last executing test programs: 5.006032237s ago: executing program 0 (id=3764): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="3019", 0x2}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{r0, &(0x7f00000000c0)='\x00', 0x400, &(0x7f0000000180)={@_ha_fsid={[0x5, 0xc]}, {0x3ff, 0xff, 0x5}}, 0x9, &(0x7f0000000140)={@_ha_fsid}, &(0x7f00000003c0)=0x9}, {[0xe15, 0x8, 0x20000000, 0xfffffffe]}, 0x9, 0x2e, &(0x7f00000002c0)=""/46}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[], &(0x7f00000001c0)=""/27, 0x27, 0x1b, 0x1, 0x7}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) 4.95177751s ago: executing program 0 (id=3765): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1f, 0x1, 0xc17, &(0x7f0000000000)={0xffffffffffffffff}) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000400)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0xb, 0x9bc6, 0x7, 0x4, 0x4], 0x1, 0x0, 0x0, [{}]}, 0x88) 4.339919594s ago: executing program 0 (id=3774): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) pselect6(0x40, &(0x7f0000000400)={0x0, 0x6, 0x2, 0x100000001, 0x0, 0xa, 0x3, 0x80000001}, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, 0x0, &(0x7f0000000200)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r0, 0xa61, 0x8001, 0xac}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r2, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)="74d41e412649633ac069b3018ca06c0bab6b8f0992d54043918a33eb4d4a7c2fbbcd", 0x22}, {&(0x7f00000005c0)="fff1b0c85f5a4c097ea1bc8c4ed2671f", 0x10}, {&(0x7f0000000600)="38518e6454fc57e7b4396bb59b573466f2efd917d396fc7f258adcaccffc3261e2a43a780af91acac06c8de857", 0x2d}, {&(0x7f0000000640)="8670ab04b48d86fcb06ec2877caddbda0ad42f380596bad4bd43c6b277f04eca959ea23576624ed9fc5b8026124c73df156501d51175ac3d77446d16c05bd9f3b90930e54bbc8ff0052661765168e8a34734d93642b458", 0x57}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="4110754d7a42030f78388ecf90a8155b579fafc2f29cea0560153c226318660a0d8047d271016dfb02fcedd8da297bee36b7e3868d568cfead0e9a3269bd4da6061a5dd5c6e39af890a985d23fccd7ec3a8061de35f2b7da9b1086d2a4c5d8922abfa2ee311d6ebccdc082affb7fe173bdddecbcde55cf515f1892ace402429bab9a37add2a1da8167f544c04c499059913bd4f88ff562ff5d33b03bd9f30e4bb5707b3b0f5f9678033b61e0fbf793f562574301edb5a1990a515a8cf4e3303b63a94929bf95d9cbdac6d6296142c14310f314eec1e61f882056f69071d7cda8f9e1036847037bcaeebfccedcd9f054f32f4", 0xf2}], 0x7, &(0x7f0000000880)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x80}}, {{&(0x7f0000000900)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000940)="6b4c017351a3b3a2631fe2b96d2cf181ec4642900c2e4ee4f4aab8d8a8a19f839edb4badad1a67505ed66d27cd86d41918039efa54f8b35f4cb9756edbf52a9f3095fc0dea5a230b7acde389d929b0", 0x4f}, {&(0x7f0000001a80)="d6c5947eed1528a83ea9f0c9e3005d7522d659084610b4bc68bffa3fd5c5d7242e882a7eb63be3dc0d19f8b2e1a9edccfbe0a9ddb48e66cb057c6c877b5f9dc2c2b0c681b55e51e4495e8b9928464941b8cf1a5de035fe7f278d380d2250dcd31f1fc200dc7dd6e4350299a52c1f6b6e04247cd61a021db24e8b20df369015ebc56995ada434da7383f0d21165c1579b6172ad230596703fcaa979c35cd804ffd39c78ff67e2913103fbfdda8f572718304e59e2b2e60a7df970c0d20b876ef56b9fb1379eed271610527862ec26c8b608f9b730", 0xd4}], 0x2, &(0x7f0000001b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @rand_addr=0x64010100}}}], 0x60}}], 0x2, 0x20000060) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x40489, 0x37001}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @empty}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x50}}, 0x40080) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a3b4914783c5432d69ca5b9538a900000003000600000000000200000000000001000000000000000002000100010000000000030d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0xf4, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe60}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3473623}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x322844a6}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1dd}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 4.131643793s ago: executing program 0 (id=3776): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000480)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xdf, &(0x7f0000000640)=""/223, 0x40f00, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x6, 0x8, 0x4}, 0x10, 0x2794b, r0, 0x1, &(0x7f0000000280)=[r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f00000003c0)=[{0x5, 0x5, 0x2, 0x9}, {0x1, 0x5, 0x1, 0x3}, {0x5, 0x5, 0xc}]}, 0xfffffedb) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00', @link_local}) write$tun(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008000c11ff20010000000000000000000000000001000000000000000000000000000000004f194e20000c907881080001b63de1f944261ff2fd256aae349dccc636339b0edf7afa8286ed61c3f9768ce46a98"], 0x46) (async) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) listen(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000430001002dbd7000ffdbdf2502f7ffff040001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES64=r5, @ANYRES64=r6, @ANYRESOCT=r9], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) epoll_create1(0x0) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.326160515s ago: executing program 3 (id=3803): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0xc, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xffeffffd, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmmsg(r1, &(0x7f0000001e40)=[{{&(0x7f0000000140)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="725b1af3c1eded8a8d8f1abca54c44b012a31bf152363503536e40b5cc7a8287d443b2bc128145a4ef8957dea39d18749715aadb84d29d151bd4122b5ee543444d55a0d7601691a132aac56dbc0b451ac396e06ab6b94a2e4f18be19d5e4fe50c8d195c8b5aefc08d833637753952cac4c25a5d040ea07ec9525c081dd2034048554843aaf99", 0x86}, {&(0x7f0000000740)="b108fa007c0e4a752fd2b5776736b4a54416b8d436b0d33e05fab7a495eda1ab34e9a40a9364f5d87e395a7f1c3fc4db0188a10a05157e0b3f3e69fe5bb0325504910ed3ffe7382f9a4ea58820c3dccf6322a8f29b8c84ffc7ed8a16950b54fc1f41a253c49712f96b5cb983a0cabf70163ad012e26348d3c5a953f4151135df719053b053e826496ef5b518fc1992c9f398577a88ceef514b1e9f1b07846d43b0f9ab31c3b747c81c24f1583c7457ea322c561b38b77c59294c587cd6d7de52357728d863df720e19", 0xc9}], 0x2}}, {{&(0x7f0000000480)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'tgr192-generic\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000002040)="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", 0x16d}], 0x1}}, {{&(0x7f0000000840)=@tipc=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x3}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000008c0)="a597f59f2d17bb2191365e6ce481b8ca7a2edb4babfd6dbb54cf3668fc16e083f6819bf1dcc5cd7d99b94cdd05812e4f8997e2daebec63e62ee2a1e9024ac552b38a9b69259bf633c89b31cb7867a72a96899dc7beeac28ca4a165656b03d18de5a5cd6649a96d2ee212c3130f5161db1ee1a020d405542441fd6aa32b", 0x7d}, {&(0x7f0000000940)="9334c1e952ce290def1879d866957f6890b65c139a00539b46d41a6423b254385d3671ce98ad015933d7ab746f6114ddff0ffbdc566ee1e6d6f6ac38be7acd6abc6607cb080760b801d0b625a2644b076e18f1863b763ba579fd0d6d360fa0b19f2f0c3411dba45b4daefaea0c73787508df9ecebd23af8ddb3930ce9137e0bb68601f460d4c1eef75d7b0615eef9bbe7e21a53f155dea7198f96d12122997709fb0deae89", 0xa5}, {&(0x7f0000000a00)="5feabcd7143000858d8ae590ca5bfe27fcb6f910b80609d05a8fad61e52b2acde58993d4", 0x24}, {&(0x7f0000001f40)="d325b371d499bfea9cbbe85e0d9bdb894f1c311521c786d84ca33aadba628b4573e0aa3cdf5fb50527b283dc8283268b31ee0045e9f39aaea718570fa0829de82655e71ce733c0c3de26ec310ca25a2ed6e319854b65e51ff3b64e5887a8d3ab007921eeb896b5d2f2b26f4b035fa18e6bf838c677367fbb3963acce8b8bf3f2f5421f824e9ab099889523bb436d1f83382f8c467ad922358b444fa9bc8a4f50b51ed29f4ebde56ad98adacd5081b9a05c9fe6f47582aefcfac01e2ed2a80bd0ea58709df705c875d39cfddcd788d0946190ef1bd106eeedd814f9486be7f8a1a86be999859a50202d33d6cf146869d2b3e4c51fce23eb", 0xf7}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000600)="83fae8bd1c49f822421efced12e64af7affce39a86f54d50deb20b30f39149bb9c17a5fb9af16862d61ed0670385806b1a539eeb55e17cd21955438f53a6037ef87cc11f34412c1cdaa3a9d1430e3cf47b9b19a52d329fe1fe61e104b27515c9d0db30d55780dc8aba4111ea48ef9cb0f150428329f38b7a58b8aa734984", 0x7e}], 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x11c8}}], 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES8=r0], 0x30}}, 0x20024090) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0006c000100000000000000"], 0x10) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0006c000100000000000000"], 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x80800) (async) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) (async) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000003000000000000000300", @ANYRES32=r9, @ANYBLOB="080026007f1700000800270003000000"], 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x8044) unshare(0x6020480) (async) unshare(0x6020480) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 2.04797423s ago: executing program 3 (id=3805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}}, 0x0) 1.759386468s ago: executing program 2 (id=3809): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000ffffffffa000b07412d2a8de", 0x0, 0x2060ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socketpair(0x29, 0x800, 0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x7c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x9}}]}, @CTA_FILTER={0x3c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x224}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2a0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88}, @CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x985}, 0x804) 1.757492716s ago: executing program 3 (id=3810): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000004000034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='bbr', 0x3) shutdown(r0, 0x1) 1.690979875s ago: executing program 1 (id=3811): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) unshare(0x2010100) sendmmsg(r0, &(0x7f0000020800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c840) 1.479799147s ago: executing program 3 (id=3812): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x100007d, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e5", 0xd5}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db130dc9a9e82dae807b69f57202e694041d85a70a98ed38e10b116d2249a8746d54c19d053605f", 0x75}], 0x2}}], 0x3, 0x2090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x0, 0x10}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.324646308s ago: executing program 4 (id=3813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @dev, 0x0}, &(0x7f0000000040)=0xc) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) openat$cgroup_pressure(r4, &(0x7f0000000280)='io.pressure\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0x0, 0x5, 0x6880, 0xffffffffffffffff, 0x3, '\x00', r2, r4, 0x1, 0x3, 0x5, 0x6}, 0x50) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf250c0000080800060028c581be"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 1.271092705s ago: executing program 4 (id=3814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf250410000014000180080005000300d60006000100"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000140)=0x9, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000c0000000060a010400000000000000000100400008000b400000000098000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000600001800c0001006269747769736500500002800800034000000002080001400000001408000240000000120c00058006000100273c000028000480060001008a9500001c000100ee2f7b0fffe4e4a53c74a652994602d1594f758032c7a83b0900010073797a30"], 0x134}}, 0x0) 803.874016ms ago: executing program 1 (id=3815): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x38, r0, 0x10ada85e65c25349, 0x70bd2a, 0x0, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x27}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}]}]}]}, 0x38}}, 0x6048004) 801.568721ms ago: executing program 2 (id=3816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000001c80)=ANY=[@ANYBLOB="1800000020000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020200008500000082000000850000001100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 792.744696ms ago: executing program 4 (id=3817): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0xffffffff, 0x4) (async) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005c00050000002f907800020000e0000001248088a800"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x6) (async, rerun: 32) shutdown(r1, 0x0) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) (async) gettid() (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) (rerun: 32) r5 = accept4$inet6(r4, 0x0, &(0x7f00000002c0), 0x80000) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000100)={@loopback, 0x75, r3}) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c00000004000100bbc176cdd8c816c4d20aff2007766c9821d94ab6f614041daafcca99c3e2406c9f97dfb75e5bf9c7489cd2b864fee79db755d3ef89d4cb40143a0f601098f60c1d8be82f37dec5de7574cf9f167606ffe94c8f788716e35b8f98f458da81df1ac2da06"], 0x18}}, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f0000000240)=0x2000810, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e27, @empty}, 0x2) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) sendto$inet(r4, &(0x7f00000001c0)="070000000000000017", 0x9, 0x10, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010000304ebff48bcfedbdf2500007400", @ANYRES8=0x0, @ANYBLOB="049c0100075005001400030076657468305f766972745f776966690008001b0005000000", @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x1) (rerun: 32) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @loopback, 0x1a}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x14, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) (async) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x8c56}], 0x1, 0x10020, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 767.726412ms ago: executing program 0 (id=3818): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) (rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x404c050) 758.763096ms ago: executing program 1 (id=3819): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1, 0x0, '\x00', 0x0, r0}, 0x50) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x400012}, 0x50) 683.748833ms ago: executing program 2 (id=3820): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r0, @ANYBLOB="4bae13a7017f2965cb94c539c078d23fcc9f7092ad8b2cfc41801e3811a231eed6f9cc61c85c40f1aa91be3eb86f32935c46fc4f174e110b1915a377e5f38e3089e87526bac5914c337a03a5607304c6c76308ed60a7969e982dcd725143c8e1ea3e89fceabf0414816b08968c113b822f2b134c77c06bc07c269492ad7dc556bdc143c992c9e0e5dbe22c166c575bdbeadc9c49cc75708f7d8a756c5f63ae361c4226e57928b82faa63308d3532271464a8fa10d8197e66293f72ef0cebb6a1cfec1702", @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES8=r0], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x38}, 0x1, 0x300, 0x0, 0x8000}, 0x24008010) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xfffffffe, 0x7fff}, 0xc) 627.222771ms ago: executing program 3 (id=3821): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000200), &(0x7f0000000240)=@udp, 0x1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0x34, &(0x7f0000000040), 0x4) unshare(0x20000000) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xd8}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f00000031c0)={0x0, 0x60, &(0x7f0000003180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cb4790bb492e18d17a11469d064de1e9e02ea9d791b794cd76007b299458e9b846a1353b365f551040f9a0bcb2d69cba4ec38d5efa6840f421161f829ff21036c0b79793b39fc7d9b42954979f420f2c17749e6a610f8273292a1e5f215e9789965a0c54", @ANYRES16=0x0, @ANYBLOB="020026bd7000fddbdf250700000018000180"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 621.354241ms ago: executing program 4 (id=3822): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}]}, 0x4c}}, 0x4800) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r6, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)="89", 0x1}, {&(0x7f0000001100)="a6", 0x1}, {&(0x7f0000000580)='F', 0x1}], 0x4, 0x6) (async) vmsplice(r6, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)="89", 0x1}, {&(0x7f0000001100)="a6", 0x1}, {&(0x7f0000000580)='F', 0x1}], 0x4, 0x6) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) (async) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x11, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x3, 0x3, 0x4, 0x0, 0x6, 0xffffffffffffffc0, 0x4}, @snprintf]}, &(0x7f0000000380)='syzkaller\x00', 0x4d2, 0xe3, &(0x7f00000003c0)=""/227, 0x41000, 0x30, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x2e12, 0x459f00}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580)=[r6], &(0x7f00000005c0)=[{0x2, 0x5, 0x8, 0xa}, {0x1, 0x1, 0x0, 0x4}, {0x2, 0x1, 0x10, 0x8}, {0x2, 0x5, 0x7, 0x2}], 0x10, 0x3}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x67}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x840) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x67}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x840) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3900b68b", @ANYRES16=r1, @ANYBLOB="0c0729bd7000fddbdf2511000000080032000104000005002e000100000008003a0008000000050030000100000008002b0003076f1108000300", @ANYRES32=r2, @ANYBLOB="08003100630000000800340005000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 535.533104ms ago: executing program 1 (id=3823): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x9}]}}]}, 0x40}}, 0x4800) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async, rerun: 32) unshare(0x2c020400) (async, rerun: 32) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'veth0_to_hsr\x00'}, 0x18) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000000)) 407.983647ms ago: executing program 2 (id=3824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010000000000fcdbdf250a808000000000031800030014000200fcf8ffffffffffffff000000000000011400010020010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24010}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0xa, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x15) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r0, 0x0, 0x80000, 0x0, 0x5, 0x0, &(0x7f00000002c0)=0xe}) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f00000003c0)) 380.234145ms ago: executing program 1 (id=3825): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x10, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x6, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) 359.597411ms ago: executing program 4 (id=3826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r1, 0x1, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r2, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x48}, 0x0) 191.340643ms ago: executing program 4 (id=3827): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'geneve1\x00', {0x80000001}, 0x6}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c000380"], 0x38}}, 0x0) (rerun: 64) 189.965627ms ago: executing program 2 (id=3828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780080011400000020000000500010006000000050005000a00000005000400010000000900020073797a320000000012000300686173683a6e65742c706f7274000000000000000000"], 0x60}}, 0x0) 189.595815ms ago: executing program 0 (id=3829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x88}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffd, 0xc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000001080)={r6, 0x3, 0x20}, &(0x7f00000010c0)=0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000000, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@remote, 0x37, r7}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100000014000700fc"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendto$packet(r2, &(0x7f0000000440)="bad330fb", 0x4, 0x40800, &(0x7f0000000080)={0x11, 0x8100, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010400000900010073797a30000000002c000000030a01020000000000000000010000060900010073797a30000000000900030073797a310000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080002400000001708000140000000020900010073797a3000000000140000001100010000000000000000000000000a"], 0xc4}}, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000500)="2bf63ac8151e523ad359620ffeec3787c97f30c0b76a3eada785e33ad77140b981e3f4e06362a6d49f1c939153e1b02723781537b839eb5147ecb87c93354cff713fdcf3cad5496014be9894c932eb44656b7e141165dd099405ee2fde03499f6e58e147d4e398a8968d6b433acbf2e2bda54b7ab071dc0edf7649d18ecc52330aa430dd20340c98744b19b9ce2fd9a5990792555fdb298b45b2a6602bc8e92c94ac59b7c27b0ae5c9ac5f80d02afd8da6349278d09feb598ca8966fd1816f8dd16586bf16c819960379925748163009a6b0abf9", 0xd4) 145.049099ms ago: executing program 3 (id=3830): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x80ff, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xa7}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 110.025137ms ago: executing program 1 (id=3831): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0048a330433737de5e7ae81b7bc58a4e000000000000040004000b137ec00b1539d765fa50e88805de56090ae6e6d9d6034b4717009a647df7fc5832cb1459c08febc5411054d2ae9280bcc3990e519be09032ae6b23bc2a7d"], 0x1c}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000280)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x88}, @dstopts]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x5, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 0s ago: executing program 2 (id=3832): r0 = socket(0x1d, 0x80802, 0x6) unshare(0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e00b90f177020000000000000000", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec0, 0x0, 0x0, 0x4, 0x0, 0x939}, 0x24) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) kernel console output (not intermixed with test programs): ecd attached [ 354.169643][T15468] wg1 speed is unknown, defaulting to 1000 [ 354.176892][T15435] lo speed is unknown, defaulting to 1000 [ 354.180150][T15414] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.201266][T15414] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.307355][T15487] syzkaller0: entered promiscuous mode [ 354.313996][T15487] syzkaller0: entered allmulticast mode [ 354.323930][T15414] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.333850][T15414] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.503925][T15414] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.514132][T15414] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.527522][T15468] lo speed is unknown, defaulting to 1000 [ 354.532440][T15490] ip6_vti0: Caught tx_queue_len zero misconfig [ 354.935920][ T9451] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.954935][ T9451] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.015935][ T9451] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.024569][ T9451] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.040617][ T9451] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.059880][ T9451] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.070424][ T9451] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.094576][ T9451] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.686090][T15527] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2509'. [ 355.690019][T15528] xt_l2tp: missing protocol rule (udp|l2tpip) [ 355.875085][T15536] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2511'. [ 355.896380][T15536] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2511'. [ 355.977289][T15523] wg1 speed is unknown, defaulting to 1000 [ 356.004604][T15542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2514'. [ 356.234067][T15551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2516'. [ 356.292990][T15557] syzkaller0: entered promiscuous mode [ 356.309813][T15557] syzkaller0: entered allmulticast mode [ 356.324188][T15523] lo speed is unknown, defaulting to 1000 [ 356.409125][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2519'. [ 356.492886][T15563] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 356.816548][T15578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.040383][T15583] netlink: 'syz.0.2526': attribute type 11 has an invalid length. [ 357.048395][T15583] netlink: 'syz.0.2526': attribute type 4 has an invalid length. [ 357.066872][T15583] netlink: 'syz.0.2526': attribute type 5 has an invalid length. [ 357.088763][T15583] netlink: 'syz.0.2526': attribute type 6 has an invalid length. [ 357.107326][T15583] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.2526'. [ 357.229214][T15590] 8021q: adding VLAN 0 to HW filter on device bond9 [ 357.263904][T15593] siw: device registration error -23 [ 357.337953][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2530'. [ 357.398507][T15600] syzkaller0: entered promiscuous mode [ 357.404282][T15596] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2530'. [ 357.404493][T15600] syzkaller0: entered allmulticast mode [ 357.450669][T15602] netlink: 'syz.3.2532': attribute type 1 has an invalid length. [ 357.516272][T15586] mpoa:mpoad_close: () going down [ 357.802666][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'. [ 357.819513][T15585] wg1 speed is unknown, defaulting to 1000 [ 357.895737][T15607] veth13: entered promiscuous mode [ 357.969875][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 357.977967][ C1] lec:lec_tx_timeout: lec0 [ 357.983156][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 358.104300][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 358.386649][T15585] lo speed is unknown, defaulting to 1000 [ 358.515275][T15642] syzkaller0: entered promiscuous mode [ 358.520878][T15642] syzkaller0: entered allmulticast mode [ 358.972312][T15661] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2551'. [ 359.003393][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2554'. [ 359.020844][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2554'. [ 359.289427][T15694] tipc: Enabling of bearer rejected, failed to enable media [ 359.642562][T15707] team0: No ports can be present during mode change [ 360.131734][T15699] wg1 speed is unknown, defaulting to 1000 [ 360.405040][T15739] delete_channel: no stack [ 360.542502][T15699] lo speed is unknown, defaulting to 1000 [ 361.152167][T15779] netlink: 'syz.3.2579': attribute type 83 has an invalid length. [ 361.304464][T15783] __nla_validate_parse: 22 callbacks suppressed [ 361.304485][T15783] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2581'. [ 361.471087][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2582'. [ 361.493225][T15786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.541665][T15788] ip6_vti0: Caught tx_queue_len zero misconfig [ 361.663689][T15794] bond7: option lacp_active: invalid value (8) [ 361.674684][T15794] bond7 (unregistering): Released all slaves [ 361.702093][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2584'. [ 361.736181][T15797] netlink: 'syz.1.2584': attribute type 30 has an invalid length. [ 361.808206][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2584'. [ 361.848321][T15797] netlink: 'syz.1.2584': attribute type 30 has an invalid length. [ 361.937213][T15810] nbd: must specify a size in bytes for the device [ 361.956249][T15812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2589'. [ 361.971640][ T2099] block nbd0: Connection timed out, retrying (0/1 alive) [ 361.979449][ T2099] block nbd0: Connection timed out, retrying (0/1 alive) [ 361.987163][ T2099] block nbd0: Connection timed out, retrying (0/1 alive) [ 361.995419][ T2099] block nbd0: Connection timed out, retrying (0/1 alive) [ 362.003148][ T2099] block nbd0: Dead connection, failed to find a fallback [ 362.264510][T15834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2597'. [ 362.364503][T15834] syzkaller0: entered promiscuous mode [ 362.380678][T15834] syzkaller0: entered allmulticast mode [ 362.474738][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2600'. [ 362.505958][T15843] veth1_to_team: entered promiscuous mode [ 362.522088][T15843] ip6gretap0: entered promiscuous mode [ 362.539054][T15843] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 362.551096][T15843] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 362.564532][T15843] hsr1: entered promiscuous mode [ 362.713396][T15857] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2604'. [ 362.989631][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 362.997702][ C1] lec:lec_tx_timeout: lec0 [ 363.081101][T15887] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2609'. [ 363.241962][T15901] tc_dump_action: action bad kind [ 363.389829][T15908] netlink: 'syz.0.2619': attribute type 2 has an invalid length. [ 363.435480][T15908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.459366][T15913] tunl0: Caught tx_queue_len zero misconfig [ 363.473979][T15918] netlink: 'syz.4.2622': attribute type 5 has an invalid length. [ 363.492167][T15924] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2623'. [ 363.985496][T15956] netlink: 'syz.3.2632': attribute type 2 has an invalid length. [ 363.989429][T15958] netlink: 'syz.3.2632': attribute type 2 has an invalid length. [ 364.108750][T15956] : entered promiscuous mode [ 364.221379][T15939] wg1 speed is unknown, defaulting to 1000 [ 364.259103][T15971] netlink: 'syz.0.2637': attribute type 1 has an invalid length. [ 364.524709][T15939] lo speed is unknown, defaulting to 1000 [ 364.661642][T15987] wg1: left promiscuous mode [ 364.668444][T15987] wg1: left allmulticast mode [ 364.678663][T15987] veth0_to_hsr: left promiscuous mode [ 364.688005][T15987] veth0_to_hsr: left allmulticast mode [ 364.695200][T15987] vlan0: left promiscuous mode [ 364.704371][T15987] vlan2: left promiscuous mode [ 364.710154][T15987] vlan2: left allmulticast mode [ 364.715346][T15987] geneve1: left allmulticast mode [ 364.722648][T15987] bond1: left promiscuous mode [ 364.728976][T15987] geneve3: left promiscuous mode [ 364.746082][T15987] ip6tnl2: left promiscuous mode [ 364.752071][T15987] ip6tnl2: left allmulticast mode [ 364.771674][T15987] bond4: left promiscuous mode [ 364.776827][T15987] bond4: left allmulticast mode [ 364.784162][T15987] geneve4: left promiscuous mode [ 364.789446][T15987] geneve4: left allmulticast mode [ 364.797247][T15987] bond5: left promiscuous mode [ 364.803265][T15987] bond5: left allmulticast mode [ 364.809493][T15987] erspan2: left allmulticast mode [ 364.838055][T15987] veth13: left promiscuous mode [ 364.866392][T10167] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.880200][T10167] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.909916][ T9435] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.929112][ T9435] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.988136][T10167] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.017476][T10167] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.047755][T10167] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.057592][T10167] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.131949][T16003] xt_CT: No such helper "netbios-ns" [ 365.138488][T16005] can: request_module (can-proto-0) failed. [ 365.247001][T16018] ip6tnl0: Caught tx_queue_len zero misconfig [ 365.425388][T16022] tipc: Enabled bearer , priority 0 [ 365.492681][T16022] syzkaller0: entered promiscuous mode [ 365.498299][T16022] syzkaller0: entered allmulticast mode [ 365.523965][T16022] tipc: Resetting bearer [ 365.532381][T16027] netlink: 'syz.2.2655': attribute type 29 has an invalid length. [ 365.544948][T16031] netlink: 'syz.2.2655': attribute type 29 has an invalid length. [ 365.568548][T16027] netlink: 'syz.2.2655': attribute type 5 has an invalid length. [ 365.997832][T16022] tipc: Resetting bearer [ 367.716974][T16022] tipc: Disabling bearer [ 367.749305][ T6559] tipc: Node number set to 175642308 [ 367.878052][T16078] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 368.139349][T16100] xt_CT: No such helper "syz1" [ 368.265394][T16106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2677'. [ 368.265394][T16107] __nla_validate_parse: 9 callbacks suppressed [ 368.265412][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'. [ 368.265425][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2677'. [ 368.482270][T16112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2679'. [ 368.562800][T16112] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2679'. [ 368.764968][T16112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2679'. [ 368.801806][T16149] bond11: option mode: unable to set because the bond device has slaves [ 368.811348][T16149] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 368.837623][T16149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.855386][T16109] wg1 speed is unknown, defaulting to 1000 [ 368.870131][T16147] syzkaller1: entered promiscuous mode [ 368.875809][T16147] syzkaller1: entered allmulticast mode [ 369.090150][T16157] geneve5: entered promiscuous mode [ 369.095682][T16157] geneve5: entered allmulticast mode [ 369.191147][T16164] xt_TCPMSS: Only works on TCP SYN packets [ 369.204990][T16109] lo speed is unknown, defaulting to 1000 [ 369.326347][T16169] netlink: 'syz.2.2692': attribute type 3 has an invalid length. [ 369.363227][T16170] netlink: 'syz.2.2692': attribute type 3 has an invalid length. [ 369.460036][T16121] wg1 speed is unknown, defaulting to 1000 [ 369.834703][T16192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2699'. [ 369.845060][T16192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2699'. [ 369.911676][T16194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2700'. [ 369.984426][T16173] wg1 speed is unknown, defaulting to 1000 [ 370.010358][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2700'. [ 370.192436][T16121] lo speed is unknown, defaulting to 1000 [ 370.211994][T16174] wg1 speed is unknown, defaulting to 1000 [ 370.249780][T16173] lo speed is unknown, defaulting to 1000 [ 370.722580][T16207] bond0 (unregistering): Released all slaves [ 370.758873][T16174] lo speed is unknown, defaulting to 1000 [ 371.219387][T16226] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 371.237631][T16226] bond0 (unregistering): Released all slaves [ 371.323376][T16232] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 372.223541][T16256] syzkaller0: entered promiscuous mode [ 372.230992][T16256] syzkaller0: entered allmulticast mode [ 372.520547][T16260] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.530867][T16260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.547763][T16263] IPVS: Unknown mcast interface: dvmrp0 [ 372.572770][T16270] xt_hashlimit: size too large, truncated to 1048576 [ 372.634749][T16277] syzkaller1: entered promiscuous mode [ 372.640880][T16277] syzkaller1: entered allmulticast mode [ 372.814880][T16281] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.828266][T16283] ip6tnl3: entered allmulticast mode [ 373.168661][T16304] netlink: 'syz.1.2728': attribute type 1 has an invalid length. [ 373.283903][T16304] bond7: entered promiscuous mode [ 373.325210][T16304] 8021q: adding VLAN 0 to HW filter on device bond7 [ 373.375200][T16309] bond7: (slave bridge8): making interface the new active one [ 373.419754][T16309] bridge8: entered promiscuous mode [ 373.430264][T16309] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 373.447913][T16317] bridge0: Device is already in use. [ 373.472114][T16321] __nla_validate_parse: 4 callbacks suppressed [ 373.472141][T16321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2734'. [ 373.894204][T16347] netlink: 'syz.1.2741': attribute type 9 has an invalid length. [ 373.919952][T16347] netlink: 'syz.1.2741': attribute type 6 has an invalid length. [ 373.930998][T16347] netlink: 'syz.1.2741': attribute type 7 has an invalid length. [ 373.941020][T16347] netlink: 'syz.1.2741': attribute type 8 has an invalid length. [ 374.227988][T16373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.258805][T16373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.278253][T16349] wg1 speed is unknown, defaulting to 1000 [ 374.456440][T16383] netlink: 'syz.1.2751': attribute type 1 has an invalid length. [ 374.524467][T16386] openvswitch: netlink: Message has 4 unknown bytes. [ 374.535137][T16386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.553308][T16386] netlink: 'syz.1.2751': attribute type 1 has an invalid length. [ 374.597666][T16386] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2751'. [ 374.617205][T16349] lo speed is unknown, defaulting to 1000 [ 374.630684][T16369] siw: device registration error -23 [ 374.741756][T16396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2754'. [ 374.944240][T16404] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2757'. [ 375.004214][T16411] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 375.072323][T16409] batadv_slave_1: Caught tx_queue_len zero misconfig [ 375.079355][T16409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2758'. [ 375.607091][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'. [ 375.646000][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2763'. [ 375.703457][T16429] netlink: 'syz.0.2763': attribute type 18 has an invalid length. [ 375.720450][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'. [ 375.738284][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2763'. [ 375.766531][T16429] netlink: 'syz.0.2763': attribute type 18 has an invalid length. [ 375.921358][T16436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2766'. [ 375.931906][T16439] netlink: 'syz.3.2767': attribute type 1 has an invalid length. [ 376.122811][T16453] wg1: Caught tx_queue_len zero misconfig [ 376.349902][T16464] netlink: 'syz.0.2773': attribute type 1 has an invalid length. [ 376.472065][T16475] netlink: 'syz.0.2777': attribute type 1 has an invalid length. [ 376.552836][T16475] bond9: entered allmulticast mode [ 376.569050][T16475] bond9: (slave geneve0): making interface the new active one [ 376.576651][T16475] geneve0: entered allmulticast mode [ 376.583096][T16475] bond9: (slave geneve0): Enslaving as an active interface with an up link [ 376.601803][T16477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.660084][ T9447] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 376.672324][ T9447] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 376.727846][ T9447] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 376.760643][ T9447] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 376.863502][T16488] syzkaller0: entered promiscuous mode [ 376.869190][T16488] syzkaller0: entered allmulticast mode [ 377.185559][T16467] wg1 speed is unknown, defaulting to 1000 [ 377.342470][T16510] openvswitch: netlink: Flow key attr not present in new flow. [ 377.353866][T16507] syzkaller0: entered promiscuous mode [ 377.359414][T16507] syzkaller0: entered allmulticast mode [ 377.478568][T16513] netlink: 'syz.4.2790': attribute type 1 has an invalid length. [ 377.501581][T16510] ip6gre0: Caught tx_queue_len zero misconfig [ 377.530664][T16517] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 377.740499][T16467] lo speed is unknown, defaulting to 1000 [ 377.766215][T16525] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.777745][T16525] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 377.873659][T16525] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.901462][T16525] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 378.037273][T16537] syzkaller0: entered promiscuous mode [ 378.060838][T16537] syzkaller0: entered allmulticast mode [ 378.107633][T16525] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.124876][T16525] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 378.217163][T16525] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.234280][T16525] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 378.389658][T16530] wg1 speed is unknown, defaulting to 1000 [ 378.390407][ T9451] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.405188][ T9451] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 378.427000][ T9451] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.438803][ T9451] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 378.460501][ T9451] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.469220][ T9451] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 378.492495][ T9451] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.501427][ T9451] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 378.540165][T16553] __nla_validate_parse: 11 callbacks suppressed [ 378.540186][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2802'. [ 378.615838][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.625458][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 380.487550][T16530] lo speed is unknown, defaulting to 1000 [ 380.488273][T16561] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 380.769439][T16581] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 380.922636][T16596] tipc: Enabled bearer , priority 0 [ 380.938928][T16596] syzkaller0: entered promiscuous mode [ 380.970651][T16596] syzkaller0: entered allmulticast mode [ 381.138068][T16605] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 381.181869][T16611] tipc: Resetting bearer [ 381.284819][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 381.297513][T16617] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2820'. [ 381.309790][T16600] tipc: Resetting bearer [ 381.337866][T16600] tipc: Disabling bearer [ 382.240217][T16625] wg1 speed is unknown, defaulting to 1000 [ 382.473119][T16646] netlink: 'syz.3.2826': attribute type 4 has an invalid length. [ 382.494638][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2829'. [ 382.722313][T16625] lo speed is unknown, defaulting to 1000 [ 383.495416][T16697] netlink: 'syz.0.2842': attribute type 3 has an invalid length. [ 383.528934][T16697] netlink: 'syz.0.2842': attribute type 10 has an invalid length. [ 383.554393][T16697] ieee802154 phy0 wpan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 383.587625][T16697] team0: Port device wpan0 added [ 383.593789][T16667] wg1 speed is unknown, defaulting to 1000 [ 383.889637][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 383.897683][ C1] lec:lec_tx_timeout: lec0 [ 383.972477][T16715] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2846'. [ 384.023916][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2848'. [ 384.047291][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2848'. [ 384.159293][T16655] wg1 speed is unknown, defaulting to 1000 [ 384.190492][T16667] lo speed is unknown, defaulting to 1000 [ 384.591430][T16738] IPVS: length: 35 != 24 [ 384.593783][ T8229] lec:lec_start_xmit: lec0:No lecd attached [ 384.621912][T16733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2853'. [ 384.642213][T16733] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2853'. [ 384.659836][T16733] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2853'. [ 384.866900][T16747] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 384.871528][T16655] lo speed is unknown, defaulting to 1000 [ 384.891228][T16710] wg1 speed is unknown, defaulting to 1000 [ 385.185736][T16758] bond0: Removing last ns target with arp_interval on [ 385.370260][T16768] x_tables: duplicate underflow at hook 3 [ 385.495139][T16710] lo speed is unknown, defaulting to 1000 [ 385.769020][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2866'. [ 387.609988][T16788] Bluetooth: MGMT ver 1.23 [ 387.630075][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2869'. [ 387.656489][T16788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2869'. [ 387.836576][T16801] netlink: 'syz.4.2871': attribute type 6 has an invalid length. [ 387.897295][T16788] ip6tnl9: entered promiscuous mode [ 387.909710][T16788] ip6tnl9: entered allmulticast mode [ 387.940715][T16802] siw: device registration error -23 [ 387.961999][T16804] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2873'. [ 387.973065][T16801] lo: Caught tx_queue_len zero misconfig [ 388.023226][T16805] netlink: 'syz.1.2873': attribute type 18 has an invalid length. [ 388.060049][T16805] netlink: 'syz.1.2873': attribute type 18 has an invalid length. [ 388.084162][T16804] x_tables: ip_tables: ah match: only valid for protocol 51 [ 388.221631][T16813] tipc: Enabling of bearer rejected, already enabled [ 388.304107][T16813] bond10: option ad_select: invalid value (34) [ 388.332095][T16813] bond10 (unregistering): Released all slaves [ 388.388000][T16823] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 388.515002][T16795] wg1 speed is unknown, defaulting to 1000 [ 389.038942][T16853] __nla_validate_parse: 52 callbacks suppressed [ 389.038963][T16853] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2887'. [ 389.081184][T16854] netlink: 'syz.0.2886': attribute type 2 has an invalid length. [ 389.126035][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2888'. [ 389.158498][T16860] netlink: 'syz.1.2889': attribute type 21 has an invalid length. [ 389.196145][T16795] lo speed is unknown, defaulting to 1000 [ 389.196302][T16860] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2889'. [ 389.303751][T16864] netlink: 'syz.2.2890': attribute type 1 has an invalid length. [ 389.420812][T16862] syzkaller1: left promiscuous mode [ 389.431083][T16872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2892'. [ 389.441443][T16862] syzkaller1: left allmulticast mode [ 389.441839][T16866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2891'. [ 389.546725][T16875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2892'. [ 389.706476][T16875] 8021q: adding VLAN 0 to HW filter on device bond10 [ 389.824332][T16886] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 389.890322][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5290 ms [ 389.898358][ C1] lec:lec_tx_timeout: lec0 [ 391.422951][T16877] vlan2: entered promiscuous mode [ 391.428013][T16877] bond10: entered promiscuous mode [ 392.120832][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.139337][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.147865][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.162320][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 392.175153][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 392.210257][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.223813][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.252934][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.287175][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 392.298056][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 392.798677][T16910] wg1 speed is unknown, defaulting to 1000 [ 393.470549][T10167] pimreg: left allmulticast mode [ 393.476356][T10167] pimreg3: left allmulticast mode [ 393.674145][T16944] xt_CT: No such helper "snmp_trap" [ 393.720893][T16945] xt_CT: No such helper "snmp_trap" [ 394.184428][T10167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.194750][T10167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.204292][T10167] bond0 (unregistering): Released all slaves [ 394.214393][T10167] bond1 (unregistering): Released all slaves [ 394.229372][T10167] team0: Port device bond2 removed [ 394.235830][T10167] bond2 (unregistering): Released all slaves [ 394.248859][T10167] bond3 (unregistering): Released all slaves [ 394.262789][T10167] bond4 (unregistering): Released all slaves [ 394.276703][T10167] bond5 (unregistering): Released all slaves [ 394.289189][T10167] bond6 (unregistering): Released all slaves [ 394.317100][T16910] lo speed is unknown, defaulting to 1000 [ 394.323050][T16913] wg1 speed is unknown, defaulting to 1000 [ 394.451979][ T5838] Bluetooth: hci5: command tx timeout [ 394.505156][T10167] !9: left promiscuous mode [ 394.689741][T10167] : left promiscuous mode [ 394.770905][T16972] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 394.794613][T16978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2911'. [ 394.843906][T16913] lo speed is unknown, defaulting to 1000 [ 394.845298][T10167] tipc: Left network mode [ 394.946255][T10167] IPVS: stopping backup sync thread 10319 ... [ 395.518505][T16976] wg1 speed is unknown, defaulting to 1000 [ 395.582208][T16913] chnl_net:caif_netlink_parms(): no params data found [ 395.780291][T17003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2913'. [ 395.789982][T17003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2913'. [ 395.810885][T17007] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2913'. [ 395.827508][T17007] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2913'. [ 396.034515][T16913] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.054213][T16913] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.075412][T16913] bridge_slave_0: entered allmulticast mode [ 396.098447][T16913] bridge_slave_0: entered promiscuous mode [ 396.122443][T16913] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.129894][T16913] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.137254][T16913] bridge_slave_1: entered allmulticast mode [ 396.153586][T16913] bridge_slave_1: entered promiscuous mode [ 396.530656][ T5838] Bluetooth: hci5: command tx timeout [ 396.572882][T16976] lo speed is unknown, defaulting to 1000 [ 396.845104][T16913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.912666][T16913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.197653][T16913] team0: Port device team_slave_0 added [ 397.214330][T16913] team0: Port device team_slave_1 added [ 397.393783][T16913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.413353][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.472495][T16913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.522191][T16913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.539452][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.635397][T16913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.707611][T10167] hsr_slave_0: left promiscuous mode [ 397.739664][T10167] hsr_slave_1: left promiscuous mode [ 397.745932][T10167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.102063][ T9447] smc: removing ib device syz1 [ 398.197526][T10167] team0 (unregistering): Port device team_slave_1 removed [ 398.224244][T10167] team0 (unregistering): Port device team_slave_0 removed [ 398.405823][T17076] erspan0: entered promiscuous mode [ 398.411601][T17076] vlan2: entered promiscuous mode [ 398.488823][T17062] wg1 speed is unknown, defaulting to 1000 [ 398.591930][T17087] FAULT_INJECTION: forcing a failure. [ 398.591930][T17087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.612434][T17087] CPU: 1 UID: 0 PID: 17087 Comm: syz.2.2926 Not tainted syzkaller #0 PREEMPT(full) [ 398.612456][T17087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.612471][T17087] Call Trace: [ 398.612478][T17087] [ 398.612486][T17087] dump_stack_lvl+0xe8/0x150 [ 398.612512][T17087] should_fail_ex+0x412/0x560 [ 398.612534][T17087] _copy_from_iter+0x1d3/0x1670 [ 398.612555][T17087] ? rcu_is_watching+0x15/0xb0 [ 398.612578][T17087] ? __pfx__copy_from_iter+0x10/0x10 [ 398.612602][T17087] ? netlink_sendmsg+0x650/0xb40 [ 398.612619][T17087] ? skb_put+0x11b/0x210 [ 398.612640][T17087] netlink_sendmsg+0x6c0/0xb40 [ 398.612665][T17087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.612685][T17087] ? aa_sock_msg_perm+0xf1/0x1b0 [ 398.612704][T17087] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.612720][T17087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.612737][T17087] ____sys_sendmsg+0xa68/0xad0 [ 398.612765][T17087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.612791][T17087] ? import_iovec+0x73/0xa0 [ 398.612812][T17087] ___sys_sendmsg+0x2a5/0x360 [ 398.612837][T17087] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.612884][T17087] ? __fget_files+0x2a/0x420 [ 398.612904][T17087] ? __fget_files+0x3a0/0x420 [ 398.612930][T17087] __x64_sys_sendmsg+0x1bd/0x2a0 [ 398.612954][T17087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.612983][T17087] ? __pfx_ksys_write+0x10/0x10 [ 398.613008][T17087] do_syscall_64+0x14d/0xf80 [ 398.613022][T17087] ? trace_irq_disable+0x3b/0x150 [ 398.613042][T17087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.613058][T17087] ? clear_bhb_loop+0x40/0x90 [ 398.613076][T17087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.613097][T17087] RIP: 0033:0x7f84e5b9c799 [ 398.613113][T17087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.613126][T17087] RSP: 002b:00007f84e6a02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.613142][T17087] RAX: ffffffffffffffda RBX: 00007f84e5e15fa0 RCX: 00007f84e5b9c799 [ 398.613153][T17087] RDX: 000000002400c080 RSI: 0000200000000040 RDI: 0000000000000003 [ 398.613162][T17087] RBP: 00007f84e6a02090 R08: 0000000000000000 R09: 0000000000000000 [ 398.613171][T17087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.613180][T17087] R13: 00007f84e5e16038 R14: 00007f84e5e15fa0 R15: 00007ffcbda1f238 [ 398.613203][T17087] [ 398.614979][T16913] hsr_slave_0: entered promiscuous mode [ 398.625689][ T5830] Bluetooth: hci5: command tx timeout [ 398.680439][T16913] hsr_slave_1: entered promiscuous mode [ 398.897991][T16913] debugfs: 'hsr0' already exists in 'hsr' [ 398.906048][T16913] Cannot create hsr debugfs directory [ 399.018063][T17085] m1Ie5n: entered promiscuous mode [ 399.311060][T17096] team_slave_1: Caught tx_queue_len zero misconfig [ 399.358536][T17062] lo speed is unknown, defaulting to 1000 [ 399.727432][T17114] : renamed from veth0_to_bond [ 400.227319][T17133] FAULT_INJECTION: forcing a failure. [ 400.227319][T17133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.250045][T17133] CPU: 1 UID: 0 PID: 17133 Comm: syz.4.2936 Not tainted syzkaller #0 PREEMPT(full) [ 400.250071][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.250082][T17133] Call Trace: [ 400.250090][T17133] [ 400.250097][T17133] dump_stack_lvl+0xe8/0x150 [ 400.250128][T17133] should_fail_ex+0x412/0x560 [ 400.250154][T17133] _copy_from_iter+0x1d3/0x1670 [ 400.250181][T17133] ? rcu_is_watching+0x15/0xb0 [ 400.250211][T17133] ? __pfx__copy_from_iter+0x10/0x10 [ 400.250241][T17133] ? netlink_sendmsg+0x650/0xb40 [ 400.250263][T17133] ? skb_put+0x11b/0x210 [ 400.250290][T17133] netlink_sendmsg+0x6c0/0xb40 [ 400.250321][T17133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.250347][T17133] ? aa_sock_msg_perm+0xf1/0x1b0 [ 400.250370][T17133] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.250390][T17133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.250411][T17133] ____sys_sendmsg+0xa68/0xad0 [ 400.250446][T17133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.250481][T17133] ? import_iovec+0x73/0xa0 [ 400.250509][T17133] ___sys_sendmsg+0x2a5/0x360 [ 400.250540][T17133] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.250600][T17133] ? __fget_files+0x2a/0x420 [ 400.250623][T17133] ? __fget_files+0x3a0/0x420 [ 400.250663][T17133] __x64_sys_sendmsg+0x1bd/0x2a0 [ 400.250692][T17133] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.250728][T17133] ? __pfx_ksys_write+0x10/0x10 [ 400.250757][T17133] do_syscall_64+0x14d/0xf80 [ 400.250774][T17133] ? trace_irq_disable+0x3b/0x150 [ 400.250798][T17133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.250816][T17133] ? clear_bhb_loop+0x40/0x90 [ 400.250838][T17133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.250856][T17133] RIP: 0033:0x7fc88659c799 [ 400.250874][T17133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.250889][T17133] RSP: 002b:00007fc8874e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.250908][T17133] RAX: ffffffffffffffda RBX: 00007fc886815fa0 RCX: 00007fc88659c799 [ 400.250921][T17133] RDX: 000000002400c080 RSI: 0000200000000040 RDI: 0000000000000003 [ 400.250931][T17133] RBP: 00007fc8874e9090 R08: 0000000000000000 R09: 0000000000000000 [ 400.250941][T17133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.250951][T17133] R13: 00007fc886816038 R14: 00007fc886815fa0 R15: 00007ffec6fae978 [ 400.250981][T17133] [ 400.695985][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2938'. [ 400.717729][T17141] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2939'. [ 400.727016][T17141] openvswitch: netlink: Flow key attr not present in new flow. [ 400.770228][ T5830] Bluetooth: hci5: command tx timeout [ 400.779498][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2938'. [ 400.791444][T17142] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2938'. [ 400.803853][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2938'. [ 400.813049][T17142] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2938'. [ 400.823197][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2938'. [ 400.895777][T17139] gretap0: left allmulticast mode [ 400.902018][T17139] gretap0: left promiscuous mode [ 400.907253][T17139] bridge0: port 3(gretap0) entered disabled state [ 400.921744][T17148] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2941'. [ 400.937866][T17148] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2941'. [ 400.995754][T17139] bridge_slave_1: left allmulticast mode [ 401.008171][T17139] bridge_slave_1: left promiscuous mode [ 401.014736][T17139] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.056903][T17139] bridge_slave_0: left allmulticast mode [ 401.080089][T17139] bridge_slave_0: left promiscuous mode [ 401.088272][T17139] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.122337][T10167] IPVS: stop unused estimator thread 0... [ 401.443837][T17160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2942'. [ 401.594522][T17160] bond0: entered promiscuous mode [ 401.607685][T17160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.742916][T17166] 8021q: adding VLAN 0 to HW filter on device bond12 [ 401.775607][T17166] bond12: entered promiscuous mode [ 401.790558][T17166] bond0: (slave bond12): Enslaving as an active interface with an up link [ 401.812093][T17181] netlink: 'syz.1.2947': attribute type 9 has an invalid length. [ 401.914791][T17179] netlink: 'syz.0.2946': attribute type 1 has an invalid length. [ 402.302800][T16913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 402.337324][T16913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.366118][T16913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.389535][T16913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.657459][T16913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.702806][T17195] geneve1: Caught tx_queue_len zero misconfig [ 402.840598][T16913] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.898693][T10167] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.906159][T10167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.939273][T17238] netlink: 'syz.0.2954': attribute type 1 has an invalid length. [ 403.213146][T17238] bond10: entered promiscuous mode [ 403.218719][T17238] 8021q: adding VLAN 0 to HW filter on device bond10 [ 403.266037][T10167] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.273273][T10167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.327099][T17254] bond10: (slave bridge2): making interface the new active one [ 403.335860][T17254] bridge2: entered promiscuous mode [ 403.344767][T17254] bridge2: left promiscuous mode [ 403.454858][T17269] netlink: 'syz.1.2958': attribute type 28 has an invalid length. [ 403.906376][T17293] netlink: 'syz.0.2962': attribute type 1 has an invalid length. [ 403.924220][T17298] pim6reg: entered allmulticast mode [ 403.930470][T17293] NCSI netlink: No device for ifindex 0 [ 403.950859][T17298] pim6reg: left allmulticast mode [ 404.088074][T17302] wg1 speed is unknown, defaulting to 1000 [ 404.109807][T17293] lo: Caught tx_queue_len zero misconfig [ 404.275067][T16913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.370702][T16913] veth0_vlan: entered promiscuous mode [ 404.408024][T16913] veth1_vlan: entered promiscuous mode [ 404.428059][T17302] lo speed is unknown, defaulting to 1000 [ 404.446313][T17311] wg1 speed is unknown, defaulting to 1000 [ 404.582216][T16913] veth0_macvtap: entered promiscuous mode [ 404.599269][T16913] veth1_macvtap: entered promiscuous mode [ 404.623031][T16913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.636837][T16913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.655957][ T137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.815705][ T137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.850821][T10167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.863777][T10167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.127666][T17351] netlink: 'syz.2.2975': attribute type 1 has an invalid length. [ 405.255400][T17353] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 405.318580][T17353] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 405.374041][T10167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.385597][T10167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.460602][T17357] bond11: (slave bridge11): Enslaving as an active interface with a down link [ 405.470495][T17359] netlink: 'syz.0.2974': attribute type 17 has an invalid length. [ 405.470776][T17311] lo speed is unknown, defaulting to 1000 [ 405.487927][T17351] 8021q: adding VLAN 0 to HW filter on device bond11 [ 405.695742][T10167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.714637][T10167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.811076][T17383] veth0_to_team: Caught tx_queue_len zero misconfig [ 405.818202][T17383] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 406.199227][T17395] bond11: option ad_actor_sys_prio: invalid value (0) [ 406.314355][T17402] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 406.336444][T17395] bond11: option ad_actor_sys_prio: allowed values 1 - 65535 [ 406.357253][T17395] bond11 (unregistering): Released all slaves [ 406.402935][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.412567][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.424893][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.433959][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.462144][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.684213][T17403] wg1 speed is unknown, defaulting to 1000 [ 406.878862][T17428] vti0: entered promiscuous mode [ 406.919776][T17428] vti0: entered allmulticast mode [ 407.338882][T17450] syzkaller0: entered promiscuous mode [ 407.346563][T17450] syzkaller0: entered allmulticast mode [ 407.367785][T17403] lo speed is unknown, defaulting to 1000 [ 408.532585][ T5830] Bluetooth: hci2: command tx timeout [ 409.366649][T17403] chnl_net:caif_netlink_parms(): no params data found [ 409.456466][T17498] __nla_validate_parse: 10 callbacks suppressed [ 409.456484][T17498] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3003'. [ 409.554193][T17403] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.562233][T17403] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.569502][T17403] bridge_slave_0: entered allmulticast mode [ 409.577778][T17403] bridge_slave_0: entered promiscuous mode [ 409.587195][T17403] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.594984][T17403] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.602895][T17403] bridge_slave_1: entered allmulticast mode [ 409.610878][T17403] bridge_slave_1: entered promiscuous mode [ 409.647644][T17403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.660675][T17403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.728344][T17403] team0: Port device team_slave_0 added [ 409.741641][T17403] team0: Port device team_slave_1 added [ 409.812644][T17403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.850623][T17403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.922148][T17403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.970687][T17403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.977667][T17403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.013687][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 410.050744][T17403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.210898][T17403] hsr_slave_0: entered promiscuous mode [ 410.217907][T17403] hsr_slave_1: entered promiscuous mode [ 410.228140][T17403] debugfs: 'hsr0' already exists in 'hsr' [ 410.235526][T17403] Cannot create hsr debugfs directory [ 410.341546][T17514] bond13: option packets_per_slave: invalid value (1048582) [ 410.349143][T17514] bond13: option packets_per_slave: allowed values 0 - 65535 [ 410.360407][T17514] bond13 (unregistering): Released all slaves [ 410.455955][T17513] bond13: option packets_per_slave: invalid value (1048582) [ 410.463613][T17513] bond13: option packets_per_slave: allowed values 0 - 65535 [ 410.484344][T17513] bond13 (unregistering): Released all slaves [ 410.609951][ T5830] Bluetooth: hci2: command tx timeout [ 410.717837][T17530] "syz.3.3013" (17530) uses obsolete ecb(arc4) skcipher [ 410.955617][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3017'. [ 411.194550][T17553] wg1 speed is unknown, defaulting to 1000 [ 411.403636][T17403] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 411.418534][T17403] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 411.436764][T17403] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 411.451442][T17403] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 411.587864][T17403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.615281][T17553] lo speed is unknown, defaulting to 1000 [ 411.638696][T17403] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.704781][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.711949][ T9451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.760764][T10167] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.767961][T10167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.799335][T17581] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3023'. [ 412.149985][T17599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.240977][T10167] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.261179][T10167] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 412.270967][T10167] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.279473][T10167] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 412.339355][T10167] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.351872][T10167] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 412.386691][T10167] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.406429][T10167] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 412.470959][T17403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.531600][T17403] veth0_vlan: entered promiscuous mode [ 412.543660][T17403] veth1_vlan: entered promiscuous mode [ 412.577803][T17403] veth0_macvtap: entered promiscuous mode [ 412.587687][T17403] veth1_macvtap: entered promiscuous mode [ 412.613935][T17403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.631036][T17403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.647304][ T9442] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.658591][ T9442] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.675172][ T9442] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.690654][ T5830] Bluetooth: hci2: command tx timeout [ 412.697916][ T9442] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.727061][T17609] tipc: Enabling of bearer rejected, failed to enable media [ 412.790526][T10167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.801285][T10167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.840442][T10167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.848514][T10167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.144649][T17618] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2982'. [ 413.188623][T17618] bridge1: entered allmulticast mode [ 413.254758][T17632] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 413.280763][T17632] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 413.450115][T17644] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3042'. [ 413.478760][T17646] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 413.519215][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.540562][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.549192][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.557281][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.565639][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.708252][T17649] wg1 speed is unknown, defaulting to 1000 [ 413.810226][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3045'. [ 413.818620][T17665] FAULT_INJECTION: forcing a failure. [ 413.818620][T17665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.819368][T17662] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 413.842659][T17666] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3047'. [ 413.863107][T17665] CPU: 0 UID: 0 PID: 17665 Comm: syz.2.3046 Not tainted syzkaller #0 PREEMPT(full) [ 413.863141][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 413.863152][T17665] Call Trace: [ 413.863159][T17665] [ 413.863166][T17665] dump_stack_lvl+0xe8/0x150 [ 413.863197][T17665] should_fail_ex+0x412/0x560 [ 413.863223][T17665] _copy_from_user+0x2d/0xb0 [ 413.863248][T17665] get_timespec64+0x96/0x1b0 [ 413.863272][T17665] ? __pfx_get_timespec64+0x10/0x10 [ 413.863302][T17665] __se_sys_ppoll+0xe3/0x2b0 [ 413.863324][T17665] ? fput+0xa0/0xd0 [ 413.863350][T17665] ? __pfx___se_sys_ppoll+0x10/0x10 [ 413.863375][T17665] ? __pfx_ksys_write+0x10/0x10 [ 413.863399][T17665] ? __x64_sys_ppoll+0x20/0xc0 [ 413.863423][T17665] do_syscall_64+0x14d/0xf80 [ 413.863440][T17665] ? trace_irq_disable+0x3b/0x150 [ 413.863465][T17665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.863482][T17665] ? clear_bhb_loop+0x40/0x90 [ 413.863504][T17665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.863522][T17665] RIP: 0033:0x7fdc6bd9c799 [ 413.863539][T17665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.863554][T17665] RSP: 002b:00007fdc6cc1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 413.863572][T17665] RAX: ffffffffffffffda RBX: 00007fdc6c015fa0 RCX: 00007fdc6bd9c799 [ 413.863585][T17665] RDX: 0000200000000300 RSI: 0000000000000001 RDI: 00002000000002c0 [ 413.863597][T17665] RBP: 00007fdc6cc1a090 R08: 0000000000000000 R09: 0000000000000000 [ 413.863608][T17665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.863618][T17665] R13: 00007fdc6c016038 R14: 00007fdc6c015fa0 R15: 00007ffd7c51d618 [ 413.863646][T17665] [ 414.243568][T17675] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3051'. [ 414.301566][ T9447] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.327438][ T9447] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.332711][T17680] netlink: 'syz.0.3052': attribute type 1 has an invalid length. [ 414.348189][T17680] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3052'. [ 414.370866][T17649] lo speed is unknown, defaulting to 1000 [ 414.497018][ T9447] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.526153][ T9447] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.657093][ T9447] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.687637][ T9447] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.771771][ T5830] Bluetooth: hci2: command tx timeout [ 414.778643][ T9447] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.799423][ T9447] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.844110][T17695] FAULT_INJECTION: forcing a failure. [ 414.844110][T17695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.867696][T17695] CPU: 1 UID: 0 PID: 17695 Comm: syz.4.3059 Not tainted syzkaller #0 PREEMPT(full) [ 414.867722][T17695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.867731][T17695] Call Trace: [ 414.867738][T17695] [ 414.867745][T17695] dump_stack_lvl+0xe8/0x150 [ 414.867773][T17695] should_fail_ex+0x412/0x560 [ 414.867795][T17695] _copy_from_user+0x2d/0xb0 [ 414.867819][T17695] do_sys_poll+0x2a9/0x1120 [ 414.867854][T17695] ? __pfx_do_sys_poll+0x10/0x10 [ 414.867873][T17695] ? __lock_acquire+0x6b5/0x2cf0 [ 414.867896][T17695] ? is_bpf_text_address+0x26/0x2b0 [ 414.867993][T17695] ? set_user_sigmask+0xcd/0x1c0 [ 414.868015][T17695] ? __pfx_set_user_sigmask+0x10/0x10 [ 414.868049][T17695] __se_sys_ppoll+0x209/0x2b0 [ 414.868075][T17695] ? __pfx___se_sys_ppoll+0x10/0x10 [ 414.868095][T17695] ? __pfx_ksys_write+0x10/0x10 [ 414.868115][T17695] ? __x64_sys_ppoll+0x20/0xc0 [ 414.868134][T17695] do_syscall_64+0x14d/0xf80 [ 414.868150][T17695] ? trace_irq_disable+0x3b/0x150 [ 414.868171][T17695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.868196][T17695] ? clear_bhb_loop+0x40/0x90 [ 414.868218][T17695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.868235][T17695] RIP: 0033:0x7fc88659c799 [ 414.868251][T17695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.868264][T17695] RSP: 002b:00007fc8874e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 414.868282][T17695] RAX: ffffffffffffffda RBX: 00007fc886815fa0 RCX: 00007fc88659c799 [ 414.868295][T17695] RDX: 0000200000000300 RSI: 0000000000000001 RDI: 00002000000002c0 [ 414.868306][T17695] RBP: 00007fc8874e9090 R08: 0000000000000000 R09: 0000000000000000 [ 414.868315][T17695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.868323][T17695] R13: 00007fc886816038 R14: 00007fc886815fa0 R15: 00007ffec6fae978 [ 414.868350][T17695] [ 415.238517][T17649] chnl_net:caif_netlink_parms(): no params data found [ 415.465227][T17712] blkio.reset_stats is deprecated [ 415.574686][ T9447] veth0_to_bond: left allmulticast mode [ 415.575913][T17718] sctp: [Deprecated]: syz.3.3066 (pid 17718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.575913][T17718] Use struct sctp_sack_info instead [ 415.589883][ T9447] veth0_to_bond: left promiscuous mode [ 415.604079][T17718] sctp: [Deprecated]: syz.3.3066 (pid 17718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.604079][T17718] Use struct sctp_sack_info instead [ 415.620492][ T9447] bridge6: port 2(veth0_to_bond) entered disabled state [ 415.653415][ T5830] Bluetooth: hci3: command tx timeout [ 415.663306][ T9447] veth11: left allmulticast mode [ 415.668286][ T9447] veth11: left promiscuous mode [ 415.673809][ T9447] bridge6: port 1(veth11) entered disabled state [ 415.758265][T17691] infiniband syz1: set down [ 415.778569][T17691] infiniband syz1: added ipvlan0 [ 415.831626][T17691] RDS/IB: syz1: added [ 415.835701][T17691] smc: adding ib device syz1 with port count 1 [ 415.859663][T17691] smc: ib device syz1 port 1 has no pnetid [ 415.874596][ T9447] ip6gretap0 (unregistering): left promiscuous mode [ 416.473089][ T9447] bond7 (unregistering): (slave bridge8): Releasing backup interface [ 416.481606][ T9447] bridge8 (unregistering): left promiscuous mode [ 416.573189][ T9447] .` (unregistering): Released all slaves [ 416.583535][ T9447] bond1 (unregistering): (slave lo): Releasing backup interface [ 416.591772][ T9447] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 416.607102][ T9447] bond1 (unregistering): Released all slaves [ 416.633003][ T9447] bond0 (unregistering): Released all slaves [ 416.646510][ T9447] bond2 (unregistering): Released all slaves [ 416.666531][ T9447] bond3 (unregistering): (slave veth7): Releasing active interface [ 416.674542][ T9447] batadv1: entered promiscuous mode [ 416.682172][ T9447] bond3 (unregistering): (slave batadv1): Releasing active interface [ 416.692356][ T9447] bond3 (unregistering): Released all slaves [ 416.706506][ T9447] bond4 (unregistering): (slave veth9): Releasing active interface [ 416.716091][ T9447] bond4 (unregistering): Released all slaves [ 416.733232][ T9447] bond5 (unregistering): Released all slaves [ 416.746563][ T9447] bond6 (unregistering): Released all slaves [ 416.767223][ T9447] bond7 (unregistering): Released all slaves [ 416.808852][T17649] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.823766][T17649] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.852407][T17649] bridge_slave_0: entered allmulticast mode [ 416.863334][T17649] bridge_slave_0: entered promiscuous mode [ 416.888507][T17649] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.916475][T17649] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.958451][T17649] bridge_slave_1: entered allmulticast mode [ 416.983317][T17649] bridge_slave_1: entered promiscuous mode [ 417.024004][ T5831] lo speed is unknown, defaulting to 1000 [ 417.029849][ T5958] lo speed is unknown, defaulting to 1000 [ 417.035607][ T5958] syz2: Port: 1 Link DOWN [ 417.099838][ T9447] hmac(sha224: left promiscuous mode [ 417.356429][ T9447] tipc: Left network mode [ 417.367834][T17755] syzkaller0: entered promiscuous mode [ 417.379741][T17755] syzkaller0: entered allmulticast mode [ 417.417483][T17649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.532025][T17649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.677427][ T9451] nci: nci_rx_work: unknown MT 0x7 [ 417.730068][ T5830] Bluetooth: hci3: command tx timeout [ 417.874709][T17760] team0: Device gtp0 is of different type [ 418.041274][T17649] team0: Port device team_slave_0 added [ 418.064202][T17649] team0: Port device team_slave_1 added [ 418.124106][T17786] __nla_validate_parse: 1 callbacks suppressed [ 418.124125][T17786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3078'. [ 418.145484][T17649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.152851][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.179315][T17649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.197653][T17649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.211119][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.242107][T17649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.341590][T17649] hsr_slave_0: entered promiscuous mode [ 418.348844][T17649] hsr_slave_1: entered promiscuous mode [ 418.359307][T17649] debugfs: 'hsr0' already exists in 'hsr' [ 418.370071][T17649] Cannot create hsr debugfs directory [ 419.537066][ T9447] veth1_to_team: left promiscuous mode [ 419.545602][ T9447] hsr_slave_0: left promiscuous mode [ 419.810143][ T5830] Bluetooth: hci3: command tx timeout [ 420.500133][T17762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.711728][T17806] netlink: 'syz.3.3083': attribute type 22 has an invalid length. [ 420.997354][T17649] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 421.048445][T17649] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 421.116614][T17649] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 421.177121][T17824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3088'. [ 421.191909][T17649] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 421.258720][T17824] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 421.282055][T17824] bridge2: entered allmulticast mode [ 421.383008][T17830] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3089'. [ 421.418351][T17838] geneve3: entered promiscuous mode [ 421.441137][T17830] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 421.663881][T17649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.723069][ T9447] IPVS: stop unused estimator thread 0... [ 421.767213][T17860] macsec1: entered promiscuous mode [ 421.789037][T17860] macsec1: entered allmulticast mode [ 421.802662][T17868] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3095'. [ 421.813787][T17869] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3097'. [ 421.821241][T17866] netlink: 'syz.4.3098': attribute type 21 has an invalid length. [ 421.844163][T17858] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3095'. [ 421.845863][T17649] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.890515][ T5830] Bluetooth: hci3: command tx timeout [ 421.902711][T17866] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3098'. [ 421.938867][T17875] xt_nat: multiple ranges no longer supported [ 421.971904][T10168] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.979085][T10168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.023589][T10168] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.030825][T10168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.521639][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3105'. [ 422.556102][T17899] bond1: option mode: invalid value (254) [ 422.575902][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3105'. [ 422.616951][T17899] bond1 (unregistering): Released all slaves [ 422.719387][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3107'. [ 422.753737][T17912] netlink: 'syz.2.3107': attribute type 20 has an invalid length. [ 422.804910][T17649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.982008][T17649] veth0_vlan: entered promiscuous mode [ 423.017608][T17649] veth1_vlan: entered promiscuous mode [ 423.122129][T17649] veth0_macvtap: entered promiscuous mode [ 423.166741][T17649] veth1_macvtap: entered promiscuous mode [ 423.208906][T17937] netlink: 'syz.4.3111': attribute type 3 has an invalid length. [ 423.224781][T17649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.253690][T17649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.293157][ T9435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.312328][ T9435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.350798][ T9435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.376859][T17940] sctp: [Deprecated]: syz.2.3112 (pid 17940) Use of int in maxseg socket option. [ 423.376859][T17940] Use struct sctp_assoc_value instead [ 423.418907][ T9435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.497708][T17943] __nla_validate_parse: 1 callbacks suppressed [ 423.497727][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3113'. [ 423.600549][T17948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.663031][T10167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.704534][T10167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.718888][T17957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3116'. [ 423.750564][T17957] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3116'. [ 423.804499][T10167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.832759][T10167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.882720][T17962] netlink: 'syz.4.3119': attribute type 22 has an invalid length. [ 423.891293][T17962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3119'. [ 423.931180][T17962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.954097][T17968] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3118'. [ 424.272786][T17986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3123'. [ 424.328737][T17986] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 424.387753][T17989] Cannot find del_set index 0 as target [ 424.443729][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3125'. [ 424.455794][T17988] netlink: 'syz.3.3124': attribute type 1 has an invalid length. [ 424.530866][T17997] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 424.607533][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 424.620238][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 424.628653][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 424.641279][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 424.649733][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 424.723796][ T9435] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.729809][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3125'. [ 424.789343][ T9435] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.844625][ T9435] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.888346][ T9435] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.612725][T18013] geneve2: entered promiscuous mode [ 425.625065][T18013] geneve2: entered allmulticast mode [ 425.663298][T18020] tipc: Enabling of bearer rejected, failed to enable media [ 425.672673][T18000] wg1 speed is unknown, defaulting to 1000 [ 425.824226][T18041] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3134'. [ 425.833543][T18041] netlink: 245 bytes leftover after parsing attributes in process `syz.4.3134'. [ 426.176374][T18050] syzkaller0: entered promiscuous mode [ 426.213496][T18050] syzkaller0: entered allmulticast mode [ 426.781456][ T5838] Bluetooth: hci1: command tx timeout [ 427.856731][T18056] syzkaller1: entered promiscuous mode [ 427.862567][T18056] syzkaller1: entered allmulticast mode [ 428.000663][T18071] netlink: 'syz.2.3143': attribute type 1 has an invalid length. [ 428.218483][T18087] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.226251][T18087] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.256041][T18087] bridge0: entered allmulticast mode [ 428.288550][T18087] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 428.326657][T18094] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 428.338343][T18093] netlink: 'syz.1.3150': attribute type 2 has an invalid length. [ 428.387699][T18093] netlink: 'syz.1.3150': attribute type 2 has an invalid length. [ 428.488228][T18104] syzkaller0: entered promiscuous mode [ 428.495295][T18104] syzkaller0: entered allmulticast mode [ 428.704860][T18000] chnl_net:caif_netlink_parms(): no params data found [ 428.850610][ T5838] Bluetooth: hci1: command tx timeout [ 428.940458][T18000] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.947855][T18000] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.961518][T18139] __nla_validate_parse: 8 callbacks suppressed [ 428.961540][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'. [ 428.965448][T18000] bridge_slave_0: entered allmulticast mode [ 428.985904][T18000] bridge_slave_0: entered promiscuous mode [ 428.996373][T18000] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.005201][T18000] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.018795][T18000] bridge_slave_1: entered allmulticast mode [ 429.033533][T18000] bridge_slave_1: entered promiscuous mode [ 429.118965][ T5831] IPVS: starting estimator thread 0... [ 429.212159][T18000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.221434][T18157] IPVS: using max 45 ests per chain, 108000 per kthread [ 429.230475][T18162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3166'. [ 429.243289][T18000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.261552][T18164] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3166'. [ 429.309880][T18000] team0: Port device team_slave_0 added [ 429.327573][T18000] team0: Port device team_slave_1 added [ 429.361618][T18173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3169'. [ 429.421586][T18179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.433790][T18181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3171'. [ 429.436598][T18000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.452544][T18000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.481082][T18000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.495934][T18183] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3172'. [ 429.584189][T18183] netlink: 'syz.1.3172': attribute type 11 has an invalid length. [ 429.701730][T18179] bridge0: left allmulticast mode [ 429.835198][T18179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.851084][T18179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.943226][T18179] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 429.983280][T18179] bridge1: left allmulticast mode [ 429.993193][T18179] bridge2: left allmulticast mode [ 430.004786][T18000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.017195][T18000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.065298][T18000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.125814][ T9451] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.136027][ T9451] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.164938][T18195] wg1 speed is unknown, defaulting to 1000 [ 430.173577][ T9451] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.182861][ T9451] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.279156][T18000] hsr_slave_0: entered promiscuous mode [ 430.298303][T18000] hsr_slave_1: entered promiscuous mode [ 430.427547][T18209] syzkaller0: entered promiscuous mode [ 430.435105][T18209] syzkaller0: entered allmulticast mode [ 430.462780][T18211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.509381][T18213] netlink: 'syz.3.3180': attribute type 1 has an invalid length. [ 430.678152][T18213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3180'. [ 430.814571][T18000] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.827468][T18000] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 430.909195][T18000] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.924701][T18000] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 430.935780][ T5838] Bluetooth: hci1: command tx timeout [ 431.007513][T18000] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.022342][T18000] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 431.116811][T18000] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.129321][T18000] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 431.482220][T18000] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.530044][T18000] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.554552][T18000] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.589700][T18000] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.712772][T18263] x_tables: duplicate underflow at hook 1 [ 431.861431][T18271] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3197'. [ 431.913040][T18000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.935682][T18000] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.966744][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.974448][ T9435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.999060][ T9442] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.006437][ T9442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.031298][T18275] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3198'. [ 432.100522][T18275] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3198'. [ 432.211538][T18278] wg1 speed is unknown, defaulting to 1000 [ 432.346663][T18290] netlink: 'syz.3.3202': attribute type 1 has an invalid length. [ 432.451052][T18290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.506801][T18297] bond1 (unregistering): Released all slaves [ 432.724653][T18000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.811831][T18000] veth0_vlan: entered promiscuous mode [ 432.870401][T18000] veth1_vlan: entered promiscuous mode [ 433.011868][ T5838] Bluetooth: hci1: command tx timeout [ 433.042167][T18000] veth0_macvtap: entered promiscuous mode [ 433.073736][T18000] veth1_macvtap: entered promiscuous mode [ 433.173264][T18000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.296092][T18000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.304727][T18318] netlink: 'syz.1.3207': attribute type 142 has an invalid length. [ 433.336404][ T9451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.403577][ T9451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.518505][ T9451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.547946][ T9451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.894405][T18336] tipc: Invalid UDP bearer configuration [ 433.894458][T18336] tipc: Enabling of bearer rejected, failed to enable media [ 433.913436][ T9442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.927604][ T9442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.985952][T18333] wg1 speed is unknown, defaulting to 1000 [ 434.122837][T10168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.161055][T10168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.176308][T18349] __nla_validate_parse: 9 callbacks suppressed [ 434.176329][T18349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3216'. [ 434.227228][T18351] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3217'. [ 434.265297][T18351] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3217'. [ 434.278650][T18353] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3216'. [ 434.300763][T18353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3216'. [ 434.763526][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 434.774630][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 434.790096][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 434.798245][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 434.806375][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.925103][T18364] wg1 speed is unknown, defaulting to 1000 [ 434.931380][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 435.172272][T18372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3221'. [ 435.347525][T18374] netlink: 'syz.0.3222': attribute type 1 has an invalid length. [ 435.356718][T18374] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3222'. [ 435.888261][T18396] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 435.936392][T18402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3231'. [ 435.949757][T18402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3231'. [ 436.067137][T18407] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 436.079183][T18407] netlink: 'syz.0.3233': attribute type 2 has an invalid length. [ 436.091311][T18407] netlink: 'syz.0.3233': attribute type 3 has an invalid length. [ 436.150059][T18415] xt_hashlimit: size too large, truncated to 1048576 [ 436.168334][T18415] xt_hashlimit: overflow, try lower: 0/0 [ 436.182965][T18415] xt_hashlimit: size too large, truncated to 1048576 [ 436.213347][T18415] xt_hashlimit: overflow, try lower: 0/0 [ 436.575410][T18423] syzkaller1: entered promiscuous mode [ 436.581156][T18423] syzkaller1: entered allmulticast mode [ 436.760210][T18364] chnl_net:caif_netlink_parms(): no params data found [ 436.851924][ T5838] Bluetooth: hci0: command tx timeout [ 436.960217][T18457] syzkaller0: entered promiscuous mode [ 436.965795][T18457] syzkaller0: entered allmulticast mode [ 436.978600][T18460] IPVS: Scheduler module ip_vs_sip not found [ 436.986484][T18364] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.994032][T18364] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.001950][T18364] bridge_slave_0: entered allmulticast mode [ 437.009155][T18364] bridge_slave_0: entered promiscuous mode [ 437.018955][T18364] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.026294][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.035032][T18364] bridge_slave_1: entered allmulticast mode [ 437.043035][T18364] bridge_slave_1: entered promiscuous mode [ 437.178410][T18464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3245'. [ 437.246547][T18364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.273528][T18364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.332415][T18364] team0: Port device team_slave_0 added [ 437.354017][T18364] team0: Port device team_slave_1 added [ 437.447789][T18364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.461384][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.488202][T18364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.572521][T18472] wg1 speed is unknown, defaulting to 1000 [ 437.580539][T18364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.587617][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.628765][T18364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.818013][T18364] hsr_slave_0: entered promiscuous mode [ 437.825142][T18364] hsr_slave_1: entered promiscuous mode [ 437.856837][T18364] debugfs: 'hsr0' already exists in 'hsr' [ 437.869909][T18364] Cannot create hsr debugfs directory [ 437.936883][T18486] veth3: entered promiscuous mode [ 438.080852][T18473] wg1 speed is unknown, defaulting to 1000 [ 438.230429][T18498] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 438.598298][T18503] syzkaller0: entered promiscuous mode [ 438.615722][T18503] syzkaller0: entered allmulticast mode [ 438.855815][T18500] wg1 speed is unknown, defaulting to 1000 [ 438.929982][ T5838] Bluetooth: hci0: command tx timeout [ 439.295513][T18514] wg1 speed is unknown, defaulting to 1000 [ 439.344982][T18364] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 439.360688][T18364] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 439.396785][T18364] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 439.461680][T18364] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 439.998073][T18526] __nla_validate_parse: 9 callbacks suppressed [ 439.998097][T18526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3261'. [ 440.056522][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 440.214138][T18364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.264297][T18526] bond1: entered promiscuous mode [ 440.270546][T18526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.297590][T18527] bridge5: entered promiscuous mode [ 440.307660][T18527] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 440.488733][T18531] tipc: Enabling of bearer rejected, failed to enable media [ 440.729271][T18364] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.758309][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.765503][ T9435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.802154][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.809433][ T9435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.864867][T18537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3263'. [ 440.998857][T18539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 441.012521][ T5838] Bluetooth: hci0: command tx timeout [ 441.483009][T18364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.083058][T18364] veth0_vlan: entered promiscuous mode [ 442.143365][T18364] veth1_vlan: entered promiscuous mode [ 442.172966][T18576] netlink: 'syz.2.3267': attribute type 9 has an invalid length. [ 442.189773][T18576] netlink: 'syz.2.3267': attribute type 11 has an invalid length. [ 442.207926][T18576] netlink: 'syz.2.3267': attribute type 12 has an invalid length. [ 442.233907][T18576] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3267'. [ 442.245935][T18364] veth0_macvtap: entered promiscuous mode [ 442.274525][T18578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 442.275158][T18576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3267'. [ 442.286840][T18364] veth1_macvtap: entered promiscuous mode [ 442.311514][T18578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 442.318435][T18578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 442.325499][T18578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 442.332390][T18578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 442.339239][T18578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 442.346294][T18578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 442.353161][T18578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 442.360212][T18578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 442.367061][T18578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 442.393120][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'. [ 442.417007][T18364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.434393][T18364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.480094][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'. [ 442.488995][T18584] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3273'. [ 442.503446][T18583] bridge_slave_1: left allmulticast mode [ 442.509132][T18583] bridge_slave_1: left promiscuous mode [ 442.548070][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.567120][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'. [ 442.578955][T18571] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3271'. [ 442.623692][T18584] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3273'. [ 442.753480][T18600] unsupported nla_type 142 [ 443.078441][T18583] bridge_slave_0: left allmulticast mode [ 443.086501][T18583] bridge_slave_0: left promiscuous mode [ 443.093356][ T5838] Bluetooth: hci0: command tx timeout [ 443.101948][T18583] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.520472][ T9451] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.665702][ T9451] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.687302][ T9451] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.773011][ T5192] udevd[5192]: worker [8679] /devices/virtual/block/nbd0 timeout; kill it [ 444.782029][ T5192] udevd[5192]: seq 15591 '/devices/virtual/block/nbd0' killed [ 445.072922][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.081001][ C1] lec:lec_tx_timeout: lec0 [ 445.708108][ T9451] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.779398][T18642] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 445.989217][T18661] netlink: 'syz.2.3292': attribute type 9 has an invalid length. [ 445.992335][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.005495][T18661] netlink: 'syz.2.3292': attribute type 11 has an invalid length. [ 446.019720][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.024277][T18661] netlink: 'syz.2.3292': attribute type 12 has an invalid length. [ 446.047627][T18661] __nla_validate_parse: 3 callbacks suppressed [ 446.047647][T18661] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3292'. [ 446.072599][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 446.319160][T18672] syzkaller0: entered promiscuous mode [ 446.325256][T18672] syzkaller0: entered allmulticast mode [ 446.338827][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.348266][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.367112][T18680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3297'. [ 448.417775][T18707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3302'. [ 448.463259][T18712] netlink: 'syz.2.3305': attribute type 15 has an invalid length. [ 448.479941][T18712] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 448.496850][T18719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3307'. [ 448.526492][T18717] ip6tnl1: entered allmulticast mode [ 448.563555][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3308'. [ 448.588373][T18723] syzkaller0: entered promiscuous mode [ 448.594512][T18723] syzkaller0: entered allmulticast mode [ 448.641953][T18723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3305'. [ 448.833632][T18739] netlink: 'syz.0.3314': attribute type 2 has an invalid length. [ 448.873086][T18739] 9: entered promiscuous mode [ 448.955354][ T8229] lec:lec_start_xmit: lec0:No lecd attached [ 449.196871][T18763] wg1 speed is unknown, defaulting to 1000 [ 449.350916][T18782] sctp: [Deprecated]: syz.1.3324 (pid 18782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.350916][T18782] Use struct sctp_sack_info instead [ 449.444852][T18789] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3327'. [ 449.556740][T18793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3329'. [ 449.630655][T18795] netlink: 'syz.4.3328': attribute type 2 has an invalid length. [ 449.647488][T18795] netlink: 'syz.4.3328': attribute type 1 has an invalid length. [ 449.657939][T18795] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3328'. [ 449.669882][T18795] netlink: 'syz.4.3328': attribute type 1 has an invalid length. [ 449.678217][T18795] nbd: couldn't find device at index 65544 [ 449.813616][T18802] netlink: 'syz.4.3330': attribute type 13 has an invalid length. [ 449.824044][T18802] netlink: 'syz.4.3330': attribute type 17 has an invalid length. [ 450.004350][T18802] net_ratelimit: 3320 callbacks suppressed [ 450.004360][T18802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.080262][T18757] wg1 speed is unknown, defaulting to 1000 [ 450.940626][T18824] wg1 speed is unknown, defaulting to 1000 [ 451.008572][T18849] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 451.021353][T18849] bond1 (unregistering): Released all slaves [ 451.342237][T18844] wg1 speed is unknown, defaulting to 1000 [ 451.814318][T18875] Bluetooth: MGMT ver 1.23 [ 451.994398][T18881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.645204][T18886] __nla_validate_parse: 1 callbacks suppressed [ 452.645220][T18886] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3354'. [ 453.177496][T18884] wg1 speed is unknown, defaulting to 1000 [ 453.402255][T18899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3358'. [ 453.578805][T18907] team_slave_0: entered promiscuous mode [ 453.585006][T18907] team_slave_1: entered promiscuous mode [ 453.618073][T18907] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 453.684645][T18911] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 453.715455][T18915] IPv6: Can't replace route, no match found [ 453.892581][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 453.903977][ T5838] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 453.970186][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 453.978282][ C1] lec:lec_tx_timeout: lec0 [ 454.732265][T18951] Bluetooth: MGMT ver 1.23 [ 455.041816][T18965] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3375'. [ 455.068099][T18965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3375'. [ 455.147010][T18962] geneve1: entered promiscuous mode [ 455.165437][T18962] macsec1: entered promiscuous mode [ 455.181714][T18962] macsec1: entered allmulticast mode [ 455.197291][T18962] geneve1: entered allmulticast mode [ 455.217714][T18962] geneve1: left allmulticast mode [ 455.227837][T18962] geneve1: left promiscuous mode [ 455.451864][T18975] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 455.479811][T18975] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 455.504348][T18975] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 455.633317][T18983] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3380'. [ 455.779418][T18993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3383'. [ 455.818880][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3383'. [ 455.843058][T18998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3385'. [ 455.860661][T18998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3385'. [ 455.872116][T18998] netlink: 'syz.3.3385': attribute type 3 has an invalid length. [ 455.999018][T19005] vxcan3: entered promiscuous mode [ 456.231410][T19021] netlink: 'syz.3.3390': attribute type 11 has an invalid length. [ 456.257486][T19021] netlink: 'syz.3.3390': attribute type 4 has an invalid length. [ 456.274350][T19021] netlink: 199780 bytes leftover after parsing attributes in process `syz.3.3390'. [ 457.330196][T19060] bond1: option ad_actor_sys_prio: invalid value (0) [ 457.336935][T19060] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 457.382431][T19060] bond1 (unregistering): Released all slaves [ 457.481973][T19073] netlink: 'syz.3.3405': attribute type 1 has an invalid length. [ 457.511314][T19073] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 457.976852][T19106] netlink: 'syz.3.3412': attribute type 89 has an invalid length. [ 458.039263][ T6546] IPVS: starting estimator thread 0... [ 458.046709][T19107] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 458.059075][T19102] syzkaller0: entered promiscuous mode [ 458.089692][T19102] syzkaller0: entered allmulticast mode [ 458.139734][T19113] IPVS: using max 33 ests per chain, 79200 per kthread [ 458.243153][T19118] Cannot find del_set index 0 as target [ 458.393568][T19122] __nla_validate_parse: 3 callbacks suppressed [ 458.393587][T19122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3415'. [ 459.226509][T19147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3419'. [ 460.814337][T19155] wg1 speed is unknown, defaulting to 1000 [ 460.907603][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3423'. [ 461.017636][T19165] netlink: 'syz.0.3424': attribute type 1 has an invalid length. [ 461.037378][T19165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.101396][T19168] netlink: 91 bytes leftover after parsing attributes in process `syz.4.3425'. [ 461.141041][T19168] syzkaller1: entered promiscuous mode [ 461.146598][T19168] syzkaller1: entered allmulticast mode [ 461.310266][T19178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3429'. [ 461.405661][T19178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.502202][T19185] bond1: (slave batadv1): Opening slave failed [ 461.530684][T19192] netlink: zone id is out of range [ 461.535892][T19192] netlink: zone id is out of range [ 461.568252][T19192] netlink: zone id is out of range [ 461.594122][T19192] netlink: zone id is out of range [ 461.599283][T19192] netlink: zone id is out of range [ 461.618535][T19192] netlink: zone id is out of range [ 461.626561][T19192] netlink: zone id is out of range [ 461.634669][T19192] netlink: zone id is out of range [ 461.729072][T19200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3434'. [ 461.751489][T19200] netlink: 91 bytes leftover after parsing attributes in process `syz.3.3434'. [ 461.772041][T19203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3435'. [ 461.791199][T10167] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.971407][T19210] sctp: [Deprecated]: syz.3.3436 (pid 19210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.971407][T19210] Use struct sctp_sack_info instead [ 462.002810][T19210] sctp: [Deprecated]: syz.3.3436 (pid 19210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 462.002810][T19210] Use struct sctp_sack_info instead [ 462.085825][T19216] netlink: 'syz.0.3437': attribute type 1 has an invalid length. [ 462.297789][T19218] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 462.305799][T19224] netlink: 'syz.4.3441': attribute type 1 has an invalid length. [ 462.316105][T19224] netlink: 'syz.4.3441': attribute type 1 has an invalid length. [ 462.325199][T19224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3441'. [ 462.335430][T19224] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3441'. [ 462.348731][T19218] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 462.410975][T19218] bond1: (slave ip6gre1): making interface the new active one [ 462.419312][T19218] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 462.479891][T19221] geneve2: entered promiscuous mode [ 462.489698][T19221] geneve2: entered allmulticast mode [ 462.566111][T19231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.624843][T19239] netlink: 'syz.0.3443': attribute type 4 has an invalid length. [ 462.632188][T19241] netlink: 'syz.3.3445': attribute type 3 has an invalid length. [ 462.641196][T19231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.684948][T19243] Cannot find add_set index 0 as target [ 462.691237][ T9437] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 462.709854][ T9437] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 462.731505][ T9437] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 462.749757][ T9437] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 462.913500][T19256] netlink: 'syz.4.3450': attribute type 21 has an invalid length. [ 462.938458][T19253] tipc: Enabling of bearer rejected, failed to enable media [ 463.017692][T19253] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:52768 [ 463.206221][T19270] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 463.464954][T19289] netlink: 'syz.3.3455': attribute type 1 has an invalid length. [ 463.478623][T19289] __nla_validate_parse: 5 callbacks suppressed [ 463.478643][T19289] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3455'. [ 463.481245][T19287] sctp: [Deprecated]: syz.1.3457 (pid 19287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.481245][T19287] Use struct sctp_sack_info instead [ 463.671170][T19305] netlink: 'syz.1.3463': attribute type 83 has an invalid length. [ 463.831259][T19314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3466'. [ 463.979166][T19320] wg1 speed is unknown, defaulting to 1000 [ 464.150052][T19333] syzkaller1: entered promiscuous mode [ 464.165535][T19333] syzkaller1: entered allmulticast mode [ 464.211231][T19333] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3474'. [ 464.221486][T19333] net_ratelimit: 205 callbacks suppressed [ 464.221503][T19333] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 464.367100][T19338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.493055][T19324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3469'. [ 464.525868][ T29] audit: type=1800 audit(1772740845.098:6): pid=19336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3475" name="memory.events" dev="tmpfs" ino=405 res=0 errno=0 [ 464.687569][T19344] syzkaller0: entered promiscuous mode [ 464.696687][T19344] syzkaller0: entered allmulticast mode [ 464.985627][T19360] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3480'. [ 465.048348][T19360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3480'. [ 465.083492][T19360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3480'. [ 465.762160][T19387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3484'. [ 467.669024][T19399] syzkaller0: entered promiscuous mode [ 467.728702][T19399] syzkaller0: entered allmulticast mode [ 467.841688][T19410] netlink: 'syz.0.3491': attribute type 6 has an invalid length. [ 468.250009][T19423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3495'. [ 468.321263][T19423] macsec0: entered promiscuous mode [ 468.337142][T19423] gretap0: entered promiscuous mode [ 468.345140][T19423] hsr1: entered promiscuous mode [ 468.501725][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3500'. [ 468.691494][T19444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3501'. [ 468.847284][T19455] netlink: 'syz.2.3504': attribute type 21 has an invalid length. [ 468.861707][T19455] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3504'. [ 468.989537][T19459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3504'. [ 469.014688][T19454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3503'. [ 469.108666][T19462] netlink: 'syz.3.3505': attribute type 30 has an invalid length. [ 469.161018][T19465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3505'. [ 469.293696][T19472] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3507'. [ 469.303332][T19472] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 469.672251][T19499] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3510'. [ 469.741079][T19501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3511'. [ 469.794446][T19505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3513'. [ 470.095954][T10167] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.124523][T10167] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.166664][T10167] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.268499][T10167] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.595268][T19543] wg1 speed is unknown, defaulting to 1000 [ 470.832732][T19550] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.840525][T19550] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.069501][T19550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.106126][T19550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.343274][T19550] macsec1: left promiscuous mode [ 471.348446][T19550] macsec1: left allmulticast mode [ 471.363140][T19550] veth3: left promiscuous mode [ 471.369785][T19550] vxcan3: left promiscuous mode [ 471.377127][T19550] geneve2: left promiscuous mode [ 471.383461][T19550] geneve2: left allmulticast mode [ 471.396881][T19554] hsr_slave_0: left promiscuous mode [ 471.403624][T19554] hsr_slave_1: left promiscuous mode [ 471.461958][ T9442] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.475285][ T9442] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 471.485688][ T9442] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.495493][ T9442] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 471.526916][ T9442] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.536800][ T9442] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 471.546747][ T9442] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.556094][ T9442] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 471.646802][T19580] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 471.879497][T19592] netlink: 'syz.2.3531': attribute type 1 has an invalid length. [ 471.946194][T19592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.979135][T19598] veth3: entered promiscuous mode [ 471.984609][T19598] veth3: entered allmulticast mode [ 472.076570][T19592] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 472.103580][T19592] bond2: (slave batadv1): making interface the new active one [ 472.143097][T19592] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 472.633172][T19623] wg1 speed is unknown, defaulting to 1000 [ 472.682709][T19628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.822093][T19633] vlan1: entered promiscuous mode [ 472.844185][T19633] macvtap0: entered promiscuous mode [ 473.005618][T19633] tipc: Started in network mode [ 473.010919][T19633] tipc: Node identity 7ae60afce617, cluster identity 4711 [ 473.028350][T19633] tipc: Enabled bearer , priority 0 [ 473.037057][T19634] syzkaller0: entered promiscuous mode [ 473.044829][T19634] syzkaller0: entered allmulticast mode [ 473.057599][T19634] tipc: Resetting bearer [ 473.072895][T19632] tipc: Resetting bearer [ 473.118721][T19632] tipc: Disabling bearer [ 473.648249][T19669] __nla_validate_parse: 9 callbacks suppressed [ 473.648273][T19669] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.3548'. [ 473.802658][T19676] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3551'. [ 473.812503][T19676] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 473.827068][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3551'. [ 474.138871][T19692] netlink: 'syz.1.3556': attribute type 8 has an invalid length. [ 474.140554][T19690] netlink: 'syz.3.3553': attribute type 14 has an invalid length. [ 474.203017][T19692] gre0: entered promiscuous mode [ 474.208024][T19692] gre0: entered allmulticast mode [ 474.246556][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3556'. [ 474.322768][T19694] sctp: [Deprecated]: syz.0.3557 (pid 19694) Use of int in max_burst socket option. [ 474.322768][T19694] Use struct sctp_assoc_value instead [ 474.672583][T19703] netlink: 'syz.1.3560': attribute type 1 has an invalid length. [ 475.162875][T19725] xt_hashlimit: size too large, truncated to 1048576 [ 475.198862][T19727] batadv_slave_1: entered promiscuous mode [ 475.241655][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3569'. [ 475.251722][T19727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.311033][T19727] batadv_slave_1 (unregistering): left promiscuous mode [ 475.332879][T19727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.601738][T19746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3574'. [ 475.765695][T19754] SET target dimension over the limit! [ 475.857181][T19761] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 476.113035][T19740] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.120878][T19740] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.147607][T19776] netlink: 'syz.4.3582': attribute type 3 has an invalid length. [ 476.285334][T19778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3582'. [ 476.433978][T19740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.837540][T19774] tc_dump_action: action bad kind [ 476.915717][T19777] bond1: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 476.925904][T19777] bond1: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 476.937987][T10167] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.947460][T19783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3583'. [ 476.962952][T10167] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.038619][T10167] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.097231][T19790] syzkaller1: entered promiscuous mode [ 477.108468][T19790] syzkaller1: entered allmulticast mode [ 477.176854][T19795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3587'. [ 477.195558][T19795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3587'. [ 477.269163][T19804] 8021q: adding VLAN 0 to HW filter on device bond3 [ 477.471129][T19823] netlink: 'syz.3.3596': attribute type 1 has an invalid length. [ 477.567615][T19823] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 477.935362][T19858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.970475][T19858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.001205][T19856] kthread_run failed with err -4 [ 478.126120][T19870] wg1 speed is unknown, defaulting to 1000 [ 478.894793][T19913] wg1 speed is unknown, defaulting to 1000 [ 479.321216][T19926] __nla_validate_parse: 5 callbacks suppressed [ 479.321235][T19926] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3622'. [ 479.388180][T19920] dvmrp0: entered allmulticast mode [ 479.409491][T19928] bridge3: entered allmulticast mode [ 479.729496][T19938] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3628'. [ 479.761847][T19938] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3628'. [ 479.790262][T19940] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3628'. [ 480.437654][ T29] audit: type=1804 audit(1772740861.008:7): pid=19959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3634" name="/newroot/162/cgroup.controllers" dev="tmpfs" ino=845 res=1 errno=0 [ 480.498103][ T29] audit: type=1804 audit(1772740861.008:8): pid=19961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3634" name="/newroot/162/cgroup.controllers" dev="tmpfs" ino=845 res=1 errno=0 [ 480.569640][ T29] audit: type=1800 audit(1772740861.008:9): pid=19959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3634" name="cgroup.controllers" dev="tmpfs" ino=845 res=0 errno=0 [ 480.619659][T19954] wg1 speed is unknown, defaulting to 1000 [ 481.436608][T19986] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3639'. [ 481.465234][T19986] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3639'. [ 481.494925][T19986] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3639'. [ 481.792909][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3640'. [ 481.986727][T19998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3641'. [ 482.095681][T20000] netlink: 'syz.2.3642': attribute type 4 has an invalid length. [ 482.704989][T20019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3647'. [ 482.875208][T20026] openvswitch: netlink: Flow key attr not present in new flow. [ 482.875207][T20027] openvswitch: netlink: Flow key attr not present in new flow. [ 483.609981][T20062] netlink: 'syz.0.3661': attribute type 27 has an invalid length. [ 483.653629][T20062] netlink: 'syz.0.3661': attribute type 27 has an invalid length. [ 483.670440][T20062] netlink: 'syz.0.3661': attribute type 27 has an invalid length. [ 483.719965][T20062] netlink: 'syz.0.3661': attribute type 27 has an invalid length. [ 483.740118][T20062] netlink: 'syz.0.3661': attribute type 27 has an invalid length. [ 483.768874][T20062] netlink: 'syz.0.3661': attribute type 27 has an invalid length. [ 483.779924][T20062] netlink: 'syz.0.3661': attribute type 27 has an invalid length. [ 483.820088][T20073] vxcan5: entered allmulticast mode [ 483.855389][T20062] netlink: 'syz.0.3661': attribute type 27 has an invalid length. [ 483.884161][T20062] netlink: 'syz.0.3661': attribute type 27 has an invalid length. [ 484.145870][T20085] erspan0: entered promiscuous mode [ 484.180977][T20085] gretap0: entered promiscuous mode [ 484.234283][T20085] erspan0: left promiscuous mode [ 484.257982][T20085] gretap0: left promiscuous mode [ 484.480375][T20103] wg1 speed is unknown, defaulting to 1000 [ 484.681343][T20130] __nla_validate_parse: 40 callbacks suppressed [ 484.681362][T20130] netlink: 296 bytes leftover after parsing attributes in process `syz.1.3672'. [ 485.148002][T20156] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3677'. [ 485.256499][T20152] wg1 speed is unknown, defaulting to 1000 [ 485.264720][T20161] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3679'. [ 485.428196][T20169] sctp: [Deprecated]: syz.2.3681 (pid 20169) Use of int in max_burst socket option. [ 485.428196][T20169] Use struct sctp_assoc_value instead [ 485.601013][T20174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.661038][T10167] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.677312][T10167] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.686218][T10167] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.711567][T10167] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.715947][T20176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3684'. [ 485.874221][T20181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3686'. [ 486.098241][T20201] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3690'. [ 486.098248][T20200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'. [ 486.247305][T20201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.294541][T20201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.356409][T20201] bond0 (unregistering): Released all slaves [ 486.626552][T20227] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 486.634844][T20227] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 487.415201][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3707'. [ 487.519254][T20251] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.549743][T20251] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.588582][T20255] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 487.703898][T20251] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.714537][T20251] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.749271][T20270] validate_nla: 27 callbacks suppressed [ 487.749292][T20270] netlink: 'syz.3.3713': attribute type 1 has an invalid length. [ 487.771763][T20274] x_tables: duplicate underflow at hook 2 [ 487.849510][T20270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 487.908959][T20283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3713'. [ 487.924254][T20251] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.942949][T20251] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.029624][T20279] bond3: (slave gretap1): making interface the new active one [ 488.062427][T20279] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 488.115193][T20283] bond3 (unregistering): (slave gretap1): Releasing active interface [ 488.144348][T20283] bond3 (unregistering): Released all slaves [ 488.255342][T20251] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.266779][T20251] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.336539][T20296] wg1 speed is unknown, defaulting to 1000 [ 488.483269][ T9435] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.492878][ T9435] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.612244][ T9435] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.630337][ T9435] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.657792][ T9442] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.666301][ T9442] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.748450][T20325] xt_hashlimit: size too large, truncated to 1048576 [ 488.758469][ T9435] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.777020][ T9435] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.849872][T20329] x9: renamed from bridge_slave_0 [ 488.942729][T20335] wg1 speed is unknown, defaulting to 1000 [ 489.356141][T20349] xt_cgroup: path and classid specified [ 489.381232][T20349] syzkaller1: entered promiscuous mode [ 489.397711][T20349] syzkaller1: entered allmulticast mode [ 489.972804][ T5830] Bluetooth: hci0: command 0x0405 tx timeout [ 490.270745][T20378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3739'. [ 490.301023][T20379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3739'. [ 490.543453][T20387] syzkaller1: entered promiscuous mode [ 490.549115][T20387] syzkaller1: entered allmulticast mode [ 490.590165][T20394] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3742'. [ 490.651964][T20389] vlan2: entered allmulticast mode [ 490.659094][T20389] bond0: entered allmulticast mode [ 490.677978][T20389] bond_slave_0: entered allmulticast mode [ 490.700013][T20389] bond_slave_1: entered allmulticast mode [ 490.767049][T20394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.781652][T20394] bond_slave_0: left allmulticast mode [ 490.807059][T20394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.829399][T20394] bond_slave_1: left allmulticast mode [ 490.839409][T20394] bond0 (unregistering): Released all slaves [ 490.866725][T20387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3741'. [ 491.028884][T20405] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3745'. [ 491.088357][T20408] bond0: Unable to set up delay as MII monitoring is disabled [ 491.136171][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3746'. [ 491.161699][T20408] bond0 (unregistering): Released all slaves [ 491.200117][T20419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3746'. [ 491.266731][T20422] syzkaller1: entered promiscuous mode [ 491.274716][T20422] syzkaller1: entered allmulticast mode [ 491.322804][T20424] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3749'. [ 491.429074][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3751'. [ 491.507066][T20436] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3753'. [ 491.832465][T20459] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 491.989037][T20473] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 492.104142][T20474] wg1 speed is unknown, defaulting to 1000 [ 492.752436][T20499] bridge0: port 3(ipvlan2) entered blocking state [ 492.759299][T20499] bridge0: port 3(ipvlan2) entered disabled state [ 492.766143][T20499] ipvlan2: entered allmulticast mode [ 492.798517][T20503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.808858][T20499] bridge0: entered allmulticast mode [ 492.838163][T20499] ipvlan2: left allmulticast mode [ 492.848897][T20499] bridge0: left allmulticast mode [ 492.900968][T20507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.952621][T20507] wg1 speed is unknown, defaulting to 1000 [ 493.243073][T20520] pim6reg1: entered promiscuous mode [ 493.269075][T20520] pim6reg1: entered allmulticast mode [ 493.341569][T20528] netlink: 'syz.4.3780': attribute type 1 has an invalid length. [ 493.359136][T20528] netlink: 'syz.4.3780': attribute type 1 has an invalid length. [ 493.423039][T20526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 493.485747][T20530] macsec2: entered promiscuous mode [ 493.502236][T20530] bond3: entered promiscuous mode [ 493.507416][T20530] macsec2: entered allmulticast mode [ 493.513626][T20530] bond3: entered allmulticast mode [ 493.534479][T20530] bond3: left allmulticast mode [ 493.539496][T20530] bond3: left promiscuous mode [ 493.804850][T20543] syzkaller1: entered promiscuous mode [ 493.820200][T20543] syzkaller1: entered allmulticast mode [ 494.020528][T20552] netlink: 'syz.2.3790': attribute type 4 has an invalid length. [ 494.037278][T20552] xt_l2tp: missing protocol rule (udp|l2tpip) [ 494.060366][T20554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.071774][T20554] team0: Port device bond0 added [ 494.245547][T20564] openvswitch: netlink: Missing key (keys=40, expected=80) [ 494.393856][T20567] netlink: 'syz.1.3795': attribute type 10 has an invalid length. [ 494.475973][T20567] team0: Cannot enslave team device to itself [ 494.498956][T20579] netlink: 'syz.3.3799': attribute type 18 has an invalid length. [ 494.638483][T20583] netlink: 'syz.1.3802': attribute type 10 has an invalid length. [ 495.294463][T20623] __nla_validate_parse: 9 callbacks suppressed [ 495.294484][T20623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3810'. [ 495.339810][T20623] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3810'. [ 496.426592][T20659] netlink: 'syz.3.3821': attribute type 10 has an invalid length. [ 496.470061][T20659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3821'. [ 496.492176][T20662] bond2: option tlb_dynamic_lb: invalid value (5) [ 496.512381][T20662] bond2 (unregistering): Released all slaves [ 496.557213][T20659] dummy0: entered promiscuous mode [ 496.601817][T20659] bridge0: port 3(dummy0) entered blocking state [ 496.608394][T20659] bridge0: port 3(dummy0) entered disabled state [ 496.634464][T20659] dummy0: entered allmulticast mode [ 496.704978][T20675] bridge0: entered allmulticast mode [ 496.821016][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3827'. [ 496.831645][T20685] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3828'. [ 496.858577][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3827'. [ 496.890367][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3827'. [ 496.915267][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3827'. [ 496.952484][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3827'. [ 496.968991][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3827'. [ 496.991669][T20695] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 496.996428][T20692] wg1 speed is unknown, defaulting to 1000 [ 501.495252][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 506.610732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 506.849670][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 506.857987][ C1] lec:lec_tx_timeout: lec0 [ 512.660579][ T8229] lec:lec_start_xmit: lec0:No lecd attached [ 516.850015][ T30] INFO: task kworker/1:1H:2099 blocked for more than 143 seconds. [ 516.858035][ T30] Not tainted syzkaller #0 [ 516.863628][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.872493][ T30] task:kworker/1:1H state:D stack:26536 pid:2099 tgid:2099 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 516.884668][ T30] Workqueue: kblockd blk_mq_requeue_work [ 516.890814][ T30] Call Trace: [ 516.894270][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 516.897203][ T30] __schedule+0x1585/0x5340 [ 516.902564][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 516.907720][ T30] ? __pfx___schedule+0x10/0x10 [ 516.912849][ T30] ? schedule+0x90/0x360 [ 516.917124][ T30] schedule+0x164/0x360 [ 516.922066][ T30] schedule_timeout+0x158/0x2c0 [ 516.960010][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 516.965458][ T30] ? __pfx_process_timeout+0x10/0x10 [ 517.003765][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 517.029656][ T30] ? prepare_to_wait_event+0x436/0x480 [ 517.035219][ T30] nbd_queue_rq+0x857/0x1100 [ 517.059679][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 517.064770][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 517.087839][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 517.109984][ T30] ? sbitmap_get+0x229/0x390 [ 517.114745][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 517.149670][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 517.155548][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 517.189634][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 517.196492][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 517.250104][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 517.255459][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 517.289645][ T30] blk_mq_run_hw_queues+0x26c/0x3f0 [ 517.294915][ T30] blk_mq_requeue_work+0x71c/0x780 [ 517.329836][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 517.335719][ T30] ? process_scheduled_works+0xa25/0x1830 [ 517.369898][ T30] ? process_scheduled_works+0xa25/0x1830 [ 517.375781][ T30] process_scheduled_works+0xb02/0x1830 [ 517.399950][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 517.406014][ T30] ? assign_work+0x3d5/0x5e0 [ 517.439664][ T30] worker_thread+0xa50/0xfc0 [ 517.444442][ T30] kthread+0x388/0x470 [ 517.448529][ T30] ? __pfx_worker_thread+0x10/0x10 [ 517.479665][ T30] ? __pfx_kthread+0x10/0x10 [ 517.484304][ T30] ret_from_fork+0x51e/0xb90 [ 517.488944][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 517.531186][ T30] ? __switch_to+0xc7d/0x1450 [ 517.536179][ T30] ? __pfx_kthread+0x10/0x10 [ 517.541203][ T30] ret_from_fork_asm+0x1a/0x30 [ 517.546044][ T30] [ 517.573640][ T30] [ 517.573640][ T30] Showing all locks held in the system: [ 517.609910][ T30] 1 lock held by khungtaskd/30: [ 517.614804][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 517.648763][ T30] 4 locks held by kworker/u8:6/137: [ 517.674955][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 517.685459][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 517.694852][ T30] #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0 [ 517.705289][ T30] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x8d7/0xf50 [ 517.716397][ T30] 4 locks held by kworker/1:1H/2099: [ 517.721998][ T30] #0: ffff88801fa81948 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 517.733699][ T30] #1: ffffc90006067c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 517.747027][ T30] #2: ffff888021b97998 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 517.757072][ T30] #3: ffff888026c10780 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 517.766415][ T30] 1 lock held by klogd/5181: [ 517.771094][ T30] 2 locks held by getty/5585: [ 517.775859][ T30] #0: ffff888035d230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 517.785947][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 517.796514][ T30] 3 locks held by kworker/u9:5/5838: [ 517.801910][ T30] #0: ffff888029c37948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 517.812862][ T30] #1: ffffc900041f7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 517.825675][ T30] #2: ffff888048db4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 517.835694][ T30] 2 locks held by kworker/0:8/6529: [ 517.841203][ T30] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 517.852528][ T30] #1: ffffc900062d7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 517.863102][ T30] 1 lock held by udevd/8679: [ 517.867710][ T30] #0: ffff888026786358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 517.877217][ T30] 3 locks held by syz-executor/17403: [ 517.883174][ T30] #0: ffff88804f54cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 517.893321][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5230 ms [ 517.893354][ C1] lec:lec_tx_timeout: lec0 [ 517.906168][ T30] #1: ffff88804f54c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 517.916252][ T30] #2: ffffffff8fd52e68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 517.926610][ T30] 5 locks held by syz-executor/17649: [ 517.932024][ T30] #0: ffff88804d0d8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 517.942226][ T30] #1: ffff88804d0d80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 517.952351][ T30] #2: ffffffff8fd52e68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 517.962582][ T30] #3: ffff88806b6adaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 517.972281][ T30] #4: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 517.983349][ T30] 3 locks held by syz-executor/18000: [ 517.988729][ T30] #0: ffff888055e2cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 517.998893][ T30] #1: ffff888055e2c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 518.008905][ T30] #2: ffffffff8fd52e68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 518.018987][ T30] 3 locks held by syz-executor/18364: [ 518.024518][ T30] #0: ffff88805df74ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 518.034767][ T30] #1: ffff88805df740c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 518.044616][ T30] #2: ffffffff8fd52e68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 518.055011][ T30] [ 518.057451][ T30] ============================================= [ 518.057451][ T30] [ 518.067020][ T30] NMI backtrace for cpu 1 [ 518.067041][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 518.067061][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.067071][ T30] Call Trace: [ 518.067079][ T30] [ 518.067086][ T30] dump_stack_lvl+0xe8/0x150 [ 518.067116][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 518.067222][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 518.067249][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 518.067273][ T30] sys_info+0x135/0x170 [ 518.067316][ T30] watchdog+0xfd9/0x1030 [ 518.067355][ T30] ? watchdog+0x21a/0x1030 [ 518.067385][ T30] kthread+0x388/0x470 [ 518.067404][ T30] ? __pfx_watchdog+0x10/0x10 [ 518.067427][ T30] ? __pfx_kthread+0x10/0x10 [ 518.067444][ T30] ret_from_fork+0x51e/0xb90 [ 518.067469][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 518.067488][ T30] ? __switch_to+0xc7d/0x1450 [ 518.067509][ T30] ? __pfx_kthread+0x10/0x10 [ 518.067525][ T30] ret_from_fork_asm+0x1a/0x30 [ 518.067557][ T30] [ 518.067571][ T30] Sending NMI from CPU 1 to CPUs 0: [ 518.178671][ C0] NMI backtrace for cpu 0 [ 518.178687][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 518.178704][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.178714][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 518.178742][ C0] Code: ee 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3d 1b 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 518.178755][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 518.178769][ C0] RAX: 00000000001b2e03 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 518.178780][ C0] RDX: 0000000000000001 RSI: ffffffff8def6e56 RDI: ffffffff8c27a980 [ 518.178791][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 518.178801][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901131b0 [ 518.178812][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 518.178822][ C0] FS: 0000000000000000(0000) GS:ffff888125468000(0000) knlGS:0000000000000000 [ 518.178834][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.178844][ C0] CR2: 0000559f82600ee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 518.178859][ C0] Call Trace: [ 518.178867][ C0] [ 518.178873][ C0] default_idle+0x9/0x20 [ 518.178889][ C0] default_idle_call+0x72/0xb0 [ 518.178906][ C0] do_idle+0x1bd/0x500 [ 518.178926][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 518.178950][ C0] ? __pfx_do_idle+0x10/0x10 [ 518.178974][ C0] cpu_startup_entry+0x43/0x60 [ 518.178993][ C0] rest_init+0x2de/0x300 [ 518.179012][ C0] start_kernel+0x385/0x3d0 [ 518.179166][ C0] x86_64_start_reservations+0x24/0x30 [ 518.179207][ C0] x86_64_start_kernel+0x143/0x1c0 [ 518.179222][ C0] common_startup_64+0x13e/0x147 [ 518.179245][ C0] [ 518.179815][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 518.179834][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 518.179854][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.179865][ T30] Call Trace: [ 518.179873][ T30] [ 518.179881][ T30] vpanic+0x56c/0xa60 [ 518.179908][ T30] ? __pfx___schedule+0x10/0x10 [ 518.179935][ T30] ? __pfx_vpanic+0x10/0x10 [ 518.179966][ T30] panic+0xc5/0xd0 [ 518.179999][ T30] ? __pfx_panic+0x10/0x10 [ 518.180024][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 518.180061][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 518.180087][ T30] watchdog+0x1023/0x1030 [ 518.180118][ T30] ? watchdog+0x21a/0x1030 [ 518.180150][ T30] kthread+0x388/0x470 [ 518.180168][ T30] ? __pfx_watchdog+0x10/0x10 [ 518.180191][ T30] ? __pfx_kthread+0x10/0x10 [ 518.180209][ T30] ret_from_fork+0x51e/0xb90 [ 518.180235][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 518.180256][ T30] ? __switch_to+0xc7d/0x1450 [ 518.180279][ T30] ? __pfx_kthread+0x10/0x10 [ 518.180298][ T30] ret_from_fork_asm+0x1a/0x30 [ 518.180338][ T30] [ 518.475140][ T30] Kernel Offset: disabled [ 518.479537][ T30] Rebooting in 86400 seconds..