ef"}, @NL80211_ATTR_PMKID={0x14, 0x55, "e8847cb3a6d569d8e08e118c3470778c"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5b}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="bd25c080b2f1"}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf25100000001400010002"], 0x28}}, 0x4000080) 40.489031246s ago: executing program 1 (id=2656): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0xcc3, 0x7fffffffffffffff, 0x6, 0x0, 0x7, 0x0, 0x2, 0x0, 0x1, 0x400, 0x10001, 0x8, 0x1, 0xfff, 0x7]}, &(0x7f00000002c0)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000300)={r1, 0x8, 0x30, 0x1, 0x6}, &(0x7f0000000340)=0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f0000002e80)={&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000002d00)=[{&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/104, 0x68}, {&(0x7f0000001c40)=""/36, 0x24}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/66, 0x42}], 0x6, &(0x7f0000002d80)=""/225, 0xe1}, 0x0) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000740)={0x1, {{0xa, 0x4e22, 0x2, @private1, 0x401}}, {{0xa, 0x4e23, 0x2, @loopback, 0x1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000600)={0x2, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x5, @mcast2, 0x5}}}, 0x108) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_eeprom={0xb, 0xff, 0xaa2}}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000025000100d96f000063718300f6ff0700fedbdf2505000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) 40.199627051s ago: executing program 3 (id=2657): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0x79, "71b4e2034df9c2d9bdd5aa41d69a8985db33c56a21fad48178ed7ea47c726a0bfcc9df695d757a518b0d5a302fd3ce86a236476c311844a43c91dd6aea2b84ef42c83f2135cc8eed644a61a04f1334558cdba43d59fd1caa096d732535775bdd4967ce631ed5423b577a91fc6d387a7571921e7778ba91c503"}, &(0x7f00000004c0)=0x81) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e20, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfc}}, 0x7, 0x2, 0x7, 0x7fffffff, 0x7}, &(0x7f00000005c0)=0x98) socketpair(0x2b, 0x0, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={r4, 0x2}, &(0x7f0000000140)=0x8) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000001c0)={0x1}, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x3b}, 0x94) 40.099751946s ago: executing program 3 (id=2658): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000040) 39.931893196s ago: executing program 3 (id=2659): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000f4ff00000000000000000000000000000019000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000001"], 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 39.375808424s ago: executing program 2 (id=2660): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003b00010027bd7000fd865738c1965ddbd7a531a2d9698b898ec29046901d4c95789da6578adf8b0780f99aed3c60807b20c90d997c8fd9070aebb9822e7936"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000440)=0x2, 0x4) sendmmsg$inet(r2, &(0x7f0000001800), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@remote, @local, 0x16, 0xe}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x16, 0x80000000, @l2={'eth', 0x3a, 'wlan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4884) 39.374876282s ago: executing program 4 (id=2661): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c00048008000100000000012000028028000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r2, 0x513, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x24000080) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c00048008000100000000012000028028000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r2, 0x513, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x24000080) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) (async) 39.186457779s ago: executing program 2 (id=2662): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000000000008000400080008"], 0x4c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x110) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000200)={0x1d, r8}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r9, @ANYRES64=r8, @ANYRES64=r7, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40005}, 0x4040010) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7, 0x8000, 0x5, 0xda, {{0x54, 0x4, 0x1, 0x5, 0x150, 0x64, 0x0, 0x20, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@lsrr={0x83, 0x2b, 0xb2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010100, @private=0xa010102]}, @timestamp_prespec={0x44, 0x3c, 0xa3, 0x3, 0x1, [{@multicast1, 0x7ff}, {@loopback, 0x7}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x8}, {@remote, 0xb}, {@empty, 0x2}]}, @noop, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x5, 0x12, "058a9417f69bc83a4a722ff49d083b00"}, {0x6, 0x3, "a1"}, {0x2, 0xa, "f2ba60f2047a68c4"}]}, @ssrr={0x89, 0x17, 0x2c, [@remote, @private=0xa010102, @multicast1, @multicast1, @empty]}, @generic={0x82, 0xb, "e29a3b243c4080eede"}, @timestamp_addr={0x44, 0xc, 0x8a, 0x1, 0x2, [{@remote, 0x9}]}, @timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x0, [{@private=0xa010102, 0x403}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x401}, {@local, 0x9a}]}, @ssrr={0x89, 0x1b, 0x22, [@broadcast, @multicast1, @remote, @rand_addr=0x64010102, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x47, 0x3, [{0x0, 0x8, "ea539540f50f"}, {0x0, 0x5, "2321a3"}, {0x0, 0x11, "cb9f9d0f572024d974679faf5fcaf3"}, {0x5, 0x10, "b537c7799c9feeaa9c29f0e6f984"}, {0x5, 0xc, "58797c0caf5e261eb8ef"}, {0x0, 0x7, "62740dc9f2"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x7, 0x6, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0x7, 0x7}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x258, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r11}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0x0, 0x4}, {0xbf, 0x8, 0x7, 0x2}, {0x6, 0xc2, 0x9, 0xeb45}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x404a025}, 0x240000c1) r16 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r16, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0xff], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_to_batadv\x00', 'tunl0\x00', {0xff}, {0xff}, 0x8, 0xa, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xfe1, 0x80, 0xfffffffe, 'snmp_trap\x00', {0x80}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0x0, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0xffffff00], '\x00', 'rose0\x00', {0xff}, {0xff}, 0x6, 0x40, 0x5, 0x47}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x4}, {0x9, 0x7}, {0x8, 0x5000000000000}, 0x800}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 39.107530836s ago: executing program 4 (id=2663): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x118, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x39, 0x6}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x180}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x10}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'veth0_to_bridge\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0xffffffff, 0x616, 0x8, 0x1, 0x5, 0x6, 0xa, 0x1}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000005c0)=0x2a, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000100)="8e00e9106c", 0x5}, 0x1, 0x0, 0x0, 0x20000000}, 0x14008830) 22.452259116s ago: executing program 32 (id=2653): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000004c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000580)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xb3a0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x1, 0x0, 0x8, 0x6, 0x6}, @generic={0xe9, 0x3, 0x7, 0xb0, 0x5}], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x9, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f00000002c0)) sendto$inet(r5, &(0x7f0000000080)="02dfd3c16c5f49ca1bc62e5eb608f73af812cddc35397ea30e2e185bcda3eee498388d0eec882788df2f80844b813f1dc532f4e165f40cbf276488b93b859110d38dcd73c39b505bccf5cb9ca42ca14fb99ed392c74df0eb17dfdb248a695114ae1e2328c5b36c0b709ef3906225e09052b4ca1cb321e3c961f7b28cab90ab54fc2672864692abc2a5bbdc780e9f778a14a48827377760d22741eea7526329612bb1b68d93e2930f594a348465fb1e2f7eae8a02472f70d95df151ab6ccfdb", 0xbf, 0x0, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) accept4(r0, 0x0, 0x0, 0x80000) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='scalable', 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r10, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.164523214s ago: executing program 33 (id=2656): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0xcc3, 0x7fffffffffffffff, 0x6, 0x0, 0x7, 0x0, 0x2, 0x0, 0x1, 0x400, 0x10001, 0x8, 0x1, 0xfff, 0x7]}, &(0x7f00000002c0)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000300)={r1, 0x8, 0x30, 0x1, 0x6}, &(0x7f0000000340)=0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f0000002e80)={&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000002d00)=[{&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/104, 0x68}, {&(0x7f0000001c40)=""/36, 0x24}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/66, 0x42}], 0x6, &(0x7f0000002d80)=""/225, 0xe1}, 0x0) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000740)={0x1, {{0xa, 0x4e22, 0x2, @private1, 0x401}}, {{0xa, 0x4e23, 0x2, @loopback, 0x1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000600)={0x2, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x5, @mcast2, 0x5}}}, 0x108) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_eeprom={0xb, 0xff, 0xaa2}}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000025000100d96f000063718300f6ff0700fedbdf2505000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) 619.925379ms ago: executing program 34 (id=2662): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000000000008000400080008"], 0x4c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x110) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000200)={0x1d, r8}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r9, @ANYRES64=r8, @ANYRES64=r7, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40005}, 0x4040010) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x7, 0x8000, 0x5, 0xda, {{0x54, 0x4, 0x1, 0x5, 0x150, 0x64, 0x0, 0x20, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@lsrr={0x83, 0x2b, 0xb2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010100, @private=0xa010102]}, @timestamp_prespec={0x44, 0x3c, 0xa3, 0x3, 0x1, [{@multicast1, 0x7ff}, {@loopback, 0x7}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x8}, {@remote, 0xb}, {@empty, 0x2}]}, @noop, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x5, 0x12, "058a9417f69bc83a4a722ff49d083b00"}, {0x6, 0x3, "a1"}, {0x2, 0xa, "f2ba60f2047a68c4"}]}, @ssrr={0x89, 0x17, 0x2c, [@remote, @private=0xa010102, @multicast1, @multicast1, @empty]}, @generic={0x82, 0xb, "e29a3b243c4080eede"}, @timestamp_addr={0x44, 0xc, 0x8a, 0x1, 0x2, [{@remote, 0x9}]}, @timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x0, [{@private=0xa010102, 0x403}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x401}, {@local, 0x9a}]}, @ssrr={0x89, 0x1b, 0x22, [@broadcast, @multicast1, @remote, @rand_addr=0x64010102, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x47, 0x3, [{0x0, 0x8, "ea539540f50f"}, {0x0, 0x5, "2321a3"}, {0x0, 0x11, "cb9f9d0f572024d974679faf5fcaf3"}, {0x5, 0x10, "b537c7799c9feeaa9c29f0e6f984"}, {0x5, 0xc, "58797c0caf5e261eb8ef"}, {0x0, 0x7, "62740dc9f2"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x7, 0x6, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0x7, 0x7}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x258, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r11}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0x0, 0x4}, {0xbf, 0x8, 0x7, 0x2}, {0x6, 0xc2, 0x9, 0xeb45}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x404a025}, 0x240000c1) r16 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r16, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0xff], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_to_batadv\x00', 'tunl0\x00', {0xff}, {0xff}, 0x8, 0xa, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xfe1, 0x80, 0xfffffffe, 'snmp_trap\x00', {0x80}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0x0, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0xffffff00], '\x00', 'rose0\x00', {0xff}, {0xff}, 0x6, 0x40, 0x5, 0x47}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x4}, {0x9, 0x7}, {0x8, 0x5000000000000}, 0x800}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 449.19719ms ago: executing program 35 (id=2659): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000f4ff00000000000000000000000000000019000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000001"], 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 0s ago: executing program 36 (id=2663): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x118, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x39, 0x6}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x180}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x10}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'veth0_to_bridge\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0xffffffff, 0x616, 0x8, 0x1, 0x5, 0x6, 0xa, 0x1}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000005c0)=0x2a, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000100)="8e00e9106c", 0x5}, 0x1, 0x0, 0x0, 0x20000000}, 0x14008830) kernel console output (not intermixed with test programs): port 3(vlan3) entered disabled state [ 145.646763][ T7603] vlan3: entered allmulticast mode [ 145.653436][ T7603] geneve0: entered allmulticast mode [ 145.661869][ T7603] vlan3: entered promiscuous mode [ 145.667105][ T7603] geneve0: entered promiscuous mode [ 145.842866][ T7612] Cannot find del_set index 2 as target [ 145.959661][ T7621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.972873][ T7622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.184084][ T7629] geneve2: entered promiscuous mode [ 146.507696][ T7652] netlink: 'syz.2.518': attribute type 10 has an invalid length. [ 146.518728][ T7652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.724290][ T7627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.954974][ T7663] netlink: 'syz.3.520': attribute type 12 has an invalid length. [ 146.983235][ T7665] xt_hashlimit: size too large, truncated to 1048576 [ 146.990594][ T7656] netlink: 'syz.2.519': attribute type 1 has an invalid length. [ 147.013755][ T7664] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 147.063851][ T7671] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 147.126130][ T7671] 0ªX¹¦Dö»: entered allmulticast mode [ 147.296477][ T7678] __nla_validate_parse: 7 callbacks suppressed [ 147.296500][ T7678] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.525'. [ 147.783667][ T7695] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 148.290685][ T7720] openvswitch: netlink: IPv4 tunnel dst address is zero [ 148.530037][ T7728] netlink: 144 bytes leftover after parsing attributes in process `syz.4.540'. [ 148.655959][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 148.725173][ T7722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.321020][ T7759] x_tables: duplicate underflow at hook 4 [ 149.345948][ T7760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.631226][ T7775] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 149.723300][ T7775] bond2: entered promiscuous mode [ 149.736153][ T7775] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.769403][ T7778] ipvlan2: entered allmulticast mode [ 149.775100][ T7778] bond2: entered allmulticast mode [ 149.836086][ T7783] netlink: 32 bytes leftover after parsing attributes in process `syz.2.554'. [ 149.855805][ T7775] bond2: (slave bridge2): making interface the new active one [ 149.881864][ T7775] bridge2: entered promiscuous mode [ 149.899160][ T7775] bridge2: entered allmulticast mode [ 149.916995][ T7775] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 150.210519][ T7791] tc_dump_action: action bad kind [ 150.242009][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 150.259864][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 150.296121][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 150.502628][ T7805] syzkaller0: entered promiscuous mode [ 150.526151][ T7805] syzkaller0: entered allmulticast mode [ 150.880627][ T7820] xt_l2tp: invalid flags combination: 8 [ 151.131691][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 151.147517][ T7076] IPVS: starting estimator thread 0... [ 151.169989][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 151.249798][ T7838] IPVS: using max 25 ests per chain, 60000 per kthread [ 151.397559][ T7846] bridge0: port 3(vlan3) entered blocking state [ 151.404067][ T7846] bridge0: port 3(vlan3) entered forwarding state [ 151.622173][ T7863] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.939779][ C1] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 151.952997][ T7837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.969009][ T7855] netlink: 244 bytes leftover after parsing attributes in process `syz.3.573'. [ 152.475982][ T7907] openvswitch: netlink: IP tunnel TTL not specified. [ 152.736940][ T7920] __nla_validate_parse: 1 callbacks suppressed [ 152.736960][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 152.801097][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.595'. [ 152.833795][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 152.845813][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 153.028683][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 153.049367][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.595'. [ 153.059811][ T3336] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.076351][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 153.086967][ T3336] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.098877][ T7934] netlink: 'syz.1.601': attribute type 1 has an invalid length. [ 153.112462][ T3336] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.142104][ T7932] syzkaller1: entered promiscuous mode [ 153.159206][ T7932] syzkaller1: entered allmulticast mode [ 153.261505][ T7943] netlink: 'syz.4.602': attribute type 1 has an invalid length. [ 153.287499][ T7934] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.444401][ T7942] bond2: (slave geneve2): making interface the new active one [ 153.498992][ T7942] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 153.544346][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 153.597254][ T7943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.737568][ T7948] bond2: (slave veth0_to_bond): making interface the new active one [ 153.771004][ T7948] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 153.806151][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.878928][ T7937] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.890457][ T7937] bond2: (slave bond3): Enslaving as an active interface with a down link [ 154.160230][ T7979] netlink: 76 bytes leftover after parsing attributes in process `syz.3.612'. [ 154.242339][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'. [ 154.296055][ T7979] block nbd0: Unsupported socket: should be TCP or UNIX. [ 154.561798][ T7999] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 155.224857][ T5288] veth1_vlan: left promiscuous mode [ 156.504506][ T8091] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.704191][ T8100] Bluetooth: MGMT ver 1.23 [ 156.709036][ T8100] Bluetooth: hci1: too big key_count value 32778 [ 157.015239][ T8115] netlink: 'syz.1.643': attribute type 7 has an invalid length. [ 158.495464][ T8050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.790110][ T8139] __nla_validate_parse: 3 callbacks suppressed [ 158.790132][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.647'. [ 158.828531][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'. [ 158.938295][ T8139] netlink: 68 bytes leftover after parsing attributes in process `syz.3.647'. [ 159.069138][ T8157] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 159.086283][ T8157] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 159.176604][ T8162] syz_tun: entered allmulticast mode [ 159.191807][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.653'. [ 159.204510][ T8160] syz_tun: left allmulticast mode [ 159.607501][ T8186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.683997][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 159.764176][ C0] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 159.874135][ T8188] 0ªX¹¦Dö»: left allmulticast mode [ 159.976470][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'. [ 160.017387][ T8188] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.025794][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.078155][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 160.299503][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.349416][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.584929][ T8188] geneve2: left promiscuous mode [ 160.618827][ T5288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.683059][ T3336] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.740915][ T3336] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.796852][ T3336] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.106654][ T8238] tipc: Enabled bearer , priority 0 [ 161.354523][ T8247] syzkaller0: entered promiscuous mode [ 161.375766][ T8247] syzkaller0: entered allmulticast mode [ 161.392627][ T8247] tipc: Resetting bearer [ 161.515976][ T8259] syzkaller0: entered promiscuous mode [ 161.530779][ T8259] syzkaller0: entered allmulticast mode [ 161.551766][ T8267] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 161.569216][ T8258] netlink: 168 bytes leftover after parsing attributes in process `syz.0.671'. [ 161.761957][ T8236] tipc: Resetting bearer [ 162.184532][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 163.643561][ T8236] tipc: Disabling bearer [ 163.787265][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.676'. [ 165.485738][ T8225] tipc: Node number set to 2035774871 [ 165.588114][ T450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.648335][ T450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.674442][ T450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.994003][ T8320] syzkaller0: entered promiscuous mode [ 166.024535][ T8320] syzkaller0: entered allmulticast mode [ 166.086662][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 166.446488][ T8337] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.453839][ T8337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.481767][ T8337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.512485][ T8337] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.600368][ T8337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.761283][ T8337] veth0_to_team: entered promiscuous mode [ 166.829991][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.838656][ T3294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.943412][ T8359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.692'. [ 167.265394][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 169.066878][ T8327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.088393][ T8356] netlink: 400 bytes leftover after parsing attributes in process `syz.3.691'. [ 169.390117][ T8375] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.578339][ T8373] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.624884][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'. [ 169.669910][ T8397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.700'. [ 169.705381][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'. [ 169.714361][ T8399] netlink: 'syz.0.701': attribute type 1 has an invalid length. [ 169.921761][ T8414] sctp: [Deprecated]: syz.4.705 (pid 8414) Use of int in max_burst socket option. [ 169.921761][ T8414] Use struct sctp_assoc_value instead [ 169.992437][ T8399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.075532][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 170.119319][ T8404] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 170.126593][ T8422] netlink: 60 bytes leftover after parsing attributes in process `syz.4.706'. [ 170.207556][ T8410] bond3: entered promiscuous mode [ 170.218036][ T8410] bond3: entered allmulticast mode [ 170.243740][ T8424] netlink: 60 bytes leftover after parsing attributes in process `syz.4.706'. [ 170.514423][ T8439] netlink: 'syz.4.711': attribute type 13 has an invalid length. [ 170.559041][ T8439] netlink: 'syz.4.711': attribute type 13 has an invalid length. [ 170.567998][ T3294] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.935958][ T3336] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.973903][ T8437] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 171.017097][ T8437] bond2: (slave lo): Enslaving as an active interface with an up link [ 171.050160][ T8437] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 171.103238][ T8460] __nla_validate_parse: 4 callbacks suppressed [ 171.103258][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.715'. [ 171.120649][ T3336] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.174140][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'. [ 171.311362][ T8471] team0 (unregistering): Port device team_slave_0 removed [ 171.354499][ T8471] team0 (unregistering): Port device team_slave_1 removed [ 171.420547][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.721'. [ 171.643125][ T8483] netlink: 'syz.1.723': attribute type 7 has an invalid length. [ 171.675788][ T8490] netlink: 5028 bytes leftover after parsing attributes in process `syz.2.725'. [ 171.694436][ T8483] netlink: 'syz.1.723': attribute type 8 has an invalid length. [ 171.893099][ T8498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.962446][ T5746] IPVS: starting estimator thread 0... [ 172.029611][ T8469] team0: Device gtp1 is of different type [ 172.067638][ T8509] netlink: 148 bytes leftover after parsing attributes in process `syz.1.729'. [ 172.108317][ T8505] IPVS: using max 26 ests per chain, 62400 per kthread [ 172.170196][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 172.287209][ T8520] syzkaller0: entered promiscuous mode [ 172.309689][ T8520] syzkaller0: entered allmulticast mode [ 172.713691][ T8539] netlink: 300 bytes leftover after parsing attributes in process `syz.4.735'. [ 172.759437][ T8542] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 172.774326][ T8539] 8021q: VLANs not supported on xfrm0 [ 172.789640][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 172.902885][ T8542] bond3 (unregistering): Released all slaves [ 173.141199][ T8559] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 173.241920][ T8563] trusted_key: syz.0.742 sent an empty control message without MSG_MORE. [ 173.272535][ T8564] netlink: 'syz.3.741': attribute type 3 has an invalid length. [ 173.298389][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 173.311970][ T8559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.353727][ T8568] netlink: 48 bytes leftover after parsing attributes in process `syz.0.742'. [ 173.494323][ T8559] bond3: (slave geneve2): making interface the new active one [ 173.516982][ T8559] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 173.694662][ T8577] syzkaller0: entered promiscuous mode [ 173.705790][ T8577] syzkaller0: entered allmulticast mode [ 173.822601][ T8586] netlink: 'syz.2.749': attribute type 1 has an invalid length. [ 173.899096][ T8586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.144656][ T8595] syzkaller1: entered promiscuous mode [ 174.162349][ T8595] syzkaller1: entered allmulticast mode [ 174.327632][ T8610] openvswitch: netlink: IP tunnel TTL not specified. [ 174.484554][ T8617] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 174.496918][ T8617] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 174.506627][ T8617] gretap0: entered promiscuous mode [ 174.513190][ T8617] gretap0: entered allmulticast mode [ 174.772907][ T8627] veth0_macvtap: entered allmulticast mode [ 176.318316][ T4943] Bluetooth: hci4: command 0x0405 tx timeout [ 176.792551][ T8583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.050146][ T8646] __nla_validate_parse: 6 callbacks suppressed [ 177.050166][ T8646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.762'. [ 177.101492][ T8646] ip6gre1: entered promiscuous mode [ 177.116663][ T8646] ip6gre1: entered allmulticast mode [ 177.151284][ T8651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.764'. [ 177.373317][ T8661] team0 (unregistering): Port device team_slave_0 removed [ 177.425821][ T8661] team0 (unregistering): Port device team_slave_1 removed [ 177.444972][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'. [ 177.469927][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 177.509805][ T8666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.768'. [ 177.552820][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 177.586891][ T8666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.768'. [ 177.741733][ T8674] syzkaller1: entered promiscuous mode [ 177.756936][ T8674] syzkaller1: entered allmulticast mode [ 177.849045][ T8680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.773'. [ 177.976886][ T8690] netlink: 830 bytes leftover after parsing attributes in process `syz.3.775'. [ 178.190053][ T8702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.276370][ T8704] syzkaller0: entered promiscuous mode [ 178.283886][ T8704] syzkaller0: entered allmulticast mode [ 178.380272][ T8706] syzkaller1: entered promiscuous mode [ 178.385938][ T8706] syzkaller1: entered allmulticast mode [ 179.522801][ T8722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.786'. [ 180.866882][ T8683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.255674][ T8748] syzkaller0: entered allmulticast mode [ 181.600571][ T8775] netlink: 'syz.2.800': attribute type 21 has an invalid length. [ 181.611609][ T8775] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.619906][ T8775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.627217][ T8775] IPv6: NLM_F_CREATE should be set when creating new route [ 181.634697][ T8775] IPv6: NLM_F_CREATE should be set when creating new route [ 181.642013][ T8775] IPv6: NLM_F_CREATE should be set when creating new route [ 182.120926][ T8799] __nla_validate_parse: 2 callbacks suppressed [ 182.120946][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 182.136677][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'. [ 182.146770][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 182.155868][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'. [ 182.188300][ T8754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.415774][ T8806] netlink: 'syz.1.808': attribute type 7 has an invalid length. [ 182.443969][ T8812] netlink: 'syz.1.808': attribute type 7 has an invalid length. [ 182.475720][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'. [ 182.487496][ T8815] netlink: 32 bytes leftover after parsing attributes in process `syz.2.809'. [ 182.521325][ T8814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.812'. [ 182.699453][ T8821] netlink: 48 bytes leftover after parsing attributes in process `syz.3.814'. [ 182.722617][ T8821] netlink: 48 bytes leftover after parsing attributes in process `syz.3.814'. [ 182.752110][ T8820] netlink: 32 bytes leftover after parsing attributes in process `syz.1.813'. [ 183.747197][ T8873] netlink: 'syz.1.827': attribute type 11 has an invalid length. [ 184.048484][ T3265] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.080279][ T3265] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.104743][ T3265] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.126756][ T3265] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.697891][ T8925] netlink: 'syz.4.845': attribute type 7 has an invalid length. [ 185.033187][ T8944] openvswitch: netlink: Missing key (keys=40, expected=100) [ 185.085825][ T8945] netlink: 'syz.0.847': attribute type 1 has an invalid length. [ 187.930906][ T8937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.160804][ T9063] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.178682][ T9063] team0: Cannot enslave team device to itself [ 188.235228][ T9062] IPVS: length: 24 != 1560 [ 188.344049][ T9075] __nla_validate_parse: 11 callbacks suppressed [ 188.344072][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 188.502291][ T9081] openvswitch: netlink: IPv4 tun info is not correct [ 188.513066][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.864'. [ 188.582637][ T9082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.622555][ T9082] bond0: Caught tx_queue_len zero misconfig [ 188.734283][ T9085] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 189.502305][ T9117] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.873'. [ 189.672415][ T9122] xt_cgroup: path and classid specified [ 189.765615][ T9133] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.873'. [ 189.841438][ T9137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.875'. [ 189.946658][ T9143] openvswitch: netlink: IPv6 tunnel dst address is zero [ 190.580103][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.882'. [ 190.825894][ T9186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 190.973612][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.888'. [ 191.070959][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 193.069045][ T9147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.394259][ T9230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.893'. [ 193.502680][ T9238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.894'. [ 193.521281][ T9238] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 193.536903][ T9238] netlink: 224 bytes leftover after parsing attributes in process `syz.3.894'. [ 194.282275][ T9281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'. [ 194.301721][ T9283] netlink: 'syz.4.905': attribute type 39 has an invalid length. [ 194.322398][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.328972][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.369757][ T9279] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 194.436626][ T9279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.081627][ T9267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.672332][ T9328] "syz.4.916" (9328) uses obsolete ecb(arc4) skcipher [ 197.948840][ T9359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.923'. [ 197.985166][ T9362] netlink: 76 bytes leftover after parsing attributes in process `syz.0.925'. [ 198.002201][ T9362] nbd: illegal input index -8454144 [ 198.548945][ T9388] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 198.548945][ T9388] Please contact the netfilter-devel mailing list or update your nftables rules. [ 199.019119][ T9396] netlink: 56 bytes leftover after parsing attributes in process `syz.2.934'. [ 199.090055][ T9398] x_tables: duplicate underflow at hook 2 [ 200.935404][ T9361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.122861][ T9404] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 201.221143][ T9414] netlink: 'syz.2.940': attribute type 5 has an invalid length. [ 201.233484][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.940'. [ 201.346370][ T9409] : renamed from bond_slave_1 (while UP) [ 201.383373][ T9409] netlink: 'syz.1.938': attribute type 1 has an invalid length. [ 201.460692][ T9422] netlink: 60 bytes leftover after parsing attributes in process `syz.4.943'. [ 201.609892][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 201.644926][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 201.701660][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 201.734512][ T9433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.945'. [ 202.026965][ T9452] x_tables: unsorted underflow at hook 4 [ 202.169499][ T9456] ip6tnl0: entered promiscuous mode [ 202.175100][ T9456] ip6tnl0: entered allmulticast mode [ 204.662729][ T9431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.673246][ T9443] netlink: 516 bytes leftover after parsing attributes in process `syz.2.950'. [ 205.075700][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'. [ 205.554292][ T9512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.972'. [ 205.674155][ T9512] ipt_REJECT: TCP_RESET invalid for non-tcp [ 206.041469][ T9532] netlink: 'syz.4.977': attribute type 1 has an invalid length. [ 206.050815][ T9532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.116112][ T9534] nftables ruleset with unbound set [ 206.227080][ T9538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.273791][ T30] audit: type=1800 audit(1785663237.049:3): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.981" name="memory.events" dev="tmpfs" ino=977 res=0 errno=0 [ 206.316760][ T30] audit: type=1804 audit(1785663237.089:4): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.981" name="/newroot/188/memory.events" dev="tmpfs" ino=977 res=1 errno=0 [ 206.556725][ T9553] xt_hashlimit: size too large, truncated to 1048576 [ 206.564930][ T9553] xt_hashlimit: max too large, truncated to 1048576 [ 206.573347][ T9553] xt_hashlimit: overflow, rate too high: 0 [ 207.374242][ T9559] netlink: 'syz.4.988': attribute type 2 has an invalid length. [ 207.383211][ T9559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.988'. [ 207.393687][ T9559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.988'. [ 207.616622][ T9564] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 207.626350][ T9564] netlink: 44 bytes leftover after parsing attributes in process `syz.4.989'. [ 208.495172][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.990'. [ 208.663099][ T9571] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 208.851240][ T9526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.296740][ T9585] netlink: 168 bytes leftover after parsing attributes in process `syz.2.996'. [ 209.384653][ T9589] hsr0: entered promiscuous mode [ 209.421836][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'. [ 209.470138][ T9589] hsr_slave_0: left promiscuous mode [ 209.514457][ T9589] hsr_slave_1: left promiscuous mode [ 209.531447][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 209.596560][ T9589] hsr0 (unregistering): left promiscuous mode [ 209.712515][ T9599] tipc: Started in network mode [ 209.740932][ T9599] tipc: Node identity 9ebd1e311ae9, cluster identity 4711 [ 209.782827][ T9599] tipc: Enabled bearer , priority 0 [ 210.012604][ T9601] syzkaller0: entered promiscuous mode [ 210.018836][ T9601] syzkaller0: entered allmulticast mode [ 210.026054][ T9601] tipc: Resetting bearer [ 210.034045][ T9617] bridge0: Caught tx_queue_len zero misconfig [ 210.042325][ T9623] __nla_validate_parse: 1 callbacks suppressed [ 210.042343][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 210.112095][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 210.135117][ T9601] tipc: Resetting bearer [ 210.529206][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1013'. [ 210.647482][ T50] block nbd0: Receive control failed (result -107) [ 211.066296][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 211.078930][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 211.768924][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 211.769838][ T9610] Bluetooth: hci2: command 0x0406 tx timeout [ 211.775101][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 211.787387][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 212.643028][ T9601] tipc: Disabling bearer [ 212.653991][ T8224] tipc: Node number set to 2220105265 [ 212.668474][ T9651] 8021q: VLANs not supported on dvmrp0 [ 212.687073][ T9652] 8021q: VLANs not supported on dvmrp0 [ 212.866246][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1021'. [ 212.936347][ T9664] smc: net device lo applied user defined pnetid SYZ0 [ 212.982992][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1021'. [ 213.043508][ T9672] netlink: 'syz.2.1023': attribute type 2 has an invalid length. [ 213.083154][ T9670] team0 (unregistering): Port device team_slave_0 removed [ 213.122172][ T9670] team0 (unregistering): Port device team_slave_1 removed [ 213.156290][ T9680] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1025'. [ 213.191711][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1025'. [ 213.226676][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1025'. [ 213.914769][ T9718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.164403][ T9739] netlink: 'syz.2.1038': attribute type 2 has an invalid length. [ 214.857063][ T9775] netlink: 'syz.1.1050': attribute type 14 has an invalid length. [ 215.087445][ T9783] __nla_validate_parse: 5 callbacks suppressed [ 215.087469][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1053'. [ 215.231025][ T9787] openvswitch: netlink: Multiple metadata blocks provided [ 215.271244][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1056'. [ 215.330673][ T9795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1057'. [ 215.673697][ T9806] netlink: 'syz.0.1062': attribute type 49 has an invalid length. [ 215.789000][ T9811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1063'. [ 215.820202][ T9811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1063'. [ 215.907493][ T9806] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 215.925069][ T9823] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1067'. [ 215.927862][ T9806] ip6gretap0: entered promiscuous mode [ 215.957946][ T9806] ip6gretap0: entered allmulticast mode [ 215.992941][ T9808] syzkaller1: entered promiscuous mode [ 216.013878][ T9808] syzkaller1: entered allmulticast mode [ 216.035207][ T9825] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1067'. [ 216.052519][ T9811] gretap1: entered promiscuous mode [ 216.060327][ T9811] gretap1: entered allmulticast mode [ 216.248725][ T9832] netlink: 'syz.3.1070': attribute type 6 has an invalid length. [ 216.372809][ T9839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1072'. [ 216.603043][ T9846] xt_recent: Unsupported userspace flags (000000b1) [ 216.628429][ T9839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1072'. [ 216.671396][ T9846] syz_tun: entered allmulticast mode [ 216.701699][ T9855] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1076'. [ 216.713184][ T9845] syz_tun: left allmulticast mode [ 217.129820][ T9867] openvswitch: netlink: Message has 1 unknown bytes. [ 217.412020][ T9884] netlink: 'syz.2.1082': attribute type 3 has an invalid length. [ 217.694676][ T9891] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 217.732246][ T9890] openvswitch: netlink: Missing key (keys=40, expected=100) [ 217.816590][ T9890] Unsupported xt match [ 217.816612][ T9890] unable to load match [ 218.407575][ T9934] xt_TCPMSS: Only works on TCP SYN packets [ 218.876602][ T9950] bond4: Unable to set up delay as MII monitoring is disabled [ 218.896085][ T9950] bond4 (unregistering): Released all slaves [ 218.918196][ T9965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.925494][ T9965] IPv6: NLM_F_CREATE should be set when creating new route [ 219.913818][T10005] IPv6: sit1: Disabled Multicast RS [ 219.950221][T10005] C: renamed from lo (while UP) [ 219.972350][T10005] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 220.324130][T10028] netlink: 'syz.2.1124': attribute type 39 has an invalid length. [ 220.761481][T10041] __nla_validate_parse: 8 callbacks suppressed [ 220.761503][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'. [ 220.899416][T10041] bond4: entered promiscuous mode [ 220.905064][T10041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.967991][T10053] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.975386][T10053] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 220.988237][T10053] bond4: (slave ip6gre1): Error -95 calling set_mac_address [ 221.315145][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 221.345128][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 221.616886][T10045] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1130'. [ 222.259720][T10096] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.271647][T10096] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.411103][T10096] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.465095][T10096] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.525931][T10120] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1151'. [ 222.638589][T10096] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.674130][T10096] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.267945][ T1327] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.295140][ T1327] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.330423][ T1327] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.350178][ T1327] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.433297][ T3336] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.460748][ T3336] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.490041][ T3336] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.524545][ T3336] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.767508][T10166] team_slave_1: Caught tx_queue_len zero misconfig [ 224.148286][T10180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.506916][T10192] netlink: 'syz.4.1166': attribute type 13 has an invalid length. [ 224.522747][T10192] macsec0: entered allmulticast mode [ 224.654939][T10197] xt_policy: too many policy elements [ 225.021714][T10215] IPVS: set_ctl: invalid protocol: 189 10.1.1.1:20004 [ 225.073084][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 225.171864][T10217] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1175'. [ 225.299936][T10222] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 225.317965][T10222] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 225.381940][T10225] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 225.587684][T10234] syzkaller0: entered promiscuous mode [ 225.609817][T10234] syzkaller0: entered allmulticast mode [ 226.307150][T10257] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 226.503610][T10257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.953829][T10278] netlink: 'syz.4.1188': attribute type 2 has an invalid length. [ 227.174801][T10278] : entered promiscuous mode [ 227.257366][T10288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1191'. [ 227.944105][T10323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1199'. [ 227.991291][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'. [ 229.293731][T10385] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1214'. [ 229.335025][T10383] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1214'. [ 229.814520][T10416] netlink: 'syz.3.1221': attribute type 11 has an invalid length. [ 229.833093][T10419] netlink: 'syz.4.1223': attribute type 8 has an invalid length. [ 229.852869][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1223'. [ 229.857606][T10416] netlink: 4180 bytes leftover after parsing attributes in process `syz.3.1221'. [ 229.940201][T10427] netlink: 'syz.0.1224': attribute type 2 has an invalid length. [ 231.351966][T10498] netlink: 'syz.1.1239': attribute type 1 has an invalid length. [ 231.412395][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'. [ 231.435472][T10498] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.639121][T10505] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1241'. [ 231.856369][T10518] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 233.816784][T10470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.831948][T10524] netlink: 'syz.4.1247': attribute type 10 has an invalid length. [ 234.082163][T10535] netlink: 'syz.3.1251': attribute type 2 has an invalid length. [ 234.120540][T10535] : entered promiscuous mode [ 234.236208][T10540] vxcan0: tx address claim with dest, not broadcast [ 234.347293][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'. [ 234.850905][T10572] netlink: 'syz.2.1263': attribute type 1 has an invalid length. [ 234.909608][T10572] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 234.925760][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 235.335171][T10606] bond2: (slave lo): Releasing backup interface [ 235.343136][T10606] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 235.362816][T10606] bridge_slave_0: left allmulticast mode [ 235.369123][T10606] bridge_slave_0: left promiscuous mode [ 235.377343][T10606] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.391199][T10606] bridge_slave_1: left allmulticast mode [ 235.396894][T10606] bridge_slave_1: left promiscuous mode [ 235.405544][T10606] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.421512][T10606] bond0: (slave bond_slave_0): Releasing backup interface [ 235.435434][T10606] bond0: (slave bond_slave_1): Releasing backup interface [ 235.452023][T10606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.460798][T10606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.473605][T10606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.482830][T10606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.493448][T10606] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.634303][T10558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.039961][T10629] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1278'. [ 238.312391][T10651] xt_cgroup: invalid path, errno=-2 [ 238.370603][T10651] tipc: Started in network mode [ 238.380650][T10651] tipc: Node identity c6f37c4e0235, cluster identity 4711 [ 238.398183][T10651] tipc: Enabled bearer , priority 0 [ 238.413371][T10651] syzkaller0: entered promiscuous mode [ 238.431576][T10651] syzkaller0: entered allmulticast mode [ 238.655321][T10658] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 238.671378][T10658] bond4 (unregistering): Released all slaves [ 238.796366][T10651] tipc: Resetting bearer [ 238.833477][T10649] tipc: Resetting bearer [ 238.916853][T10649] tipc: Disabling bearer [ 239.019983][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 239.068466][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 239.141569][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 239.189826][T10685] xfrm1: entered promiscuous mode [ 239.197321][T10685] xfrm1: entered allmulticast mode [ 239.436050][T10698] netlink: 'syz.0.1295': attribute type 4 has an invalid length. [ 239.858573][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 239.966900][T10708] macsec2: entered promiscuous mode [ 239.997331][T10708] bridge0: entered promiscuous mode [ 240.021363][T10708] macsec2: entered allmulticast mode [ 240.036246][T10708] bridge0: entered allmulticast mode [ 240.055173][T10708] bridge0: port 3(macsec2) entered blocking state [ 240.072284][T10708] bridge0: port 3(macsec2) entered disabled state [ 240.138646][T10708] bridge0: left allmulticast mode [ 240.193723][ T5746] bridge0: left promiscuous mode [ 240.560341][T10731] bridge0: port 3(vlan3) entered disabled state [ 240.569128][T10731] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.576776][T10731] bridge0: port 1(1¾x9ÿ) entered disabled state [ 240.752775][T10734] bond4 (unregistering): Released all slaves [ 241.079753][T10754] tipc: Started in network mode [ 241.111871][T10754] tipc: Node identity ac14142f, cluster identity 4711 [ 241.155769][T10754] tipc: New replicast peer: 0.0.0.0 [ 241.179127][T10754] tipc: Enabled bearer , priority 10 [ 241.280693][T10767] netlink: 'syz.3.1315': attribute type 21 has an invalid length. [ 241.316414][T10770] netlink: 'syz.3.1315': attribute type 21 has an invalid length. [ 241.343586][T10772] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1316'. [ 241.345673][T10767] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1315'. [ 241.384288][T10773] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1316'. [ 241.394368][T10770] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1315'. [ 241.407876][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1316'. [ 241.487321][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1316'. [ 241.581580][T10782] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1320'. [ 241.655432][T10786] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1321'. [ 241.685300][T10786] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1321'. [ 241.740842][T10788] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 241.763892][T10788] block nbd1: not configured, cannot reconfigure [ 242.091080][T10811] netlink: 'syz.1.1323': attribute type 12 has an invalid length. [ 242.163470][T10811] netlink: 'syz.1.1323': attribute type 11 has an invalid length. [ 242.302109][ T8207] tipc: Node number set to 2886997039 [ 243.786168][T10886] pimreg: entered allmulticast mode [ 243.856244][T10890] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.867155][T10905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.933174][T10907] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 245.113013][T10915] __nla_validate_parse: 9 callbacks suppressed [ 245.113028][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 245.140464][T10915] xt_TPROXY: Can be used only with -p tcp or -p udp [ 246.036384][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 246.213777][T10861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.474667][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1364'. [ 246.489772][T10930] netlink: 'syz.3.1360': attribute type 1 has an invalid length. [ 246.579689][T10945] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1360'. [ 246.697566][T10930] bond5 (unregistering): Released all slaves [ 246.716992][T10950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1366'. [ 246.766819][T10950] netlink: 'syz.0.1366': attribute type 3 has an invalid length. [ 246.776873][T10953] netlink: 'syz.0.1366': attribute type 3 has an invalid length. [ 246.814444][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'. [ 246.915949][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'. [ 247.267141][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 247.344389][T10982] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1374'. [ 247.711255][T10995] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1378'. [ 248.662866][T11017] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 248.687366][T11017] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 249.151260][T11033] netlink: 'syz.0.1390': attribute type 1 has an invalid length. [ 249.350332][T11045] netlink: 'syz.0.1394': attribute type 1 has an invalid length. [ 249.381623][T11045] macvlan0: entered promiscuous mode [ 249.541446][T11049] syzkaller0: entered promiscuous mode [ 249.547127][T11049] syzkaller0: entered allmulticast mode [ 249.592407][T11049] 0: reclassify loop, rule prio 0, protocol 700 [ 249.934367][T11069] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 250.021249][T11072] netlink: 'syz.3.1401': attribute type 1 has an invalid length. [ 250.171471][ T5626] block nbd1: Receive control failed (result -32) [ 250.177524][T11077] bridge_slave_1: entered promiscuous mode [ 250.182828][ T4943] block nbd1: Receive control failed (result -32) [ 250.293412][T11083] __nla_validate_parse: 4 callbacks suppressed [ 250.293437][T11083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1404'. [ 250.326404][T11083] netlink: 'syz.1.1404': attribute type 1 has an invalid length. [ 250.345723][T11083] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1404'. [ 250.846256][T11104] netlink: 'syz.1.1411': attribute type 1 has an invalid length. [ 250.881887][T11104] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1411'. [ 250.943248][T11110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1413'. [ 251.164980][T11118] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 251.185864][T11117] netlink: 'syz.4.1416': attribute type 1 has an invalid length. [ 251.211970][T11121] netlink: 'syz.1.1417': attribute type 16 has an invalid length. [ 251.222453][T11121] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1417'. [ 251.241462][T11122] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 251.336748][T11117] bond4: option mode: invalid value (10) [ 251.380208][T11117] bond4 (unregistering): Released all slaves [ 251.420190][T11136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1416'. [ 251.516974][T11121] veth0_macvtap: entered allmulticast mode [ 251.654305][T11136] dummy0: entered promiscuous mode [ 251.673268][T11145] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 251.765058][T11149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1423'. [ 251.900518][T11157] openvswitch: netlink: IPv4 tunnel dst address is zero [ 251.929405][T11157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.349973][T11180] sctp: [Deprecated]: syz.2.1433 (pid 11180) Use of int in max_burst socket option. [ 252.349973][T11180] Use struct sctp_assoc_value instead [ 252.512448][T11186] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1435'. [ 252.674151][T11200] nbd: couldn't find device at index 134217728 [ 252.846767][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'. [ 252.884868][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'. [ 253.322610][T11224] validate_nla: 1 callbacks suppressed [ 253.322630][T11224] netlink: 'syz.1.1445': attribute type 5 has an invalid length. [ 253.391657][T11224] geneve3: entered promiscuous mode [ 253.411116][T11224] geneve3: entered allmulticast mode [ 253.533987][T11240] netlink: 'syz.0.1446': attribute type 15 has an invalid length. [ 253.726677][T11245] ipt_REJECT: TCP_RESET invalid for non-tcp [ 253.790306][T11248] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 255.544292][T11248] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 255.679604][ T145] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 255.769794][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.776250][ T145] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 255.786834][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.803469][ T145] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 255.815560][ T145] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 256.074104][T11283] __nla_validate_parse: 50 callbacks suppressed [ 256.074127][T11283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1457'. [ 256.140896][T11285] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1458'. [ 256.715942][T11317] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1465'. [ 256.895029][T11325] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1467'. [ 256.942646][T11329] openvswitch: netlink: EtherType 50a is less than min 600 [ 257.034199][T11332] netlink: 'syz.0.1470': attribute type 11 has an invalid length. [ 257.174609][T11336] netlink: 'syz.3.1471': attribute type 21 has an invalid length. [ 257.201542][T11336] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1471'. [ 257.232850][T11336] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1471'. [ 257.278374][T11343] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20001 [ 257.361606][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 257.543584][T11354] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.610610][T11356] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 257.630885][T11356] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 257.725710][T11360] 8021q: VLANs not supported on vcan0 [ 257.760371][T11365] netlink: 'syz.2.1480': attribute type 10 has an invalid length. [ 257.821652][T11365] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1480'. [ 257.915239][T11365] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 258.370047][T11396] geneve2: entered promiscuous mode [ 258.431977][T11399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1487'. [ 258.601241][T11406] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1487'. [ 259.223233][T11439] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 259.237646][T11439] bond5 (unregistering): Released all slaves [ 259.293708][T11441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.503288][T11441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.387644][T11492] netlink: 'syz.3.1507': attribute type 1 has an invalid length. [ 260.525789][T11500] netlink: 'syz.0.1510': attribute type 21 has an invalid length. [ 260.550414][T11492] bond5: option mode: invalid value (8) [ 260.589217][T11492] bond5 (unregistering): Released all slaves [ 260.739102][T11496] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 260.816920][T11460] infiniband syz1: set down [ 260.847254][T11460] infiniband syz1: added bond_slave_0 [ 261.081443][T11460] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 261.121734][T11460] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 261.145837][T11460] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 261.314005][T11460] RDS/IB: syz1: added [ 261.342389][T11460] smc: adding ib device syz1 with port count 1 [ 261.370834][T11460] smc: ib device syz1 port 1 has no pnetid [ 261.955180][T11555] __nla_validate_parse: 7 callbacks suppressed [ 261.955203][T11555] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1522'. [ 262.189988][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1526'. [ 262.210551][T11566] openvswitch: netlink: ct_state flags ffffffff unsupported [ 262.228848][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1526'. [ 262.242905][T11566] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 262.520532][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1529'. [ 262.654020][T11580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1531'. [ 262.974801][T11596] sctp: [Deprecated]: syz.0.1536 (pid 11596) Use of int in max_burst socket option deprecated. [ 262.974801][T11596] Use struct sctp_assoc_value instead [ 262.979081][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 263.144014][T11608] ªªªªª»: renamed from dummy0 (while UP) [ 263.527052][T11620] pimreg3: entered allmulticast mode [ 264.238469][ T1327] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.273283][ T1327] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.310314][ T1327] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.337282][ T1327] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.359163][ T1327] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.379745][ T1327] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.400663][ T1327] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.420806][ T1327] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.754733][T11637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1547'. [ 264.798770][T11637] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1547'. [ 264.904381][T11647] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 264.937679][T11637] veth7: entered promiscuous mode [ 265.051801][T11654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1550'. [ 265.163071][T11659] block nbd0: reconnected socket [ 265.166993][ T4943] block nbd0: Receive control failed (result -22) [ 265.184184][T11658] netlink: 'syz.0.1554': attribute type 1 has an invalid length. [ 265.220569][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1553'. [ 265.265319][T11650] 8021q: adding VLAN 0 to HW filter on device bond7 [ 265.283816][T11650] bond6: (slave bond7): making interface the new active one [ 265.293469][T11650] bond6: (slave bond7): Enslaving as an active interface with an up link [ 265.315761][T11654] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.429624][T11658] 8021q: adding VLAN 0 to HW filter on device bond8 [ 265.623257][T11670] bond8: (slave gretap3): making interface the new active one [ 265.643332][T11670] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 266.142650][T11698] netlink: zone id is out of range [ 266.669620][T11725] netlink: 'syz.2.1570': attribute type 1 has an invalid length. [ 266.724678][T11725] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.048834][T11750] __nla_validate_parse: 11 callbacks suppressed [ 267.048857][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1577'. [ 267.086321][T11750] sch_tbf: burst 127 is lower than device bridge4 mtu (1514) ! [ 267.188554][T11755] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1578'. [ 267.198577][T11755] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1578'. [ 267.322703][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1581'. [ 267.426277][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 267.623098][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 267.646000][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.786005][T11778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1587'. [ 267.812714][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1588'. [ 267.825587][T11778] tipc: Invalid UDP bearer configuration [ 267.825649][T11778] tipc: Enabling of bearer rejected, failed to enable media [ 267.857451][T11776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1587'. [ 267.866884][T11776] tipc: Invalid UDP bearer configuration [ 267.866937][T11776] tipc: Enabling of bearer rejected, failed to enable media [ 268.396031][T11806] 8021q: VLANs not supported on sit0 [ 268.458553][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1595'. [ 268.576311][T11810] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 268.592636][T11815] netlink: 'syz.4.1598': attribute type 21 has an invalid length. [ 268.601303][T11815] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.616838][T11815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.624192][T11815] IPv6: NLM_F_CREATE should be set when creating new route [ 268.631549][T11815] IPv6: NLM_F_CREATE should be set when creating new route [ 268.638863][T11815] IPv6: NLM_F_CREATE should be set when creating new route [ 268.663138][T11818] netlink: 'syz.3.1599': attribute type 1 has an invalid length. [ 268.689413][T11818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.698115][T11818] IPv6: NLM_F_CREATE should be set when creating new route [ 268.705444][T11818] IPv6: NLM_F_CREATE should be set when creating new route [ 268.744309][T11820] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 268.775288][T11820] netlink: 'syz.4.1598': attribute type 3 has an invalid length. [ 268.816651][T11826] netlink: 'syz.1.1600': attribute type 2 has an invalid length. [ 268.906555][T11821] can: request_module (can-proto-0) failed. [ 269.275911][T11849] x_tables: duplicate underflow at hook 1 [ 269.292025][T11851] bond4: option mode: invalid value (10) [ 269.392832][T11855] xt_hashlimit: size too large, truncated to 1048576 [ 269.463774][T11860] sctp: [Deprecated]: syz.0.1611 (pid 11860) Use of int in max_burst socket option. [ 269.463774][T11860] Use struct sctp_assoc_value instead [ 269.494114][T11860] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 269.516288][T11860] netlink: 'syz.0.1611': attribute type 10 has an invalid length. [ 269.585158][T11860] bond3: (slave veth0_to_bond): Releasing active interface [ 269.722716][T11870] xt_hashlimit: size too large, truncated to 1048576 [ 269.729894][T11869] ipvlan1: entered promiscuous mode [ 269.742868][T11869] ipvlan1: entered allmulticast mode [ 269.756349][T11869] veth0_vlan: entered allmulticast mode [ 270.107290][T11883] syzkaller0: entered promiscuous mode [ 270.124605][T11883] syzkaller0: entered allmulticast mode [ 270.444259][T11898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.503271][T11898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.556461][T11896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.833281][T11922] netlink: 'syz.3.1625': attribute type 1 has an invalid length. [ 271.250511][T11928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.723325][T11954] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 271.744709][T11954] bond9 (unregistering): Released all slaves [ 271.894453][T11953] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 271.949111][T11953] bond9 (unregistering): Released all slaves [ 272.487637][T11981] syzkaller0: entered promiscuous mode [ 272.499776][T11981] syzkaller0: entered allmulticast mode [ 272.940010][T11997] netlink: 'syz.4.1650': attribute type 11 has an invalid length. [ 272.983090][T12001] netlink: 'syz.2.1651': attribute type 13 has an invalid length. [ 273.017677][T12001] netlink: 'syz.2.1651': attribute type 11 has an invalid length. [ 273.045243][T12001] __nla_validate_parse: 11 callbacks suppressed [ 273.045262][T12001] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.1651'. [ 273.333412][T11985] netlink: 'syz.3.1646': attribute type 20 has an invalid length. [ 273.358744][T11985] IPv6: NLM_F_CREATE should be specified when creating new route [ 273.535024][T12037] netlink: 'syz.0.1659': attribute type 17 has an invalid length. [ 274.085743][T12063] x_tables: duplicate underflow at hook 2 [ 274.192885][T12070] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1669'. [ 274.220315][T12060] netlink: 'syz.2.1668': attribute type 10 has an invalid length. [ 274.236618][T12060] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1668'. [ 274.964266][T12112] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1681'. [ 275.000262][T12112] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1681'. [ 275.030476][T12112] netlink: 'syz.3.1681': attribute type 5 has an invalid length. [ 275.064668][T12112] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1681'. [ 275.345187][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1683'. [ 275.358209][T12124] bridge5: entered promiscuous mode [ 275.475338][T12128] netlink: 'syz.2.1683': attribute type 16 has an invalid length. [ 275.507359][T12128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1683'. [ 275.830668][T12144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1687'. [ 276.436438][T12170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1697'. [ 276.711043][T12170] syzkaller0: entered promiscuous mode [ 276.721153][T12170] syzkaller0: entered allmulticast mode [ 277.752099][T12211] netlink: 'syz.3.1706': attribute type 1 has an invalid length. [ 279.258023][T12211] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 279.383554][T12216] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1708'. [ 279.542279][T12229] macvtap1: entered promiscuous mode [ 279.558652][T12229] macvtap1: entered allmulticast mode [ 279.569493][T12229] veth1_to_bridge: entered promiscuous mode [ 279.587179][T12229] veth1_to_bridge: entered allmulticast mode [ 279.625627][T12229] team0: Device macvtap1 failed to register rx_handler [ 279.668710][T12229] veth1_to_bridge: left allmulticast mode [ 279.693555][T12229] veth1_to_bridge: left promiscuous mode [ 279.798597][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1714'. [ 279.863971][T12239] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1714'. [ 280.167540][T12256] bridge8: entered promiscuous mode [ 280.189857][T12256] bridge8: entered allmulticast mode [ 280.506782][T12271] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1719'. [ 283.053412][T12250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.078399][T12268] netlink: 'syz.0.1719': attribute type 2 has an invalid length. [ 283.096906][T12268] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1719'. [ 283.407137][T12293] netlink: 'syz.0.1726': attribute type 2 has an invalid length. [ 283.421216][T12290] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1725'. [ 283.443577][T12293] IPVS: ip_vs_edit_dest(): server weight less than zero [ 283.593753][T12307] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 283.601743][T12307] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 284.490830][T12362] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1742'. [ 285.270146][T12382] hsr0: entered promiscuous mode [ 285.315077][T12381] hsr0: left promiscuous mode [ 285.325766][T12386] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1749'. [ 285.345400][T12386] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1749'. [ 285.619217][T12401] netlink: 'syz.1.1754': attribute type 1 has an invalid length. [ 285.632335][T12401] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 286.856284][T12332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.226104][T12439] ip6gre2: entered promiscuous mode [ 287.263477][T12439] ip6gre2: entered allmulticast mode [ 287.385133][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1758'. [ 287.925107][T12479] netlink: 'syz.2.1770': attribute type 64 has an invalid length. [ 287.933636][T12479] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1770'. [ 288.269836][T12487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1774'. [ 288.280733][T12487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1774'. [ 288.304187][T12488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1774'. [ 288.314313][T12488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1774'. [ 288.454567][T12463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.485413][T12473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.733467][T12510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1779'. [ 289.754338][T12551] --map-set only usable from mangle table [ 289.762340][T12551] __nla_validate_parse: 2 callbacks suppressed [ 289.762361][T12551] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1791'. [ 289.804421][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 292.333286][T12535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.724615][T12605] xfrm0 speed is unknown, defaulting to 1000 [ 292.754121][T12605] xfrm0 speed is unknown, defaulting to 1000 [ 292.791884][T12605] xfrm0 speed is unknown, defaulting to 1000 [ 292.804387][T12607] netlink: 'syz.3.1805': attribute type 1 has an invalid length. [ 292.814785][T12605] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 292.841071][T12605] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 292.861627][T12605] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 292.883451][T12605] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 292.953356][T12607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1805'. [ 292.965327][T12605] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 293.012318][T12605] xfrm0 speed is unknown, defaulting to 1000 [ 293.022159][T12605] xfrm0 speed is unknown, defaulting to 1000 [ 293.030720][T12605] xfrm0 speed is unknown, defaulting to 1000 [ 293.042230][T12605] xfrm0 speed is unknown, defaulting to 1000 [ 293.053578][T12605] xfrm0 speed is unknown, defaulting to 1000 [ 293.204295][T12626] netlink: 'syz.2.1810': attribute type 2 has an invalid length. [ 293.247214][T12626] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1810'. [ 293.336008][T12634] FAULT_INJECTION: forcing a failure. [ 293.336008][T12634] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 293.357873][T12634] CPU: 1 UID: 0 PID: 12634 Comm: syz.2.1812 Not tainted syzkaller #0 PREEMPT(full) [ 293.357903][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.357923][T12634] Call Trace: [ 293.357932][T12634] [ 293.357941][T12634] dump_stack_lvl+0xe8/0x150 [ 293.357979][T12634] should_fail_ex+0x40c/0x560 [ 293.358013][T12634] _copy_to_user+0x31/0xb0 [ 293.358037][T12634] simple_read_from_buffer+0xe1/0x170 [ 293.358075][T12634] proc_fail_nth_read+0x1bb/0x230 [ 293.358110][T12634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.358145][T12634] ? rw_verify_area+0x24a/0x4c0 [ 293.358169][T12634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.358199][T12634] vfs_read+0x213/0xa80 [ 293.358227][T12634] ? __pfx___mutex_lock+0x10/0x10 [ 293.358255][T12634] ? __pfx_vfs_read+0x10/0x10 [ 293.358278][T12634] ? __fget_files+0x2a/0x420 [ 293.358313][T12634] ? __fget_files+0x3a2/0x420 [ 293.358341][T12634] ? __fget_files+0x2a/0x420 [ 293.358380][T12634] ksys_read+0x150/0x270 [ 293.358403][T12634] ? __pfx_ksys_read+0x10/0x10 [ 293.358443][T12634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.358468][T12634] do_syscall_64+0x174/0x580 [ 293.358493][T12634] ? trace_irq_disable+0x3b/0x140 [ 293.358522][T12634] ? clear_bhb_loop+0x40/0x90 [ 293.358549][T12634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.358571][T12634] RIP: 0033:0x7fb0f235e84e [ 293.358592][T12634] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 293.358610][T12634] RSP: 002b:00007fb0f3255fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 293.358633][T12634] RAX: ffffffffffffffda RBX: 00007fb0f32566c0 RCX: 00007fb0f235e84e [ 293.358649][T12634] RDX: 000000000000000f RSI: 00007fb0f32560a0 RDI: 0000000000000005 [ 293.358662][T12634] RBP: 00007fb0f3256090 R08: 0000000000000000 R09: 0000000000000000 [ 293.358679][T12634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.358691][T12634] R13: 00007fb0f2626038 R14: 00007fb0f2625fa0 R15: 00007ffd247d5b98 [ 293.358727][T12634] [ 293.650787][T12637] netlink: 'syz.4.1813': attribute type 5 has an invalid length. [ 293.766690][T12648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.050106][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 294.260112][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 296.270100][T12629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.487653][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 296.509672][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 296.541318][T12698] netlink: 'syz.3.1825': attribute type 24 has an invalid length. [ 296.556450][T12703] openvswitch: netlink: IP tunnel dst address not specified [ 296.584474][T12703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.641325][T12747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1840'. [ 297.651283][T12747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1840'. [ 297.692158][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 297.696212][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 297.883487][T12763] netlink: 'syz.2.1843': attribute type 10 has an invalid length. [ 297.899227][T12764] netlink: 'syz.2.1843': attribute type 10 has an invalid length. [ 298.089382][T12774] syzkaller1: entered promiscuous mode [ 298.094971][T12774] syzkaller1: entered allmulticast mode [ 298.402066][T12783] syzkaller0: entered promiscuous mode [ 298.408322][T12783] syzkaller0: entered allmulticast mode [ 298.422002][T12745] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 298.600289][T12787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1849'. [ 298.609703][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 298.878878][T12791] netlink: 'syz.3.1851': attribute type 1 has an invalid length. [ 298.905495][T12791] 8021q: adding VLAN 0 to HW filter on device bond7 [ 298.927503][T12791] bond7: (slave gretap1): making interface the new active one [ 298.936589][T12791] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 300.042652][T12731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.188354][T12801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1856'. [ 300.198158][T12801] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 300.327988][T12808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.363416][T12810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1853'. [ 303.265818][T12807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.547378][T12869] netlink: 'syz.0.1873': attribute type 1 has an invalid length. [ 303.559980][T12868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1870'. [ 303.665500][T12869] bond9: entered promiscuous mode [ 303.674109][T12869] 8021q: adding VLAN 0 to HW filter on device bond9 [ 303.702318][T12880] 8021q: adding VLAN 0 to HW filter on device bond9 [ 303.716184][T12880] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 303.730385][T12880] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 303.766371][T12880] bond9: (slave ip6gre2): making interface the new active one [ 303.774734][T12880] ip6gre2: entered promiscuous mode [ 303.788501][T12880] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 303.813514][T12881] geneve3: entered promiscuous mode [ 303.912514][ T3265] tipc: Subscription rejected, illegal request [ 304.578190][T12918] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1885'. [ 304.993750][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1890'. [ 305.064080][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'. [ 305.184033][T12938] sctp: [Deprecated]: syz.0.1892 (pid 12938) Use of int in maxseg socket option. [ 305.184033][T12938] Use struct sctp_assoc_value instead [ 305.331780][T12941] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1893'. [ 307.162414][T12905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.483268][T12948] syzkaller0: entered promiscuous mode [ 307.506890][T12948] syzkaller0: entered allmulticast mode [ 307.742539][T12974] macvlan0: entered promiscuous mode [ 307.761415][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1901'. [ 307.803175][T12975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1903'. [ 307.840233][T12975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1903'. [ 307.889752][T12975] 0ªî{X¹¦: entered promiscuous mode [ 307.906444][T12975] 0ªî{X¹¦: left promiscuous mode [ 307.925442][T12983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1905'. [ 308.073311][ T5768] IPVS: starting estimator thread 0... [ 308.178288][T12990] IPVS: using max 24 ests per chain, 57600 per kthread [ 308.213690][T12995] gre1: entered promiscuous mode [ 308.219370][T12995] gre1: entered allmulticast mode [ 308.237645][T12998] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.247651][T12998] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.260321][T12998] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.268548][T12998] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 308.288224][T12998] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 308.331539][T12998] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 308.410848][T12998] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 308.500228][T12998] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.533400][T12998] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.551616][T12998] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.593730][T13016] openvswitch: netlink: Duplicate or invalid key (type 0). [ 308.603842][T13016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.623160][T12998] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.645900][T12998] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.840283][T13024] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 308.857280][T13026] netlink: 'syz.3.1918': attribute type 2 has an invalid length. [ 308.917511][T13026] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1918'. [ 309.029620][T13030] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 309.149595][T13030] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.204223][T13030] netlink: 'syz.4.1920': attribute type 10 has an invalid length. [ 309.231281][T13038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1919'. [ 309.247757][T13030] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1920'. [ 309.333676][T13038] team0: Port device team_slave_0 removed [ 309.401817][T13052] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1924'. [ 309.426487][T13046] syzkaller1: entered promiscuous mode [ 309.432357][T13046] syzkaller1: entered allmulticast mode [ 309.491271][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 309.555681][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1927'. [ 309.639824][T13063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1929'. [ 309.717637][T13068] netlink: 'syz.1.1930': attribute type 3 has an invalid length. [ 309.726443][T13068] netlink: 'syz.1.1930': attribute type 1 has an invalid length. [ 309.736031][T13068] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1930'. [ 309.762073][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1928'. [ 309.798581][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1928'. [ 310.578077][T13084] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.585923][T13084] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.596439][T13084] batman_adv: batadv0: Interface deactivated: gretap2 [ 311.884308][T13061] xfrm0 speed is unknown, defaulting to 1000 [ 311.892429][ T32] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.893620][ T450] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.952325][ T450] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.967988][ T450] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.980125][T13102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.065114][T13061] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.344209][T13120] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 312.564578][T13135] x_tables: duplicate underflow at hook 1 [ 312.722774][T13140] netlink: 'syz.4.1950': attribute type 1 has an invalid length. [ 312.854785][T13140] 8021q: adding VLAN 0 to HW filter on device bond5 [ 313.059422][T13151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.808515][T13181] bond6: entered promiscuous mode [ 313.813871][T13181] bond6: entered allmulticast mode [ 313.820345][T13181] 8021q: adding VLAN 0 to HW filter on device bond6 [ 314.193340][T13201] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 314.211289][T13201] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 314.496115][T13211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.637591][T13215] __nla_validate_parse: 6 callbacks suppressed [ 314.637612][T13215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1972'. [ 315.143654][T13238] netlink: 'syz.2.1976': attribute type 2 has an invalid length. [ 315.170310][T13238] netlink: 'syz.2.1976': attribute type 1 has an invalid length. [ 315.374710][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'. [ 315.471269][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'. [ 315.480404][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'. [ 315.535637][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'. [ 315.552640][T13253] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1979'. [ 317.213404][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.221757][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.274639][T13244] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 317.291676][T13245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 317.396221][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 317.515284][T13261] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1980'. [ 317.539640][T13261] netlink: 'syz.4.1980': attribute type 7 has an invalid length. [ 317.561418][T13261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1980'. [ 317.816802][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'. [ 317.849273][T13279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1987'. [ 317.884466][T13279] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 318.205778][T13301] netlink: 'syz.0.1992': attribute type 9 has an invalid length. [ 318.231264][T13307] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 318.308663][T13301] syzkaller0: entered promiscuous mode [ 318.324045][T13301] syzkaller0: entered allmulticast mode [ 318.334118][T13301] tipc: Started in network mode [ 318.341210][T13301] tipc: Node identity 46c0d487b275, cluster identity 4711 [ 318.356930][T13301] tipc: Enabled bearer , priority 0 [ 318.392821][T13300] tipc: Resetting bearer [ 318.459783][T13300] tipc: Disabling bearer [ 318.467280][T13315] netlink: 'syz.4.1996': attribute type 4 has an invalid length. [ 318.482156][T13315] openvswitch: netlink: Message has 512 unknown bytes. [ 318.937261][T13338] netlink: 'syz.0.2003': attribute type 1 has an invalid length. [ 319.411747][T13359] netlink: 'syz.3.2010': attribute type 1 has an invalid length. [ 319.527294][T13369] Cannot find add_set index 0 as target [ 319.541966][T13373] Cannot find add_set index 0 as target [ 319.756806][T13382] __nla_validate_parse: 7 callbacks suppressed [ 319.756826][T13382] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2018'. [ 319.948686][T13394] --map-set only usable from mangle table [ 320.094935][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2021'. [ 320.517893][T13415] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 320.527337][ T30] audit: type=1800 audit(1785663351.289:5): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2027" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 320.561524][T13415] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 320.633372][T13415] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 320.735777][T13429] syzkaller0: entered promiscuous mode [ 320.760715][T13429] syzkaller0: entered allmulticast mode [ 320.784104][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 320.797067][T13415] syz.0.2027 (13415) used greatest stack depth: 18536 bytes left [ 320.962095][T13434] syzkaller0: entered promiscuous mode [ 320.985106][T13434] syzkaller0: entered allmulticast mode [ 321.021989][T13434] tipc: Enabled bearer , priority 0 [ 321.034511][T13444] netlink: 'syz.0.2035': attribute type 5 has an invalid length. [ 321.060435][T13407] veth0: entered promiscuous mode [ 321.078759][T13434] tipc: Resetting bearer [ 321.098681][T13406] veth0: left promiscuous mode [ 321.120030][T13433] tipc: Resetting bearer [ 321.188866][T13433] tipc: Disabling bearer [ 321.497213][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2038'. [ 321.853280][T13481] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2046'. [ 321.947591][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 322.122456][T13500] block nbd2: Unsupported socket: should be TCP or UNIX. [ 322.138254][T13490] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2050'. [ 322.151256][T13490] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2050'. [ 322.189973][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 322.209729][T13497] tipc: Enabled bearer , priority 0 [ 322.249107][T13504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2054'. [ 322.353474][T13497] syzkaller0: entered promiscuous mode [ 322.359405][T13497] syzkaller0: entered allmulticast mode [ 322.365792][T13497] tipc: Resetting bearer [ 322.403203][T13496] tipc: Resetting bearer [ 322.586476][T13519] netlink: 'syz.3.2058': attribute type 1 has an invalid length. [ 324.484362][T13496] tipc: Disabling bearer [ 324.521583][T13519] 8021q: adding VLAN 0 to HW filter on device bond8 [ 324.582388][T13525] bond8: (slave ip6erspan0): making interface the new active one [ 324.631964][T13525] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 324.655592][T13528] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 324.680117][ T24] tipc: Node number set to 4105557127 [ 324.716257][T13536] lo: Caught tx_queue_len zero misconfig [ 324.929756][T13551] netlink: 'syz.2.2067': attribute type 13 has an invalid length. [ 324.956746][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 324.976060][T13551] gretap0: refused to change device tx_queue_len [ 324.985011][T13551] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 325.088671][T13558] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2069'. [ 325.110583][T13561] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2071'. [ 325.330521][T13575] syzkaller1: entered promiscuous mode [ 325.336167][T13575] syzkaller1: entered allmulticast mode [ 325.466955][T13582] dvmrp0: left allmulticast mode [ 325.649713][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2079'. [ 325.993520][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2083'. [ 326.002994][T13593] syz.2.2079 (13593) used greatest stack depth: 18312 bytes left [ 326.045323][T13610] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 326.053538][T13612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2083'. [ 326.188901][T13614] nbd: nbd1 already in use [ 326.210031][T13614] block nbd1: NBD_DISCONNECT [ 326.219750][T13614] block nbd1: Send disconnect failed -32 [ 326.256391][T13614] block nbd1: Send disconnect failed -32 [ 326.274412][T13614] block nbd1: shutting down sockets [ 326.395716][T13622] 8021q: adding VLAN 0 to HW filter on device bond10 [ 326.409657][T13622] bond0: (slave bond10): Enslaving as an active interface with a down link [ 326.419667][T13632] xt_hashlimit: overflow, try lower: 3/0 [ 326.954433][T13651] ipvlan2: entered promiscuous mode [ 326.975474][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'. [ 327.075213][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 327.152443][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2094'. [ 327.400975][T13673] netlink: 572 bytes leftover after parsing attributes in process `syz.0.2099'. [ 327.411396][T13673] IPVS: Unknown mcast interface: pimreg [ 327.721069][T13692] bridge_slave_0: left allmulticast mode [ 327.748190][T13692] bridge_slave_0: left promiscuous mode [ 327.756424][T13692] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.825244][T13692] bridge_slave_1: left allmulticast mode [ 327.846760][T13692] bridge_slave_1: left promiscuous mode [ 327.868205][T13692] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.895203][T13692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 328.759414][T13735] netlink: 'syz.4.2115': attribute type 10 has an invalid length. [ 328.788409][T13733] ip6gretap0: left promiscuous mode [ 328.807625][T13733] ip6gretap0: left allmulticast mode [ 328.817348][T13743] IPVS: set_ctl: invalid protocol: 255 172.30.1.3:20002 [ 329.002187][T13754] netlink: 'syz.2.2122': attribute type 2 has an invalid length. [ 329.105012][T13758] netlink: 'syz.0.2123': attribute type 11 has an invalid length. [ 329.141478][T13758] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 329.756202][T13794] ip6gre0: Caught tx_queue_len zero misconfig [ 329.764054][T13794] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 329.999129][T13804] netlink: 'syz.4.2135': attribute type 7 has an invalid length. [ 330.343980][T13820] xt_cluster: node mask cannot exceed total number of nodes [ 330.345242][T13819] __nla_validate_parse: 7 callbacks suppressed [ 330.345285][T13819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2138'. [ 330.383173][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2139'. [ 330.405780][T13818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2138'. [ 330.439342][T13829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2141'. [ 330.454631][T13819] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2138'. [ 330.461373][T13829] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2141'. [ 330.473533][T13818] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2138'. [ 330.588765][T13829] gretap2: entered promiscuous mode [ 330.618237][T13829] gretap2: entered allmulticast mode [ 330.679907][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2144'. [ 330.902610][T13845] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2149'. [ 333.831204][T13842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.213948][T13888] tipc: Can't bind to reserved service type 2 [ 334.427519][T13892] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 335.015797][T13907] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 335.715831][T13935] netlink: 'syz.2.2170': attribute type 11 has an invalid length. [ 336.258370][T13955] block nbd0: Unsupported socket: should be TCP or UNIX. [ 337.291355][T13972] can: request_module (can-proto-0) failed. [ 338.755015][T14011] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2190'. [ 339.227073][T14022] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2192'. [ 339.283120][T14026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2192'. [ 339.999903][ T5626] Bluetooth: hci4: command 0x0405 tx timeout [ 340.130810][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2194'. [ 340.703520][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2196'. [ 340.976225][T14065] bond9: Invalid ad_actor_system MAC address. [ 340.995276][T14065] bond9: option ad_actor_system: invalid value (149) [ 341.052970][T14065] bond9 (unregistering): Released all slaves [ 341.326641][T14075] syzkaller0: entered promiscuous mode [ 341.333331][T14075] syzkaller0: entered allmulticast mode [ 343.591108][T14097] gre0: entered promiscuous mode [ 343.606193][T14097] gre0: entered allmulticast mode [ 343.759460][T14101] xt_limit: Overflow, try lower: 271964/0 [ 343.791917][T14102] netlink: 'syz.3.2202': attribute type 10 has an invalid length. [ 343.822806][T14102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2202'. [ 343.905581][T14102] team0: Port device geneve1 added [ 344.502842][T14079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 344.762139][T14115] syzkaller0: entered allmulticast mode [ 344.985323][T14113] syzkaller0: entered promiscuous mode [ 345.351875][T14124] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 345.403124][T14124] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.642028][T14131] netlink: 'syz.1.2214': attribute type 3 has an invalid length. [ 345.750707][T14133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.260927][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2220'. [ 347.475898][T14156] TCP: TCP_TX_DELAY enabled [ 348.361030][T14167] xfrm0 speed is unknown, defaulting to 1000 [ 348.371212][T14167] virt_wifi0 speed is unknown, defaulting to 1000 [ 349.222144][T14146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.771716][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2225'. [ 350.137403][T14200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2228'. [ 350.164338][T14196] nbd: must specify a device to reconfigure [ 350.231282][T14201] xfrm2: entered allmulticast mode [ 350.304581][T14200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2228'. [ 351.519133][T14213] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 352.452234][ T30] audit: type=1800 audit(1785663383.209:6): pid=14252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2239" name="memory.events" dev="tmpfs" ino=2234 res=0 errno=0 [ 352.673124][ T30] audit: type=1804 audit(1785663383.209:7): pid=14252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2239" name="/newroot/435/memory.events" dev="tmpfs" ino=2234 res=1 errno=0 [ 352.858274][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2240'. [ 353.066388][T14259] netlink: 'syz.3.2241': attribute type 16 has an invalid length. [ 353.145911][T14259] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2241'. [ 353.256948][T14262] netlink: 'syz.4.2240': attribute type 1 has an invalid length. [ 353.420342][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2240'. [ 353.629706][T14255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.674822][T14270] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2244'. [ 355.178602][T14293] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2248'. [ 355.656586][ C0] sched: DL replenish lagged too much [ 355.982583][T14303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2251'. [ 356.028823][T14303] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2251'. [ 356.220423][T14303] veth5: entered promiscuous mode [ 356.358861][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2252'. [ 356.897007][T14322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2255'. [ 357.052968][T14331] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.537427][T14333] xt_CT: No such helper "snmp_trap" [ 357.649411][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'. [ 358.753578][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2266'. [ 358.838262][T14370] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 358.876306][T14375] x_tables: duplicate underflow at hook 3 [ 360.114316][T14389] openvswitch: netlink: Missing key (keys=40, expected=100) [ 360.323037][T14393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2271'. [ 361.008980][T14408] veth0_to_bond: entered allmulticast mode [ 361.060665][T14404] syzkaller0: entered promiscuous mode [ 361.089316][T14414] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2275'. [ 361.134257][T14404] syzkaller0: entered allmulticast mode [ 361.613126][T14419] netlink: 'syz.0.2276': attribute type 1 has an invalid length. [ 361.882124][T14419] bond11: entered promiscuous mode [ 361.903779][T14419] 8021q: adding VLAN 0 to HW filter on device bond11 [ 361.933214][T14419] netlink: 'syz.0.2276': attribute type 1 has an invalid length. [ 362.056494][T14420] 8021q: adding VLAN 0 to HW filter on device bond11 [ 362.091051][T14420] bond11: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 362.150577][T14420] bond11: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 362.215430][T14420] bond11: (slave ip6gre3): making interface the new active one [ 362.236123][T14420] ip6gre3: entered promiscuous mode [ 362.271167][T14420] bond11: (slave ip6gre3): Enslaving as an active interface with an up link [ 362.857141][T14445] sit0: mtu less than device minimum [ 363.202600][T14454] netlink: 'syz.0.2284': attribute type 1 has an invalid length. [ 363.742925][T14440] infiniband syz: set down [ 363.755841][T14440] infiniband syz: added ipvlan0 [ 363.816664][T14440] smbdirect: ib_dev[syz]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 363.853827][T14440] smbdirect: ib_dev[syz]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 363.873179][T14440] smbdirect: ib_dev[syz]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 363.945955][T14440] RDS/IB: syz: added [ 363.967495][T14440] smc: adding ib device syz with port count 1 [ 363.997985][T14440] smc: ib device syz port 1 has no pnetid [ 364.871007][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2291'. [ 365.215487][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2289'. [ 365.713439][T14494] block nbd1: Unsupported socket: should be TCP or UNIX. [ 369.838851][T14561] netlink: 'syz.4.2313': attribute type 1 has an invalid length. [ 369.886593][T14561] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2313'. [ 370.057222][T14569] netlink: 'syz.4.2313': attribute type 1 has an invalid length. [ 370.097369][T14569] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2313'. [ 370.139318][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 370.195207][T14572] netlink: 'syz.2.2314': attribute type 5 has an invalid length. [ 370.274999][T14572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2314'. [ 370.487540][T14572] geneve2: entered promiscuous mode [ 370.531323][T14572] geneve2: entered allmulticast mode [ 370.689974][ T450] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 370.725796][ T450] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 370.767352][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2316'. [ 370.799613][ T450] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 370.873726][ T450] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 372.100740][T14609] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 372.120611][T14609] syzkaller1: linktype set to 823 [ 372.275074][T14609] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 373.639572][T14642] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2328'. [ 374.088099][T14653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2330'. [ 374.165233][ T4943] Bluetooth: hci1: command 0x0406 tx timeout [ 374.272936][T14661] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 374.859994][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2330'. [ 375.096690][T14687] netlink: 'syz.3.2338': attribute type 3 has an invalid length. [ 375.104897][T14687] netlink: 'syz.3.2338': attribute type 1 has an invalid length. [ 375.117280][T14687] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2338'. [ 375.133563][T14688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2337'. [ 375.143124][T14685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2337'. [ 376.062243][T14702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2342'. [ 376.555586][T14711] netlink: 'syz.4.2345': attribute type 1 has an invalid length. [ 376.689772][T14711] 8021q: adding VLAN 0 to HW filter on device bond7 [ 376.811915][T14716] bond7: (slave gretap0): making interface the new active one [ 376.841556][T14716] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 377.599905][T14733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2352'. [ 377.613942][T14733] netlink: 'syz.2.2352': attribute type 7 has an invalid length. [ 377.622450][T14733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2352'. [ 377.825751][T14743] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2356'. [ 378.422964][T14756] xt_CT: No such helper "syz0" [ 378.503062][T14756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2360'. [ 378.531192][T14756] openvswitch: netlink: Flow key attr not present in new flow. [ 378.659546][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.666018][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.689430][T14764] netlink: 'syz.1.2363': attribute type 1 has an invalid length. [ 378.709695][T14764] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2363'. [ 378.790460][T14765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'. [ 379.450282][T14792] bridge_slave_0: invalid flags given to default FDB implementation [ 380.383796][T14815] __nla_validate_parse: 1 callbacks suppressed [ 380.383847][T14815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2373'. [ 380.460428][T14815] gre0: left allmulticast mode [ 380.473462][T14815] ip6tnl0: left allmulticast mode [ 380.538574][T14815] veth0_macvtap: left allmulticast mode [ 380.585026][T14815] gretap1: left allmulticast mode [ 380.596348][T14815] geneve3: left allmulticast mode [ 380.659839][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'. [ 381.220610][T14832] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2376'. [ 381.475240][T14837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2378'. [ 382.066217][T14848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2380'. [ 382.280197][T14849] bond7: Unable to set up delay as MII monitoring is disabled [ 382.405346][T14857] Cannot find set identified by id 65534 to match [ 382.544784][T14849] bond7 (unregistering): Released all slaves [ 383.312691][T14875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.228662][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 384.286923][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 384.365784][T14905] wg2: Caught tx_queue_len zero misconfig [ 384.632034][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 384.680046][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 385.121702][T14912] xt_hl: Unknown Hop Limit match mode: 206 [ 385.220796][T14919] pimreg: entered allmulticast mode [ 385.779180][T14944] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 386.073092][T14950] netlink: 'syz.4.2408': attribute type 1 has an invalid length. [ 386.096100][T14950] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2408'. [ 386.112287][T14950] netlink: 'syz.4.2408': attribute type 23 has an invalid length. [ 386.217210][T14952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2410'. [ 386.233902][T14952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2410'. [ 386.861201][T14975] netlink: 'syz.3.2416': attribute type 2 has an invalid length. [ 388.738485][T15001] xt_l2tp: v2 sid > 0xffff: 1114112 [ 391.064789][T14986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.296306][T15009] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 396.914217][T15016] bond0: entered promiscuous mode [ 396.930615][T15016] bond_slave_0: entered promiscuous mode [ 396.943675][T15016] : entered promiscuous mode [ 397.190907][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'. [ 397.273661][T15027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2428'. [ 397.380742][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'. [ 397.396432][T15036] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2431'. [ 397.414846][T15028] ip6gre4: entered promiscuous mode [ 397.428657][T15027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2428'. [ 398.084657][T15058] netlink: 'syz.2.2436': attribute type 5 has an invalid length. [ 398.115328][T15058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2436'. [ 398.234066][T15061] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 398.300900][T15061] bond13 (unregistering): Released all slaves [ 398.698208][T15072] 0: reclassify loop, rule prio 0, protocol 03 [ 399.980335][T15088] bond10 (unregistering): Released all slaves [ 400.750697][T15045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.361635][T15104] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2448'. [ 401.388357][T15103] gretap2: entered promiscuous mode [ 401.395950][T15103] batman_adv: batadv0: Adding interface: gretap2 [ 401.408005][T15103] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 401.429865][T15103] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 401.643599][T15107] sit0: entered promiscuous mode [ 401.662665][T15107] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 401.681603][T15107] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2450'. [ 402.613125][T15119] netlink: 'syz.4.2455': attribute type 2 has an invalid length. [ 402.799377][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2456'. [ 405.768495][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 405.923915][T15160] xfrm0 speed is unknown, defaulting to 1000 [ 405.933407][T15160] virt_wifi0 speed is unknown, defaulting to 1000 [ 406.119355][T15171] xt_TCPMSS: Only works on TCP SYN packets [ 406.253810][T15174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2468'. [ 407.138514][T15134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.304947][T15190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.814614][T15232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.661017][T15274] bond13: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 413.786809][T15274] bond13 (unregistering): Released all slaves [ 414.366932][T15291] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 415.544074][T15323] netlink: 'syz.2.2497': attribute type 10 has an invalid length. [ 417.038080][T15331] syzkaller0: entered promiscuous mode [ 417.057297][T15331] syzkaller0: entered allmulticast mode [ 417.137559][T15331] tipc: Enabled bearer , priority 0 [ 417.338393][T15330] tipc: Resetting bearer [ 417.451944][T15330] tipc: Disabling bearer [ 417.552373][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'. [ 417.974183][T15356] netlink: 'syz.4.2509': attribute type 2 has an invalid length. [ 418.012547][T15357] netlink: 'syz.4.2509': attribute type 2 has an invalid length. [ 418.173470][T15364] netlink: 'syz.4.2511': attribute type 1 has an invalid length. [ 418.373133][T15366] xt_l2tp: invalid flags combination: 8 [ 418.937070][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2514'. [ 419.281166][T15384] 8021q: VLANs not supported on ip6tnl0 [ 419.914278][T15400] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 419.927341][T15399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.945645][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 419.955441][T15399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.978286][T15400] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 419.986770][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 419.996655][T15399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.013490][T15400] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 420.021828][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 420.031771][T15399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.048839][T15400] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 420.063325][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 420.092139][T15399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.138688][T15400] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 420.156078][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 420.177970][T15399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.226375][T15403] netlink: 'syz.2.2520': attribute type 2 has an invalid length. [ 420.235953][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 420.293972][T15399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.352438][T15399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.392189][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 420.433246][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 420.459122][T15399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.516198][T15399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.582515][T15400] validate_nla: 4 callbacks suppressed [ 420.582620][T15400] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 420.613229][T15400] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 420.622683][T15400] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 420.631398][T15400] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 420.644028][T15400] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 420.669478][T15400] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 420.696473][T15400] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 422.063867][T15452] netlink: 'syz.4.2527': attribute type 1 has an invalid length. [ 422.197051][T15452] 8021q: adding VLAN 0 to HW filter on device bond8 [ 422.241638][T15452] netlink: 'syz.4.2527': attribute type 10 has an invalid length. [ 422.275170][T15458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 422.626731][T15467] __nla_validate_parse: 8 callbacks suppressed [ 422.626752][T15467] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2533'. [ 423.190753][T15481] bond10: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 423.483155][T15481] bond10 (unregistering): Released all slaves [ 424.664915][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2544'. [ 424.767016][T15511] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2545'. [ 424.776727][T15511] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2545'. [ 425.267461][T15524] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2550'. [ 425.317980][T15524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2550'. [ 425.495676][T15526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2550'. [ 425.522976][T15526] nbd: device at index 64 is going down [ 425.927309][T15013] udevd[15013]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 426.260460][T15545] sctp: [Deprecated]: syz.2.2555 (pid 15545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.260460][T15545] Use struct sctp_sack_info instead [ 426.531332][T15552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2558'. [ 426.563891][T15552] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2558'. [ 426.596211][T15553] tipc: Failed to remove unknown binding: 66,1,1/4105557127:4108259042/4108259044 [ 426.626282][T15553] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2557'. [ 427.338670][T15568] netlink: 'syz.3.2564': attribute type 1 has an invalid length. [ 427.726739][T15586] __nla_validate_parse: 1 callbacks suppressed [ 427.726760][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2569'. [ 427.782735][T15586] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2569'. [ 428.172863][T15597] syzkaller1: entered promiscuous mode [ 428.194167][T15597] syzkaller1: entered allmulticast mode [ 428.943944][T15607] netlink: 'syz.0.2574': attribute type 8 has an invalid length. [ 428.953976][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2574'. [ 430.846878][T15622] bond9: entered promiscuous mode [ 430.866701][T15622] bond9: entered allmulticast mode [ 430.886058][T15622] 8021q: adding VLAN 0 to HW filter on device bond9 [ 431.126903][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2581'. [ 432.348252][T15666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2590'. [ 432.757267][T15675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2593'. [ 432.787460][T15675] net_ratelimit: 55 callbacks suppressed [ 432.787608][T15675] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 433.569177][T15679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2595'. [ 433.912263][T15690] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2596'. [ 434.190059][T15697] netlink: 'syz.1.2600': attribute type 1 has an invalid length. [ 434.206901][T15698] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2599'. [ 434.290628][T15697] bond10: entered promiscuous mode [ 434.296466][T15697] 8021q: adding VLAN 0 to HW filter on device bond10 [ 434.546928][T15706] netlink: 'syz.2.2599': attribute type 1 has an invalid length. [ 434.577368][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2599'. [ 435.622910][T15723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2604'. [ 435.661985][T15723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2604'. [ 437.033421][T15740] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 437.183233][T15698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.592715][T15745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2611'. [ 437.759707][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 438.480859][T15767] nbd: socks must be embedded in a SOCK_ITEM attr [ 438.549463][T15770] netlink: 'syz.2.2618': attribute type 1 has an invalid length. [ 438.630918][T15770] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2618'. [ 438.696699][T15770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2618'. [ 438.776076][T15770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2618'. [ 438.889217][T15770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2618'. [ 438.978345][T15779] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 440.015142][T15806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.095037][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.103866][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.976830][T15825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2632'. [ 441.744924][T15836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2635'. [ 441.967236][T15841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2637'. [ 442.114079][T15844] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2638'. [ 442.199736][T15848] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2638'. [ 442.878613][T15868] syzkaller0: entered promiscuous mode [ 442.892928][T15868] syzkaller0: entered allmulticast mode [ 443.240735][T15875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 443.257374][T15875] x_tables: duplicate underflow at hook 1 [ 443.727443][T15885] bond9 (unregistering): Released all slaves [ 444.368257][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2651'. [ 444.988903][T15895] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 445.789642][T15899] netlink: 'syz.1.2652': attribute type 11 has an invalid length. [ 445.893721][T15905] netlink: 'syz.3.2654': attribute type 4 has an invalid length. [ 445.926737][T15906] netlink: 'syz.3.2654': attribute type 4 has an invalid length. [ 446.071371][T15901] bond13 (unregistering): Released all slaves [ 446.092561][T15913] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2655'. [ 446.500406][T15907] syzkaller0: entered promiscuous mode [ 446.514705][T15907] syzkaller0: entered allmulticast mode [ 447.511823][T15930] xt_cgroup: invalid path, errno=-2 [ 447.551326][T15932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2661'. [ 447.592429][T15932] block nbd4: not configured, cannot reconfigure [ 447.802002][T15940] ieee802154 phy0 wpan0: encryption failed: -22 [ 491.014975][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 491.113795][ T4943] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 493.232722][ T4943] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.735406][ T4943] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 494.108011][ T4943] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 494.576724][ T4943] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.448629][ T4943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 504.602597][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.204200][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.688267][ T4943] Bluetooth: hci5: command tx timeout [ 512.101496][ T4943] Bluetooth: hci5: command tx timeout [ 514.300817][ T4943] Bluetooth: hci5: command tx timeout [ 516.771611][ T4943] Bluetooth: hci5: command tx timeout [ 523.465738][T15967] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 523.918968][T15967] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 523.951640][T15967] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 524.969973][T15967] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 526.069927][ T5626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 526.151503][T15970] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 526.824409][ T4943] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 527.252674][ T4943] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 528.671413][ T4943] Bluetooth: hci6: command tx timeout [ 529.322420][ T4943] Bluetooth: hci7: command 0x1009 tx timeout [ 529.661339][T15967] Bluetooth: hci7: Opcode 0x1009 failed: -110 [ 530.738638][T15967] Bluetooth: hci6: command tx timeout [ 531.736625][T15967] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 532.117759][T15967] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 532.486215][T15967] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 532.812250][ T4943] Bluetooth: hci6: command tx timeout [ 533.386028][ T4943] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 534.684624][ T4943] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 534.732300][ T4943] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 535.072174][ T5626] Bluetooth: hci6: command tx timeout [ 535.081018][ T5626] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 535.205078][ T5626] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 535.311483][T15977] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 535.465063][T15977] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 538.614782][T15970] Bluetooth: hci7: command tx timeout [ 538.654883][T15970] Bluetooth: hci8: command tx timeout [ 540.803196][T15970] Bluetooth: hci7: command tx timeout [ 540.825529][T15967] Bluetooth: hci8: command tx timeout [ 543.079523][T15967] Bluetooth: hci8: command tx timeout [ 543.085000][T15967] Bluetooth: hci7: command tx timeout [ 545.127461][T15967] Bluetooth: hci8: command tx timeout [ 545.308206][T15967] Bluetooth: hci7: command tx timeout [ 564.376286][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.397223][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.271673][T15967] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 581.343706][T15970] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 581.914364][T15967] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 583.726524][T15967] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 583.927785][T15967] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 585.315183][T15967] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 585.922646][T15967] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 589.557964][T15970] Bluetooth: hci9: command tx timeout [ 592.013142][T15970] Bluetooth: hci9: command tx timeout [ 594.079759][T15970] Bluetooth: hci9: command tx timeout [ 594.997234][ T31] INFO: task kworker/u8:4:61 blocked for more than 144 seconds. [ 596.088593][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 596.142576][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.168925][T15970] Bluetooth: hci9: command tx timeout [ 596.299235][ T31] task:kworker/u8:4 state:D stack:22568 pid:61 tgid:61 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 596.476599][ T31] Workqueue: events_unbound linkwatch_event [ 596.545253][ T31] Call Trace: [ 596.587334][ T31] [ 596.620459][ T31] __schedule+0x17d9/0x56c0 [ 596.663814][ T31] ? __lock_acquire+0x683/0x2cf0 [ 596.727116][ T31] ? __lock_acquire+0x683/0x2cf0 [ 596.776751][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 596.823716][ T31] ? __pfx___schedule+0x10/0x10 [ 596.846515][ T31] ? schedule+0x90/0x2b0 [ 596.887533][ T31] schedule+0x164/0x2b0 [ 596.954020][ T31] schedule_preempt_disabled+0x13/0x30 [ 596.982126][ T31] __mutex_lock+0x7bf/0x1550 [ 597.013733][ T31] ? __mutex_lock+0x5d4/0x1550 [ 597.044952][ T31] ? linkwatch_event+0xe/0x60 [ 597.085308][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 597.117105][ T31] ? rcu_is_watching+0x15/0xb0 [ 597.149043][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 597.183852][ T31] linkwatch_event+0xe/0x60 [ 597.209935][ T31] process_scheduled_works+0xa8e/0x14e0 [ 597.243398][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 597.284299][T15967] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 597.286834][ T31] ? assign_work+0x3cf/0x5d0 [ 597.335106][T15967] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 597.344656][ T31] worker_thread+0xa47/0xfb0 [ 597.344718][ T31] ? __kthread_parkme+0x71/0x1f0 [ 597.344760][ T31] kthread+0x388/0x470 [ 597.344794][ T31] ? __pfx_worker_thread+0x10/0x10 [ 597.344821][ T31] ? __pfx_kthread+0x10/0x10 [ 597.344855][ T31] ret_from_fork+0x514/0xb70 [ 597.344934][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 597.344968][ T31] ? __switch_to+0xc89/0x1420 [ 597.345028][ T31] ? __pfx_kthread+0x10/0x10 [ 597.345065][ T31] ret_from_fork_asm+0x1a/0x30 [ 597.345106][ T31] [ 597.596061][ T31] INFO: task syz.1.2656:15920 blocked for more than 147 seconds. [ 597.616681][ T31] Not tainted syzkaller #0 [ 597.944627][T15967] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 598.048846][T15967] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 598.060151][T15967] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 598.087281][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.208129][ T31] task:syz.1.2656 state:D stack:27336 pid:15920 tgid:15919 ppid:5637 task_flags:0x400040 flags:0x00080003 [ 598.228252][ T31] Call Trace: [ 598.231660][ T31] [ 598.234631][ T31] __schedule+0x17d9/0x56c0 [ 598.246522][ T31] ? __lock_acquire+0x683/0x2cf0 [ 598.251955][ T31] ? __lock_acquire+0x683/0x2cf0 [ 598.257007][ T31] ? __pfx___schedule+0x10/0x10 [ 598.265688][ T31] ? schedule+0x90/0x2b0 [ 598.270303][ T31] schedule+0x164/0x2b0 [ 598.274549][ T31] schedule_preempt_disabled+0x13/0x30 [ 598.280709][ T31] __mutex_lock+0x7bf/0x1550 [ 598.285387][ T31] ? __mutex_lock+0x5d4/0x1550 [ 598.293734][ T31] ? raw_release+0x1bb/0x9f0 [ 598.299070][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 598.304177][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 598.309651][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 598.314851][ T31] raw_release+0x1bb/0x9f0 [ 598.324005][ T31] sock_close+0xad/0x220 [ 598.338270][ T31] ? __pfx_sock_close+0x10/0x10 [ 598.348663][ T31] __fput+0x418/0xa50 [ 598.358443][ T31] task_work_run+0x1d9/0x270 [ 598.379837][ T31] ? __pfx_task_work_run+0x10/0x10 [ 598.387640][ T31] ? kick_process+0xeb/0x160 [ 598.401280][ T31] get_signal+0x1181/0x12c0 [ 598.417832][ T31] ? __fput_deferred+0x216/0x380 [ 598.422993][ T31] arch_do_signal_or_restart+0xbb/0x860 [ 598.438409][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 598.448978][ T31] ? __x64_sys_recvmsg+0x25a/0x290 [ 598.459277][ T31] exit_to_user_mode_loop+0x104/0x730 [ 598.478710][ T31] ? rcu_is_watching+0x15/0xb0 [ 598.483760][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.496072][ T31] do_syscall_64+0x353/0x580 [ 598.501994][ T31] ? trace_irq_disable+0x3b/0x140 [ 598.507144][ T31] ? clear_bhb_loop+0x40/0x90 [ 598.515850][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.522894][ T31] RIP: 0033:0x7f836c79e019 [ 598.527429][ T31] RSP: 002b:00007f836d5bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 598.537245][ T31] RAX: fffffffffffffe00 RBX: 00007f836ca25fa0 RCX: 00007f836c79e019 [ 598.546002][ T31] RDX: 0000000000000000 RSI: 0000200000002e80 RDI: 0000000000000005 [ 598.568043][ T31] RBP: 00007f836c83500c R08: 0000000000000000 R09: 0000000000000000 [ 598.585923][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.607760][ T31] R13: 00007f836ca26038 R14: 00007f836ca25fa0 R15: 00007ffe2a865e58 [ 598.633868][ T31] [ 598.641766][ T31] INFO: task syz.3.2659:15927 blocked for more than 148 seconds. [ 598.687742][ T31] Not tainted syzkaller #0 [ 598.732029][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.742590][ T31] task:syz.3.2659 state:D stack:27200 pid:15927 tgid:15926 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 598.768419][ T31] Call Trace: [ 598.778944][ T31] [ 598.782346][ T31] __schedule+0x17d9/0x56c0 [ 598.798861][ T31] ? __lock_acquire+0x683/0x2cf0 [ 598.803921][ T31] ? __lock_acquire+0x683/0x2cf0 [ 598.817817][ T31] ? __pfx___schedule+0x10/0x10 [ 598.830612][ T31] ? schedule+0x90/0x2b0 [ 598.835804][ T31] schedule+0x164/0x2b0 [ 598.849718][ T31] schedule_preempt_disabled+0x13/0x30 [ 598.868548][ T31] __mutex_lock+0x7bf/0x1550 [ 598.873255][ T31] ? __mutex_lock+0x5d4/0x1550 [ 598.889129][ T31] ? rtnetlink_rcv_msg+0x767/0xc00 [ 598.894474][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 598.907694][ T31] rtnetlink_rcv_msg+0x767/0xc00 [ 598.914269][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 598.928108][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 598.941634][ T31] ? ref_tracker_free+0x689/0x830 [ 598.959927][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 598.978414][ T31] netlink_rcv_skb+0x226/0x4a0 [ 598.983474][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 598.998503][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.005305][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.017817][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.031497][ T31] netlink_unicast+0x7bb/0x940 [ 599.060546][ T31] netlink_sendmsg+0x813/0xb40 [ 599.087665][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.093169][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 599.119577][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.139635][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 599.156044][ T31] ____sys_sendmsg+0x54e/0x850 [ 599.173699][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.184122][ T31] ? import_iovec+0x73/0xa0 [ 599.189955][ T31] ___sys_sendmsg+0x2a5/0x360 [ 599.194746][ T31] ? __lock_acquire+0x683/0x2cf0 [ 599.200314][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.208137][ T31] ? futex_wait+0x2a2/0x390 [ 599.212806][ T31] ? __fget_files+0x2a/0x420 [ 599.217492][ T31] ? __fget_files+0x3a2/0x420 [ 599.223688][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 599.231208][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.237090][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.243701][ T31] do_syscall_64+0x174/0x580 [ 599.249837][ T31] ? trace_irq_disable+0x3b/0x140 [ 599.254962][ T31] ? clear_bhb_loop+0x40/0x90 [ 599.260321][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.266323][ T31] RIP: 0033:0x7fd33259e019 [ 599.273558][ T31] RSP: 002b:00007fd3307f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.285626][ T31] RAX: ffffffffffffffda RBX: 00007fd332825fa0 RCX: 00007fd33259e019 [ 599.294109][ T31] RDX: 0000000000000000 RSI: 0000200000005000 RDI: 0000000000000004 [ 599.302843][ T31] RBP: 00007fd33263500c R08: 0000000000000000 R09: 0000000000000000 [ 599.311834][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.320391][ T31] R13: 00007fd332826038 R14: 00007fd332825fa0 R15: 00007ffcf2985928 [ 599.328879][ T31] [ 599.332082][ T31] INFO: task syz.3.2659:15928 blocked for more than 149 seconds. [ 599.351427][ T31] Not tainted syzkaller #0 [ 599.356627][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 599.370866][ T31] task:syz.3.2659 state:D stack:26688 pid:15928 tgid:15926 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 599.396904][ T31] Call Trace: [ 599.401207][ T31] [ 599.404209][ T31] __schedule+0x17d9/0x56c0 [ 599.409525][ T31] ? __lock_acquire+0x683/0x2cf0 [ 599.414553][ T31] ? __lock_acquire+0x683/0x2cf0 [ 599.420527][ T31] ? stack_depot_save_flags+0x33/0x800 [ 599.426126][ T31] ? __pfx___schedule+0x10/0x10 [ 599.432286][ T31] ? schedule+0x90/0x2b0 [ 599.436634][ T31] schedule+0x164/0x2b0 [ 599.441334][ T31] schedule_preempt_disabled+0x13/0x30 [ 599.446884][ T31] __mutex_lock+0x7bf/0x1550 [ 599.455803][ T31] ? __mutex_lock+0x5d4/0x1550 [ 599.461680][ T31] ? rtnl_newlink+0x8a3/0x1bd0 [ 599.466536][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 599.472687][ T31] ? ns_capable+0x89/0xe0 [ 599.477106][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 599.483326][ T31] rtnl_newlink+0x8a3/0x1bd0 [ 599.489142][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 599.494511][ T31] ? netlink_unicast+0x77f/0x940 [ 599.505794][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 599.512454][ T31] ? do_syscall_64+0x174/0x580 [ 599.517308][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.524645][ T31] ? kasan_quarantine_put+0xbb/0x1f0 [ 599.530567][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.535854][ T31] ? nlmon_xmit+0xb0/0x100 [ 599.540981][ T31] ? kmem_cache_free+0x182/0x650 [ 599.546046][ T31] ? __lock_acquire+0x683/0x2cf0 [ 599.552256][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 599.559120][ T31] ? __local_bh_enable_ip+0xd0/0x130 [ 599.564496][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.570405][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 599.575611][ T31] ? __local_bh_enable_ip+0xd0/0x130 [ 599.582539][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 599.588163][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 599.593368][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 599.598734][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 599.605867][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 599.616886][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.622754][ T31] ? ref_tracker_free+0x689/0x830 [ 599.628279][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 599.633758][ T31] netlink_rcv_skb+0x226/0x4a0 [ 599.639689][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.645249][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.651273][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.656555][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.662405][ T31] netlink_unicast+0x7bb/0x940 [ 599.667270][ T31] netlink_sendmsg+0x813/0xb40 [ 599.674022][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.679689][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 599.684715][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.691172][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 599.696303][ T31] ____sys_sendmsg+0x54e/0x850 [ 599.702234][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.708020][ T31] ? import_iovec+0x73/0xa0 [ 599.712752][ T31] ___sys_sendmsg+0x2a5/0x360 [ 599.717507][ T31] ? __lock_acquire+0x683/0x2cf0 [ 599.730084][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.735379][ T31] ? futex_wake+0x51b/0x5f0 [ 599.740451][ T31] ? __fget_files+0x2a/0x420 [ 599.745145][ T31] ? __fget_files+0x3a2/0x420 [ 599.750441][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 599.755462][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.763692][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.770344][ T31] do_syscall_64+0x174/0x580 [ 599.775059][ T31] ? trace_irq_disable+0x3b/0x140 [ 599.781392][ T31] ? clear_bhb_loop+0x40/0x90 [ 599.786151][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.793332][ T31] RIP: 0033:0x7fd33259e019 [ 599.798563][ T31] RSP: 002b:00007fd3307d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.807082][ T31] RAX: ffffffffffffffda RBX: 00007fd332826090 RCX: 00007fd33259e019 [ 599.815895][ T31] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 599.826711][ T31] RBP: 00007fd33263500c R08: 0000000000000000 R09: 0000000000000000 [ 599.840154][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.849223][ T31] R13: 00007fd332826128 R14: 00007fd332826090 R15: 00007ffcf2985928 [ 599.857281][ T31] [ 599.895118][ T31] INFO: task syz.2.2662:15937 blocked for more than 149 seconds. [ 599.903796][ T31] Not tainted syzkaller #0 [ 599.924818][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 599.954302][ T31] task:syz.2.2662 state:D stack:26696 pid:15937 tgid:15936 ppid:5639 task_flags:0x400140 flags:0x00080002 [ 599.970164][ T31] Call Trace: [ 599.973555][ T31] [ 599.976527][ T31] __schedule+0x17d9/0x56c0 [ 599.982098][ T31] ? __lock_acquire+0x683/0x2cf0 [ 599.987128][ T31] ? __lock_acquire+0x683/0x2cf0 [ 599.992743][ T31] ? stack_depot_save_flags+0x33/0x800 [ 600.005995][ T31] ? __pfx___schedule+0x10/0x10 [ 600.011557][ T31] ? schedule+0x90/0x2b0 [ 600.015881][ T31] schedule+0x164/0x2b0 [ 600.021113][ T31] schedule_preempt_disabled+0x13/0x30 [ 600.026651][ T31] __mutex_lock+0x7bf/0x1550 [ 600.032543][ T31] ? __mutex_lock+0x5d4/0x1550 [ 600.037408][ T31] ? rtnl_newlink+0x8a3/0x1bd0 [ 600.043834][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 600.050122][ T31] ? ns_capable+0x89/0xe0 [ 600.054556][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 600.067125][ T31] rtnl_newlink+0x8a3/0x1bd0 [ 600.072876][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 600.078546][ T31] ? netlink_unicast+0x77f/0x940 [ 600.083566][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 600.089952][ T31] ? do_syscall_64+0x174/0x580 [ 600.094805][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.101485][ T31] ? kasan_quarantine_put+0xbb/0x1f0 [ 600.106858][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 600.113392][ T31] ? nlmon_xmit+0xb0/0x100 [ 600.118880][ T31] ? kmem_cache_free+0x182/0x650 [ 600.124074][ T31] ? __lock_acquire+0x683/0x2cf0 [ 600.130219][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 600.135434][ T31] ? __local_bh_enable_ip+0xd0/0x130 [ 600.141281][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 600.146575][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 600.153065][ T31] ? __local_bh_enable_ip+0xd0/0x130 [ 600.158669][T15970] Bluetooth: hci10: command tx timeout [ 600.175335][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 600.181589][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 600.186806][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 600.192468][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 600.197488][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 600.203116][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 600.209846][ T31] ? ref_tracker_free+0x689/0x830 [ 600.214965][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 600.221684][ T31] netlink_rcv_skb+0x226/0x4a0 [ 600.226657][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 600.232768][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 600.239639][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 600.244967][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 600.250876][ T31] netlink_unicast+0x7bb/0x940 [ 600.255737][ T31] netlink_sendmsg+0x813/0xb40 [ 600.261031][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.266397][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 600.272623][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.284261][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 600.289941][ T31] ____sys_sendmsg+0x54e/0x850 [ 600.294797][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.301246][ T31] ? import_iovec+0x73/0xa0 [ 600.305828][ T31] ___sys_sendmsg+0x2a5/0x360 [ 600.311140][ T31] ? __lock_acquire+0x683/0x2cf0 [ 600.316172][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.321889][ T31] ? futex_wake+0x51b/0x5f0 [ 600.326659][ T31] ? __fget_files+0x2a/0x420 [ 600.335201][ T31] ? __fget_files+0x3a2/0x420 [ 600.340372][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 600.345399][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.352016][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.359089][ T31] do_syscall_64+0x174/0x580 [ 600.363776][ T31] ? trace_irq_disable+0x3b/0x140 [ 600.369548][ T31] ? clear_bhb_loop+0x40/0x90 [ 600.374315][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.380791][ T31] RIP: 0033:0x7fb0f239e019 [ 600.385296][ T31] RSP: 002b:00007fb0f3256028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.403638][ T31] RAX: ffffffffffffffda RBX: 00007fb0f2625fa0 RCX: 00007fb0f239e019 [ 600.412833][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 600.422011][ T31] RBP: 00007fb0f243500c R08: 0000000000000000 R09: 0000000000000000 [ 600.430486][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.440108][ T31] R13: 00007fb0f2626038 R14: 00007fb0f2625fa0 R15: 00007ffd247d5b98 [ 600.449229][ T31] [ 600.475233][ T31] INFO: task syz.2.2662:15942 blocked for more than 150 seconds. [ 600.484584][ T31] Not tainted syzkaller #0 [ 600.490183][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 600.502359][ T31] task:syz.2.2662 state:D stack:26624 pid:15942 tgid:15936 ppid:5639 task_flags:0x400140 flags:0x00080002 [ 600.515865][ T31] Call Trace: [ 600.522934][ T31] [ 600.525946][ T31] __schedule+0x17d9/0x56c0 [ 600.531139][ T31] ? __lock_acquire+0x683/0x2cf0 [ 600.536342][ T31] ? __lock_acquire+0x683/0x2cf0 [ 600.542514][ T31] ? __pfx___schedule+0x10/0x10 [ 600.547475][ T31] ? schedule+0x90/0x2b0 [ 600.553074][ T31] schedule+0x164/0x2b0 [ 600.557335][ T31] schedule_preempt_disabled+0x13/0x30 [ 600.563306][ T31] __mutex_lock+0x7bf/0x1550 [ 600.569922][ T31] ? __mutex_lock+0x5d4/0x1550 [ 600.574774][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 600.580008][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 600.585138][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 600.590886][ T31] ? radix_tree_lookup+0x240/0x290 [ 600.596623][ T31] genl_rcv_msg+0x10b/0x7a0 [ 600.603444][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 600.609834][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 600.615300][ T31] netlink_rcv_skb+0x226/0x4a0 [ 600.620718][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 600.625830][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 600.636191][ T31] ? down_read+0x2be/0x330 [ 600.642239][ T31] genl_rcv+0x28/0x40 [ 600.646586][ T31] netlink_unicast+0x7bb/0x940 [ 600.651997][ T31] netlink_sendmsg+0x813/0xb40 [ 600.656864][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.664544][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 600.669969][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.675337][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 600.680971][ T31] ____sys_sendmsg+0x54e/0x850 [ 600.685829][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.692461][ T31] ? import_iovec+0x73/0xa0 [ 600.697045][ T31] ___sys_sendmsg+0x2a5/0x360 [ 600.702782][ T31] ? __lock_acquire+0x683/0x2cf0 [ 600.708206][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.713490][ T31] ? futex_wait+0x2a2/0x390 [ 600.719206][ T31] ? __fget_files+0x2a/0x420 [ 600.723903][ T31] ? __fget_files+0x3a2/0x420 [ 600.729256][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 600.734278][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.744259][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.751399][ T31] do_syscall_64+0x174/0x580 [ 600.756073][ T31] ? trace_irq_disable+0x3b/0x140 [ 600.761615][ T31] ? clear_bhb_loop+0x40/0x90 [ 600.766372][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.774113][ T31] RIP: 0033:0x7fb0f239e019 [ 600.779645][ T31] RSP: 002b:00007fb0f3235028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.788539][ T31] RAX: ffffffffffffffda RBX: 00007fb0f2626090 RCX: 00007fb0f239e019 [ 600.796619][ T31] RDX: 0000000000000110 RSI: 00002000000004c0 RDI: 0000000000000005 [ 600.805167][ T31] RBP: 00007fb0f243500c R08: 0000000000000000 R09: 0000000000000000 [ 600.814887][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.823320][ T31] R13: 00007fb0f2626128 R14: 00007fb0f2626090 R15: 00007ffd247d5b98 [ 600.832323][ T31] [ 600.835690][ T31] INFO: task syz.2.2662:15944 blocked for more than 150 seconds. [ 600.844632][ T31] Not tainted syzkaller #0 [ 600.853925][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 600.874583][ T31] task:syz.2.2662 state:D stack:27200 pid:15944 tgid:15936 ppid:5639 task_flags:0x400140 flags:0x00080002 [ 600.891681][ T31] Call Trace: [ 600.895081][ T31] [ 600.899140][ T31] __schedule+0x17d9/0x56c0 [ 600.903770][ T31] ? __lock_acquire+0x683/0x2cf0 [ 600.909413][ T31] ? __lock_acquire+0x683/0x2cf0 [ 600.914446][ T31] ? __nla_validate_parse+0x2429/0x2d50 [ 600.921715][ T31] ? __pfx___schedule+0x10/0x10 [ 600.926657][ T31] ? schedule+0x90/0x2b0 [ 600.932308][ T31] schedule+0x164/0x2b0 [ 600.936551][ T31] schedule_preempt_disabled+0x13/0x30 [ 600.942715][ T31] __mutex_lock+0x7bf/0x1550 [ 600.947438][ T31] ? __mutex_lock+0x5d4/0x1550 [ 600.953853][ T31] ? team_nl_options_set_doit+0xb3/0xe60 [ 600.965067][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 600.970687][ T31] team_nl_options_set_doit+0xb3/0xe60 [ 600.976248][ T31] ? rcu_is_watching+0x15/0xb0 [ 600.981636][ T31] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 600.988768][ T31] ? __kmalloc_noprof+0x396/0x720 [ 600.993880][ T31] ? __nla_parse+0x40/0x60 [ 600.999905][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 601.006323][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 601.013369][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 601.019997][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 601.026172][ T31] ? bpf_lsm_capable+0x9/0x20 [ 601.031943][ T31] ? security_capable+0x7e/0x2c0 [ 601.037062][ T31] genl_rcv_msg+0x614/0x7a0 [ 601.049397][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.054529][ T31] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 601.061212][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 601.066683][ T31] netlink_rcv_skb+0x226/0x4a0 [ 601.077002][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.083627][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.089518][ T31] ? down_read+0x2be/0x330 [ 601.094023][ T31] genl_rcv+0x28/0x40 [ 601.098474][ T31] netlink_unicast+0x7bb/0x940 [ 601.103648][ T31] netlink_sendmsg+0x813/0xb40 [ 601.110255][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.115625][ T31] ? kasan_save_free_info+0x40/0x50 [ 601.121379][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 601.126401][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.132393][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 601.137513][ T31] ____sys_sendmsg+0x54e/0x850 [ 601.143974][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.149849][ T31] ? import_iovec+0x73/0xa0 [ 601.154463][ T31] ___sys_sendmsg+0x2a5/0x360 [ 601.159711][ T31] ? __lock_acquire+0x683/0x2cf0 [ 601.164753][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.171260][ T31] ? tomoyo_path_number_perm+0x219/0x5f0 [ 601.177170][ T31] ? __fget_files+0x2a/0x420 [ 601.186074][ T31] ? __fget_files+0x3a2/0x420 [ 601.193851][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 601.203377][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.209345][ T31] ? kfree+0x4d/0x640 [ 601.213412][ T31] ? __pfx_kcov_ioctl+0x10/0x10 [ 601.219563][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.225732][ T31] do_syscall_64+0x174/0x580 [ 601.231576][ T31] ? trace_irq_disable+0x3b/0x140 [ 601.236723][ T31] ? clear_bhb_loop+0x40/0x90 [ 601.241916][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.248992][ T31] RIP: 0033:0x7fb0f239e019 [ 601.253481][ T31] RSP: 002b:00007fb0f3214028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.263064][ T31] RAX: ffffffffffffffda RBX: 00007fb0f2626180 RCX: 00007fb0f239e019 [ 601.272313][ T31] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000005 [ 601.293642][ T31] RBP: 00007fb0f243500c R08: 0000000000000000 R09: 0000000000000000 [ 601.304056][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.312502][ T31] R13: 00007fb0f2626218 R14: 00007fb0f2626180 R15: 00007ffd247d5b98 [ 601.321541][ T31] [ 601.375252][ T31] INFO: task syz.2.2662:15948 blocked for more than 151 seconds. [ 601.395844][ T31] Not tainted syzkaller #0 [ 601.410296][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 601.419439][ T31] task:syz.2.2662 state:D stack:27872 pid:15948 tgid:15936 ppid:5639 task_flags:0x400040 flags:0x00080002 [ 601.432482][ T31] Call Trace: [ 601.436111][ T31] [ 601.445876][ T31] __schedule+0x17d9/0x56c0 [ 601.450980][ T31] ? __lock_acquire+0x683/0x2cf0 [ 601.456118][ T31] ? __lock_acquire+0x683/0x2cf0 [ 601.461650][ T31] ? __pfx___schedule+0x10/0x10 [ 601.466601][ T31] ? schedule+0x90/0x2b0 [ 601.472491][ T31] schedule+0x164/0x2b0 [ 601.476731][ T31] schedule_preempt_disabled+0x13/0x30 [ 601.482726][ T31] __mutex_lock+0x7bf/0x1550 [ 601.487428][ T31] ? __mutex_lock+0x5d4/0x1550 [ 601.493698][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 601.499509][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 601.504650][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 601.514275][ T31] ? radix_tree_lookup+0x240/0x290 [ 601.519903][ T31] genl_rcv_msg+0x10b/0x7a0 [ 601.524492][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.530781][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 601.536273][ T31] netlink_rcv_skb+0x226/0x4a0 [ 601.541602][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.546724][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.553428][ T31] ? down_read+0x2be/0x330 [ 601.559007][ T31] genl_rcv+0x28/0x40 [ 601.563079][ T31] netlink_unicast+0x7bb/0x940 [ 601.568519][ T31] netlink_sendmsg+0x813/0xb40 [ 601.573383][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.579719][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 601.584743][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.591281][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 601.596402][ T31] __sys_sendto+0x408/0x5a0 [ 601.602272][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 601.607416][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 601.613428][ T31] __x64_sys_sendto+0xde/0x100 [ 601.625429][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.631982][ T31] do_syscall_64+0x174/0x580 [ 601.636700][ T31] ? trace_irq_disable+0x3b/0x140 [ 601.642279][ T31] ? clear_bhb_loop+0x40/0x90 [ 601.647034][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.654208][ T31] RIP: 0033:0x7fb0f235e84e [ 601.659924][ T31] RSP: 002b:00007fb0f31d0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 601.668791][ T31] RAX: ffffffffffffffda RBX: 00007fb0f31d26c0 RCX: 00007fb0f235e84e [ 601.676827][ T31] RDX: 0000000000000020 RSI: 00007fb0f31d1000 RDI: 0000000000000005 [ 601.685984][ T31] RBP: 0000000000000000 R08: 00007fb0f31d0f04 R09: 000000000000000c [ 601.697030][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 601.705574][ T31] R13: 00007fb0f31d0f58 R14: 00007fb0f31d1000 R15: 0000000000000000 [ 601.715489][ T31] [ 601.747388][ T31] INFO: task syz.4.2663:15939 blocked for more than 151 seconds. [ 601.755376][ T31] Not tainted syzkaller #0 [ 601.763127][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 601.775697][ T31] task:syz.4.2663 state:D stack:27120 pid:15939 tgid:15938 ppid:5628 task_flags:0x400140 flags:0x00080002 [ 601.788203][ T31] Call Trace: [ 601.791570][ T31] [ 601.794543][ T31] __schedule+0x17d9/0x56c0 [ 601.800843][ T31] ? __lock_acquire+0x683/0x2cf0 [ 601.805910][ T31] ? __lock_acquire+0x683/0x2cf0 [ 601.811547][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 601.816921][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 601.823491][ T31] ? kernel_text_address+0xa5/0xe0 [ 601.829649][ T31] ? __pfx___schedule+0x10/0x10 [ 601.834782][ T31] ? schedule+0x90/0x2b0 [ 601.841604][ T31] schedule+0x164/0x2b0 [ 601.845858][ T31] schedule_preempt_disabled+0x13/0x30 [ 601.854550][ T31] __mutex_lock+0x7bf/0x1550 [ 601.860103][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 601.866133][ T31] ? __mutex_lock+0x5d4/0x1550 [ 601.871550][ T31] ? dev_ethtool+0x3a0/0x29c0 [ 601.876392][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 601.882658][ T31] ? dev_get_by_name+0x21/0x200 [ 601.888725][ T31] ? dev_get_by_name+0x21/0x200 [ 601.893665][ T31] dev_ethtool+0x3a0/0x29c0 [ 601.898731][ T31] ? __lock_acquire+0x683/0x2cf0 [ 601.903775][ T31] ? __pfx_dev_ethtool+0x10/0x10 [ 601.909831][ T31] ? kasan_quarantine_put+0xbb/0x1f0 [ 601.915207][ T31] ? dev_load+0x21/0x1f0 [ 601.921816][ T31] ? dev_load+0x21/0x1f0 [ 601.926142][ T31] ? dev_load+0x21/0x1f0 [ 601.931861][ T31] dev_ioctl+0x392/0x1150 [ 601.936336][ T31] sock_do_ioctl+0x23e/0x320 [ 601.942075][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 601.947263][ T31] ? hook_file_ioctl+0x1f0/0x5f0 [ 601.956999][ T31] sock_ioctl+0x57a/0x7e0 [ 601.966420][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 601.971976][ T31] ? __fget_files+0x2a/0x420 [ 601.976664][ T31] ? __fget_files+0x3a2/0x420 [ 601.982585][ T31] ? __fget_files+0x2a/0x420 [ 601.987271][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 601.993578][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 602.000234][ T31] __se_sys_ioctl+0xfc/0x170 [ 602.004910][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.012297][ T31] do_syscall_64+0x174/0x580 [ 602.016977][ T31] ? trace_irq_disable+0x3b/0x140 [ 602.023076][ T31] ? clear_bhb_loop+0x40/0x90 [ 602.028239][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.034234][ T31] RIP: 0033:0x7fb839d9e019 [ 602.040633][ T31] RSP: 002b:00007fb83ac47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.049629][ T31] RAX: ffffffffffffffda RBX: 00007fb83a025fa0 RCX: 00007fb839d9e019 [ 602.059322][ T31] RDX: 0000200000000240 RSI: 0000000000008946 RDI: 0000000000000003 [ 602.067511][ T31] RBP: 00007fb839e3500c R08: 0000000000000000 R09: 0000000000000000 [ 602.084609][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.093039][ T31] R13: 00007fb83a026038 R14: 00007fb83a025fa0 R15: 00007ffeeac87718 [ 602.103290][ T31] [ 602.118056][ T31] [ 602.118056][ T31] Showing all locks held in the system: [ 602.136807][ T31] 1 lock held by pool_workqueue_/3: [ 602.142772][ T31] #0: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 602.169860][ T31] 3 locks held by kworker/u8:1/13: [ 602.175119][ T31] #0: ffff8880328cf140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 602.187360][ T31] #1: ffffc90000127c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 602.204786][ T31] #2: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 602.215592][ T31] 3 locks held by kworker/1:0/24: [ 602.221181][ T31] #0: ffff88801b029d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 602.234590][ T31] #1: ffffc900001e7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 602.246183][T15970] Bluetooth: hci10: command tx timeout [ 602.256791][ T31] #2: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 602.268585][ T31] 1 lock held by khungtaskd/31: [ 602.273646][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 602.285340][ T31] 3 locks held by kworker/u8:4/61: [ 602.291595][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 602.303703][ T31] #1: ffffc9000200fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 602.322114][ T31] #2: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 602.331834][ T31] 2 locks held by getty/5383: [ 602.336620][ T31] #0: ffff8880368660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 602.347193][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 602.361502][ T31] 3 locks held by kworker/1:8/7067: [ 602.366793][ T31] 4 locks held by kworker/1:14/8224: [ 602.372662][ T31] 2 locks held by syz.0.2653/15900: [ 602.379542][ T31] #0: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 602.390857][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 602.402313][ T31] 2 locks held by syz.1.2656/15920: [ 602.407936][ T31] #0: ffff88805589cd00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 602.419421][ T31] #1: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bb/0x9f0 [ 602.432139][ T31] 1 lock held by syz.3.2659/15927: [ 602.437332][ T31] #0: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 602.447509][ T31] 2 locks held by syz.3.2659/15928: [ 602.454349][ T31] #0: ffffffff9059d228 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 602.464468][ T31] #1: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 602.474376][ T31] 2 locks held by syz.2.2662/15937: [ 602.484226][ T31] #0: ffffffff905971c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 602.494955][ T31] #1: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 602.506290][ T31] 2 locks held by syz.2.2662/15942: [ 602.512475][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 602.521186][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 602.530612][ T31] 3 locks held by syz.2.2662/15944: [ 602.536095][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 602.549979][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 602.562024][ T31] #2: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: team_nl_options_set_doit+0xb3/0xe60 [ 602.573215][ T31] 2 locks held by syz.2.2662/15948: [ 602.579710][ T31] #0: ffffffff9009e468 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 602.588448][ T31] #1: ffffffff9009e2a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 602.597532][ T31] 1 lock held by syz.4.2663/15939: [ 602.604601][ T31] #0: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x3a0/0x29c0 [ 602.615603][ T31] 1 lock held by syz-executor/15959: [ 602.621328][ T31] #0: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 602.631986][ T31] 1 lock held by syz-executor/15974: [ 602.637344][ T31] #0: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 602.647314][ T31] 1 lock held by syz-executor/16004: [ 602.653183][ T31] #0: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 602.677492][ T31] [ 602.680002][ T31] ============================================= [ 602.680002][ T31] [ 602.690238][ T31] NMI backtrace for cpu 0 [ 602.690259][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 602.690280][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 602.690292][ T31] Call Trace: [ 602.690299][ T31] [ 602.690307][ T31] dump_stack_lvl+0xe8/0x150 [ 602.690341][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 602.690434][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 602.690467][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 602.690499][ T31] sys_info+0x135/0x170 [ 602.690526][ T31] watchdog+0xfd7/0x1030 [ 602.690557][ T31] ? watchdog+0x1c7/0x1030 [ 602.690586][ T31] kthread+0x388/0x470 [ 602.690614][ T31] ? __pfx_watchdog+0x10/0x10 [ 602.690635][ T31] ? __pfx_kthread+0x10/0x10 [ 602.690663][ T31] ret_from_fork+0x514/0xb70 [ 602.690693][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 602.690721][ T31] ? __switch_to+0xc89/0x1420 [ 602.690747][ T31] ? __pfx_kthread+0x10/0x10 [ 602.690775][ T31] ret_from_fork_asm+0x1a/0x30 [ 602.690808][ T31] [ 602.690816][ T31] Sending NMI from CPU 0 to CPUs 1: [ 602.804279][ C1] NMI backtrace for cpu 1 [ 602.804303][ C1] CPU: 1 UID: 0 PID: 7067 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) [ 602.804325][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 602.804338][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 602.804436][ C1] RIP: 0010:unwind_next_frame+0x4c9/0x2550 [ 602.804466][ C1] Code: 49 bc 00 00 00 00 00 fc ff df 4c 8b 7c 24 10 49 8d 6e 38 0f 84 8a 16 00 00 e9 ee 01 00 00 49 89 d5 49 89 d7 4c 89 e0 4c 29 f8 <48> 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 47 [ 602.804482][ C1] RSP: 0018:ffffc90000a07e00 EFLAGS: 00000202 [ 602.804498][ C1] RAX: 0000000000000008 RBX: ffffffff906d570c RCX: ffffffff906d5710 [ 602.804511][ C1] RDX: ffffffff906d5700 RSI: ffffffff90e971d2 RDI: ffffffff8c4bdd20 [ 602.804526][ C1] RBP: ffffffff81331019 R08: 0000000000000007 R09: 0000000000000000 [ 602.804538][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff906d5708 [ 602.804551][ C1] R13: ffffffff906d5700 R14: ffffc90000a07ea8 R15: ffffffff906d5700 [ 602.804565][ C1] FS: 0000000000000000(0000) GS:ffff88812504d000(0000) knlGS:0000000000000000 [ 602.804580][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.804593][ C1] CR2: 000055ce4d34a4b0 CR3: 000000003145a000 CR4: 00000000003526f0 [ 602.804610][ C1] Call Trace: [ 602.804616][ C1] [ 602.804628][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 602.804647][ C1] ? unwind_next_frame+0x8f/0x2550 [ 602.804668][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 602.804692][ C1] arch_stack_walk+0x11b/0x150 [ 602.804715][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 602.804735][ C1] stack_trace_save+0xa9/0x100 [ 602.804757][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 602.804783][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 602.804806][ C1] kasan_save_track+0x3e/0x80 [ 602.804830][ C1] ? kasan_save_track+0x3e/0x80 [ 602.804852][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 602.804876][ C1] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 602.804899][ C1] ? __alloc_skb+0x276/0x7a0 [ 602.804948][ C1] ? synproxy_send_client_synack+0x175/0xde0 [ 602.805021][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 602.805099][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 602.805125][ C1] ? nft_do_chain+0x48d/0x1b10 [ 602.805142][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 602.805209][ C1] ? nf_hook_slow+0xc5/0x220 [ 602.805252][ C1] ? NF_HOOK+0x21f/0x3c0 [ 602.805295][ C1] ? NF_HOOK+0x336/0x3c0 [ 602.805316][ C1] ? process_backlog+0xa34/0x1860 [ 602.805365][ C1] ? __napi_poll+0xaa/0x330 [ 602.805390][ C1] ? net_rx_action+0x61d/0xf50 [ 602.805405][ C1] ? handle_softirqs+0x225/0x840 [ 602.805426][ C1] ? do_softirq+0x76/0xd0 [ 602.805452][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 602.805473][ C1] ? blake2s_compress+0xfa/0x1c00 [ 602.805512][ C1] ? blake2s_final+0x10f/0x270 [ 602.805528][ C1] ? hmac+0x2dc/0x3b0 [ 602.805571][ C1] ? kdf+0x12d/0x290 [ 602.805594][ C1] ? wg_noise_handshake_consume_initiation+0x273/0x9b0 [ 602.805620][ C1] ? wg_packet_handshake_receive_worker+0x674/0x10c0 [ 602.805641][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 602.805661][ C1] ? worker_thread+0xa47/0xfb0 [ 602.805682][ C1] ? kthread+0x388/0x470 [ 602.805706][ C1] ? ret_from_fork+0x514/0xb70 [ 602.805733][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 602.805768][ C1] __kasan_slab_alloc+0x6c/0x80 [ 602.805794][ C1] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 602.805819][ C1] kmem_cache_alloc_node_noprof+0x355/0x610 [ 602.805841][ C1] ? local_lock_release+0x9c/0x160 [ 602.805857][ C1] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 602.805881][ C1] ? __alloc_skb+0x276/0x7a0 [ 602.805898][ C1] ? __alloc_skb+0x276/0x7a0 [ 602.805919][ C1] __alloc_skb+0x276/0x7a0 [ 602.805939][ C1] synproxy_send_client_synack+0x175/0xde0 [ 602.805968][ C1] ? lock_acquire+0x106/0x350 [ 602.805993][ C1] ? synproxy_pernet+0x45/0x270 [ 602.806024][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 602.806049][ C1] ? nft_xfrm_get_eval+0x150/0x530 [ 602.806076][ C1] ? synproxy_pernet+0x45/0x270 [ 602.806107][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 602.806139][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 602.806169][ C1] ? nf_ip_checksum+0x13c/0x510 [ 602.806210][ C1] nft_synproxy_do_eval+0x335/0x550 [ 602.806237][ C1] ? lock_acquire+0x106/0x350 [ 602.806263][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 602.806302][ C1] nft_do_chain+0x48d/0x1b10 [ 602.806329][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 602.806350][ C1] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 602.806435][ C1] nft_do_chain_inet+0x360/0x4b0 [ 602.806471][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 602.806506][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 602.806530][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 602.806559][ C1] nf_hook_slow+0xc5/0x220 [ 602.806585][ C1] NF_HOOK+0x21f/0x3c0 [ 602.806610][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 602.806633][ C1] ? NF_HOOK+0x9e/0x3c0 [ 602.806656][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 602.806681][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 602.806709][ C1] ? ip_local_deliver+0x113/0x190 [ 602.806734][ C1] NF_HOOK+0x336/0x3c0 [ 602.806758][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 602.806780][ C1] ? NF_HOOK+0x9e/0x3c0 [ 602.806803][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 602.806827][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 602.806850][ C1] ? ip_rcv_core+0x88d/0xd50 [ 602.806876][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 602.806899][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 602.806921][ C1] process_backlog+0xa34/0x1860 [ 602.806954][ C1] ? process_backlog+0x3c3/0x1860 [ 602.806990][ C1] __napi_poll+0xaa/0x330 [ 602.807019][ C1] net_rx_action+0x61d/0xf50 [ 602.807043][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 602.807077][ C1] handle_softirqs+0x225/0x840 [ 602.807102][ C1] ? do_softirq+0x76/0xd0 [ 602.807126][ C1] ? kernel_fpu_end+0x62/0x80 [ 602.807147][ C1] do_softirq+0x76/0xd0 [ 602.807167][ C1] [ 602.807173][ C1] [ 602.807180][ C1] __local_bh_enable_ip+0xf8/0x130 [ 602.807202][ C1] blake2s_compress+0xfa/0x1c00 [ 602.807221][ C1] ? __asan_memset+0x22/0x50 [ 602.807243][ C1] ? encode_point+0x8346/0x84b0 [ 602.807269][ C1] ? __pfx_encode_point+0x10/0x10 [ 602.807288][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 602.807315][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 602.807338][ C1] ? preempt_schedule_common+0x82/0xd0 [ 602.807371][ C1] blake2s_final+0x10f/0x270 [ 602.807391][ C1] hmac+0x2dc/0x3b0 [ 602.807417][ C1] ? __pfx_hmac+0x10/0x10 [ 602.807472][ C1] kdf+0x12d/0x290 [ 602.807499][ C1] ? __pfx_kdf+0x10/0x10 [ 602.807538][ C1] wg_noise_handshake_consume_initiation+0x273/0x9b0 [ 602.807574][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 602.807598][ C1] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 602.807640][ C1] ? __asan_memset+0x22/0x50 [ 602.807666][ C1] ? blake2s_final+0x145/0x270 [ 602.807689][ C1] ? compute_mac1+0x184/0x200 [ 602.807718][ C1] ? __pfx_compute_mac1+0x10/0x10 [ 602.807758][ C1] ? __crypto_memneq+0x42/0x470 [ 602.807830][ C1] ? wg_packet_handshake_receive_worker+0x2e6/0x10c0 [ 602.807862][ C1] wg_packet_handshake_receive_worker+0x674/0x10c0 [ 602.807887][ C1] ? look_up_lock_class+0x57/0x110 [ 602.807923][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 602.807955][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 602.807982][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 602.808009][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 602.808035][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 602.808065][ C1] ? rcu_is_watching+0x15/0xb0 [ 602.808087][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 602.808113][ C1] process_scheduled_works+0xa8e/0x14e0 [ 602.808159][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 602.808190][ C1] ? assign_work+0x3cf/0x5d0 [ 602.808218][ C1] worker_thread+0xa47/0xfb0 [ 602.808253][ C1] ? __kthread_parkme+0x71/0x1f0 [ 602.808285][ C1] kthread+0x388/0x470 [ 602.808321][ C1] ? __pfx_worker_thread+0x10/0x10 [ 602.808343][ C1] ? __pfx_kthread+0x10/0x10 [ 602.808369][ C1] ret_from_fork+0x514/0xb70 [ 602.808410][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 602.808436][ C1] ? __switch_to+0xc89/0x1420 [ 602.808466][ C1] ? __pfx_kthread+0x10/0x10 [ 602.808492][ C1] ret_from_fork_asm+0x1a/0x30 [ 602.808518][ C1] [ 603.700441][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 603.707372][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 603.716525][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 603.726619][ T31] Call Trace: [ 603.729933][ T31] [ 603.732897][ T31] vpanic+0x56c/0xa60 [ 603.736937][ T31] ? __pfx___schedule+0x10/0x10 [ 603.741831][ T31] ? __pfx_vpanic+0x10/0x10 [ 603.746400][ T31] panic+0xc5/0xd0 [ 603.750169][ T31] ? __pfx_panic+0x10/0x10 [ 603.754631][ T31] ? preempt_schedule_common+0x82/0xd0 [ 603.760154][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 603.765579][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 603.771870][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 603.778105][ T31] watchdog+0x1030/0x1030 [ 603.782496][ T31] ? watchdog+0x1c7/0x1030 [ 603.786969][ T31] kthread+0x388/0x470 [ 603.791084][ T31] ? __pfx_watchdog+0x10/0x10 [ 603.795807][ T31] ? __pfx_kthread+0x10/0x10 [ 603.800453][ T31] ret_from_fork+0x514/0xb70 [ 603.805088][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 603.810244][ T31] ? __switch_to+0xc89/0x1420 [ 603.815009][ T31] ? __pfx_kthread+0x10/0x10 [ 603.819665][ T31] ret_from_fork_asm+0x1a/0x30 [ 603.824476][ T31] [ 603.828159][ T31] Kernel Offset: disabled [ 603.832498][ T31] Rebooting in 86400 seconds..