last executing test programs: 4.046143561s ago: executing program 2 (id=2609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="56a0b41c00388bcbed346834e8f749de7a4e72ace86b159a488ecc40e66ff15be61188699bfb0f72796854b5675380517aad69994bcd568bf02c467685677ed382feab99fa77729aee8092b692501b37cd47bc7118d7f4472becceccff8a309aa80cbf2d575acd67c9a26369933ce60791f2a287eeb95ce6daacb73c95f5cb0ac64d7743120888d0bde37d388c05", 0x8e) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x20}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c000780080008000000000005000100060000000900020073797a32000000000500040000000000050005000a0000001400030068619b4fb255702c706f72742c697000"], 0x58}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000008400000084000000060000000300000000000008030000000a000000090000859f0500000800000000000000040000000c0000000500000004000000060000000400000007000000100000de510004000000090000000800000005000000070000000200000005000000030000000800000000000000050000000a0000000500000006000000040000000300000058660000002e2e000000"], &(0x7f0000000540)=""/101, 0xa2, 0x65, 0x1, 0x7}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fa000000000000000000000085000000ac0000009562d2bc97828349679bd2614cbd71e005a299753b1ffc21e518aabfbd1b228349a6e5595285552f4bc442eae20a314f0000000000000080937bf3e55d2f0caa57ad28933ea9ae9175c600331cc35dc3bccecdc46a3c50e1dc7a2c373d6f07b9250ae3bb4e7d7f4c9a13a15800c66ed4890bdffdffd418e5e9d336c70af168bebc5c729cfcc88a61cdbab4b9a5520dc616736f7989ccb0df1d062e8151d62a4c1ee38ede9b493111140eec6ede6bee446a034adb37dc9f858b482e1c017660000000005ccf9b4f08c42b82000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r5}, 0x94) 3.978391891s ago: executing program 2 (id=2610): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, 0x0, 0x44031) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x8841) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x3) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x20024894) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4000084) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 3.37283304s ago: executing program 2 (id=2616): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 3.141469746s ago: executing program 2 (id=2621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0xd8, 0x37, 0x301, 0x70bd27, 0x25dfdbfd, {0x1d}, [@generic="c026f13e705022ff1ae308e6916a90b8723e48fa15bc546800e041bcb0218fb0134b34b186b70ae0aa1af4d96cf8fe53846b88383c355c578c0a9f2f942bfff3045a4fb68f80d94ff33e8b4c613fbfeee59252bcf5060752aca4fea92762751e868ad174eeceb6dce5aad26e5c56424ebed28c7ef53e8ad26999aed9aee23bf56d3c6eee3236c283697d15051fe2b5166f8501b4c918abab4a8c48863528bd5c4e368af5002ba32d9b407a02c47c965b8bf6dd8380fdf64033fc8c2c125702d12442"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)={0x3c, r3, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004680)=ANY=[], 0x108}}, 0x0) 2.911284583s ago: executing program 2 (id=2625): syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@msdu=@type00={{0x0, 0x2, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @broadcast, @broadcast, @from_mac=@device_b, {0x6, 0x4}, "", @value={0x4, 0x0, 0x0, 0x0, 0x7f}, @value=@ver_80211n={0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x1}}, @random="a2c920e81c7ad36245077e8e65937348ffac9f2f12254f052b6cc1fadf073c079a01f781919a0c374e2c1b15b62be8f58dcec3b9b1a6af7cac302fd9382c0292103313851b81579c235a7520724de340e81f9cd328641476ed708fbf5b077692375ac1c2b69995560d39efb76b218060b977f84cdcd5ec3a46908e41d01e5ad88fcd3fda86e1ba1a2859d74ae910d27f61fa0dd32c9d79ad12add41ab3abba34cfd977418efd87c5627815c7a1cd54a5e6b4eaa51958b70abb6470a38d5bf2b07894770c55cb589f12983a4fdd5736c97788ee07b4d1f0883e4fc0102a071e2660af3aa64d7a18aa445f8f92e88d2b99564752036590648a567066a6b787a6d2f51ffaf4015e18cd3e533b8028507374d4fca2eb7012e99a7e3602ddcf402b65feb601a821b4ed47dc53ec4d5a918165cfe78b61dddd00fe2c3474de31935b796930f00e816964df77448d9c78f21746e0ce04c53823460746eed870536fe7786ea549994d4d2e7268c0e467f08c749f7a39028b0d7e6113e7327695af03c4d9099840a3136fe447a4b21c12a62e522adf4fe2445c1035268e9f27d7b9c974dfbf50ef3a94c525c691084744aa93a29850377fb27f99c4d01a0a0abfc13d89c31cdec04573d95e6f729c3b4a0350949c476871c12100aa3ce6de9d6351713d4cce6acaadf33a77122aaee6f613a7c80243dbcbb685aa4ab5aabaf50170e8c98abcf00456e1654ec17b950e788a443b605e4bf4c324c0c7209219a943cb53ec32859e06d69f08cc964db9090c64fdeb776238b0cc69704c2f22839f506af08ba06358ceeef581a09bc45eee4d474529ac61d989d1c65683761e8cbeea510bb7b91001b621400c868c0ec47d3e04c7b8e7250dd45bbe9d5259de2abbc46f2c930ea171bb932519b5af3f03482dc097f852a7cc51f24ac2eb9078d38b543ea9c0625df3d5fec6b3ac588103c09a249d095cff5b24179ea93c123720c8a24b2025daf211fa354b15f0d10909c176e0419d423b152a9d1b6014a40000de0c685e28236a8742f8a2dc1ad296bd29877423f19e46db3ef64b6ce889c0fec99aa2cedc97dbbb1c59b30d70ad2ec08296cfc58daf3ea6961eae996f0925ec399cd37df5b3f4d5584a8e7c5fd9b9cc69879b011c64bb74a5bba890900be50ec9331382234b279cdffe46811b908fb11687de9589e2e7b55b337f5a0cf60b2a04a6d5ed181ecb5bcd8b2fde23c2ca5a0ce63ac4808bb5b2ec273329a604c210a14c7e2f2cb69d26b6f60face42facca781655f09263f52cd398712517e2e4b4e17ac01b11628298dbd25baea263d40570034755f0a13162b80e210cbbf247597414090c16770148f57265cd1ba4d31c87b82fc0c0a014f49c07b3ac28d7037f9e717aa51aa6da7bb93d0cffa8b8571d12843abb8908734ccc9f09d802a972be95e350e803b1ee3615d2"}, 0x422) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@ctrl_frame=@cf_end={{}, {0x7d57}, @device_a, @from_mac=@broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000540)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, @device_b, @broadcast, @initial, {0x7, 0x6}, "", @value={0xe, 0x1, 0x1, 0x1, 0xcb}}, @a_msdu=[{@device_a, @device_a, 0xe2, "06e190f5bbc31bc91a11c1dc40d30229c0eac8723b0c69a128df25c0ef93f0c20ffe0f00a2e783f91aa899c9b7c49778dbc1f33b85d6a4b30fb726facf8ee0f6e5c3ce6112d088c221685c68db4cac5f0873f7c2732c6e03fff890208ce271512efb1ee6fb484b9252b63183ac3258b9805a45030c124eb47bf882699a5aaa8e93531f5a3ec990b8b1e348e69479af6186719bc4bfb79d086a0cb10ae2846d9f9c158b84c45e5f3955650b5003e1dea5deea7694c70d7b6d04dea963b98266a7acb7736122424c0672183e6687ce1b834dfd575eec690bbad708d74174c6b6760ce0"}, {@device_a, @device_a, 0xc2, "0bad6faad0b78244fb39d9568cb17ace78311cbf0ba60287ff30896db4ce2bce4c39a282ed6bb8c9d3fa7790c378ab17f79a232708cc064579d717d80994cd0997997f4ca1ef1bfc7a2a868f89c5b38e0fb722c1ad5bd9591016a8077791623ccdb460f4e6d2c447a535e77826c48ee568fae8394a411dbdc76d7b19d57a5a4effc9b2a25c6526fde6b9a71e9d4f49b4566c9f0da978dd214661c696d2474b0184b381979d56852112d94f53f4344fdad04365dabb4c6633ea2a06a017764078f5a9"}, {@device_b, @device_a, 0x8, "27f509a85a251dff"}, {@broadcast, @device_a, 0x11, "580e7d0e98c42f8de29b65cbdddf37dd36"}, {@broadcast, @device_a, 0x1000, "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"}, {@device_b, @broadcast, 0xfb, "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"}]}, 0x132e) syz_80211_inject_frame(&(0x7f0000001880), &(0x7f00000018c0)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7}, @broadcast, @device_b, @random="9107cde39f10", {0x7, 0x42f}}, 0x80, 0xf, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x4, 0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x6, 0x6}}, [{0xdd, 0xf7, "7d7ae95413918405d5a07d763797eb170a874d0c971ca0d6a61cb85b03d8c045a9358e5a540e99e7d3191ed5b78e51909797b1a996e5f31c37edabec3ca41f12ff485ed0e7ad30f6503e39efe6c3b8957c8ff518f8bdf87a5d68a0eec7cbea50bfb1b6d14cd299bdf0a64e73e62f5231deeb19b65da74d27e426c5a61495ab7d181fc0c4eeb3732aeebadd0ddb7765a24f522c403f82754cac8738c68d263de88eabd7e61ba5aa7148a8941538fb55dc2ce48c1b97ae2c203ddfeebe08e6ef0e4877856325561f893016050980b56403f220c1b8ae56f5ab3062234d7435fc3e5c9fe08610bb20e133ba66069badc094c1bf6c3a502e84"}, {0xdd, 0x31, "e092339587aeae2b3b19c4c3565daea3d7313715f61b293807ef55afd892e53543985aed3d7322f521922d7433bd78dfa9"}, {0xdd, 0x17, "09f3570d0416e111bb0319bc0fb3e8011a291ce713cd13"}, {0xdd, 0x64, "d0efb46ffdf6a498d949affd86f612ca13bc9f6d6a3b536f19b827948de40094b6b23c52d2406c59bb18aa20aec4aa359d1db8db2851f3a9b00312d9ca52dd6cadaef678dd2d11449dbb8616b0ef44d32f53512e000b2e832d583d78b583d4281d48b2e0"}, {0xdd, 0xe0, "60ff4dd721838baeaf1422685dd7085510e80e6c3bb4ab752b0111948dbd82a0a1abe14ffc8060f6898ca1832e37e63f66e5e4306a027c7d25e6c4c276bfa53c03e7c6d97d3f0a5577004bd7d598a37ba433d2a19e924ba7e56d1171af1595dbfefc356a179b7b763c3c139fc7a92b0474b934f7a211fd801190be86d214fb57cbfd5ff787696029b6679882be225ab79fe6a9deb044217a66130594bae425b8a3d7aafb205993dad28e669f510df71a2112c29ec28e0bfbe76b9133d70555525df766c5bfb12ebba7b16f0d402a9386158f4a72fe2e47ac7e4ebbf370697ae2"}, {0xdd, 0x48, "ada8bebe6e1459589b321dfc3f118dfb8b6ec3e1e69412684237f2b8a0aa1223703635aefd3190be377aab6c930512b51f23f41d499f5562954e8c293a33fc02c4cae202d25a51c6"}, {0xdd, 0x7c, "6900b9c06ca53eb0f48ae44369ae5ea59d888eb912246fec77c929ac1f8b509cfd8ecaaebeadf522ea7c9e1f946010d1ed7fa789c0ee394cbe6be5c55bd0799605a424768299906ebb05a652421c207d0e2ef7947beda5f907a9b174b40cfa071039b46adde6074389415c71cd9f1d6be3ef795e52e32fdec8acc85b"}]}, 0x395) syz_80211_inject_frame(&(0x7f0000001c80)=@broadcast, &(0x7f0000001cc0)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @random="865a4c518533", {0x8, 0x4}, @value=@ver_80211n={0x0, 0x7ffd, 0x3, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x2, 0x5d, @val={0x10, 0x1, 0xe9}, [{0xdd, 0xff, "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"}, {0xdd, 0xe4, "9043e3a7dbf9fe871d60be178a8488db03c5a21e2129f9682cd6ddf422f10d3b9d402d559a91bb0314941da1a2af7fa738820c144de5b7994d8bd3c7d8a47a5c9216453a99ffb546361489da227acc8a670a7e33d9572dc088f0f231a4a9d9ab7825e8704237a9d54eca70f0f256d67e61535afa6a7bc0dea5b71c3b33af020bf6fcf067bcaa042f0f7a4a87fcf73416f28f4b2e260034d267eba0daaf0186c7c82e0ec2df28397d108e3620d608587426408e10e43a393e35e56b7375a94639b30250e15336ca991b40013e71b935ab4f30630c4766f6b5cc9ba4ede2ab9e884ec3d178"}, {0xdd, 0xac, "e3eb93b90c206c2685519bb632c06b31226e2252ab52639669c0d491f78f6e2f593946df53ba3c7ac6daa3873dc18eed71eeba41dbc6b4124d1ecc3af537191b2c4d170a644f6f42936e241e50e8fbe5caed5f5a58ff128bf02bdd8180697da632a512cad8d5a13ea31e272fa07792121a1de20dda8cf8273fd08fc5e26e915648f6cca4d6feb5b494c23e75072c17049174a0b02dfe301476ff343f9209450adc9d133726827245d93fa49a"}, {0xdd, 0x95, "003223d734821c94a69eea13453225b1da279208d1123aaf0d19aa26bc2647bf59ba4eaa1ff7a8c840719b25a84406e0de1e011f5261cc5d3743715a5255a6d251bafe60d34914e20d3b67c4443ed12d56192bf92b1a240d773fcc63e44cbc00e0657becd56055c3a4e76cd9be0332b2e1aba81c3c2c77f511f4942ba52e32bace6ab325747b69e87e7c32526f008e7d52df6467e8"}]}, 0x351) syz_80211_inject_frame(&(0x7f0000002040), &(0x7f0000002080)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x10}, @device_a, @device_a, @from_mac, {0x1, 0x7}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x2080, 0x65, @default, @val={0x1, 0x6, [{0x30, 0x1}, {0xc, 0x1}, {0x12, 0x1}, {0x18, 0x1}, {0x1}, {0x24, 0x1}]}, @void, [{0xdd, 0xe5, "e7cf4149f800cab3f36b3f05ffbe04ccd4db1baad4406eda25c475f57df0f4b20cab69ad38cb28faeaa23e6cf01790138fb2d6be2fc5f6e50cf965fc53eaabb464e6349e93ceac955fb76684331e7b0855ca8d1dd0415e3ba538c992ba670242f58b4394ed2f8987745311844f0f7ea7e81089bd812760ad4ae8981f37404168d721acf6fb52726f3e909887e709e9bdb7c04c7162f3f74068e4002694479a29381036099f5f76f4417c0b7eb2097980e94165696e032a7a8db20b1df3856a3149b0b108a0edff1e2556c7777ea31a54873d4f2429ef9d6e4ab4b0e09b6730bb5b382b70a9"}, {0xdd, 0xe0, "9bc3166382094835ed994262f546d504872958c9a35c960d44ddf856a8a8d3dac6704f00dc253769cb0464e8e8e21310e6181c1a2d92c6d6de0f8b29c47f672a016d83cfafcc9b13a9b473a91ed3f0d13ef0821c8bf136e3755c100d01a020493ab3cbb6b7524a7efe79c842dafb93f1d431e5bd9e5e18a72279d7045d9ca443886139a9f73653d7a34a4fe87c5909488aa705f32ff82cbbd360059ab2165306dc7ca26789eb65b5e440092a732da4e26fcc0eeb664b71d29e36073f0dcd208b4fa8bc7c951d300500a67813f870a1099a94a9adda074737a61059ccf58a5684"}]}, 0x1f3) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000002380)={0xffffffffffffffff, &(0x7f0000002280)='\x00', 0x9e8a8aa9008937fe, &(0x7f00000022c0)={@_ha_fsid={[0x0, 0x2]}, {0xc, 0x1, 0x6, 0x5}}, 0xd, &(0x7f0000002300)={@_ha_fsid}, &(0x7f0000002340)}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000002480)={0x6, &(0x7f00000023c0)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}, {}, {}]}) syz_80211_inject_frame(&(0x7f00000024c0)=@broadcast, &(0x7f0000002500)=@ctrl_frame=@rts={{}, {0x8}, @device_b, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000002540)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0xfff, 0x1, 0x80, 0x8, 0x200}, &(0x7f0000002600)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000002640)={r2, @in={{0x2, 0x4e22, @private=0xa010101}}}, &(0x7f0000002700)=0x84) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000002740)={'dvmrp1\x00', 0x200}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000002780)=0x6) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000002800), r0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002900)={&(0x7f0000002840)={0x98, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x98}}, 0x10) syz_80211_inject_frame(&(0x7f0000002980)=@device_b, &(0x7f00000029c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {}, @broadcast, @random="e7503a3dc85a", @initial, {0x2, 0x60}}, @a_msdu}, 0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000002a00)={r3, 0x8, 0x10}, &(0x7f0000002a40)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000002a80)={0x8b8b, 0x5, 0x8000, 0x8, 0x3ff, 0x9, 0x8, 0x8, r5}, 0x20) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000002ac0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), r1) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x20, r7, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x64}}}}}, 0x20}}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000002f00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002d40)={0x150, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1b, 0xa9, @random="543f794f2375ea666aa88d6247280c6c50c22af3277d73"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xae, 0xa9, @random="1ed995a4443a0f6c248948b001fa23b45a919bae8400f7d20c0944f7f361d7634a7071990f1ce4ce01de06269e5e47126eab6c640f92cb0e0cb56422767dededb68f7fb45b1e9597f20f6967df5b1240b54ad057aa08fda5812baf822a29eca65b559805f75b5483aae1fe99704fd124c73c4bafb6905423ff81c1b5f9d28bfd95d7ae63b4a92d49922855de10a74b339eb9fc763ae413b376ff6101af7f4816cb4bfa2a028c3da5512b"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x33, 0xa8, @random="4982b4a00fab68dc7cb1a5a5a03ac3601107bd60a24b94cbad36b33f17e0796da0e3803510156b003377a382cb5d7a"}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000001}, 0x8800) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000002f40)={0xb0, 0x3}) bind$phonet(r0, &(0x7f0000002f80)={0x23, 0x2, 0x2, 0x65}, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept(r9, &(0x7f0000002fc0)=@isdn, &(0x7f0000003040)=0x80) 2.559398344s ago: executing program 4 (id=2628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x9, 0x1c, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @echo={0x8, 0x0, 0x0, 0xd, 0x6d63}}}}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 2.369910103s ago: executing program 4 (id=2632): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000001410000001800170000002100000000657468000000000000000000"], 0x34}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000100)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8000, 0x1, 0x3, 0x6, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x65, 0x0, 0xf, 0x29, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0xc, 0x4a, 0x3, 0x0, [{@private=0xa010102, 0xd}]}, @timestamp={0x44, 0x14, 0x18, 0x0, 0x1, [0xaa5a, 0x8, 0x10, 0x0]}, @end, @ssrr={0x89, 0x13, 0x71, [@multicast1, @multicast2, @rand_addr=0x64010102, @remote]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="81000000003844b30762b35e0a1d12721203e40c397d4cc3014fd6135da0c590ab2aff04a9235c6671103b4b0c35f6cc7c4b88e9a3b553daee44c4ee0b3950d31f3c13a5ec3be7854db7a6c385d37dc6f54afa8383c7b1bdcec5fbe9540d3826354cbed7550f5d3f7ea8c4f9df74346908ec7f7d01cf9584e07001943760196f86201cbe9170fadb59f1c87d011b6c22d689725b7690f2", @ANYRES16=r5, @ANYBLOB="000826bd7000fedbdf25080000000000040000010000000001802000068008000300ac1414aa14000400000000000000000000000000000000002c0006800800030000000000080003000400000005000500070000000000018000000700", @ANYRES32=r6, @ANYBLOB="0800040007000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4840}, 0x40814) bind$vsock_stream(r3, 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001400190100000000000000002800"], 0x28}}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001400190100000000000000002800"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000046000200000000000700000000000000050001000000000085100000faffffff95"], &(0x7f0000000000)='GPL\x00'}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r9]) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x30004ca1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000000001a0000000000000000000000000000b5dc4c8a2eda9512ce39f419674234ca18dad21e92e283bc2ed71d7a236a4c3c900607a059d823871483607f0000000000000079a083ed3893d8413c32da8573a4cc9b2ae18d6e20a2a8607ad7", @ANYRES32=r10, @ANYRESHEX=r11, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000500)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.274739775s ago: executing program 3 (id=2633): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000880)={'wlan0\x00'}) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="64cf0000", @ANYRES16=r4, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x64}, 0x1, 0x2}, 0x0) (async, rerun: 64) r5 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 64) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.273918874s ago: executing program 4 (id=2634): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r3, 0x2, 0x30}, &(0x7f0000000240)=0xc) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001100010000000000000000cc33f152514cbbb4179fcde3adf90fa2000000000a14000000090a010400000000000000000000000014000000"], 0x3c}}, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, 0x3b, 0x1, 0x0, 0x0, {0xa}, [@typed={0x25, 0x1, 0x0, 0x0, @str='SMC1 \x00'}]}, 0x3c}}, 0x0) 2.263765604s ago: executing program 1 (id=2635): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000640)=@gcm_256={{0x304}, "55b2bfe456f65ac5", "94933eabd65daad540f97d075c35dc3d0c5423c36a5a29e09986c18918a9d481", "ea6eda2b", "a3df11c174fa26bb"}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x5c, 0x1, 0x0, 0x0, 0x0, 0xf0}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa4000000000000070400000080ffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e95000000000000db54c6e5000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.110454003s ago: executing program 3 (id=2637): syz_emit_ethernet(0x75, &(0x7f0000000340)=ANY=[@ANYBLOB="a8aaaaaaaaaaffffffffffff080045000067009bc500000000069078ac1414aa00004001da34f39fe0b65fdb1b4f8cf55c74427ed920dbd369870e3592152812477205da65746c1bb5f8834623e2c2c616336b230f7ef8e352a51e6a5cab6bb4a81c35a0fe06e91d5de097b787b34b5f10d3b3a14d5c690f99668bc22dcbc0b2ac6fc25f0ec7005a0d5b0fcb307aa80bd2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000c8fd75a55cea55431a0df064535453f7c0b9376f3fa20800d19af9e68bd0c75e46b1c0d4c5a14e8ce3e28fd739913a5d1064c377167a00e7dc89bd8f93290b"], 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008081) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24008084}, 0x8800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x44, 0x0) write$tun(r2, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @broadcast, @void, {@mpls_mc={0x8848, {[{0x3}, {}, {0x49000, 0x0, 0x1}, {0x7}, {0xa9}], @llc={@llc={0xdc, 0xaa, "8f", "d8a61698621a06afa393c680a2ccd8acca0e968ee9f44ee86e73e5bd187578dd3a8d6e2114700c04c209cc60ca2a953b14625d1b6a7cbb856e5884937514468514cfd41f7b3aff794f8da08a8a58880ff147a044248f9a5cb53de502e5164521151e60b7f54d8bab32e539f5de0509f698ccc7c88bc0985512b7f80720565ac4ceba39cb486ebcdb4e05393eb79573edda01388b4d1adadca0ea01539681d0b11f7eb16bb30df13a0d30742745bffa1671acc57a010da08e81239921962922c7bc3ef761715b"}}}}}}}, 0xeb) 2.03888283s ago: executing program 4 (id=2638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000090}, 0x0) 2.012064927s ago: executing program 3 (id=2639): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000003", @ANYRES16=r1, @ANYRESHEX=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 1.956999949s ago: executing program 2 (id=2640): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_emit_ethernet(0x52, 0x0, &(0x7f00000000c0)={0x1, 0x20003, [0xc0b, 0x9f4, 0xb70, 0xeb5]}) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socket$kcm(0x29, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r7, 0x1, 0x7, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201c5ea", 0x30}], 0x1}, 0x4000804) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) 1.946618118s ago: executing program 0 (id=2641): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400880, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0x200) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) 1.813318801s ago: executing program 3 (id=2642): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061120800000000009520000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmmsg$inet(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000e14cdb32bbd7000fddbdf2508000100000000df070003"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) getsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000000), &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x75}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 1.722520345s ago: executing program 0 (id=2643): r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b07caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r5, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (async, rerun: 64) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) writev(r5, &(0x7f0000001540)=[{&(0x7f0000000440)='c', 0x1}], 0x1) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) (async) close(0x3) (async) listen(r4, 0x0) (async) connect$x25(r4, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000)=0x5, 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.721907081s ago: executing program 4 (id=2644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}}, 0x8004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) (async) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000000c0)={0x34, r7, 0x4, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x860}]]}, 0x34}, 0x1, 0x0, 0x0, 0x240438d0}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x104, r7, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2000}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd0, 0x3, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x69, 0x1, "08137040112ab104bd66d1b9ea95d146128b3e3b5647ecd08e470e410c9a6584a92d8babfa3dec42bd3c670f3c93729d6c44aed9e44ddf5bda820167770ad0a2ce4ef12954752d09efeead2346a74d6e491abfb82ffec1fbd3c478727c3f73d23562108cdd"}}, {0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x58, 0x2, "cafbbbc95d9833b800cc73333e6dabb36c6389fd26e563f2f14592d43c51eb7586e3d7a62888e1fde181013acf0188a21f825c3c973e8556d66fe5b2662880910cf548b94956b687038c7b02999f71c8d5b08f5a"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="60feffff10000100000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080006400000000108000540000000000900010073797a3000000000f04c020073797a3200000000140000001100010000000000000000000000000a00"], 0x7c}}, 0x4000004) (async, rerun: 64) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x200, 0x0, 0x0, 0x0, 0xecc, &(0x7f0000000100), 0x1, 0x1000, 0x8001}) (rerun: 64) 1.376723314s ago: executing program 1 (id=2645): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x100) write(0xca, &(0x7f0000000040)="043bfdffffab3f6822a0d348103e", 0xe) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_to_team\x00'}}, 0x1e) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={0x0, @nl=@unspec, @ax25={0x3, @default, 0x2}, @sco, 0x3, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)='pimreg0\x00', 0x6, 0x800, 0xffff}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_to_team\x00'}}, 0x1e) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2c, 0x35, 0x100, 0x70bd22, 0x0, {0x4}, [@typed={0x8, 0x12e, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x98}, @typed={0xc, 0xbe, 0x0, 0x0, @u64=0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42044}, 0xc08c880) 1.282908977s ago: executing program 0 (id=2646): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x1c, 0xc, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00a2"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 738.144665ms ago: executing program 3 (id=2647): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1d}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x14, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r0 = socket(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x38, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c) unshare(0x22020600) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000a4b80adb0000070012800a000100767863616e0000006700028008001c00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r4 = gettid() sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'tunl0\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}}, 0x0) 690.926127ms ago: executing program 0 (id=2648): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0xa5dfdbfe, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x4044810) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) accept(r2, &(0x7f0000000040)=@phonet, &(0x7f00000000c0)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000009d08e19afcf6e75ea40000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c251801000020786c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f0000000140)=@caif=@rfm={0x25, 0x7, "2710f00238f214bf3688c4f272d02c05"}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="4ba72c4c46e8446b99c6e5ea2c66a5660200d697", 0x14}], 0x1, 0x0, 0x0, 0x11000000}, 0x40) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='syzkaller0\x00', 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) 599.502206ms ago: executing program 1 (id=2649): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x541}, {0x6, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0xa, 0x8, 0x9, 0x0, @mcast1, @private0, 0x7800, 0x8000, 0x7, 0x4}}) 510.510316ms ago: executing program 4 (id=2650): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair(0xa, 0x80000, 0x5, &(0x7f0000000180)) (async) socketpair(0xa, 0x80000, 0x5, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000f1401002abd70f0fadbdf2508000100000000000800450073726c04"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) clock_gettime(0x7, &(0x7f0000000340)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007"], 0x28}}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r5, 0x2}, 0x20) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0x2}}}, 0x24}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00], [0x0, 0x0, 0xff], 'ipvlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x6}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffffff], [0xff, 0xff], 'netdevsim0\x00', 'lo\x00', {}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}, {}, 0x0, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f00000002000000080000000803000000000000040b8c4ff7ea0738e7c95d9cec49e475600a52a35de49b7ddc062c5dc638b0574972911afde70141d94caf98cf46efeb17fe86a0db12e798f92758d9d5d1c30191d7d6524ec9cff5a1fdcaab5cce7ca92d9118f1f88cb6b2474a991ac898e33f674642ed24515d206304834b08e29eae5cb290b31ffd677e6d539802a4abf382e33cd10dee71e9bf5230b19c14e7888f969988ebcbb31d8a542a9d4db60d8a0634690cbf7653db", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f00000002000000080000000803000000000000040b8c4ff7ea0738e7c95d9cec49e475600a52a35de49b7ddc062c5dc638b0574972911afde70141d94caf98cf46efeb17fe86a0db12e798f92758d9d5d1c30191d7d6524ec9cff5a1fdcaab5cce7ca92d9118f1f88cb6b2474a991ac898e33f674642ed24515d206304834b08e29eae5cb290b31ffd677e6d539802a4abf382e33cd10dee71e9bf5230b19c14e7888f969988ebcbb31d8a542a9d4db60d8a0634690cbf7653db", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$MRT6_TABLE(r5, 0x29, 0xcf, &(0x7f0000000140)=0xfd, 0x4) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 440.856555ms ago: executing program 0 (id=2651): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb08004500001400000000ff010000010203040506070800000c00020006002000080000000c0003"], 0x58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) 364.829506ms ago: executing program 1 (id=2652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r1, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev}, {@multicast2}, {@local}]}]}}, @timestamp}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff0f04000089105c00000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) 226.166661ms ago: executing program 1 (id=2653): r0 = socket(0x2, 0x80805, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x8, 0x0, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xc0000000}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) 225.587141ms ago: executing program 3 (id=2654): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="bb12ecde729f4dae4c95c1e527a177e4d53a67057100a02d8ee1fcf1d787c368d7354f9084dba417c99317bbd3ffd5efdf81868db1b1b515bf34fe0aa459ca2b180fde51de", 0x45}, {&(0x7f00000000c0)="c68c4daae7f024b862e863793d78716e8c4e08a6b74acb50024a786aec2ae9af031ac1bc60d57f5826dd30d6f3c401b99f89381dc5", 0x35}, {&(0x7f0000000100)="033f0463aaed7af2a9ffc6286c4a315ce9c9b2921cd346d3d6bbe91d", 0x1c}, {&(0x7f0000000140)="edb739c1d5cfdbe67e0030c832a7d363af8ad32d8524b046f48f4141c26771dfc96b9e3d5c4cce3229254b45d93b0e06f817136876de84a505dac9663ef68fe3130374dbdad1fdb8cbcc41cc58c9124a4506f7bf143a383a12311d1f22f6780c28478ebba63776d3cafb54381ef95b42fc67233dd23086dae2981c0cd9cd828a54982cca8a53dbf4ca91911212469c18c428b2a7a62b65613566d80e749872309c90544d8d8feae0a382eefe26fb44b379ffb199d5290cb52eec14c1fa5ed2838803f3ed7379ba582eb7aa3345baf5da661f249a121e5b1aea3a18c5b729857b91878c31b998a88a3bb3d73462e9902b14c6b8d1cf5633b14a", 0xf9}, {&(0x7f0000000240)="f6f720bc46d3ef78a0ac5425e9969c18e36bf6c314628a82fc7321197518ff52b82fb5ccc60a2d5c73be6bae737da5b6557fd06c722006450f784c7ce69e9f", 0x3f}, {&(0x7f0000000280)="fa63f23aadaf89c2e050330216075f73a8b2abcbccbfbd35fd0161663b6bf190f04a2885a5b6647bc0ca6381226d6b4dbebde94a55490eef985b5e923a1170d3955eb0e17d", 0x45}], 0x6}, 0x40000) 45.575821ms ago: executing program 0 (id=2655): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0xf4, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0xf4}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81}]}]}, 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) (async) r5 = socket$inet6(0xa, 0x80001, 0x0) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x41e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c}, 0x1) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r4, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @local}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x60, 0x80, 0x7, 0x7, {{0xd, 0x4, 0x1, 0x5, 0x34, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x1f, 0x93, [@remote, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x404}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r9}]}}}]}, 0x4c}, 0x1, 0xba01}, 0x0) 0s ago: executing program 1 (id=2656): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x8, 0x11, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@empty, 0x4e, r6}) (async) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@empty, 0x4e, r6}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}}) kernel console output (not intermixed with test programs): [ 146.716398][ T8081] tipc: Can't bind to reserved service type 2 [ 146.749737][ T7796] team0: Port device team_slave_0 added [ 146.753574][ T8073] batadv_slave_0: left promiscuous mode [ 146.770818][ T7796] team0: Port device team_slave_1 added [ 146.869666][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 146.954220][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.954239][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.954260][ T7796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.960532][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.960549][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.960570][ T7796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.232247][ T7796] hsr_slave_0: entered promiscuous mode [ 147.233597][ T7796] hsr_slave_1: entered promiscuous mode [ 147.236036][ T7796] debugfs: 'hsr0' already exists in 'hsr' [ 147.236060][ T7796] Cannot create hsr debugfs directory [ 147.748237][ T8116] v: renamed from veth0_vlan [ 147.757591][ T8114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.555'. [ 147.918250][ T8107] syzkaller0: entered promiscuous mode [ 147.918277][ T8107] syzkaller0: entered allmulticast mode [ 148.082073][ T5630] Bluetooth: hci5: command tx timeout [ 148.263273][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 148.752553][ T8162] bond0: (slave ip6tnl0): refused to change device type [ 149.020191][ T8178] netlink: 1 bytes leftover after parsing attributes in process `syz.3.569'. [ 149.389783][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'. [ 149.677683][ T8199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.575'. [ 149.786954][ T8203] veth0: entered promiscuous mode [ 149.801457][ T7796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.829214][ T7796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.838421][ T7796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.863361][ T7796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.955890][ T7796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.990144][ T7796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.995762][ T7796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.026421][ T7796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.137898][ T8197] veth0: left promiscuous mode [ 150.214544][ T8222] netlink: 92 bytes leftover after parsing attributes in process `syz.2.579'. [ 150.214574][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.579'. [ 150.214588][ T8222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.579'. [ 150.359253][ T8226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.566432][ T2427] block nbd0: Possible stuck request ffff888026fc5080: control (read@0,1024B). Runtime 30 seconds [ 150.567342][ T2427] block nbd0: Possible stuck request ffff888026fc5240: control (read@1024,1024B). Runtime 30 seconds [ 150.567375][ T2427] block nbd0: Possible stuck request ffff888026fc5400: control (read@2048,1024B). Runtime 30 seconds [ 150.567394][ T2427] block nbd0: Possible stuck request ffff888026fc55c0: control (read@3072,1024B). Runtime 30 seconds [ 150.584767][ T7796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.704618][ T7796] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.755338][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.756526][ T7890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.837069][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.837192][ T7890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.913140][ T8242] __nla_validate_parse: 1 callbacks suppressed [ 150.913164][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 150.913178][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 150.945385][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 150.945406][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 151.022976][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 151.023002][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 151.108341][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 151.108367][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 151.348263][ T8268] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 151.687033][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 151.742675][ T8287] xt_TCPMSS: Only works on TCP SYN packets [ 151.742890][ T8287] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20003 [ 151.820328][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 151.851638][ T8285] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 152.270335][ T8307] netlink: 'syz.2.599': attribute type 12 has an invalid length. [ 152.433192][ T7890] IPVS: starting estimator thread 0... [ 152.447702][ T8312] IPVS: ip_vs_edit_dest(): server weight less than zero [ 152.522695][ T8314] IPVS: using max 27 ests per chain, 64800 per kthread [ 152.563115][ T8316] wg1 speed is unknown, defaulting to 1000 [ 152.625469][ T8320] x_tables: unsorted underflow at hook 2 [ 152.700060][ T5281] v: left promiscuous mode [ 152.779718][ T8316] wg1 speed is unknown, defaulting to 1000 [ 152.788254][ T5752] v: entered promiscuous mode [ 152.960217][ T8316] wg1 speed is unknown, defaulting to 1000 [ 153.350407][ T8351] openvswitch: netlink: Flow actions attr not present in new flow. [ 153.410217][ T7796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.762830][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.325842][ T8316] infiniband syz2: set active [ 154.340509][ T51] wg1 speed is unknown, defaulting to 1000 [ 154.355772][ T8316] infiniband syz2: added wg1 [ 154.388287][ T8316] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 154.399386][ T8316] infiniband syz2: Couldn't open port 1 [ 154.399701][ T8316] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 154.399732][ T8316] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 154.399769][ T8316] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 154.517394][ T7796] veth0_vlan: entered promiscuous mode [ 154.550138][ T7796] veth1_vlan: entered promiscuous mode [ 154.664784][ T7796] veth0_macvtap: entered promiscuous mode [ 154.689421][ T8396] TCP: TCP_TX_DELAY enabled [ 154.704753][ T7796] veth1_macvtap: entered promiscuous mode [ 154.889999][ T8316] RDS/IB: syz2: added [ 154.890437][ T8316] smc: adding ib device syz2 with port count 1 [ 154.896170][ T8400] bond4: Unable to set up delay as MII monitoring is disabled [ 154.896528][ T8316] smc: ib device syz2 port 1 has no pnetid [ 154.908213][ T8400] bond4 (unregistering): Released all slaves [ 154.948629][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.966037][ T8405] netlink: 'syz.0.619': attribute type 12 has an invalid length. [ 154.967323][ T10] wg1 speed is unknown, defaulting to 1000 [ 154.969432][ T8408] syzkaller0: entered promiscuous mode [ 154.969447][ T8408] syzkaller0: entered allmulticast mode [ 155.012391][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.016759][ T8316] wg1 speed is unknown, defaulting to 1000 [ 155.022608][ T8406] tipc: Enabled bearer , priority 0 [ 155.044258][ T63] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.044311][ T63] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.065695][ T1112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.185292][ T7890] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.185427][ T7890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.185442][ T7890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.324542][ T8399] tipc: Resetting bearer [ 155.369133][ T8399] tipc: Disabling bearer [ 155.437062][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.437087][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.476359][ T8316] wg1 speed is unknown, defaulting to 1000 [ 156.548373][ T8456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.368142][ T8487] __nla_validate_parse: 6 callbacks suppressed [ 157.368166][ T8487] netlink: 244 bytes leftover after parsing attributes in process `syz.0.631'. [ 157.509591][ T8489] netlink: 'syz.1.633': attribute type 1 has an invalid length. [ 157.553941][ T8496] netlink: 'syz.3.634': attribute type 11 has an invalid length. [ 157.610442][ T8489] bond4: entered promiscuous mode [ 157.612725][ T8489] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.717098][ T8498] bond4: (slave bridge3): making interface the new active one [ 157.717127][ T8498] bridge3: entered promiscuous mode [ 157.763303][ T8504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.774230][ T8505] xt_ecn: cannot match TCP bits for non-tcp packets [ 157.783416][ T8498] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 157.797776][ T8316] wg1 speed is unknown, defaulting to 1000 [ 157.957648][ T8518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.183161][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.637'. [ 158.210252][ T8526] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 158.435731][ T8530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.639'. [ 158.466497][ T8542] netlink: 'syz.1.642': attribute type 4 has an invalid length. [ 159.317265][ T8316] wg1 speed is unknown, defaulting to 1000 [ 159.334761][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.646'. [ 159.516411][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 159.516664][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 159.516871][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 159.517084][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 159.517284][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 160.297465][ T8624] netlink: 64 bytes leftover after parsing attributes in process `syz.0.656'. [ 160.571748][ T8316] wg1 speed is unknown, defaulting to 1000 [ 160.592222][ T8632] netlink: 'syz.1.659': attribute type 3 has an invalid length. [ 160.618395][ T8629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.180074][ T8645] syzkaller0: entered promiscuous mode [ 161.180102][ T8645] syzkaller0: entered allmulticast mode [ 161.583783][ T8662] netlink: 'syz.1.663': attribute type 5 has an invalid length. [ 161.798350][ T8662] geneve2: entered promiscuous mode [ 161.798376][ T8662] geneve2: entered allmulticast mode [ 162.021700][ T7890] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 162.021752][ T7890] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 162.021785][ T7890] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 162.021817][ T7890] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 162.500452][ T8707] __nla_validate_parse: 4 callbacks suppressed [ 162.500473][ T8707] netlink: 40 bytes leftover after parsing attributes in process `syz.4.669'. [ 163.033382][ T8720] x_tables: duplicate underflow at hook 2 [ 163.079161][ T8723] pim6reg: entered allmulticast mode [ 163.245079][ T8733] netlink: 'syz.0.675': attribute type 9 has an invalid length. [ 163.283063][ T8738] netlink: 52 bytes leftover after parsing attributes in process `syz.3.676'. [ 163.283095][ T8738] netlink: 52 bytes leftover after parsing attributes in process `syz.3.676'. [ 163.283109][ T8738] netlink: 52 bytes leftover after parsing attributes in process `syz.3.676'. [ 163.293346][ T8738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.676'. [ 163.438796][ T8744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.678'. [ 163.488623][ T8742] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 164.778726][ T8806] dvmrp0: entered allmulticast mode [ 165.089227][ T8818] openvswitch: netlink: IPv4 tun info is not correct [ 167.265362][ T8780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.610390][ T8833] ip_tables: iptables: counters copy to user failed while replacing table [ 167.934941][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 168.040300][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.042559][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.059200][ T8862] netlink: 44 bytes leftover after parsing attributes in process `syz.0.707'. [ 168.085977][ T8864] netlink: 'syz.2.708': attribute type 1 has an invalid length. [ 168.087211][ T8859] netlink: 68 bytes leftover after parsing attributes in process `syz.2.708'. [ 168.342998][ T8875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.712'. [ 168.343038][ T8875] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 168.343945][ T8873] x_tables: duplicate entry at hook 1 [ 168.344029][ T8873] x_tables: duplicate entry at hook 1 [ 168.344107][ T8873] x_tables: duplicate entry at hook 1 [ 168.344187][ T8873] x_tables: duplicate entry at hook 1 [ 168.344271][ T8873] x_tables: duplicate entry at hook 1 [ 168.344347][ T8873] x_tables: duplicate entry at hook 1 [ 168.344421][ T8873] x_tables: duplicate entry at hook 1 [ 168.344517][ T8873] x_tables: duplicate entry at hook 1 [ 168.344603][ T8873] x_tables: duplicate entry at hook 1 [ 168.344682][ T8873] x_tables: duplicate entry at hook 1 [ 168.489649][ T8880] netlink: 'syz.0.713': attribute type 10 has an invalid length. [ 168.646459][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 168.748349][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 168.824002][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 168.837222][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.718'. [ 168.953036][ T8894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.023874][ T8907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.720'. [ 169.026740][ T8901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.066971][ T8898] macvlan2: entered promiscuous mode [ 169.067032][ T8898] macvlan2: entered allmulticast mode [ 169.075258][ T8898] bond3: entered promiscuous mode [ 169.079055][ T8898] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.119010][ T8898] bond3: left promiscuous mode [ 169.297433][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 169.636514][ T8932] netlink: 'syz.0.728': attribute type 29 has an invalid length. [ 169.787257][ T8936] netlink: 'syz.1.729': attribute type 3 has an invalid length. [ 169.801795][ T8936] netlink: zone id is out of range [ 169.801812][ T8936] netlink: zone id is out of range [ 169.801819][ T8936] netlink: zone id is out of range [ 169.801827][ T8936] netlink: zone id is out of range [ 169.801834][ T8936] netlink: zone id is out of range [ 169.801842][ T8936] netlink: zone id is out of range [ 169.802057][ T8936] netlink: zone id is out of range [ 169.802066][ T8936] netlink: zone id is out of range [ 169.865989][ T8939] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 169.949442][ T8945] netlink: 'syz.4.732': attribute type 1 has an invalid length. [ 170.144896][ T8951] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 170.144934][ T8951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.299983][ T8964] netlink: 'syz.0.735': attribute type 2 has an invalid length. [ 170.300011][ T8964] netlink: 'syz.0.735': attribute type 2 has an invalid length. [ 170.329919][ T8958] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 170.450688][ T8958] bond3: option mode: invalid value (8) [ 170.470537][ T8958] bond3 (unregistering): Released all slaves [ 170.508960][ T8975] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.749108][ T7889] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.749642][ T7890] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.749680][ T7890] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.749713][ T7890] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.169753][ T8992] can: request_module (can-proto-0) failed. [ 171.312226][ T7890] IPVS: starting estimator thread 0... [ 171.326088][ T9013] netlink: 'syz.4.751': attribute type 11 has an invalid length. [ 171.414520][ T9019] IPVS: using max 50 ests per chain, 120000 per kthread [ 171.476656][ T9022] netlink: 'syz.0.753': attribute type 11 has an invalid length. [ 172.063284][ T9053] xt_socket: unknown flags 0xc [ 172.339165][ T9072] syzkaller1: entered promiscuous mode [ 172.339191][ T9072] syzkaller1: entered allmulticast mode [ 172.392416][ T9075] syzkaller0: entered promiscuous mode [ 172.392440][ T9075] syzkaller0: entered allmulticast mode [ 173.404871][ T9124] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.436772][ T9124] team0: entered allmulticast mode [ 173.436795][ T9124] team_slave_0: entered allmulticast mode [ 173.436812][ T9124] team_slave_1: entered allmulticast mode [ 173.437437][ T9124] bond0: (slave team0): Enslaving as an active interface with an up link [ 173.437662][ T9128] __nla_validate_parse: 15 callbacks suppressed [ 173.437680][ T9128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.780'. [ 173.447985][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.779'. [ 173.480552][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 173.483381][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 173.502218][ T9125] netlink: 56 bytes leftover after parsing attributes in process `syz.2.780'. [ 173.519658][ T9124] netlink: 56 bytes leftover after parsing attributes in process `syz.0.779'. [ 173.750070][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.783'. [ 173.800236][ T9143] xt_check_table_hooks: 23 callbacks suppressed [ 173.800259][ T9143] x_tables: duplicate underflow at hook 3 [ 173.848509][ T9146] validate_nla: 3 callbacks suppressed [ 173.848544][ T9146] netlink: 'syz.3.784': attribute type 1 has an invalid length. [ 173.908629][ T9149] netlink: 6 bytes leftover after parsing attributes in process `syz.0.785'. [ 173.910622][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.786'. [ 173.976808][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 174.078077][ T9146] bond3: (slave bridge3): making interface the new active one [ 174.078715][ T9146] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 175.166777][ T9218] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 175.430307][ T9235] netlink: 'syz.4.809': attribute type 1 has an invalid length. [ 175.709013][ T9254] No such timeout policy "s" [ 175.709033][ T9254] net_ratelimit: 26 callbacks suppressed [ 175.709045][ T9254] netlink: Failed to associated timeout policy 's' [ 178.149953][ T9217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.680205][ T9325] syzkaller1: entered promiscuous mode [ 178.680230][ T9325] syzkaller1: entered allmulticast mode [ 178.929358][ T9353] __nla_validate_parse: 10 callbacks suppressed [ 178.929383][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 179.011406][ T7889] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.134772][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'. [ 179.183492][ T9365] netlink: 452 bytes leftover after parsing attributes in process `syz.0.834'. [ 179.183517][ T9365] openvswitch: netlink: Flow key attr not present in new flow. [ 179.368057][ T9376] netlink: 84 bytes leftover after parsing attributes in process `syz.1.839'. [ 179.390526][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 179.390553][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 179.395304][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 179.395343][ T9376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.443294][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 179.443333][ T9378] netlink: 'syz.0.838': attribute type 22 has an invalid length. [ 179.443347][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 179.547739][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 179.547776][ T9378] netlink: 'syz.0.838': attribute type 22 has an invalid length. [ 179.983444][ T9407] FAULT_INJECTION: forcing a failure. [ 179.983444][ T9407] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 179.983468][ T9407] CPU: 1 UID: 0 PID: 9407 Comm: syz.0.846 Not tainted syzkaller #0 PREEMPT(full) [ 179.983485][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.983492][ T9407] Call Trace: [ 179.983497][ T9407] [ 179.983502][ T9407] dump_stack_lvl+0xe8/0x150 [ 179.983524][ T9407] should_fail_ex+0x410/0x560 [ 179.983540][ T9407] _copy_from_iter+0x1d3/0x1660 [ 179.983555][ T9407] ? __alloc_skb+0x27a/0x7a0 [ 179.983570][ T9407] ? __alloc_skb+0x27a/0x7a0 [ 179.983585][ T9407] ? __alloc_skb+0x27a/0x7a0 [ 179.983598][ T9407] ? __pfx__copy_from_iter+0x10/0x10 [ 179.983610][ T9407] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 179.983627][ T9407] ? __alloc_skb+0x27a/0x7a0 [ 179.983639][ T9407] ? __alloc_skb+0x27a/0x7a0 [ 179.983656][ T9407] ? netlink_sendmsg+0x650/0xb40 [ 179.983667][ T9407] ? skb_put+0x112/0x210 [ 179.983682][ T9407] netlink_sendmsg+0x6c0/0xb40 [ 179.983707][ T9407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.983734][ T9407] ? apparmor_socket_sendmsg+0x98/0x360 [ 179.983759][ T9407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.983777][ T9407] sock_sendmsg_nosec+0x13a/0x180 [ 179.983801][ T9407] ____sys_sendmsg+0x54e/0x850 [ 179.983841][ T9407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.983877][ T9407] ? import_iovec+0x73/0xa0 [ 179.983903][ T9407] ___sys_sendmsg+0x2a5/0x360 [ 179.983926][ T9407] ? __lock_acquire+0x747/0x2de0 [ 179.983951][ T9407] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.984010][ T9407] ? __fget_files+0x2a/0x420 [ 179.984036][ T9407] ? __fget_files+0x3a2/0x420 [ 179.984071][ T9407] __x64_sys_sendmsg+0x1b1/0x290 [ 179.984093][ T9407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.984121][ T9407] do_syscall_64+0x166/0x520 [ 179.984136][ T9407] ? trace_irq_disable+0x3b/0x140 [ 179.984148][ T9407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.984160][ T9407] ? clear_bhb_loop+0x70/0xc0 [ 179.984174][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.984185][ T9407] RIP: 0033:0x7f309e59e159 [ 179.984198][ T9407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.984207][ T9407] RSP: 002b:00007f309c7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.984222][ T9407] RAX: ffffffffffffffda RBX: 00007f309e825fa0 RCX: 00007f309e59e159 [ 179.984230][ T9407] RDX: 00000000000020c0 RSI: 00002000000002c0 RDI: 0000000000000004 [ 179.984238][ T9407] RBP: 00007f309c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.984245][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.984252][ T9407] R13: 00007f309e826038 R14: 00007f309e825fa0 R15: 00007fffc142c988 [ 179.984271][ T9407] [ 180.642132][ T2427] block nbd0: Possible stuck request ffff888026fc5080: control (read@0,1024B). Runtime 60 seconds [ 180.642161][ T2427] block nbd0: Possible stuck request ffff888026fc5240: control (read@1024,1024B). Runtime 60 seconds [ 180.642176][ T2427] block nbd0: Possible stuck request ffff888026fc5400: control (read@2048,1024B). Runtime 60 seconds [ 180.642191][ T2427] block nbd0: Possible stuck request ffff888026fc55c0: control (read@3072,1024B). Runtime 60 seconds [ 181.703325][ T9356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.861176][ T9423] syzkaller1: entered promiscuous mode [ 181.861201][ T9423] syzkaller1: entered allmulticast mode [ 181.967207][ T9423] vlan2: entered allmulticast mode [ 181.967231][ T9423] bond0: entered allmulticast mode [ 181.967246][ T9423] bond_slave_0: entered allmulticast mode [ 181.967264][ T9423] bond_slave_1: entered allmulticast mode [ 182.100501][ T9428] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.150354][ T9438] netlink: 'syz.3.852': attribute type 3 has an invalid length. [ 182.329451][ T9443] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 182.355079][ T9444] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 183.086093][ T9480] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.602786][ T9501] netlink: 'syz.1.873': attribute type 83 has an invalid length. [ 184.055026][ T9512] batadv_slave_0: entered promiscuous mode [ 184.203841][ T9510] batadv_slave_0: left promiscuous mode [ 184.488416][ T9535] netlink: 'syz.3.885': attribute type 8 has an invalid length. [ 184.532835][ T9535] netlink: 'syz.3.885': attribute type 2 has an invalid length. [ 184.535141][ T9535] syz_tun: entered allmulticast mode [ 184.559216][ T9534] syz_tun: left allmulticast mode [ 184.663141][ T9548] __nla_validate_parse: 13 callbacks suppressed [ 184.663164][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.887'. [ 184.694137][ T9548] macvlan2: entered promiscuous mode [ 184.694163][ T9548] macvlan2: entered allmulticast mode [ 184.784967][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.886'. [ 184.913353][ T9560] block nbd0: reconnected socket [ 184.920965][ T5630] block nbd0: Receive control failed (result -32) [ 185.303060][ T9575] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 185.499860][ T9577] syzkaller0: entered promiscuous mode [ 185.499886][ T9577] syzkaller0: entered allmulticast mode [ 185.718227][ T9556] blkio.reset_stats is deprecated [ 186.067072][ T9610] hsr0: entered promiscuous mode [ 186.349705][ T9627] netlink: 'syz.3.904': attribute type 12 has an invalid length. [ 186.421154][ T9617] syzkaller1: entered promiscuous mode [ 186.421180][ T9617] syzkaller1: entered allmulticast mode [ 186.581861][ T9630] IPv6: Can't replace route, no match found [ 186.654586][ T9635] netlink: 'syz.4.908': attribute type 20 has an invalid length. [ 186.654614][ T9635] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.793123][ T9641] ip_tables: iptables: counters copy to user failed while replacing table [ 187.008637][ T9653] netlink: 196 bytes leftover after parsing attributes in process `syz.3.915'. [ 187.008828][ T9653] netlink: 196 bytes leftover after parsing attributes in process `syz.3.915'. [ 187.008846][ T9653] netlink: 19 bytes leftover after parsing attributes in process `syz.3.915'. [ 187.280268][ T9665] netlink: 392 bytes leftover after parsing attributes in process `syz.1.920'. [ 187.738604][ T9689] netlink: 32 bytes leftover after parsing attributes in process `syz.2.925'. [ 187.753017][ T9689] netlink: 40 bytes leftover after parsing attributes in process `syz.2.925'. [ 187.753049][ T9689] nbd: couldn't find a device at index -288669935 [ 187.917798][ T9693] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 188.129833][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 188.129863][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'. [ 188.129886][ T9701] netlink: 'syz.0.930': attribute type 14 has an invalid length. [ 188.130009][ T9701] netlink: 'syz.0.930': attribute type 13 has an invalid length. [ 188.184402][ T9701] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 188.273828][ T9704] tun0: tun_chr_ioctl cmd 1074025675 [ 188.273854][ T9704] tun0: persist disabled [ 188.672502][ T9713] bond1: entered promiscuous mode [ 188.672549][ T9713] bond1: entered allmulticast mode [ 188.673067][ T9713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.043604][ T3293] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 189.182960][ T9744] netlink: 'syz.3.940': attribute type 10 has an invalid length. [ 189.186704][ T9744] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.187166][ T9744] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.234084][ T9744] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.234890][ T9744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.235674][ T9744] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.235827][ T9744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.277882][ T9744] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 189.295211][ T9746] bridge_slave_1: left allmulticast mode [ 189.295244][ T9746] bridge_slave_1: left promiscuous mode [ 189.295494][ T9746] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.318416][ T9746] bridge_slave_0: left allmulticast mode [ 189.318447][ T9746] bridge_slave_0: left promiscuous mode [ 189.322353][ T9746] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.355763][ T9746] bond0: (slave bridge0): Releasing backup interface [ 189.716301][ T9721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.029885][ T9772] xt_hashlimit: invalid interval [ 190.039321][ T9771] netlink: 'syz.3.948': attribute type 10 has an invalid length. [ 190.053589][ T9772] netlink: 'syz.1.949': attribute type 6 has an invalid length. [ 190.055188][ T9772] __nla_validate_parse: 3 callbacks suppressed [ 190.055207][ T9772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.949'. [ 190.056913][ T9771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.065591][ T9771] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 190.099987][ T9775] ip6gre1: entered allmulticast mode [ 190.401481][ T9795] tipc: Cannot configure node identity twice [ 190.448891][ T9799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.954'. [ 190.449078][ T9799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.954'. [ 190.449239][ T9799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.954'. [ 190.455434][ T9799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.954'. [ 190.455614][ T9799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.954'. [ 190.455756][ T9799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.954'. [ 190.455910][ T9799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.954'. [ 190.456050][ T9799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.954'. [ 190.459676][ T9799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.954'. [ 190.508916][ T9798] netlink: 'syz.1.956': attribute type 10 has an invalid length. [ 190.765206][ T9807] sctp: [Deprecated]: syz.1.957 (pid 9807) Use of int in max_burst socket option deprecated. [ 190.765206][ T9807] Use struct sctp_assoc_value instead [ 190.770089][ T9771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.834425][ T9771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.853495][ T9771] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 190.877627][ T9771] bond0 (unregistering): Released all slaves [ 192.447037][ T9878] wlan0 speed is unknown, defaulting to 1000 [ 192.447110][ T9878] wlan0 speed is unknown, defaulting to 1000 [ 192.468363][ T9878] wlan0 speed is unknown, defaulting to 1000 [ 192.493618][ T9878] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 192.493655][ T9878] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 192.493687][ T9878] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 192.558557][ T9878] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 192.583085][ T9878] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 192.627352][ T9878] wlan0 speed is unknown, defaulting to 1000 [ 192.637691][ T9878] wlan0 speed is unknown, defaulting to 1000 [ 192.648425][ T9878] wlan0 speed is unknown, defaulting to 1000 [ 192.659286][ T9878] wlan0 speed is unknown, defaulting to 1000 [ 192.674427][ T9891] netlink: 'syz.2.981': attribute type 11 has an invalid length. [ 192.715037][ T9878] wlan0 speed is unknown, defaulting to 1000 [ 192.999596][ T9895] geneve2: entered promiscuous mode [ 192.999621][ T9895] geneve2: entered allmulticast mode [ 193.352370][ T9961] netlink: 'syz.4.989': attribute type 5 has an invalid length. [ 193.352405][ T9961] netlink: 'syz.4.989': attribute type 6 has an invalid length. [ 193.514237][ T9949] bond1 (unregistering): Released all slaves [ 193.646853][ T9997] ip_tables: iptables: counters copy to user failed while replacing table [ 193.864145][T10020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.942551][ T9912] workqueue: Failed to create a rescuer kthread for wq "nfc27_nci_cmd_wq": -EINTR [ 193.961409][ T9911] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 194.555682][T10043] No such timeout policy "s" [ 194.555701][T10043] netlink: Failed to associated timeout policy 's' [ 194.728114][T10048] netlink: 'syz.1.1004': attribute type 1 has an invalid length. [ 194.955811][T10051] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 194.955966][T10051] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 195.280685][T10068] syz_tun: entered allmulticast mode [ 195.328473][T10069] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 195.493660][T10069] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.496280][T10065] syz_tun: left allmulticast mode [ 195.537458][T10080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.537477][T10080] IPv6: NLM_F_CREATE should be set when creating new route [ 195.537529][T10080] IPv6: NLM_F_CREATE should be set when creating new route [ 195.537579][T10080] IPv6: NLM_F_CREATE should be set when creating new route [ 195.546279][T10080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.762684][T10083] __nla_validate_parse: 75 callbacks suppressed [ 195.762707][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1014'. [ 195.966883][T10073] bond5: (slave geneve4): making interface the new active one [ 195.981843][T10073] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 195.985776][T10097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1018'. [ 195.985810][T10097] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1018'. [ 196.065516][T10097] gretap1: entered promiscuous mode [ 196.065542][T10097] gretap1: entered allmulticast mode [ 196.389194][T10108] ip_tables: iptables: counters copy to user failed while replacing table [ 196.740874][T10136] sctp: [Deprecated]: syz.0.1029 (pid 10136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.740874][T10136] Use struct sctp_sack_info instead [ 196.742675][T10136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1029'. [ 197.343505][T10151] netlink: 'syz.0.1032': attribute type 3 has an invalid length. [ 197.343530][T10151] netlink: 'syz.0.1032': attribute type 1 has an invalid length. [ 197.343542][T10151] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1032'. [ 198.170548][T10235] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1035'. [ 198.183575][T10238] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1035'. [ 200.620016][T10409] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1039'. [ 200.653982][T10409] netlink: 'syz.2.1039': attribute type 29 has an invalid length. [ 201.098768][T10424] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 201.099214][T10424] gretap2: entered promiscuous mode [ 201.099232][T10424] gretap2: entered allmulticast mode [ 201.686248][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 201.783854][T10436] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 201.899680][T10437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.485651][T10456] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1053'. [ 202.846083][T10473] netlink: 'syz.3.1057': attribute type 11 has an invalid length. [ 203.925373][T10501] dvmrp8: entered allmulticast mode [ 204.149141][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 204.149173][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 204.444505][T10518] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1069'. [ 204.588821][T10523] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 204.999145][T10543] ip_tables: iptables: counters copy to user failed while replacing table [ 205.041941][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 205.041970][T10547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1075'. [ 205.132421][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 205.132448][T10547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1075'. [ 205.134208][T10545] C: renamed from lo (while UP) [ 205.192379][T10545] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 205.222340][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.222388][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.222419][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.222450][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.525608][T10563] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1080'. [ 205.593487][T10565] netlink: 'syz.1.1081': attribute type 1 has an invalid length. [ 205.720600][T10565] bond6: entered promiscuous mode [ 205.729278][T10565] 8021q: adding VLAN 0 to HW filter on device bond6 [ 205.815500][T10565] 8021q: adding VLAN 0 to HW filter on device bond6 [ 205.816183][T10565] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 205.816205][T10565] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 205.850400][T10565] bond6: (slave ip6gre2): making interface the new active one [ 205.852569][T10565] ip6gre2: entered promiscuous mode [ 205.881790][T10565] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 206.199525][T10585] bridge0: entered allmulticast mode [ 206.202470][T10585] bridge_slave_1: left allmulticast mode [ 206.202495][T10585] bridge_slave_1: left promiscuous mode [ 206.202846][T10585] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.246354][T10585] bridge_slave_0: left allmulticast mode [ 206.246822][T10585] bridge_slave_0: left promiscuous mode [ 206.247076][T10585] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.363402][T10585] bridge0 (unregistering): left allmulticast mode [ 206.712466][T10602] netlink: 'syz.1.1090': attribute type 1 has an invalid length. [ 206.854296][T10602] 8021q: adding VLAN 0 to HW filter on device bond7 [ 206.909946][T10613] sctp: [Deprecated]: syz.4.1092 (pid 10613) Use of int in max_burst socket option deprecated. [ 206.909946][T10613] Use struct sctp_assoc_value instead [ 207.156994][T10624] __nla_validate_parse: 1 callbacks suppressed [ 207.157019][T10624] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1095'. [ 207.185677][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1095'. [ 207.260000][T10627] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 207.260141][T10627] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.385411][T10632] Bluetooth: MGMT ver 1.23 [ 207.543436][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'. [ 207.744641][T10643] tipc: Enabled bearer , priority 10 [ 207.989311][T10653] IPVS: set_ctl: invalid protocol: 44 172.30.0.1:20001 [ 208.329844][T10669] batadv_slave_1: entered promiscuous mode [ 208.340216][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1110'. [ 208.340354][T10669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.387615][T10669] batadv_slave_1 (unregistering): left promiscuous mode [ 208.387701][T10669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.406210][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1111'. [ 208.406252][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1111'. [ 208.487671][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1110'. [ 208.819228][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'. [ 208.819262][T10690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1114'. [ 208.819279][T10690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1114'. [ 208.862244][ T5721] tipc: Node number set to 809826739 [ 209.441049][ T5630] Bluetooth: hci5: Opcode 0x0c3a failed: -110 [ 209.441455][ T5630] Bluetooth: hci5: command 0x0405 tx timeout [ 209.734554][T10722] hsr_slave_0: left promiscuous mode [ 209.753034][T10722] hsr_slave_1: left promiscuous mode [ 210.674115][T10764] openvswitch: netlink: Message has 512 unknown bytes. [ 210.746475][ T2427] block nbd0: Possible stuck request ffff888026fc5080: control (read@0,1024B). Runtime 90 seconds [ 210.747121][ T2427] block nbd0: Possible stuck request ffff888026fc5240: control (read@1024,1024B). Runtime 90 seconds [ 210.747185][ T2427] block nbd0: Possible stuck request ffff888026fc5400: control (read@2048,1024B). Runtime 90 seconds [ 210.747235][ T2427] block nbd0: Possible stuck request ffff888026fc55c0: control (read@3072,1024B). Runtime 90 seconds [ 210.747678][ T2427] block nbd0: Dead connection, failed to find a fallback [ 212.307581][T10842] __nla_validate_parse: 13 callbacks suppressed [ 212.307603][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 212.357483][T10840] openvswitch: netlink: Multiple metadata blocks provided [ 213.096742][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1163'. [ 213.096772][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 213.300044][T10886] batadv_slave_0: entered promiscuous mode [ 213.445320][T10900] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 213.450247][T10901] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 213.494271][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1168'. [ 213.545682][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1168'. [ 213.562179][T10884] batadv_slave_0: left promiscuous mode [ 213.889766][T10929] tipc: Enabled bearer , priority 0 [ 213.915536][T10929] bond0: (slave team0): Releasing backup interface [ 213.948984][T10929] bridge_slave_0: left allmulticast mode [ 213.949013][T10929] bridge_slave_0: left promiscuous mode [ 213.951614][T10929] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.982407][T10929] bridge_slave_1: left promiscuous mode [ 213.982715][T10929] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.021682][T10929] bond0: (slave bond_slave_0): Releasing backup interface [ 214.053296][T10929] bond0: (slave bond_slave_1): Releasing backup interface [ 214.053573][T10941] Bluetooth: hci0: unsupported parameter 5135 [ 214.053592][T10941] Bluetooth: hci0: unsupported parameter 8192 [ 214.053604][T10941] Bluetooth: hci0: unsupported parameter 5135 [ 214.053614][T10941] Bluetooth: hci0: unsupported parameter 8192 [ 214.120058][T10929] team0: Port device team_slave_0 removed [ 214.152440][T10929] team0: Port device team_slave_1 removed [ 214.153256][T10929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.153277][T10929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.156947][T10929] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 214.169189][T10940] smc: net device team0 applied user defined pnetid SYZ2 [ 214.484952][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 214.692847][T10976] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1182'. [ 215.179102][T11004] can: request_module (can-proto-0) failed. [ 215.201219][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.243465][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1191'. [ 215.317781][T11010] ip_tables: iptables: counters copy to user failed while replacing table [ 215.320645][T11010] netlink: 'syz.1.1192': attribute type 11 has an invalid length. [ 216.843960][T11023] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1196'. [ 216.844226][T11023] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1196'. [ 217.683319][T10977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.787301][T11039] ip_tables: iptables: counters copy to user failed while replacing table [ 217.805681][T11039] netlink: 'syz.4.1199': attribute type 1 has an invalid length. [ 217.882287][T11043] __nla_validate_parse: 65 callbacks suppressed [ 217.882310][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 218.063835][T11041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.066113][T11041] bond2: (slave bond3): making interface the new active one [ 218.067971][T11041] bond2: (slave bond3): Enslaving as an active interface with an up link [ 218.111698][T11039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.208854][T11057] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 218.215603][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'. [ 218.215644][T11059] netlink: 'syz.1.1204': attribute type 5 has an invalid length. [ 218.215658][T11059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1204'. [ 218.299404][T11061] xt_TCPMSS: Only works on TCP SYN packets [ 218.465863][T11066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1206'. [ 218.465891][T11066] netlink: 54 bytes leftover after parsing attributes in process `syz.1.1206'. [ 218.465908][T11066] netlink: 54 bytes leftover after parsing attributes in process `syz.1.1206'. [ 218.538467][T11072] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1207'. [ 218.726470][T11086] vlan3: entered promiscuous mode [ 218.726494][T11086] bridge0: entered promiscuous mode [ 218.818155][T10907] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 218.961695][T11089] sctp: [Deprecated]: syz.1.1212 (pid 11089) Use of int in max_burst socket option. [ 218.961695][T11089] Use struct sctp_assoc_value instead [ 219.058990][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 219.059068][T11098] IPv6: Can't replace route, no match found [ 219.153443][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'. [ 219.254083][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'. [ 219.257916][ T139] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 219.296888][T11114] netlink: 'syz.2.1218': attribute type 10 has an invalid length. [ 219.543828][T11129] netlink: 'syz.4.1222': attribute type 39 has an invalid length. [ 219.595695][T11133] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.595821][T11133] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 219.954908][T11155] veth0: mtu less than device minimum [ 219.956645][T11155] SET target dimension over the limit! [ 222.157702][T11102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.506965][T11164] bond8: entered allmulticast mode [ 222.509171][T11164] 8021q: adding VLAN 0 to HW filter on device bond8 [ 222.593494][T11173] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 222.878286][T11189] netlink: 'syz.1.1240': attribute type 10 has an invalid length. [ 222.879701][T11189] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 222.880588][T11189] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 223.086252][T11205] ip_tables: iptables: counters copy to user failed while replacing table [ 223.763570][T11221] __nla_validate_parse: 5 callbacks suppressed [ 223.763591][T11221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1249'. [ 223.763607][T11221] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1249'. [ 224.615756][T11258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.710490][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'. [ 225.069068][T11276] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 225.069353][T11276] Cannot find map_set index 2 as target [ 225.309972][T11291] set match dimension is over the limit! [ 225.353192][T11290] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 225.353235][T11290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.484791][T11281] syzkaller1: entered promiscuous mode [ 225.484818][T11281] syzkaller1: entered allmulticast mode [ 225.567003][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 225.731224][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 225.980968][T11324] openvswitch: netlink: IPv4 tun info is not correct [ 226.731170][T11335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1277'. [ 226.731942][T11336] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_virt_wifi, syncid = 1, id = 0 [ 226.739526][T11335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1277'. [ 226.740360][T11335] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 226.805666][T11335] bond0: entered promiscuous mode [ 226.805690][T11335] bond_slave_0: entered promiscuous mode [ 226.805941][T11335] bond_slave_1: entered promiscuous mode [ 226.830362][T11335] batadv0: entered promiscuous mode [ 226.838692][T11335] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 226.853787][T11335] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 226.924148][T11342] ip_tables: iptables: counters copy to user failed while replacing table [ 227.448567][T11366] xt_hashlimit: size too large, truncated to 1048576 [ 227.500540][T11368] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.882625][T11382] x_tables: duplicate underflow at hook 1 [ 227.952510][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1291'. [ 228.083438][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1292'. [ 228.214926][T11398] netlink: 'syz.1.1295': attribute type 11 has an invalid length. [ 228.572123][T11416] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1299'. [ 228.723042][T11429] batadv_slave_0: entered promiscuous mode [ 228.932260][T11439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1306'. [ 228.977008][T11441] netlink: 'syz.0.1307': attribute type 29 has an invalid length. [ 228.979554][T11442] netlink: 'syz.0.1307': attribute type 29 has an invalid length. [ 228.979864][T11442] netlink: 'syz.0.1307': attribute type 29 has an invalid length. [ 228.980236][T11442] netlink: 'syz.0.1307': attribute type 29 has an invalid length. [ 228.980513][T11442] netlink: 'syz.0.1307': attribute type 29 has an invalid length. [ 228.990787][T11442] netlink: 'syz.0.1307': attribute type 29 has an invalid length. [ 228.991394][T11442] netlink: 'syz.0.1307': attribute type 29 has an invalid length. [ 228.991647][T11442] netlink: 'syz.0.1307': attribute type 29 has an invalid length. [ 228.991889][T11442] netlink: 'syz.0.1307': attribute type 29 has an invalid length. [ 229.085657][T11443] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1307'. [ 229.334001][T11466] dvmrp1: left allmulticast mode [ 229.370494][T11463] geneve0: entered allmulticast mode [ 229.391194][ T63] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.392172][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.392214][ T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.392247][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.533282][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 229.566261][T11473] bond4: Invalid ad_actor_system MAC address. [ 229.566286][T11473] bond4: option ad_actor_system: invalid value (1) [ 229.568056][T11473] bond4 (unregistering): Released all slaves [ 229.968998][T11488] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1320'. [ 232.107510][T11451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.366862][T11496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1322'. [ 232.366894][T11496] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1322'. [ 232.419341][T11499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1324'. [ 232.463525][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1321'. [ 232.609258][T11496] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1322'. [ 233.248728][T11543] tipc: Enabling not permitted [ 233.248766][T11543] tipc: Enabling of bearer rejected, failed to enable media [ 233.379877][T11550] validate_nla: 27 callbacks suppressed [ 233.379900][T11550] netlink: 'syz.3.1336': attribute type 2 has an invalid length. [ 233.617111][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'. [ 233.727076][T11572] x_tables: duplicate underflow at hook 2 [ 234.069058][T11599] __nla_validate_parse: 1 callbacks suppressed [ 234.069074][T11599] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.1347'. [ 236.702293][T11569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.977888][T11616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1354'. [ 236.978201][T11612] batadv_slave_0: entered promiscuous mode [ 237.199097][T11608] batadv_slave_0: left promiscuous mode [ 237.480160][T11642] netlink: 'syz.4.1362': attribute type 11 has an invalid length. [ 237.480184][T11642] netlink: 'syz.4.1362': attribute type 4 has an invalid length. [ 237.481831][T11642] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1362'. [ 237.688452][T11647] syzkaller1: entered promiscuous mode [ 237.688476][T11647] syzkaller1: entered allmulticast mode [ 237.852859][T11655] ip_tables: iptables: counters copy to user failed while replacing table [ 237.871923][T11655] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 237.896222][T11657] ip_tables: iptables: counters copy to user failed while replacing table [ 237.903989][T11658] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 239.007960][T11718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1382'. [ 239.283903][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 239.310100][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 239.326138][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1387'. [ 239.540108][T11749] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1389'. [ 239.595193][T11749] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1389'. [ 240.147116][T11778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1397'. [ 240.178254][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 240.408471][T11792] netlink: zone id is out of range [ 240.423155][T11794] netlink: 4680 bytes leftover after parsing attributes in process `syz.0.1400'. [ 241.006871][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1408'. [ 241.006994][T11832] netlink: Conntrack attr has 4 unknown bytes [ 241.027337][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1408'. [ 241.027461][T11819] netlink: Conntrack attr has 4 unknown bytes [ 241.414009][T11856] netlink: 'syz.0.1418': attribute type 16 has an invalid length. [ 241.414033][T11856] netlink: 'syz.0.1418': attribute type 17 has an invalid length. [ 241.457340][T11856] hsr0: left promiscuous mode [ 241.475635][T11856] macvlan0: left promiscuous mode [ 241.488848][T11856] veth0_macvtap: left allmulticast mode [ 241.511783][T11856] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 241.512476][ T5742] wlan0 speed is unknown, defaulting to 1000 [ 241.730030][T11866] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 241.748716][T11867] syzkaller0: entered promiscuous mode [ 241.748734][T11867] syzkaller0: entered allmulticast mode [ 242.277676][T11880] tipc: Enabled bearer , priority 0 [ 242.322766][T11886] netlink: 'syz.3.1426': attribute type 3 has an invalid length. [ 242.354954][T11878] syzkaller0: entered promiscuous mode [ 242.355071][T11878] syzkaller0: entered allmulticast mode [ 242.355659][T11878] tipc: Resetting bearer [ 242.384609][T11877] tipc: Resetting bearer [ 242.584307][T11896] netlink: 'syz.3.1428': attribute type 11 has an invalid length. [ 242.584465][T11895] netlink: 'syz.3.1428': attribute type 11 has an invalid length. [ 243.618614][T11904] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 245.128561][T11877] tipc: Disabling bearer [ 245.154689][T11897] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 245.158581][T11904] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 245.811235][T11945] ipt_REJECT: TCP_RESET invalid for non-tcp [ 246.075832][T11949] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 246.130883][T11949] bond9 (unregistering): Released all slaves [ 246.360553][T11971] __nla_validate_parse: 4 callbacks suppressed [ 246.360576][T11971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1449'. [ 246.394125][T11974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1449'. [ 246.858933][T11996] IPv6: NLM_F_CREATE should be specified when creating new route [ 246.884989][T11993] syzkaller1: entered promiscuous mode [ 246.885015][T11993] syzkaller1: entered allmulticast mode [ 246.958237][T11995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1454'. [ 246.958278][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1454'. [ 247.330805][T12013] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 247.331347][T12013] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 247.331743][T12013] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 247.334283][T12013] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 247.334830][T12013] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 247.336858][T12013] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 247.337287][T12013] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 247.337826][T12013] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 247.339837][T12013] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 247.417301][T12013] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 247.582879][T12026] netlink: 'syz.4.1463': attribute type 1 has an invalid length. [ 247.643750][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 247.688931][T12026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.690491][T12032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1464'. [ 247.745163][T12026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1463'. [ 248.034692][T12054] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 248.147981][T12064] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 248.225293][T12068] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1476'. [ 248.272522][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1477'. [ 248.701921][T12046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.950209][T12111] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 249.023997][T12114] x_tables: duplicate underflow at hook 1 [ 249.539680][T12136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1493'. [ 250.303000][T12174] netlink: 'syz.2.1502': attribute type 7 has an invalid length. [ 250.303025][T12174] netlink: 'syz.2.1502': attribute type 8 has an invalid length. [ 250.353771][T12174] veth1_to_hsr: entered promiscuous mode [ 250.368127][T12174] hsr_slave_0: entered promiscuous mode [ 250.410153][T12174] veth1_to_hsr: left promiscuous mode [ 250.432713][T12174] hsr_slave_0: left promiscuous mode [ 250.644910][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 250.695735][T12191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.734857][T12191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.213058][ T5752] hid-generic 0005:0008:0009.0001: item fetching failed at offset 0/1 [ 251.214821][ T5752] hid-generic 0005:0008:0009.0001: probe with driver hid-generic failed with error -22 [ 251.302957][T12232] netlink: 'syz.4.1517': attribute type 4 has an invalid length. [ 251.515012][T12248] __nla_validate_parse: 7 callbacks suppressed [ 251.515034][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 251.608519][T12248] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 251.608936][ T9] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 251.893535][T12256] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1522'. [ 251.926522][T12260] tipc: Enabling of bearer rejected, failed to enable media [ 251.945209][T12260] tipc: Enabling of bearer rejected, failed to enable media [ 252.268089][T12279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1527'. [ 252.337676][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1527'. [ 252.944179][T12290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1529'. [ 255.329840][T12283] wg1 speed is unknown, defaulting to 1000 [ 255.529692][T12293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1530'. [ 255.808645][T12283] wlan0 speed is unknown, defaulting to 1000 [ 256.105651][T12332] netlink: 'syz.0.1538': attribute type 3 has an invalid length. [ 256.159123][T12337] C: entered allmulticast mode [ 256.202902][T12334] C: left allmulticast mode [ 256.583701][T12342] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 256.817204][T12363] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1546'. [ 256.826762][T12342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.854176][T12358] macsec1: entered promiscuous mode [ 257.230486][T12376] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1549'. [ 257.342245][T12379] netlink: 'syz.2.1550': attribute type 1 has an invalid length. [ 257.412442][T12379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.534827][T12383] bond1: (slave geneve4): making interface the new active one [ 257.538900][T12383] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 257.582275][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.583822][ T7895] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.583866][ T7895] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.583911][ T7895] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.932724][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'. [ 258.703476][T12452] net_ratelimit: 3 callbacks suppressed [ 258.703501][T12452] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.753362][T12450] bridge0: port 1(syz_tun) entered blocking state [ 258.753602][T12450] bridge0: port 1(syz_tun) entered disabled state [ 258.753813][T12450] syz_tun: entered allmulticast mode [ 258.756144][T12450] syz_tun: entered promiscuous mode [ 258.948859][T12465] tipc: Enabled bearer , priority 10 [ 258.963595][T12468] syzkaller1: entered promiscuous mode [ 258.963620][T12468] syzkaller1: entered allmulticast mode [ 259.080321][T12465] bond2: Unable to set up delay as MII monitoring is disabled [ 259.096498][T12465] bond2 (unregistering): Released all slaves [ 259.210356][T12472] netlink: 'syz.3.1575': attribute type 1 has an invalid length. [ 259.210383][T12472] netlink: 'syz.3.1575': attribute type 3 has an invalid length. [ 259.210397][T12472] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1575'. [ 259.210413][T12472] NCSI netlink: No device for ifindex 813332851 [ 259.448493][T12482] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1579'. [ 259.659508][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 259.949476][T12508] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1585'. [ 259.949505][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 259.993368][T12504] bridge3: entered promiscuous mode [ 259.996692][T12504] bridge3: entered allmulticast mode [ 260.069797][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1583'. [ 260.113876][T12525] netlink: 'syz.1.1587': attribute type 21 has an invalid length. [ 260.113909][T12525] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.114025][T12525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.114035][T12525] IPv6: NLM_F_CREATE should be set when creating new route [ 260.114086][T12525] IPv6: NLM_F_CREATE should be set when creating new route [ 260.114113][T12525] IPv6: NLM_F_CREATE should be set when creating new route [ 260.256244][T12529] bond5: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 260.274027][T12529] bond5: (slave C): Enslaving as an active interface with an up link [ 260.286855][T12529] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 260.313018][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058f4f800: rx timeout, send abort [ 260.336192][T12533] geneve3: entered promiscuous mode [ 260.336217][T12533] geneve3: entered allmulticast mode [ 260.362638][ T7899] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 260.362702][ T7899] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 260.362736][ T7899] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 260.362769][ T7899] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 260.458029][T12536] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 260.813245][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a504800: rx timeout, send abort [ 260.814534][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058f4f800: abort rx timeout. Force session deactivation [ 260.900466][T12556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1596'. [ 261.313302][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a504800: abort rx timeout. Force session deactivation [ 262.002862][T12611] __nla_validate_parse: 35 callbacks suppressed [ 262.002885][T12611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1604'. [ 262.871026][T12504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.131344][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 263.132993][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 263.376565][T12643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1611'. [ 263.378807][T12644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1611'. [ 263.500350][T12658] xt_limit: Overflow, try lower: 536871034/127 [ 263.503182][T12658] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1617'. [ 263.552550][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1615'. [ 263.552578][T12642] netlink: 'syz.0.1615': attribute type 3 has an invalid length. [ 263.552910][T12642] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1615'. [ 263.663710][T12647] xt_LOG: prefix is not null-terminated [ 263.695290][T12666] netlink: 'syz.1.1618': attribute type 1 has an invalid length. [ 263.745470][T12666] 8021q: adding VLAN 0 to HW filter on device bond10 [ 263.962280][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1621'. [ 264.058034][T12681] sctp: [Deprecated]: syz.4.1622 (pid 12681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.058034][T12681] Use struct sctp_sack_info instead [ 264.096652][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1623'. [ 264.133556][ T7895] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x75 [ 265.189870][T12730] vcan0: tx address claim with different name [ 266.867924][T12676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.883984][T12730] netlink: 'syz.3.1635': attribute type 1 has an invalid length. [ 267.012478][T12735] __nla_validate_parse: 7 callbacks suppressed [ 267.012503][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1636'. [ 267.177744][T12743] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1639'. [ 268.120212][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1654'. [ 268.208510][T12809] netlink: 'syz.4.1654': attribute type 49 has an invalid length. [ 268.407599][T12809] ip6gretap0: entered promiscuous mode [ 268.407626][T12809] ip6gretap0: entered allmulticast mode [ 268.589659][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 268.596520][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1658'. [ 268.889083][T12831] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20001 [ 269.268298][T12847] veth5: entered allmulticast mode [ 269.381060][T12848] veth7: entered allmulticast mode [ 269.400499][T12861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1666'. [ 269.457913][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'. [ 269.579653][T12863] syzkaller0: entered promiscuous mode [ 269.579678][T12863] syzkaller0: entered allmulticast mode [ 269.787724][T12876] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1670'. [ 270.030379][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'. [ 270.043308][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'. [ 270.634703][T12928] netlink: 'syz.1.1681': attribute type 58 has an invalid length. [ 270.816556][T12942] netlink: 'syz.1.1681': attribute type 58 has an invalid length. [ 271.528993][T12961] wg1 speed is unknown, defaulting to 1000 [ 271.769063][T12982] netlink: 'syz.1.1690': attribute type 3 has an invalid length. [ 272.324332][T12961] wlan0 speed is unknown, defaulting to 1000 [ 272.857765][T13029] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 272.880206][T13029] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.190472][T13035] __nla_validate_parse: 8 callbacks suppressed [ 273.190488][T13035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1701'. [ 273.190500][T13035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1701'. [ 273.295398][T13038] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1702'. [ 274.756920][T12984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.179931][T13094] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 275.300354][T13103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.326800][T13105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.346522][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1713'. [ 275.849794][T13130] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1716'. [ 276.394624][T13156] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 276.535617][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1726'. [ 276.746765][T13177] 1ªî{X¹¦: entered promiscuous mode [ 276.943434][T13188] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1732'. [ 277.282127][ T54] Bluetooth: hci5: command 0x0405 tx timeout [ 277.352436][T13205] xt_bpf: check failed: parse error [ 277.915200][T13223] ipt_REJECT: TCP_RESET invalid for non-tcp [ 278.088353][T13233] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 278.480269][T13246] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 278.483046][T13241] netlink: NAT attribute has 8 unknown bytes [ 278.483078][T13241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.489707][T13241] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1750'. [ 278.494778][T13250] x_tables: duplicate underflow at hook 2 [ 278.495468][T13250] x_tables: duplicate underflow at hook 2 [ 278.495609][T13250] x_tables: duplicate underflow at hook 2 [ 278.495854][T13250] x_tables: duplicate underflow at hook 2 [ 278.495945][T13250] x_tables: duplicate underflow at hook 2 [ 278.496016][T13250] x_tables: duplicate underflow at hook 2 [ 278.496087][T13250] x_tables: duplicate underflow at hook 2 [ 278.496157][T13250] x_tables: duplicate underflow at hook 2 [ 278.496227][T13250] x_tables: duplicate underflow at hook 2 [ 278.496308][T13250] x_tables: duplicate underflow at hook 2 [ 278.982013][T13261] netlink: 198796 bytes leftover after parsing attributes in process `syz.2.1755'. [ 278.982040][T13261] netlink: 'syz.2.1755': attribute type 2 has an invalid length. [ 279.506098][T13269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1756'. [ 279.555710][T13266] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1756'. [ 279.555741][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1756'. [ 279.555759][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1756'. [ 279.899087][T13278] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1761'. [ 279.899114][T13278] tipc: Invalid UDP bearer configuration [ 279.899159][T13278] tipc: Enabling of bearer rejected, failed to enable media [ 280.137639][T13284] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 280.328219][T13285] syz.1.1762 (13285) used greatest stack depth: 18048 bytes left [ 280.524873][T13298] syzkaller0: entered promiscuous mode [ 280.524900][T13298] syzkaller0: entered allmulticast mode [ 280.560172][T13298] TC_ACT_REPEAT abuse ? [ 280.659125][T13306] ip_tables: iptables: counters copy to user failed while replacing table [ 280.687191][T13307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.694050][T13306] veth1_macvtap: left promiscuous mode [ 280.694078][T13306] macsec0: entered promiscuous mode [ 280.787326][T13303] syzkaller1: entered promiscuous mode [ 280.787352][T13303] syzkaller1: entered allmulticast mode [ 280.959303][T13325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1775'. [ 281.233852][T13341] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1779'. [ 281.234613][T13341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1779'. [ 281.571417][T13357] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 281.750476][T13367] Cannot find del_set index 3 as target [ 281.781646][T13357] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 282.088846][T13382] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 282.786186][T13405] trusted_key: syz.1.1789 sent an empty control message without MSG_MORE. [ 283.146128][T13417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.146158][T13417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.690559][T13452] netlink: 'syz.0.1797': attribute type 1 has an invalid length. [ 283.690587][T13452] __nla_validate_parse: 2 callbacks suppressed [ 283.690599][T13452] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1797'. [ 283.690633][T13452] netlink: 'syz.0.1797': attribute type 1 has an invalid length. [ 284.211485][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 284.248459][T13470] netlink: 'syz.0.1801': attribute type 11 has an invalid length. [ 284.318388][T13481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.361298][T13480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1804'. [ 284.362377][T13482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1804'. [ 284.448931][T13470] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1801'. [ 284.918012][T13508] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1810'. [ 285.150444][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 285.237583][T13526] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1817'. [ 285.740362][T13554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.147977][T13565] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1827'. [ 286.148011][T13565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1827'. [ 286.616270][T13587] syzkaller0: entered promiscuous mode [ 286.616296][T13587] syzkaller0: entered allmulticast mode [ 286.940306][T13604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.171869][T13618] netlink: 'syz.1.1841': attribute type 1 has an invalid length. [ 287.244217][T13618] 8021q: adding VLAN 0 to HW filter on device bond11 [ 287.246385][T13621] bond11: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 287.263549][T13621] bond11: entered allmulticast mode [ 287.302534][T13618] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 287.335048][T13618] bridge0: port 1(vlan5) entered blocking state [ 287.343840][T13618] bridge0: port 1(vlan5) entered disabled state [ 287.351038][T13618] vlan5: entered allmulticast mode [ 287.351061][T13618] geneve0: entered allmulticast mode [ 287.740572][T13643] netlink: 'syz.1.1849': attribute type 4 has an invalid length. [ 287.751468][T13643] .`: renamed from bond0 (while UP) [ 287.937505][T13650] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 288.321638][T13672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.553992][ T31] audit: type=1800 audit(1790679229.261:2): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1866" name=0A dev="tmpfs" ino=2109 res=0 errno=0 [ 289.226663][T13720] wg1 speed is unknown, defaulting to 1000 [ 289.228797][T13725] __nla_validate_parse: 5 callbacks suppressed [ 289.228818][T13725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1874'. [ 289.620527][T13732] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1875'. [ 289.680601][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1875'. [ 290.122131][T13759] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1882'. [ 290.131625][T13760] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1882'. [ 290.205589][T13720] wlan0 speed is unknown, defaulting to 1000 [ 290.729256][T13756] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 290.729284][T13756] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 291.119239][T13790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1889'. [ 291.119279][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'. [ 291.517072][T13820] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 291.660575][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'. [ 291.679232][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'. [ 291.694514][T13825] Bluetooth: hci0: unsupported parameter 5134 [ 291.694539][T13825] Bluetooth: hci0: unsupported parameter 8192 [ 291.694551][T13825] Bluetooth: hci0: unsupported parameter 5134 [ 291.694563][T13825] Bluetooth: hci0: unsupported parameter 8192 [ 291.732746][T13829] netlink: 'syz.4.1897': attribute type 1 has an invalid length. [ 291.810381][T13829] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.814284][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 291.851469][T13837] bond6: (slave gretap1): making interface the new active one [ 291.853052][T13837] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 292.041282][T13842] bridge7: entered promiscuous mode [ 292.041300][T13842] bridge7: entered allmulticast mode [ 292.085515][T13847] netlink: zone id is out of range [ 292.085534][T13847] netlink: zone id is out of range [ 292.085544][T13847] netlink: zone id is out of range [ 292.085552][T13847] netlink: zone id is out of range [ 292.085560][T13847] netlink: zone id is out of range [ 292.085568][T13847] netlink: zone id is out of range [ 292.085581][T13847] netlink: zone id is out of range [ 292.085589][T13847] netlink: zone id is out of range [ 292.341954][T13857] syzkaller1: entered promiscuous mode [ 292.341981][T13857] syzkaller1: entered allmulticast mode [ 292.345551][T13857] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 292.346066][T13845] netlink: 'syz.1.1902': attribute type 11 has an invalid length. [ 292.346086][T13845] netlink: 'syz.1.1902': attribute type 4 has an invalid length. [ 292.353138][T13845] tipc: Enabling of bearer rejected, already enabled [ 292.566909][T13870] netlink: 'syz.2.1909': attribute type 1 has an invalid length. [ 292.635419][T13869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.606429][T13930] netlink: zone id is out of range [ 294.578930][T13972] __nla_validate_parse: 10 callbacks suppressed [ 294.578956][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'. [ 294.579235][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1929'. [ 294.579253][T13973] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1929'. [ 294.579305][T13973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1929'. [ 294.687402][ T139] IPVS: starting estimator thread 0... [ 294.729021][T13977] netlink: 'syz.4.1933': attribute type 1 has an invalid length. [ 294.772519][T13980] IPVS: using max 27 ests per chain, 64800 per kthread [ 295.009184][T13984] bridge0: port 2(veth0) entered blocking state [ 295.009311][T13984] bridge0: port 2(veth0) entered disabled state [ 295.009826][T13984] veth0: entered allmulticast mode [ 295.038946][T13984] veth0: entered promiscuous mode [ 295.636110][T14025] netlink: 568 bytes leftover after parsing attributes in process `syz.3.1943'. [ 296.044268][T14038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1947'. [ 296.051600][ T50] syzkaller0: tun_net_xmit 76 [ 296.059221][T14038] syzkaller0: create flow: hash 1014004222 index 2 [ 296.073355][ T2267] syzkaller0: tun_net_xmit 76 [ 296.073567][ T50] syzkaller0: tun_net_xmit 48 [ 296.101182][ T52] syzkaller0: tun_net_xmit 76 [ 296.110239][T14038] syzkaller0: delete flow: hash 1014004222 index 2 [ 296.114117][T14040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1948'. [ 296.140980][ T52] syzkaller0: tun_net_xmit 76 [ 296.312214][ T52] syzkaller0: tun_net_xmit 76 [ 296.555186][T14050] pim6reg: entered allmulticast mode [ 296.672276][T14059] bond6 (unregistering): Released all slaves [ 297.280485][T14099] bridge0: port 3(vlan3) entered blocking state [ 297.281405][T14099] bridge0: port 3(vlan3) entered disabled state [ 297.281550][T14099] vlan3: entered allmulticast mode [ 297.281566][T14099] geneve0: entered allmulticast mode [ 297.284680][T14099] vlan3: entered promiscuous mode [ 297.284698][T14099] geneve0: entered promiscuous mode [ 297.300280][T14101] netlink: 'syz.2.1964': attribute type 2 has an invalid length. [ 297.302009][T14101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1964'. [ 297.302046][T14101] net_ratelimit: 11 callbacks suppressed [ 297.302059][T14101] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 297.630373][T14109] netlink: 'syz.2.1968': attribute type 3 has an invalid length. [ 297.887756][T14131] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1973'. [ 298.435547][T14160] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 298.556369][T14166] veth0: entered promiscuous mode [ 298.560612][T14166] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 298.562802][T14166] syzkaller1: group set to 0 [ 298.601484][T14170] netlink: 'syz.0.1985': attribute type 29 has an invalid length. [ 298.782721][T14170] syz_tun (unregistering): left allmulticast mode [ 298.782751][T14170] syz_tun (unregistering): left promiscuous mode [ 298.782853][T14170] bridge0: port 1(syz_tun) entered disabled state [ 298.832797][T14161] veth0: left promiscuous mode [ 298.835336][T14180] team0: Cannot enslave team device to itself [ 299.012032][T14186] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1991'. [ 299.313206][T14214] netlink: 'syz.4.1998': attribute type 2 has an invalid length. [ 301.907281][T14214] : entered promiscuous mode [ 302.087675][T14240] __nla_validate_parse: 5 callbacks suppressed [ 302.087698][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2002'. [ 302.383913][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2005'. [ 302.460406][T14255] netlink: 'syz.2.2003': attribute type 21 has an invalid length. [ 302.460425][T14255] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2003'. [ 302.460473][T14255] netlink: 'syz.2.2003': attribute type 4 has an invalid length. [ 302.460482][T14255] netlink: 'syz.2.2003': attribute type 5 has an invalid length. [ 302.460489][T14255] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2003'. [ 302.738079][T14269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2008'. [ 303.086962][T14282] tipc: Enabling of bearer rejected, already enabled [ 303.307844][T14295] xt_hashlimit: size too large, truncated to 1048576 [ 303.308048][T14295] xt_hashlimit: max too large, truncated to 1048576 [ 303.308133][T14295] xt_hashlimit: invalid rate [ 303.317287][T14295] xt_hashlimit: size too large, truncated to 1048576 [ 303.317306][T14295] xt_hashlimit: max too large, truncated to 1048576 [ 303.317316][T14295] xt_hashlimit: invalid rate [ 303.371163][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 303.371196][T14299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2019'. [ 303.537832][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2020'. [ 303.537894][T14304] openvswitch: netlink: Missing key (keys=40, expected=100) [ 303.543853][T14301] ip6gre3: entered allmulticast mode [ 303.719648][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2023'. [ 303.977762][T14327] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 303.991709][T14328] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 304.161097][ C0] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 304.204941][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2029'. [ 304.688062][T14365] netlink: 'syz.3.2034': attribute type 2 has an invalid length. [ 304.711113][T14370] vcan0: tx address claim with dlc 0 [ 304.879885][T14374] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 304.879918][T14374] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 305.288725][T14394] netlink: 'syz.2.2044': attribute type 1 has an invalid length. [ 305.402530][T14401] bond3: (slave bridge8): making interface the new active one [ 305.403360][T14401] bond3: (slave bridge8): Enslaving as an active interface with an up link [ 305.409216][T14398] bridge0: entered allmulticast mode [ 305.591138][T14402] netlink: 'syz.4.2046': attribute type 1 has an invalid length. [ 305.872811][T14428] xt_policy: too many policy elements [ 305.926422][T14435] IPVS: length: 239 != 24 [ 307.402868][T14445] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 307.579251][T14445] bond0: entered promiscuous mode [ 307.579753][T14445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.714806][T14464] bond0: (slave bridge6): making interface the new active one [ 307.714831][T14464] bridge6: entered promiscuous mode [ 307.716381][T14464] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 308.275907][T14497] netlink: 'syz.3.2071': attribute type 18 has an invalid length. [ 308.276898][T14497] netlink: 'syz.3.2071': attribute type 18 has an invalid length. [ 308.451822][T14503] __nla_validate_parse: 7 callbacks suppressed [ 308.451847][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 308.538470][T14505] bond6: option xmit_hash_policy: invalid value (128) [ 308.543755][T14505] bond6 (unregistering): Released all slaves [ 309.234369][T14531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.244537][T14535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2083'. [ 309.296455][ T43] bond0: (slave bond_slave_0): interface is now down [ 309.296484][ T43] bond0: (slave bond_slave_1): interface is now down [ 309.507254][T14546] netlink: 'syz.4.2090': attribute type 4 has an invalid length. [ 310.046484][T14576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2097'. [ 310.353322][T14593] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2104'. [ 310.361660][T14593] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2104'. [ 310.430084][T14598] siw: device registration error -23 [ 310.876008][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 311.155905][T14628] tipc: Enabled bearer , priority 0 [ 311.310965][T14640] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2120'. [ 311.328069][T14641] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 311.686108][T14658] syzkaller0: entered promiscuous mode [ 311.686135][T14658] syzkaller0: entered allmulticast mode [ 311.808307][T14665] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 311.823182][T14667] dvmrp8: entered allmulticast mode [ 311.842311][ T43] bond0: (slave bond_slave_0): interface is now down [ 311.842340][ T43] bond0: (slave bond_slave_1): interface is now down [ 311.860967][T14665] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 311.861519][T14665] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 311.861810][T14665] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 311.862090][T14665] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 311.862384][T14665] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 311.862823][T14665] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 311.958037][T14671] bond4: (slave bridge9): making interface the new active one [ 311.958825][T14671] bond4: (slave bridge9): Enslaving as an active interface with an up link [ 311.998553][T14671] bond4: (slave bridge10): Enslaving as an active interface with a down link [ 312.054608][T14671] bond4: (slave bridge11): Enslaving as an active interface with a down link [ 312.159108][T14671] bond4: (slave bridge12): Enslaving as an active interface with a down link [ 312.223491][T14671] bond4: (slave bridge13): Enslaving as an active interface with a down link [ 312.307327][T14671] bond4: (slave bridge14): Enslaving as an active interface with a down link [ 312.378129][T14671] bond4: (slave bridge15): Enslaving as an active interface with a down link [ 312.424165][T14671] bond4: (slave bridge16): Enslaving as an active interface with a down link [ 312.527064][T14671] bond4: (slave bridge17): Enslaving as an active interface with a down link [ 312.657626][T14671] bond4: (slave bridge18): Enslaving as an active interface with a down link [ 312.874848][T14706] xt_check_table_hooks: 23 callbacks suppressed [ 312.874880][T14706] x_tables: duplicate underflow at hook 2 [ 313.039366][T14713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2139'. [ 313.267165][T14722] sctp: [Deprecated]: syz.3.2142 (pid 14722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.267165][T14722] Use struct sctp_sack_info instead [ 313.416171][T14726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2145'. [ 313.434620][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 313.749545][T14738] validate_nla: 58 callbacks suppressed [ 313.749570][T14738] netlink: 'syz.0.2149': attribute type 3 has an invalid length. [ 313.749585][T14738] netlink: 'syz.0.2149': attribute type 1 has an invalid length. [ 313.749598][T14738] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2149'. [ 313.749613][T14738] NCSI netlink: No device for ifindex 813332851 [ 313.755308][T14738] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 313.857986][T14738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2149'. [ 313.858018][T14738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2149'. [ 313.876571][T14738] syzkaller0: entered allmulticast mode [ 313.992454][T14750] ip_tables: iptables: counters copy to user failed while replacing table [ 314.056031][T14752] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2153'. [ 314.056094][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2153'. [ 314.080133][T14750] IPVS: set_ctl: invalid protocol: 98 172.20.20.38:20000 [ 314.184986][T14758] Cannot find del_set index 3 as target [ 314.294419][T14760] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 314.355288][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2157'. [ 314.358931][T14768] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 314.362544][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2157'. [ 314.405085][ T7900] bond0: (slave bond_slave_0): interface is now down [ 314.405114][ T7900] bond0: (slave bond_slave_1): interface is now down [ 314.505950][ T7900] bond0: now running without any active interface! [ 314.648884][T14775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2160'. [ 314.670683][T14777] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 314.670873][T14777] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 314.671051][T14777] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 314.671359][T14777] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 314.671539][T14777] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 314.671785][T14777] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 314.671977][T14777] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 314.672183][T14777] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 315.242141][T14805] netlink: 'syz.1.2167': attribute type 5 has an invalid length. [ 315.366126][T14813] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 315.434269][T14818] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 315.995939][ T7900] IPVS: starting estimator thread 0... [ 316.093995][T14839] IPVS: using max 24 ests per chain, 57600 per kthread [ 316.350613][T14848] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.361905][T14848] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.362070][T14848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.126630][T14893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2189'. [ 317.464088][T14906] netlink: 'syz.2.2194': attribute type 1 has an invalid length. [ 318.166624][T14906] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.278235][T14915] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.282585][T14915] bond5: (slave gre0): The slave device specified does not support setting the MAC address [ 318.285138][T14915] bond5: (slave gre0): Error -95 calling set_mac_address [ 318.311927][T14919] bond5: (slave gre0): The slave device specified does not support setting the MAC address [ 318.312479][T14919] bond5: (slave gre0): Error -95 calling set_mac_address [ 318.656975][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2196'. [ 319.015426][T14956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2201'. [ 319.055099][T14953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2200'. [ 319.445944][T14965] wireguard: wg2: Could not create IPv4 socket [ 319.579265][T14984] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2208'. [ 319.586327][T14984] net_ratelimit: 48 callbacks suppressed [ 319.586349][T14984] openvswitch: netlink: IP tunnel TTL not specified. [ 319.589511][T14986] openvswitch: netlink: IP tunnel TTL not specified. [ 319.695923][T14989] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 319.740272][T14989] bond8: entered promiscuous mode [ 319.748797][T14989] 8021q: adding VLAN 0 to HW filter on device bond8 [ 319.783221][T14989] netlink: 'syz.4.2209': attribute type 3 has an invalid length. [ 319.824926][T14989] 8021q: adding VLAN 0 to HW filter on device bond8 [ 319.826910][T14989] bond8: (slave xfrm1): The slave device specified does not support setting the MAC address [ 319.826929][T14989] bond8: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 319.864802][T14989] bond8: (slave xfrm1): making interface the new active one [ 319.864829][T14989] xfrm1: entered promiscuous mode [ 319.899150][T14989] xfrm1: left promiscuous mode [ 319.900097][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2211'. [ 320.096180][T15004] netlink: 'syz.2.2212': attribute type 49 has an invalid length. [ 320.203937][T15010] xt_NETMAP: bad rangesize 37. [ 320.204090][T15010] xt_NETMAP: bad rangesize 37. [ 320.204217][T15010] xt_NETMAP: bad rangesize 37. [ 320.204928][T15010] xt_NETMAP: bad rangesize 37. [ 320.205061][T15010] xt_NETMAP: bad rangesize 37. [ 320.205190][T15010] xt_NETMAP: bad rangesize 37. [ 320.205308][T15010] xt_NETMAP: bad rangesize 37. [ 320.205616][T15010] xt_NETMAP: bad rangesize 37. [ 320.205742][T15010] xt_NETMAP: bad rangesize 37. [ 320.205864][T15010] xt_NETMAP: bad rangesize 37. [ 320.280498][T15012] Cannot find add_set index 65532 as target [ 320.517822][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2217'. [ 321.306436][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2218'. [ 321.490523][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2222'. [ 321.751003][T15066] netlink: 1508 bytes leftover after parsing attributes in process `syz.3.2229'. [ 321.827280][T15073] sctp: [Deprecated]: syz.0.2232 (pid 15073) Use of int in maxseg socket option. [ 321.827280][T15073] Use struct sctp_assoc_value instead [ 322.125843][T15085] openvswitch: netlink: VXLAN extension message has 5413 unknown bytes. [ 322.143590][T15085] netlink: 'syz.1.2234': attribute type 2 has an invalid length. [ 322.201584][T15098] netlink: zone id is out of range [ 322.201630][T15098] netlink: zone id is out of range [ 322.201802][T15098] netlink: zone id is out of range [ 322.453428][T15110] erspan1: entered promiscuous mode [ 322.911270][T15129] Bluetooth: hci0: unsupported parameter 5161 [ 322.911295][T15129] Bluetooth: hci0: unsupported parameter 8192 [ 322.911307][T15129] Bluetooth: hci0: unsupported parameter 5161 [ 322.911318][T15129] Bluetooth: hci0: unsupported parameter 8192 [ 323.179022][T15133] ipvlan2: entered allmulticast mode [ 323.179068][T15133] virt_wifi0: entered allmulticast mode [ 323.189987][T15133] batman_adv: batadv0: Adding interface: ipvlan2 [ 323.190011][T15133] batman_adv: batadv0: Interface activated: ipvlan2 [ 323.224694][T15141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2245'. [ 323.256843][T15139] ipvlan3: entered allmulticast mode [ 323.272329][T15139] batman_adv: batadv0: Adding interface: ipvlan3 [ 323.272352][T15139] batman_adv: The newly added mac address (36:de:33:62:4a:46) already exists on: ipvlan2 [ 323.272370][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.272383][T15139] batman_adv: batadv0: Interface activated: ipvlan3 [ 323.586196][T15149] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2250'. [ 323.686444][T15164] ip_tables: iptables: counters copy to user failed while replacing table [ 324.089501][T15182] gtp0: entered promiscuous mode [ 324.089527][T15182] gtp0: entered allmulticast mode [ 324.552790][T15198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.655838][T15202] hsr0: entered allmulticast mode [ 324.655878][T15202] hsr_slave_0: entered allmulticast mode [ 324.655896][T15202] hsr_slave_1: entered allmulticast mode [ 324.666304][T15202] __nla_validate_parse: 1 callbacks suppressed [ 324.666323][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2262'. [ 324.666822][T15205] netlink: 'syz.4.2263': attribute type 1 has an invalid length. [ 324.709405][T15202] hsr_slave_0: left promiscuous mode [ 324.723268][T15202] hsr_slave_1: left promiscuous mode [ 324.797158][T15211] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2263'. [ 324.802165][T15202] hsr0 (unregistering): left allmulticast mode [ 324.909050][T15219] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 324.992633][T15222] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 325.077689][T15205] 8021q: adding VLAN 0 to HW filter on device bond9 [ 325.231358][T15209] bond9: (slave geneve3): making interface the new active one [ 325.265454][T15209] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 325.566201][T15242] netlink: 'syz.0.2270': attribute type 2 has an invalid length. [ 325.568453][T15242] openvswitch: netlink: Missing key (keys=40, expected=100) [ 325.741923][T15251] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2273'. [ 325.900411][T15262] netlink: 'syz.4.2277': attribute type 1 has an invalid length. [ 325.945174][T15262] bond10: entered promiscuous mode [ 325.945716][T15262] 8021q: adding VLAN 0 to HW filter on device bond10 [ 326.159391][T15271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.826873][T15303] netlink: set zone limit has 4 unknown bytes [ 326.885260][T15305] ip_tables: iptables: counters copy to user failed while replacing table [ 326.887692][T15305] openvswitch: netlink: Duplicate or invalid key (type 0). [ 326.912209][T15305] xt_connbytes: Forcing CT accounting to be enabled [ 326.912240][T15305] set match dimension is over the limit! [ 327.419548][T15337] netlink: 'syz.4.2294': attribute type 10 has an invalid length. [ 327.458393][T15337] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 327.594938][T15335] netlink: 'syz.3.2293': attribute type 1 has an invalid length. [ 327.726581][T15335] bond6: option mode: invalid value (12) [ 327.729742][T15335] bond6 (unregistering): Released all slaves [ 327.841579][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 327.926125][T15344] syzkaller0: entered promiscuous mode [ 327.926151][T15344] syzkaller0: entered allmulticast mode [ 328.027899][T15364] ip_tables: iptables: counters copy to user failed while replacing table [ 328.028379][T15364] ip_tables: iptables: counters copy to user failed while replacing table [ 328.028763][T15364] ip_tables: iptables: counters copy to user failed while replacing table [ 328.029124][T15364] ip_tables: iptables: counters copy to user failed while replacing table [ 328.085371][T15364] ip_tables: iptables: counters copy to user failed while replacing table [ 328.147075][T15374] netlink: 'syz.0.2301': attribute type 4 has an invalid length. [ 328.197228][T15375] netlink: 'syz.0.2301': attribute type 4 has an invalid length. [ 328.554377][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2305'. [ 329.514208][T15388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.591552][T15427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2313'. [ 329.710106][T15438] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2314'. [ 330.514127][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2314'. [ 330.730068][T15461] macvlan0: entered promiscuous mode [ 331.035321][T15474] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2322'. [ 331.041513][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 331.114559][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 331.115965][T15478] netlink: 'syz.4.2324': attribute type 2 has an invalid length. [ 331.148670][T15474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2322'. [ 331.716440][T15504] bond6: invalid ARP target 0.0.0.0 specified for addition [ 331.716471][T15504] bond6: option arp_ip_target: invalid value (0) [ 331.724123][T15504] bond6 (unregistering): Released all slaves [ 332.500221][T15537] x_tables: unsorted entry at hook 4 [ 332.875560][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'. [ 332.900345][T15552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2348'. [ 332.900383][T15552] net_ratelimit: 24 callbacks suppressed [ 332.900396][T15552] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 333.388236][T15568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2353'. [ 333.471412][T15565] veth0: entered promiscuous mode [ 333.502717][T15572] sctp: [Deprecated]: syz.4.2354 (pid 15572) Use of int in maxseg socket option. [ 333.502717][T15572] Use struct sctp_assoc_value instead [ 333.503728][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2352'. [ 333.566718][T15564] veth0: left promiscuous mode [ 333.587965][T15574] netlink: 'syz.2.2355': attribute type 46 has an invalid length. [ 333.852643][T15587] syzkaller0: entered promiscuous mode [ 333.852671][T15587] syzkaller0: entered allmulticast mode [ 334.339494][T15615] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 334.339536][T15615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.551790][T15612] bond6 (unregistering): Released all slaves [ 334.891438][T15642] __nla_validate_parse: 14 callbacks suppressed [ 334.891462][T15642] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2371'. [ 334.891480][T15642] nbd: must specify at least one socket [ 334.893887][T15644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2370'. [ 334.893983][T15644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2370'. [ 334.910252][T15647] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2373'. [ 334.938882][T15644] gretap3: entered promiscuous mode [ 334.938914][T15644] gretap3: entered allmulticast mode [ 334.968347][T15649] ip_tables: iptables: counters copy to user failed while replacing table [ 334.979773][T15644] C: renamed from lo [ 334.988321][T15644] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 335.036400][T15650] x_tables: unsorted entry at hook 3 [ 335.197741][T15655] ip6t_rt: unknown flags 36 [ 335.202907][T15659] netlink: 'syz.1.2377': attribute type 21 has an invalid length. [ 335.202929][T15659] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2377'. [ 335.203000][T15659] netlink: 'syz.1.2377': attribute type 5 has an invalid length. [ 335.203012][T15659] netlink: 'syz.1.2377': attribute type 6 has an invalid length. [ 335.203022][T15659] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2377'. [ 335.546182][T15678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2380'. [ 335.546221][T15678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2380'. [ 335.590258][T15678] gretap0: entered promiscuous mode [ 335.603995][T15678] gretap0: left promiscuous mode [ 335.723700][T15684] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2383'. [ 335.771096][T15684] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2383'. [ 335.812913][T15686] netlink: 'syz.3.2384': attribute type 1 has an invalid length. [ 335.830392][T15688] ip_tables: iptables: counters copy to user failed while replacing table [ 336.711188][T15735] wg1 speed is unknown, defaulting to 1000 [ 336.776660][T15749] tc_dump_action: action bad kind [ 337.141151][T15766] set match dimension is over the limit! [ 337.157123][T15763] ip_tables: iptables: counters copy to user failed while replacing table [ 337.199378][T15766] sctp: [Deprecated]: syz.2.2407 (pid 15766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.199378][T15766] Use struct sctp_sack_info instead [ 337.374757][T15774] netlink: 'syz.4.2409': attribute type 12 has an invalid length. [ 337.511165][T15774] bond11: option primary_reselect: invalid value (255) [ 337.512527][T15774] bond11 (unregistering): Released all slaves [ 337.593675][T15735] wlan0 speed is unknown, defaulting to 1000 [ 337.655924][T15787] netlink: 'syz.3.2412': attribute type 64 has an invalid length. [ 337.689020][T15787] netlink: 'syz.3.2412': attribute type 64 has an invalid length. [ 337.815205][T15790] bond11: option arp_all_targets: invalid value (18446744073709551613) [ 337.816721][T15790] bond11 (unregistering): Released all slaves [ 338.233782][T15778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.519701][T15818] IPVS: length: 20 != 8 [ 338.766220][T15839] netlink: 'syz.2.2423': attribute type 1 has an invalid length. [ 338.887879][T15839] 8021q: adding VLAN 0 to HW filter on device bond6 [ 338.926233][T15843] bond6: Invalid ad_actor_system MAC address. [ 338.926258][T15843] bond6: option ad_actor_system: invalid value (1) [ 338.955515][T15843] bond6 (unregistering): Released all slaves [ 339.508491][T15879] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 339.695361][T15887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.218727][T15918] __nla_validate_parse: 20 callbacks suppressed [ 340.218752][T15918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2442'. [ 340.218775][T15918] bond_slave_1: entered allmulticast mode [ 340.576356][T15938] sctp: [Deprecated]: syz.2.2447 (pid 15938) Use of int in maxseg socket option. [ 340.576356][T15938] Use struct sctp_assoc_value instead [ 340.602496][T15942] netlink: 'syz.1.2448': attribute type 15 has an invalid length. [ 340.602522][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2448'. [ 340.651074][T15943] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2448'. [ 340.721171][ T139] netdevsim netdevsim1 : set [0, 1] type 1 family 0 port 2816 - 0 [ 340.731470][ T139] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 340.732739][ T139] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 340.732783][ T139] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 341.385896][T15977] team0: Device xfrm0 is of different type [ 341.443085][T15982] team0: Device xfrm0 is of different type [ 341.537882][T15987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2457'. [ 343.039619][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 343.066060][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 343.077646][T16002] netlink: 'syz.4.2462': attribute type 29 has an invalid length. [ 343.084855][T16002] netlink: 'syz.4.2462': attribute type 29 has an invalid length. [ 343.291160][T16013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.439967][T16017] IPv6: sit1: Disabled Multicast RS [ 343.919706][T16039] xt_CT: No such helper "pptp" [ 344.146453][T16065] erspan0: entered promiscuous mode [ 344.146482][T16065] erspan0: entered allmulticast mode [ 344.439224][T16077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2477'. [ 344.756621][T16097] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2481'. [ 344.997715][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'. [ 345.045414][T16112] ip6t_rt: address list match requested but addrnr is 0 [ 345.388625][T16128] netlink: 'syz.0.2488': attribute type 97 has an invalid length. [ 345.388653][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2488'. [ 345.388669][T16128] netlink: 'syz.0.2488': attribute type 97 has an invalid length. [ 345.388683][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2488'. [ 345.396366][T16127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2486'. [ 345.396422][T16127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2486'. [ 345.472454][T16133] tipc: Enabling of bearer rejected, failed to enable media [ 345.484901][T16132] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2487'. [ 345.555753][T16132] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2487'. [ 345.653858][T16139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2491'. [ 345.764120][ T7884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.764145][ T7884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.798065][T16145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.812974][T16145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.818495][T16145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.878397][T16145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.909863][T16145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.950472][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'. [ 345.950496][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2495'. [ 346.057342][T16155] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 346.081197][T16157] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2498'. [ 346.109553][T16148] erspan1: entered allmulticast mode [ 346.230194][T16167] netlink: 'syz.1.2500': attribute type 10 has an invalid length. [ 346.310471][T16170] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 346.457272][T16179] netlink: 'syz.1.2505': attribute type 10 has an invalid length. [ 346.470430][T16175] sctp: [Deprecated]: syz.2.2502 (pid 16175) Use of int in max_burst socket option. [ 346.470430][T16175] Use struct sctp_assoc_value instead [ 346.502756][T16179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.504657][T16179] .`: (slave batadv0): Enslaving as an active interface with an up link [ 346.787042][T16179] bond0 (unregistering): (slave bridge6): Releasing backup interface [ 346.787073][T16179] bridge6: left promiscuous mode [ 346.811866][T16179] bond0 (unregistering): Released all slaves [ 347.362465][T16242] netlink: 'syz.1.2516': attribute type 21 has an invalid length. [ 347.396810][T16240] tipc: Enabling of bearer rejected, already enabled [ 347.654640][T16245] ip_tables: iptables: counters copy to user failed while replacing table [ 347.969848][T16278] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 348.575122][T16289] veth1_macvtap: entered promiscuous mode [ 348.643261][T16289] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 348.648643][T16293] tipc: Enabling of bearer rejected, failed to enable media [ 349.199688][T16331] netlink: 'syz.2.2537': attribute type 1 has an invalid length. [ 349.245777][T16332] tc_dump_action: action bad kind [ 349.477429][T16337] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2 [ 349.477481][T16337] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿ [ 351.425223][T16381] __nla_validate_parse: 14 callbacks suppressed [ 351.425261][T16381] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2547'. [ 352.172611][T16332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.192722][T16380] netlink: 'syz.0.2547': attribute type 1 has an invalid length. [ 352.192748][T16380] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2547'. [ 352.245730][T16380] workqueue: Failed to create a rescuer kthread for wq "phy3-mac-cmds": -EINTR [ 352.483667][T16395] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2552'. [ 352.546992][T16398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2554'. [ 352.548603][T16394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2551'. [ 352.548676][T16394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2551'. [ 352.556611][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'. [ 352.556637][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'. [ 352.826415][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2559'. [ 353.731976][T16456] batman_adv: batadv0: Adding interface: syzkaller0 [ 353.732000][T16456] batman_adv: batadv0: Interface activated: syzkaller0 [ 353.802756][T16455] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 353.846880][T16455] batman_adv: batadv0: Removing interface: syzkaller0 [ 353.915248][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2573'. [ 354.793859][T16514] nbd: must specify a device to reconfigure [ 354.863321][T16520] Bluetooth: MGMT ver 1.23 [ 354.948692][T16522] netlink: Unknown conntrack attr (0) [ 355.054232][T16533] xt_TPROXY: Can be used only with -p tcp or -p udp [ 355.093247][T16523] geneve5: entered promiscuous mode [ 355.131019][T14285] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 38534 - 0 [ 355.131070][T14285] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 38534 - 0 [ 355.131103][T14285] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 38534 - 0 [ 355.140966][T14285] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 38534 - 0 [ 355.868730][T16577] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 356.028198][T16582] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 356.411692][T16596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.411822][T16607] netlink: 'syz.2.2609': attribute type 5 has an invalid length. [ 356.571308][T16609] __nla_validate_parse: 7 callbacks suppressed [ 356.571332][T16609] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2608'. [ 356.591060][T16614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2611'. [ 356.591112][T16614] openvswitch: netlink: Missing key (keys=40, expected=100) [ 356.999575][T16639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2615'. [ 357.454510][T16657] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2620'. [ 357.688361][T16668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.706069][T16668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.714849][T16668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.732311][T16668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.750053][T16668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.766245][T16668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.792840][T16669] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2626'. [ 357.818905][T16668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.871362][T16671] netlink: 'syz.1.2627': attribute type 1 has an invalid length. [ 357.871389][T16671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2627'. [ 358.251970][T16691] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2633'. [ 358.576118][T16714] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 358.670824][T16717] netlink: 'syz.2.2640': attribute type 39 has an invalid length. [ 358.804621][T16722] netlink: 'syz.3.2642': attribute type 3 has an invalid length. [ 358.848955][T16714] 8021q: adding VLAN 0 to HW filter on device bond7 [ 358.925597][ T139] smc: removing ib device syz2 [ 359.007892][ T139] smbdirect: ib_dev[syz2] removed [ 359.253981][T16719] macvlan2: entered promiscuous mode [ 359.254011][T16719] macvlan2: entered allmulticast mode [ 359.254403][T16719] bond7: entered allmulticast mode [ 359.254450][T16719] bond7: entered promiscuous mode [ 359.296642][T16719] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 359.314368][T16719] team0: Port device macvlan2 added [ 359.328735][T16730] sit0: entered promiscuous mode [ 359.353885][T16730] netlink: 'syz.3.2642': attribute type 1 has an invalid length. [ 359.353913][T16730] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2642'. [ 359.354185][ T5752] infiniband syz2: ib_query_port failed (-19) [ 359.445945][T16742] batadv_slave_0: entered promiscuous mode [ 359.687522][T16740] batadv_slave_0: left promiscuous mode [ 360.038765][T16749] openvswitch: netlink: Duplicate key (type 6). [ 360.373355][T16770] netlink: 'syz.3.2654': attribute type 9 has an invalid length. [ 360.456542][T16762] xt_CT: No such helper "netbios-ns" [ 360.481131][ T32] INFO: task kworker/0:1H:2427 blocked for ** replaying previous printk message ** [ 360.481131][ T32] INFO: task kworker/0:1H:2427 blocked for more than 143 seconds. [ 360.481162][ T32] Not tainted syzkaller #0 [ 360.481173][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.481183][ T32] task:kworker/0:1H state:D stack:25632 pid:2427 tgid:2427 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 360.481241][ T32] Workqueue: kblockd blk_mq_requeue_work [ 360.481443][ T32] Call Trace: [ 360.481478][ T32] [ 360.481536][ T32] __schedule+0x17db/0x58f0 [ 360.481732][ T32] ? __pfx___schedule+0x10/0x10 [ 360.481776][ T32] ? schedule+0x90/0x2b0 [ 360.481805][ T32] schedule+0x164/0x2b0 [ 360.481833][ T32] schedule_timeout+0x152/0x2c0 [ 360.481854][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 360.481878][ T32] ? __pfx_process_timeout+0x10/0x10 [ 360.481952][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 360.481976][ T32] ? prepare_to_wait_event+0x436/0x480 [ 360.482036][ T32] nbd_queue_rq+0x96f/0xff0 [ 360.482147][ T32] ? __pfx_nbd_queue_rq+0x10/0x10 [ 360.482172][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 360.482228][ T32] blk_mq_dispatch_rq_list+0x499/0x1990 [ 360.482279][ T32] ? sbitmap_get+0x229/0x390 [ 360.482373][ T32] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 360.482399][ T32] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 360.482431][ T32] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 360.482499][ T32] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 360.482525][ T32] ? lock_acquire+0x115/0x350 [ 360.482551][ T32] ? lock_acquire+0x115/0x350 [ 360.482583][ T32] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 360.482611][ T32] ? blk_mq_run_hw_queue+0x321/0x4f0 [ 360.482662][ T32] blk_mq_run_hw_queue+0x34a/0x4f0 [ 360.482687][ T32] blk_mq_run_hw_queues+0x268/0x3f0 [ 360.482760][ T32] blk_mq_requeue_work+0x703/0x760 [ 360.482794][ T32] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 360.482822][ T32] ? rcu_is_watching+0x16/0xb0 [ 360.482860][ T32] ? process_scheduled_works+0x97a/0x1630 [ 360.482899][ T32] process_scheduled_works+0xc3d/0x1630 [ 360.482952][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 360.482979][ T32] ? assign_work+0x3cf/0x5d0 [ 360.483005][ T32] worker_thread+0xa47/0xfb0 [ 360.483042][ T32] ? __kthread_parkme+0x71/0x1f0 [ 360.483076][ T32] kthread+0x38b/0x480 [ 360.483093][ T32] ? __pfx_worker_thread+0x10/0x10 [ 360.483112][ T32] ? __pfx_kthread+0x10/0x10 [ 360.483131][ T32] ret_from_fork+0x514/0xb70 [ 360.483159][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 360.483176][ T32] ? __switch_to+0xc89/0x1420 [ 360.483229][ T32] ? __pfx_kthread+0x10/0x10 [ 360.483248][ T32] ret_from_fork_asm+0x1a/0x30 [ 360.483305][ T32] [ 360.483444][ T32] [ 360.483444][ T32] Showing all locks held in the system: [ 360.483463][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 360.483525][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 360.483628][ T32] locks held by kworker/u8:2/43: 3, on CPU#1: [ 360.483641][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.483687][ T32] #1: ffffc90000b37c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.485196][ T32] #2: ffffffff8ed62ce8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 360.485281][ T32] locks held by kworker/u8:5/139: 5, on CPU#1: [ 360.485296][ T32] #0: ffff8880232f1140 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.485352][ T32] #1: ffffc90002f0fc40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.485407][ T32] #2: ffff88807935c730 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x279/0x400 [ 360.485575][ T32] #3: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 360.485661][ T32] #4: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 360.485722][ T32] locks held by kworker/0:1H/2427: 4, on CPU#0: [ 360.485736][ T32] #0: ffff888020e88140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.485790][ T32] #1: ffffc90007d1fc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 360.485846][ T32] #2: ffff888026cd2318 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x321/0x4f0 [ 360.485898][ T32] #3: ffff888026fc5738 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 360.485960][ T32] locks held by udevd/4986: 1, on CPU#1: [ 360.485974][ T32] #0: ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 360.486053][ T32] locks held by getty/5377: 2, on CPU#1: [ 360.486066][ T32] #0: ffff8880360840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 360.486193][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 360.486251][ T32] locks held by syz-executor/5618: 4, last CPU#0: [ 360.486275][ T32] #0: ffffffff8ee36730 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 360.486328][ T32] #1: ffff888021309d38 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 360.486403][ T32] #2: ffff88807812f678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 360.486465][ T32] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 360.486525][ T32] locks held by syz-executor/5626: 7, last CPU#1: [ 360.486539][ T32] #0: ffffffff8ee36730 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 360.486605][ T32] #1: ffff888021309078 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 360.486663][ T32] #2: ffff888077ce7678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 360.486725][ T32] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 360.491569][ T32] #4: ffff8880b873bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 360.491622][ T32] #5: ffff8880b8724408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 360.491665][ T32] #6: ffff88805dee8a38 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 360.491792][ T32] locks held by udevd/5633: 1, on CPU#0: [ 360.491805][ T32] #0: ffff888026e66350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 360.491892][ T32] locks held by syz.4.2650/16762: 2, last CPU#1: [ 360.491905][ T32] #0: ffff88802a4983b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 360.491952][ T32] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 360.492006][ T32] locks held by syz.3.2654/16770: 5, last CPU#1: [ 360.492018][ T32] #0: ffffffff907c23a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 360.492148][ T32] #1: ffffffff90254b80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 360.492196][ T32] #2: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 360.492252][ T32] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 360.492299][ T32] #4: ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x4f6/0x8e0 [ 360.492347][ T32] [ 360.492352][ T32] ============================================= [ 360.492352][ T32] [ 360.492360][ T32] NMI backtrace for cpu 1 [ 360.492373][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 360.492391][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.492402][ T32] Call Trace: [ 360.492411][ T32] [ 360.492419][ T32] dump_stack_lvl+0xe8/0x150 [ 360.492447][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 360.492511][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.492540][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 360.492562][ T32] sys_info+0x135/0x170 [ 360.492586][ T32] watchdog+0xfd7/0x1030 [ 360.492625][ T32] ? watchdog+0x1c7/0x1030 [ 360.492651][ T32] kthread+0x38b/0x480 [ 360.492670][ T32] ? __pfx_watchdog+0x10/0x10 [ 360.492686][ T32] ? __pfx_kthread+0x10/0x10 [ 360.492704][ T32] ret_from_fork+0x514/0xb70 [ 360.492724][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 360.492741][ T32] ? __switch_to+0xc89/0x1420 [ 360.492768][ T32] ? __pfx_kthread+0x10/0x10 [ 360.492786][ T32] ret_from_fork_asm+0x1a/0x30 [ 360.492826][ T32] [ 360.492864][ T32] Sending NMI from CPU 1 to CPUs 0: [ 360.492895][ C0] NMI backtrace for cpu 0 [ 360.492910][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 360.492930][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.492940][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 360.493006][ C0] Code: e8 be 9a 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 9e c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 360.493044][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 360.493079][ C0] RAX: 1ffffffff35a8200 RBX: 00000000000003fd RCX: 0000000000000000 [ 360.493092][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 360.493121][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 360.493132][ C0] R10: dffffc0000000000 R11: ffffffff857340f0 R12: dffffc0000000000 [ 360.493146][ C0] R13: 0000000000000000 R14: ffffffff9ad41300 R15: 0000000000000000 [ 360.493157][ C0] FS: 0000000000000000(0000) GS:ffff888124cca000(0000) knlGS:0000000000000000 [ 360.493172][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.493185][ C0] CR2: 00007fb9327556c8 CR3: 0000000063c82000 CR4: 00000000003526f0 [ 360.493211][ C0] Call Trace: [ 360.493218][ C0] [ 360.493227][ C0] wait_for_lsr+0x184/0x2f0 [ 360.493257][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 360.493287][ C0] serial8250_console_write+0xaa1/0x1200 [ 360.493311][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 360.493332][ C0] ? rcu_is_watching+0x16/0xb0 [ 360.493359][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 360.493387][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 360.493410][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 360.493436][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 360.493458][ C0] nbcon_kthread_func+0x679/0x880 [ 360.493479][ C0] ? nbcon_kthread_func+0x163/0x880 [ 360.493497][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 360.493519][ C0] ? __kthread_parkme+0x71/0x1f0 [ 360.493544][ C0] ? __kthread_parkme+0x199/0x1f0 [ 360.493571][ C0] kthread+0x38b/0x480 [ 360.493588][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 360.493605][ C0] ? __pfx_kthread+0x10/0x10 [ 360.493622][ C0] ret_from_fork+0x514/0xb70 [ 360.493640][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 360.493656][ C0] ? __switch_to+0xc89/0x1420 [ 360.493681][ C0] ? __pfx_kthread+0x10/0x10 [ 360.493698][ C0] ret_from_fork_asm+0x1a/0x30 [ 360.493739][ C0] [ 360.497446][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 361.582716][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 361.591927][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.602250][ T32] Call Trace: [ 361.605723][ T32] [ 361.608843][ T32] vpanic+0x56d/0xa60 [ 361.612850][ T32] ? __pfx___schedule+0x10/0x10 [ 361.617799][ T32] ? __pfx_vpanic+0x10/0x10 [ 361.622514][ T32] panic+0xc5/0xd0 [ 361.626244][ T32] ? __pfx_panic+0x10/0x10 [ 361.630692][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 361.636700][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 361.642084][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 361.648334][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 361.654847][ T32] watchdog+0x1030/0x1030 [ 361.659241][ T32] ? watchdog+0x1c7/0x1030 [ 361.663842][ T32] kthread+0x38b/0x480 [ 361.667921][ T32] ? __pfx_watchdog+0x10/0x10 [ 361.672685][ T32] ? __pfx_kthread+0x10/0x10 [ 361.677395][ T32] ret_from_fork+0x514/0xb70 [ 361.682000][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 361.687923][ T32] ? __switch_to+0xc89/0x1420 [ 361.698786][ T32] ? __pfx_kthread+0x10/0x10 [ 361.703488][ T32] ret_from_fork_asm+0x1a/0x30 [ 361.708363][ T32] [ 361.711764][ T32] Kernel Offset: disabled [ 361.716179][ T32] Rebooting in 86400 seconds..