last executing test programs: 8.811295307s ago: executing program 4 (id=24545): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x10040) socket$netlink(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x14) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 5.573584263s ago: executing program 2 (id=24555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000003, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x3, 0x1, 0x3, 0x8, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) 5.558255344s ago: executing program 3 (id=24556): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000"], 0x0}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4004"], 0x7) 5.458308443s ago: executing program 4 (id=24557): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a", 0x7d}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.390161176s ago: executing program 2 (id=24558): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7d, 0x25, 0x1, 0x60, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback={0x0, 0x460c6}, 0x1, 0x20, 0x258d, 0x200002}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000884dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a46a3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0300000000000000e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ee110", 0xd8}], 0x1}, 0x60044084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="1bc942bd74", 0x5}], 0x1, &(0x7f00000000c0)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}], 0x18, 0x40044}}], 0x1, 0x20008801) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req={0xad, 0x7, 0xfffffffa, 0x9}, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c55}, 0x800) 5.255588106s ago: executing program 0 (id=24559): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f", 0x91}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a", 0x7d}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.426345441s ago: executing program 2 (id=24560): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000035c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket(0x14, 0x2, 0x4) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x48, 0x1402, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x400461f5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xffffffff, 0xb, 0xffff0df6, 0x808, 0xffffffffffffffff, 0x2, '\x00', r8, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x8}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x27, 0xe, 0x55, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000080)=r10}, 0x20) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000001c0)=0x400) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b95380000000003000600000000000200000000000000000900000000000002"], 0x70}, 0x1, 0x7}, 0x4040) getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f0000001080)=""/4084, &(0x7f0000001040)=0xff4) 2.396200968s ago: executing program 0 (id=24561): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0xffffff00, 'veth0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x89, 0x6, 0x14}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x6, 0x3, 'pptp\x00', {0x760}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x11}}, @common=@inet=@set2={{0x28}, {{0x1, 0x6, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10000, 0x2, 'syz1\x00', {0xe0000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x8, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ni={0x94578a1f8aecba02, 0x0, 0x0, 0xffff, 0x1, 0x596}}}}}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in6=@loopback, @in=@broadcast, 0x0, 0xd, 0x400, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x101, 0x0, 0x2}, {0x0, 0x1765, 0x4000000000}, 0x2, 0x1000000, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@private=0xa010101, 0x0, 0x2b}, 0x2, @in=@local, 0x0, 0x4, 0x0, 0x0, 0x4, 0x7f}, {{@in6=@private2, 0x4d3, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x1, 0xbffffffe}]}]}, 0x13c}}, 0x10) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="480000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="21000000200000002800128008000100687372001c00028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB="0d08000000000200"], 0x48}}, 0x0) 2.337200167s ago: executing program 4 (id=24563): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x80, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 2.298534868s ago: executing program 3 (id=24564): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67200000000000150600000fff070067070000200000006a0200000ee60000bf250000000000003d3500"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.197198929s ago: executing program 1 (id=24565): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}}, 0x8000) 1.987415163s ago: executing program 3 (id=24566): getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24002805}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@sndrcv={0x30, 0x84, 0x1, {0xb, 0xc2, 0x5, 0x5, 0x83, 0x0, 0x467b7286, 0x200, r2}}], 0x30, 0x4001}], 0x1, 0x11) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) 1.986608988s ago: executing program 0 (id=24567): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000c058) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4, @ANYBLOB='p'], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.901555562s ago: executing program 1 (id=24568): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a86", 0x28}], 0x2}], 0x1, 0x40800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20088814}, 0x0) 1.823116775s ago: executing program 4 (id=24569): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0xffffff00, 'veth0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x89, 0x6, 0x14}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x6, 0x3, 'pptp\x00', {0x760}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x11}}, @common=@inet=@set2={{0x28}, {{0x1, 0x6, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10000, 0x2, 'syz1\x00', {0xe0000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x8, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ni={0x94578a1f8aecba02, 0x0, 0x0, 0xffff, 0x1, 0x596}}}}}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in6=@loopback, @in=@broadcast, 0x0, 0xd, 0x400, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x101, 0x0, 0x2}, {0x0, 0x1765, 0x4000000000}, 0x2, 0x1000000, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@private=0xa010101, 0x0, 0x2b}, 0x2, @in=@local, 0x0, 0x4, 0x0, 0x0, 0x4, 0x7f}, {{@in6=@private2, 0x4d3, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x1, 0xbffffffe}]}]}, 0x13c}}, 0x10) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000200000002800128008000100687372001c000280080001", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB="0d08000000000200"], 0x48}}, 0x0) 1.817771198s ago: executing program 0 (id=24570): socket$inet6_sctp(0xa, 0x4, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0xd0, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.755110813s ago: executing program 1 (id=24571): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x40011) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 1.432837676s ago: executing program 4 (id=24572): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42", 0x8c}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a", 0x7d}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.290393006s ago: executing program 2 (id=24573): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 1.260037318s ago: executing program 4 (id=24574): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000"], 0x0}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4004"], 0x7) 1.029506907s ago: executing program 3 (id=24575): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000080)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) 895.347122ms ago: executing program 3 (id=24576): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1802000087cd000000000000000000f085"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 795.779093ms ago: executing program 1 (id=24577): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000040)=0x2) 741.589923ms ago: executing program 0 (id=24578): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0xffffff00, 'veth0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x89, 0x6, 0x14}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x6, 0x3, 'pptp\x00', {0x760}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x11}}, @common=@inet=@set2={{0x28}, {{0x1, 0x6, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10000, 0x2, 'syz1\x00', {0xe0000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x8, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ni={0x94578a1f8aecba02, 0x0, 0x0, 0xffff, 0x1, 0x596}}}}}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in6=@loopback, @in=@broadcast, 0x0, 0xd, 0x400, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x101, 0x0, 0x2}, {0x0, 0x1765, 0x4000000000}, 0x2, 0x1000000, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@private=0xa010101, 0x0, 0x2b}, 0x2, @in=@local, 0x0, 0x4, 0x0, 0x0, 0x4, 0x7f}, {{@in6=@private2, 0x4d3, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x1, 0xbffffffe}]}]}, 0x13c}}, 0x10) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="480000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="21000000200000002800128008000100687372001c00028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB="0d08000000000200"], 0x48}}, 0x0) 545.404343ms ago: executing program 0 (id=24579): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424", 0x73}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1", 0x59}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 310.604106ms ago: executing program 2 (id=24580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 309.755246ms ago: executing program 1 (id=24581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x3ffe, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0xff, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x1, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xb, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x3ffe, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 209.795331ms ago: executing program 2 (id=24582): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1", 0x82}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4", 0xb4}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489", 0xa4}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x0, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 117.706772ms ago: executing program 1 (id=24583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'ip6_vti0\x00', &(0x7f0000000b00)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0x1000, 0x0, @local, @loopback, 0x7, 0x1, 0x2, 0x1}}) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 3 (id=24584): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4", 0xb4}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4", 0x7b}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x0, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): ror on dev nbd7, logical block 2, async page read [ 1525.468137][T26999] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.487485][T26999] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1525.507744][T26999] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.528823][T26999] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1525.558781][T26999] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.583605][T26999] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1525.595988][T26999] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.605903][T26999] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1525.629140][T26999] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.650053][T26999] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1525.673218][T26999] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.691746][T26999] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1525.704620][T26999] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1525.714157][T26999] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1525.737936][T26999] ldm_validate_partition_table(): Disk read failed. [ 1525.758729][T26999] Dev nbd7: unable to read RDB block 0 [ 1525.788696][T26999] nbd7: unable to read partition table [ 1525.841883][T26999] ldm_validate_partition_table(): Disk read failed. [ 1525.861901][T26999] Dev nbd7: unable to read RDB block 0 [ 1525.886252][T26999] nbd7: unable to read partition table [ 1525.924534][T27017] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1525.948586][T27017] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1526.347666][T27039] syzkaller0: entered promiscuous mode [ 1526.353530][T27039] syzkaller0: entered allmulticast mode [ 1526.577041][T27049] netem: change failed [ 1527.434032][T27096] syzkaller0: entered promiscuous mode [ 1527.461847][T27099] xt_hashlimit: size too large, truncated to 1048576 [ 1527.469460][T27096] syzkaller0: entered allmulticast mode [ 1528.826235][T27174] __nla_validate_parse: 170 callbacks suppressed [ 1528.826259][T27174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21656'. [ 1529.017763][T27177] xt_hashlimit: size too large, truncated to 1048576 [ 1529.794067][T27208] lo speed is unknown, defaulting to 1000 [ 1529.827726][T27208] lo speed is unknown, defaulting to 1000 [ 1530.387981][T27232] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21676'. [ 1530.530832][T27238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21678'. [ 1530.867294][T27250] xt_hashlimit: size too large, truncated to 1048576 [ 1531.467031][T27273] veth43: left allmulticast mode [ 1531.488456][T27273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21689'. [ 1531.681785][T27276] lo speed is unknown, defaulting to 1000 [ 1531.708149][T27276] lo speed is unknown, defaulting to 1000 [ 1532.546381][T27318] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21703'. [ 1532.922832][T27330] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21707'. [ 1533.167479][T27344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21713'. [ 1533.222743][T27346] lo speed is unknown, defaulting to 1000 [ 1533.237984][T27346] lo speed is unknown, defaulting to 1000 [ 1533.331237][T27353] netlink: 'syz.1.21715': attribute type 4 has an invalid length. [ 1533.645139][T27366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21720'. [ 1534.234554][T27386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21726'. [ 1534.288426][T27392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21729'. [ 1534.304913][T27390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21728'. [ 1534.311569][T27392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21729'. [ 1534.342707][T27392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21729'. [ 1534.385199][T27392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21729'. [ 1534.406746][T27392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21729'. [ 1534.443774][T27401] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21730'. [ 1534.454522][T27392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21729'. [ 1534.466173][T27392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21729'. [ 1534.732990][T27406] netlink: 'syz.3.21732': attribute type 1 has an invalid length. [ 1535.132328][T27417] veth45: entered allmulticast mode [ 1535.176905][T27417] bond23: (slave veth45): Enslaving as a backup interface with a down link [ 1535.266052][T27419] lo speed is unknown, defaulting to 1000 [ 1535.289483][T27419] lo speed is unknown, defaulting to 1000 [ 1535.378130][T27433] veth45: left allmulticast mode [ 1535.706173][T27448] hsr_slave_0: left promiscuous mode [ 1535.716445][T27448] hsr_slave_1: left promiscuous mode [ 1536.628096][T27479] xt_hashlimit: size too large, truncated to 1048576 [ 1537.255987][T27517] netlink: 'syz.3.21775': attribute type 1 has an invalid length. [ 1537.326854][T27517] veth47: entered allmulticast mode [ 1537.338023][T27517] bond24: (slave veth47): Enslaving as a backup interface with a down link [ 1537.942320][T27544] xt_hashlimit: size too large, truncated to 1048576 [ 1538.115139][T27552] netlink: 'syz.3.21786': attribute type 1 has an invalid length. [ 1538.293388][T27552] veth49: entered allmulticast mode [ 1538.348535][T27552] bond25: (slave veth49): Enslaving as a backup interface with a down link [ 1538.532582][T27574] veth47: left allmulticast mode [ 1538.565161][T27574] veth49: left allmulticast mode [ 1539.252060][T27611] __nla_validate_parse: 210 callbacks suppressed [ 1539.252086][T27611] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21804'. [ 1539.464787][T27618] xt_hashlimit: size too large, truncated to 1048576 [ 1539.919546][T27631] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21812'. [ 1539.969229][T27633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21813'. [ 1540.003629][T27633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21813'. [ 1540.022814][T27633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21813'. [ 1540.047651][T27633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21813'. [ 1540.068747][T27633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21813'. [ 1540.095271][T27633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21813'. [ 1540.115088][T27633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21813'. [ 1540.125747][T27633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21813'. [ 1540.216905][T27637] lo speed is unknown, defaulting to 1000 [ 1540.310848][T27637] lo speed is unknown, defaulting to 1000 [ 1540.991925][T27679] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1541.001718][T27679] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1541.924192][T27716] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1541.950401][T27716] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1542.423541][T27746] lo speed is unknown, defaulting to 1000 [ 1542.434172][T27746] lo speed is unknown, defaulting to 1000 [ 1543.052005][T27773] netlink: 'syz.0.21863': attribute type 1 has an invalid length. [ 1543.440279][T27777] veth23: entered allmulticast mode [ 1543.449106][T27777] bond22: (slave veth23): Enslaving as a backup interface with a down link [ 1544.250647][T27826] netlink: 'syz.3.21883': attribute type 1 has an invalid length. [ 1544.358911][T27826] veth51: entered allmulticast mode [ 1544.421370][T27826] bond26: (slave veth51): Enslaving as a backup interface with a down link [ 1544.458087][T27836] __nla_validate_parse: 43 callbacks suppressed [ 1544.458111][T27836] netlink: 48 bytes leftover after parsing attributes in process `syz.4.21885'. [ 1544.747362][T27854] netlink: 132 bytes leftover after parsing attributes in process `syz.0.21893'. [ 1544.866187][T27859] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1544.884494][T27859] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1544.903458][T27859] veth51: left allmulticast mode [ 1544.931754][T27859] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21896'. [ 1545.381477][T27891] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21907'. [ 1545.592964][T27900] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 1545.601786][T27900] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1545.620698][T27898] veth23: left allmulticast mode [ 1545.671796][T27898] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21910'. [ 1545.773673][T27910] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21916'. [ 1546.182903][T27936] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21923'. [ 1546.364019][T27943] syzkaller0: entered promiscuous mode [ 1546.380254][T27943] syzkaller0: entered allmulticast mode [ 1546.752907][T27961] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21932'. [ 1547.052566][T27984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21939'. [ 1547.507619][T28006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21946'. [ 1547.598473][T28005] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1547.620478][T28005] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1549.563533][T28105] __nla_validate_parse: 8 callbacks suppressed [ 1549.563552][T28105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21980'. [ 1550.185687][T28126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21988'. [ 1550.363945][T28139] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21991'. [ 1550.658582][T28148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21992'. [ 1550.748276][T28153] syzkaller0: mtu greater than device maximum [ 1551.154710][T28176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22001'. [ 1551.957023][T28214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22015'. [ 1552.069374][T28217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22015'. [ 1552.325012][T28233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22021'. [ 1552.365179][T28235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22016'. [ 1552.378244][T28235] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22016'. [ 1553.207732][T28259] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap4 [ 1553.240358][T28259] batman_adv: batadv0: Adding interface: ip6gretap4 [ 1553.261219][T28259] batman_adv: batadv0: The MTU of interface ip6gretap4 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1553.300435][T28259] batman_adv: batadv0: Interface activated: ip6gretap4 [ 1553.966841][T28279] netlink: 'syz.0.22036': attribute type 3 has an invalid length. [ 1554.866067][T28306] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1554.941844][T28308] __nla_validate_parse: 222 callbacks suppressed [ 1554.941869][T28308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.22045'. [ 1555.312204][T28315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22047'. [ 1555.348119][T28317] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1555.355719][T28317] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1555.368390][T28317] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22048'. [ 1557.091726][T28284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1557.104668][T28313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22047'. [ 1557.343649][T28324] xt_hashlimit: size too large, truncated to 1048576 [ 1557.468876][T28334] netlink: 830 bytes leftover after parsing attributes in process `syz.4.22055'. [ 1557.759466][T28350] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1557.771364][T28350] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1557.780553][T28350] batman_adv: batadv0: Interface deactivated: ip6gretap4 [ 1557.814367][T28350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22059'. [ 1557.862757][T28352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22058'. [ 1557.903995][T28352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22058'. [ 1557.931829][T28352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22058'. [ 1557.958937][T28352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22058'. [ 1558.270981][T28364] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1558.285542][T28364] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1559.186140][T28395] xt_hashlimit: size too large, truncated to 1048576 [ 1560.345754][T28437] __nla_validate_parse: 9 callbacks suppressed [ 1560.345784][T28437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22083'. [ 1560.700257][T28446] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22086'. [ 1561.150866][T28460] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22090'. [ 1561.168814][T28463] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22092'. [ 1561.405217][T28469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22094'. [ 1561.770523][T28483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22098'. [ 1561.805085][T28483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22098'. [ 1562.134152][T28493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22102'. [ 1562.336588][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22102'. [ 1562.544008][T28507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22104'. [ 1564.152140][T28558] netlink: 'syz.1.22118': attribute type 1 has an invalid length. [ 1564.290493][T28558] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1564.436614][T28561] bond20: (slave ip6erspan0): making interface the new active one [ 1564.462377][T28561] bond20: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1564.998432][T28579] netlink: 'syz.0.22125': attribute type 1 has an invalid length. [ 1565.141412][T28579] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1565.149170][T28585] netlink: 'syz.2.22127': attribute type 7 has an invalid length. [ 1565.263805][T28585] erspan0: entered promiscuous mode [ 1565.287866][T28585] erspan0: left promiscuous mode [ 1565.883917][T28605] __nla_validate_parse: 10 callbacks suppressed [ 1565.883940][T28605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22133'. [ 1566.170203][T28611] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22135'. [ 1566.491324][T28629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22139'. [ 1566.658659][T28631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22139'. [ 1566.896891][T28651] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22145'. [ 1567.050516][T28657] netlink: 'syz.4.22148': attribute type 39 has an invalid length. [ 1567.299103][T28661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22149'. [ 1567.441714][T28670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22153'. [ 1567.762361][ T4119] nci: nci_rsp_packet: unsupported rsp opcode 0xf35 [ 1567.912044][T28697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22159'. [ 1567.961365][T28697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22159'. [ 1567.964320][T28699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22160'. [ 1570.562491][T28679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1571.002933][T28739] __nla_validate_parse: 2 callbacks suppressed [ 1571.002949][T28739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22169'. [ 1571.683759][T28741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22171'. [ 1571.693870][T28741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22171'. [ 1571.847361][T28743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22172'. [ 1571.936843][T28745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22172'. [ 1572.304992][T28750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22174'. [ 1573.787616][T28720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1573.801677][T28734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22169'. [ 1574.097495][T28756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22175'. [ 1574.405633][T28766] syzkaller1: entered promiscuous mode [ 1574.428173][T28766] syzkaller1: entered allmulticast mode [ 1574.544182][T28772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22182'. [ 1574.570825][T28772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22182'. [ 1575.622187][T28788] syzkaller1: entered promiscuous mode [ 1575.653921][T28788] syzkaller1: entered allmulticast mode [ 1576.453164][T28829] lo speed is unknown, defaulting to 1000 [ 1576.476940][T28829] lo speed is unknown, defaulting to 1000 [ 1577.030031][T28839] __nla_validate_parse: 10 callbacks suppressed [ 1577.030053][T28839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22197'. [ 1577.419085][T28844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22199'. [ 1577.502213][T28844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22199'. [ 1578.020073][T28854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22201'. [ 1578.907216][T28866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22204'. [ 1579.011596][T28868] syzkaller1: entered promiscuous mode [ 1579.035632][T28868] syzkaller1: entered allmulticast mode [ 1579.969115][T28891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22211'. [ 1581.504941][T28932] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22222'. [ 1581.815008][T28938] netlink: 'syz.1.22224': attribute type 1 has an invalid length. [ 1581.840332][T28938] netlink: 'syz.1.22224': attribute type 4 has an invalid length. [ 1581.865566][T28938] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.22224'. [ 1583.069431][T28967] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22234'. [ 1583.318770][T28973] syzkaller1: entered promiscuous mode [ 1583.338974][T28973] syzkaller1: entered allmulticast mode [ 1583.386922][T28978] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22239'. [ 1583.851517][T28998] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 1583.871247][T28998] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1584.457195][T29013] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22251'. [ 1584.598260][T29018] xt_hashlimit: size too large, truncated to 1048576 [ 1586.291982][T29076] ip6gre2: entered promiscuous mode [ 1586.297517][T29076] ip6gre2: entered allmulticast mode [ 1587.845021][T29111] xt_hashlimit: size too large, truncated to 1048576 [ 1588.638351][T29128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22274'. [ 1588.660873][T29128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22274'. [ 1589.019428][T29062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1589.714363][T29150] netlink: 180 bytes leftover after parsing attributes in process `syz.4.22283'. [ 1589.946588][T29162] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22286'. [ 1590.512988][T29180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22290'. [ 1590.660527][T29186] xt_hashlimit: size too large, truncated to 1048576 [ 1591.827174][T29198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1592.104607][T29228] netlink: 220 bytes leftover after parsing attributes in process `syz.4.22306'. [ 1592.115845][T29228] netlink: 'syz.4.22306': attribute type 2 has an invalid length. [ 1592.147119][T29223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22302'. [ 1592.160542][T29231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22305'. [ 1592.178257][T29231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22305'. [ 1592.449068][T29245] RDS: rds_bind could not find a transport for ::a00:0:0:0, load rds_tcp or rds_rdma? [ 1592.469310][T29244] xt_hashlimit: size too large, truncated to 1048576 [ 1592.580464][T29241] lo speed is unknown, defaulting to 1000 [ 1592.626752][T29241] lo speed is unknown, defaulting to 1000 [ 1592.735583][T29254] lo speed is unknown, defaulting to 1000 [ 1593.364728][T29254] lo speed is unknown, defaulting to 1000 [ 1593.448055][T29267] xt_hashlimit: size too large, truncated to 1048576 [ 1593.506610][T29268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22315'. [ 1594.104505][T29280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22318'. [ 1594.186174][T29280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22318'. [ 1594.309732][T29282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22320'. [ 1594.595729][T29287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22322'. [ 1594.874888][T29296] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1594.920648][T29296] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1595.052935][T29299] xt_hashlimit: size too large, truncated to 1048576 [ 1595.799527][T29324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22332'. [ 1595.867484][T29324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22332'. [ 1595.898191][T29328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22334'. [ 1596.075788][T29335] netlink: 'syz.2.22338': attribute type 27 has an invalid length. [ 1596.085339][T29335] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1596.093208][T29335] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1596.168054][T29335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1596.181808][T29335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.559005][T29335] veth0_vlan: left promiscuous mode [ 1596.589513][T29335] veth0_vlan: entered promiscuous mode [ 1596.671191][T29335] tipc: Resetting bearer [ 1596.746379][T29335] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1597.008401][T13509] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.036591][T13509] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.216399][T13509] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.239102][T13509] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.272700][T29344] lo speed is unknown, defaulting to 1000 [ 1597.303387][T29344] lo speed is unknown, defaulting to 1000 [ 1597.682683][T29366] xt_hashlimit: size too large, truncated to 1048576 [ 1597.833391][T29371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22347'. [ 1598.286628][T29383] syzkaller1: entered promiscuous mode [ 1598.304892][T29383] syzkaller1: entered allmulticast mode [ 1598.703511][T29396] ip6gre2: left promiscuous mode [ 1598.722848][T29396] ip6gre2: left allmulticast mode [ 1598.763143][T29398] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22355'. [ 1599.722144][T29424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22360'. [ 1599.979367][T29432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22363'. [ 1600.154662][T29439] xt_hashlimit: size too large, truncated to 1048576 [ 1600.347606][T29450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22369'. [ 1600.750925][T29470] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1600.790342][T29470] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1600.819201][T29470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22374'. [ 1601.006848][T29477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22376'. [ 1601.204254][T29490] xt_hashlimit: size too large, truncated to 1048576 [ 1601.245202][T29493] netlink: 'syz.1.22377': attribute type 27 has an invalid length. [ 1601.560353][T29509] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22383'. [ 1602.251030][T29476] tipc: Resetting bearer [ 1602.406502][T29500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1602.445523][T29500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1602.546149][T29500] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1602.594711][ T48] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.630218][ T48] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.715609][T10392] lo speed is unknown, defaulting to 1000 [ 1602.725059][T13509] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.742836][T10392] syz2: Port: 1 Link ACTIVE [ 1602.753781][T13509] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.785915][T29510] lo speed is unknown, defaulting to 1000 [ 1602.843612][T29534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22388'. [ 1602.853682][T29510] lo speed is unknown, defaulting to 1000 [ 1602.948457][T29540] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22389'. [ 1603.034209][T29545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22391'. [ 1604.124040][T29585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22399'. [ 1604.964032][T29614] netlink: 'syz.4.22408': attribute type 4 has an invalid length. [ 1605.009507][T29611] netlink: 'syz.4.22408': attribute type 4 has an invalid length. [ 1605.421226][T29627] __nla_validate_parse: 2 callbacks suppressed [ 1605.421249][T29627] netlink: 60 bytes leftover after parsing attributes in process `syz.4.22411'. [ 1605.759369][T29639] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22415'. [ 1606.294102][T29662] netlink: 'syz.4.22422': attribute type 1 has an invalid length. [ 1606.634826][T29662] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1608.417733][T29729] openvswitch: netlink: Key type 310 is out of range max 32 [ 1608.635372][T29735] tipc: Enabling of bearer rejected, already enabled [ 1608.879143][T29750] netlink: 'syz.1.22445': attribute type 27 has an invalid length. [ 1609.322420][T16193] lo speed is unknown, defaulting to 1000 [ 1609.377528][T29757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1609.392189][T29757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1609.486794][T29757] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1609.504235][T29763] netlink: 'syz.0.22447': attribute type 4 has an invalid length. [ 1609.547043][T16193] lo speed is unknown, defaulting to 1000 [ 1609.655123][T29772] lo speed is unknown, defaulting to 1000 [ 1609.693012][T29772] lo speed is unknown, defaulting to 1000 [ 1610.047912][T29797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22456'. [ 1610.826438][T29827] lo speed is unknown, defaulting to 1000 [ 1610.840025][T29827] lo speed is unknown, defaulting to 1000 [ 1613.064892][T29803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1613.317079][T29849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22467'. [ 1613.451968][T29849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22467'. [ 1613.742580][T29867] netlink: 'syz.0.22473': attribute type 27 has an invalid length. [ 1613.764903][T29867] gretap0: left promiscuous mode [ 1613.817512][T29867] 8021q: adding VLAN 0 to HW filter on device team0 [ 1614.048751][T29867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1614.102364][T29867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1614.197139][T29867] A link change request failed with some changes committed already. Interface ªªªªª may have been left with an inconsistent configuration, please check. [ 1614.302031][T16453] syz1: Port: 1 Link ACTIVE [ 1614.406395][T29870] lo speed is unknown, defaulting to 1000 [ 1614.416816][T29870] lo speed is unknown, defaulting to 1000 [ 1615.198289][T29909] lo speed is unknown, defaulting to 1000 [ 1615.421536][T29912] lo speed is unknown, defaulting to 1000 [ 1615.443747][T29909] lo speed is unknown, defaulting to 1000 [ 1616.217622][T29912] lo speed is unknown, defaulting to 1000 [ 1617.964936][T29950] netlink: 'syz.4.22495': attribute type 8 has an invalid length. [ 1617.976411][T29950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22495'. [ 1618.006943][T29950] veth1_to_team: entered promiscuous mode [ 1618.016545][T29950] debugfs: 'hsr0' already exists in 'hsr' [ 1618.023661][T29950] Cannot create hsr debugfs directory [ 1618.029208][T29950] hsr0: entered promiscuous mode [ 1618.629934][T29969] xt_hashlimit: size too large, truncated to 1048576 [ 1618.693455][T29973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22501'. [ 1618.843018][T29976] lo speed is unknown, defaulting to 1000 [ 1618.887552][T29976] lo speed is unknown, defaulting to 1000 [ 1619.027719][T29990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22504'. [ 1619.051140][T29988] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1619.090257][T29988] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1619.364014][T29995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22506'. [ 1619.438916][T29999] netlink: 'syz.2.22508': attribute type 1 has an invalid length. [ 1619.599175][T29996] lo speed is unknown, defaulting to 1000 [ 1619.682964][T29999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22508'. [ 1619.753334][T30011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22510'. [ 1619.795589][T30000] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1619.826003][T30000] bond22: (slave bond23): making interface the new active one [ 1619.835856][T30000] bond22: (slave bond23): Enslaving as an active interface with an up link [ 1619.863477][T29999] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1619.882724][T30013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22509'. [ 1619.921414][T30013] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22509'. [ 1619.947354][T30015] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.22509'. [ 1619.956809][T30013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22509'. [ 1619.957090][T30013] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22509'. [ 1620.341496][T29996] lo speed is unknown, defaulting to 1000 [ 1621.564635][T30035] netlink: 'syz.2.22516': attribute type 4 has an invalid length. [ 1621.737030][T30037] netlink: 'syz.2.22517': attribute type 3 has an invalid length. [ 1623.854005][T30089] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1623.888491][T30089] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1623.898806][T30092] netlink: 'syz.2.22533': attribute type 27 has an invalid length. [ 1623.913983][T30089] __nla_validate_parse: 36 callbacks suppressed [ 1623.914005][T30089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22531'. [ 1624.176353][T30095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1624.228522][T30095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1624.697911][T30095] veth0_vlan: left promiscuous mode [ 1624.747893][T30095] veth0_vlan: entered promiscuous mode [ 1624.792177][T30095] tipc: Resetting bearer [ 1624.926428][T30095] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1625.116109][T30101] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1625.141412][T13509] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.162376][T30101] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1625.181771][T13509] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.226771][T13509] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.245714][T30101] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1625.276360][T13509] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.398594][T30102] lo speed is unknown, defaulting to 1000 [ 1625.563802][T30102] lo speed is unknown, defaulting to 1000 [ 1625.596205][T30133] lo speed is unknown, defaulting to 1000 [ 1625.756067][T30140] syzkaller1: entered promiscuous mode [ 1625.767268][T30140] syzkaller1: entered allmulticast mode [ 1625.852641][T30144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22543'. [ 1626.384849][T30133] lo speed is unknown, defaulting to 1000 [ 1626.628345][T30167] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22550'. [ 1627.046164][T16412] lo speed is unknown, defaulting to 1000 [ 1627.060287][T16412] syz2: Port: 1 Link DOWN [ 1627.943986][T30195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22556'. [ 1627.964696][T30195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22556'. [ 1628.346143][T30206] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 1628.439244][T30203] syzkaller0: entered promiscuous mode [ 1628.459651][T30203] syzkaller0: entered allmulticast mode [ 1633.116738][T30225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22563'. [ 1633.153273][T30225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22563'. [ 1633.162821][T13509] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1633.171245][T13509] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1633.190792][T13509] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1633.216835][T13509] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1633.379650][T30235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22566'. [ 1633.447820][T30239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22567'. [ 1633.451357][T30235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22566'. [ 1633.467628][T30239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22567'. [ 1634.012965][T30257] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 1634.053603][T30257] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1634.409435][T30275] netlink: 'syz.4.22575': attribute type 27 has an invalid length. [ 1634.632329][T30275] hsr0: left promiscuous mode [ 1635.037252][T30278] 8021q: adding VLAN 0 to HW filter on device  [ 1635.058828][T30278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1635.205333][T30278] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1635.389087][ T4123] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.547233][T30307] netlink: 550 bytes leftover after parsing attributes in process `syz.2.22582'. [ 1640.032583][T30304] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1640.040269][T30304] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1640.060341][ T4123] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.068930][ T4123] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.103569][ T4123] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.273029][T30321] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22586'. [ 1640.607671][T30338] syzkaller0: entered promiscuous mode [ 1640.625236][T30338] syzkaller0: entered allmulticast mode [ 1640.654575][T30340] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.22588'. [ 1641.697783][T30380] netlink: 'syz.0.22598': attribute type 27 has an invalid length. [ 1641.734571][ T4943] block nbd8: Receive control failed (result -32) [ 1642.193676][T30381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1642.755547][T30381] A link change request failed with some changes committed already. Interface ªªªªª may have been left with an inconsistent configuration, please check. [ 1643.012740][T30390] lo speed is unknown, defaulting to 1000 [ 1643.083922][T30390] lo speed is unknown, defaulting to 1000 [ 1643.123979][T30414] netlink: 'syz.3.22603': attribute type 1 has an invalid length. [ 1643.221325][T30414] bond27: entered promiscuous mode [ 1643.227368][T30414] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1643.731910][T30414] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1643.751310][T30414] bond27: (slave vti1): The slave device specified does not support setting the MAC address [ 1643.773529][T30414] bond27: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 1643.818532][T30414] bond27: (slave vti1): making interface the new active one [ 1643.845171][T30414] vti1: entered promiscuous mode [ 1643.866142][T30414] bond27: (slave vti1): Enslaving as an active interface with an up link [ 1643.892143][T30427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22606'. [ 1643.939197][T30427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22606'. [ 1643.950280][T30427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22606'. [ 1643.981709][T30427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22606'. [ 1644.832020][T30441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22610'. [ 1645.663789][T30450] netlink: 'syz.1.22612': attribute type 1 has an invalid length. [ 1646.792902][T30481] netlink: 'syz.4.22617': attribute type 83 has an invalid length. [ 1647.702330][T30496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22622'. [ 1648.098727][T30511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22624'. [ 1648.962617][T30538] netlink: 'syz.1.22634': attribute type 27 has an invalid length. [ 1649.036106][T30538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1649.053294][T30538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1649.257946][T30538] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1649.277986][ T5358] lo speed is unknown, defaulting to 1000 [ 1649.291013][ T5358] syz2: Port: 1 Link ACTIVE [ 1649.478343][T30550] lo speed is unknown, defaulting to 1000 [ 1649.490271][T30550] lo speed is unknown, defaulting to 1000 [ 1649.769267][T30565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22638'. [ 1650.787871][T30590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22645'. [ 1651.320217][T30599] netlink: 148 bytes leftover after parsing attributes in process `syz.0.22647'. [ 1651.349800][T30599] netlink: 116 bytes leftover after parsing attributes in process `syz.0.22647'. [ 1651.370144][T30599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22647'. [ 1651.506078][T30602] netlink: 'syz.4.22648': attribute type 14 has an invalid length. [ 1651.554924][T30602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22648'. [ 1651.591136][T30602] bond0: option xmit_hash_policy: invalid value (191) [ 1651.856605][T30614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22651'. [ 1652.268558][T30617] xt_hashlimit: size too large, truncated to 1048576 [ 1652.579496][T30625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22654'. [ 1652.742412][T30627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22655'. [ 1653.455192][T30649] netlink: 'syz.1.22661': attribute type 1 has an invalid length. [ 1653.528643][T30649] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1653.603282][T30649] bridge15: entered promiscuous mode [ 1653.608830][T30649] bridge15: entered allmulticast mode [ 1654.013711][T30670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22668'. [ 1654.082340][T30664] lo speed is unknown, defaulting to 1000 [ 1654.110297][T30664] lo speed is unknown, defaulting to 1000 [ 1654.477865][T30681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22671'. [ 1655.485938][ T5358] syz1: Port: 1 Link DOWN [ 1655.555008][T30691] lo speed is unknown, defaulting to 1000 [ 1655.668819][T30691] lo speed is unknown, defaulting to 1000 [ 1655.732305][T30708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22677'. [ 1655.764798][T30708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22677'. [ 1656.097117][T30719] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22680'. [ 1656.225567][T30726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22682'. [ 1657.194733][T30749] lo speed is unknown, defaulting to 1000 [ 1657.283239][T30749] lo speed is unknown, defaulting to 1000 [ 1657.488315][T30760] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22690'. [ 1657.564886][T30760] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22690'. [ 1657.586304][T30760] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22690'. [ 1657.847721][T30766] syzkaller1: entered promiscuous mode [ 1657.858613][T30766] syzkaller1: entered allmulticast mode [ 1657.988696][T30775] syzkaller0: entered promiscuous mode [ 1658.000381][T30775] syzkaller0: entered allmulticast mode [ 1658.158504][T30781] __nla_validate_parse: 32 callbacks suppressed [ 1658.158526][T30781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22695'. [ 1658.560899][T30791] netlink: 'syz.3.22699': attribute type 1 has an invalid length. [ 1658.751032][T30791] bond28: entered promiscuous mode [ 1658.771301][T30791] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1658.871048][T30793] macvtap1: entered allmulticast mode [ 1658.976146][T30797] bond28: (slave bridge18): making interface the new active one [ 1658.985466][T30797] bridge18: entered promiscuous mode [ 1658.997978][T30797] bond28: (slave bridge18): Enslaving as an active interface with an up link [ 1659.360002][T30811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22704'. [ 1659.389400][T30811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22704'. [ 1659.425042][T30811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22704'. [ 1659.448099][T30811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22704'. [ 1659.481664][T30811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22704'. [ 1659.498893][T30811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22704'. [ 1659.542597][T30811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22704'. [ 1659.591208][T30811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22704'. [ 1659.620391][T30811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22704'. [ 1660.068301][T30811] tipc: Resetting bearer [ 1660.162457][T30823] bridge0: port 1(erspan0) entered blocking state [ 1660.176074][T30823] bridge0: port 1(erspan0) entered disabled state [ 1660.184189][T30823] erspan0: entered allmulticast mode [ 1660.211570][T30823] erspan0: entered promiscuous mode [ 1660.241440][T30827] erspan0: left allmulticast mode [ 1660.258573][T30827] erspan0: left promiscuous mode [ 1660.271811][T30827] bridge0: port 1(erspan0) entered disabled state [ 1660.326826][ T4111] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.345870][ T4111] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.366947][ T4111] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.455034][T30834] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1660.470241][T30834] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1660.482024][ T4111] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.658589][T30855] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1660.687920][T30855] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1660.853958][T30863] tipc: Enabling of bearer rejected, already enabled [ 1660.876745][T30863] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 1660.892880][T30863] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1661.184586][T30879] tipc: Enabling of bearer rejected, already enabled [ 1661.851928][T30903] tipc: Enabling of bearer rejected, already enabled [ 1662.105899][T30913] lo speed is unknown, defaulting to 1000 [ 1662.156868][T30913] lo speed is unknown, defaulting to 1000 [ 1663.422639][T30955] __nla_validate_parse: 161 callbacks suppressed [ 1663.422661][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22749'. [ 1663.524597][T30947] tipc: Enabled bearer , priority 0 [ 1663.535870][T30952] syzkaller0: entered promiscuous mode [ 1663.542165][T30952] syzkaller0: entered allmulticast mode [ 1663.555772][T30957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22750'. [ 1663.668787][T30952] tipc: Resetting bearer [ 1663.695833][T30946] tipc: Resetting bearer [ 1663.810442][T30946] tipc: Disabling bearer [ 1663.925597][T30964] tipc: Enabling of bearer rejected, already enabled [ 1664.177452][T30976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22755'. [ 1664.421941][T30991] tipc: Enabling of bearer rejected, already enabled [ 1664.934880][T31013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22767'. [ 1665.346303][T31021] lo speed is unknown, defaulting to 1000 [ 1665.369017][T31024] No such timeout policy "syz0" [ 1665.402289][T31021] lo speed is unknown, defaulting to 1000 [ 1665.492925][T31031] gretap0: entered promiscuous mode [ 1665.514054][T31031] vlan2: entered promiscuous mode [ 1665.618132][T31039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22772'. [ 1666.096409][T31050] netlink: 'syz.4.22775': attribute type 1 has an invalid length. [ 1666.233324][T31055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22775'. [ 1666.361933][T31054] bond33: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1666.387685][T31054] bond33: (slave vxcan3): Error -95 calling set_mac_address [ 1666.592262][T31068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22777'. [ 1666.635862][T31055] bond33: (slave bridge16): Enslaving as an active interface with a down link [ 1666.682056][T31050] macvlan0: entered promiscuous mode [ 1666.691073][T31050] macvlan0: entered allmulticast mode [ 1666.698087][T31050] bond33: entered promiscuous mode [ 1666.705505][T31050] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1666.716478][T31050] bond33: left promiscuous mode [ 1667.262508][T31082] syzkaller0: entered promiscuous mode [ 1667.299730][T31082] syzkaller0: entered allmulticast mode [ 1667.330702][T31084] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22783'. [ 1667.441306][T31084] nbd: socks must be embedded in a SOCK_ITEM attr [ 1667.822297][T31097] lo speed is unknown, defaulting to 1000 [ 1667.864243][T31104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22788'. [ 1667.868196][T31097] lo speed is unknown, defaulting to 1000 [ 1668.078766][T31107] netlink: 'syz.1.22789': attribute type 1 has an invalid length. [ 1668.148373][T31107] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1668.309460][T31116] bond23: (slave veth25): Enslaving as an active interface with a down link [ 1668.374825][T31107] netlink: 14 bytes leftover after parsing attributes in process `syz.1.22789'. [ 1668.573260][T31126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22793'. [ 1668.601156][T31128] lo speed is unknown, defaulting to 1000 [ 1668.775495][T31126] bond1: entered promiscuous mode [ 1668.835945][T31126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1668.891505][T31131] bond1: (slave vti0): refused to change device type [ 1668.948640][T31128] lo speed is unknown, defaulting to 1000 [ 1671.006854][T31187] syzkaller0: entered promiscuous mode [ 1676.298846][T31230] syzkaller0: entered promiscuous mode [ 1676.323810][T31230] syzkaller0: entered allmulticast mode [ 1676.403385][T31230] tipc: Enabled bearer , priority 0 [ 1676.431448][T31228] tipc: Resetting bearer [ 1676.513399][T31228] tipc: Disabling bearer [ 1676.774323][T31245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22808'. [ 1676.911000][T31253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22808'. [ 1677.497730][T31271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22815'. [ 1677.507888][T31271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22815'. [ 1677.794851][T31284] netlink: 'syz.3.22820': attribute type 1 has an invalid length. [ 1678.043443][T31289] bond29: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1678.056069][T31289] bond29: (slave vxcan1): Error -95 calling set_mac_address [ 1678.202940][T31292] bond29: (slave gretap5): making interface the new active one [ 1678.228684][T31292] bond29: (slave gretap5): Enslaving as an active interface with an up link [ 1678.234236][T31308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22824'. [ 1678.261513][T31300] macvlan5: entered promiscuous mode [ 1678.267134][T31300] macvlan5: entered allmulticast mode [ 1678.275127][T31300] bond29: entered promiscuous mode [ 1678.281912][T31300] gretap5: entered promiscuous mode [ 1678.288746][T31300] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1678.304697][T31300] bond29: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of gretap5 [ 1678.321676][T31300] bond29: left promiscuous mode [ 1678.326845][T31300] gretap5: left promiscuous mode [ 1678.366433][T31313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22824'. [ 1678.435075][T31290] syzkaller0: entered promiscuous mode [ 1678.442621][T31290] syzkaller0: entered allmulticast mode [ 1678.728082][T31324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22826'. [ 1684.438001][T31336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22828'. [ 1684.475694][T31336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22828'. [ 1684.502345][T31336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22828'. [ 1684.626083][T31336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22828'. [ 1684.650765][T31336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22828'. [ 1684.671959][T31336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22828'. [ 1684.770369][T31336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22828'. [ 1684.802359][T31353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22831'. [ 1684.850743][T31353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22831'. [ 1684.883020][T31336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22828'. [ 1685.006625][T31360] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1685.150534][T31342] gretap5: entered promiscuous mode [ 1685.191491][T31342] batman_adv: batadv0: Adding interface: gretap5 [ 1685.244281][T31342] batman_adv: batadv0: Not using interface gretap5 (retrying later): interface not active [ 1690.456482][T31476] lo speed is unknown, defaulting to 1000 [ 1690.468767][T31476] lo speed is unknown, defaulting to 1000 [ 1690.660513][T31482] __nla_validate_parse: 38 callbacks suppressed [ 1690.660538][T31482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22864'. [ 1690.709649][T31482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22864'. [ 1690.941206][T31485] xt_hashlimit: size too large, truncated to 1048576 [ 1691.091961][T31486] lo speed is unknown, defaulting to 1000 [ 1691.112803][T31489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22866'. [ 1691.178039][T31489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22866'. [ 1691.300435][T31486] lo speed is unknown, defaulting to 1000 [ 1691.913280][T31500] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1692.344668][T31511] tipc: Enabling of bearer rejected, already enabled [ 1692.463710][T31511] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1692.775368][T31523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22875'. [ 1692.809834][T31523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22875'. [ 1693.139483][T31529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22878'. [ 1693.224130][T31529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22878'. [ 1693.495652][T31541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22881'. [ 1693.511537][T31542] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.22877'. [ 1693.646539][T31542] gretap6: entered promiscuous mode [ 1693.729618][T31542] batman_adv: batadv0: Adding interface: gretap6 [ 1693.766555][T31542] batman_adv: batadv0: The MTU of interface gretap6 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1693.863013][T31542] batman_adv: batadv0: Not using interface gretap6 (retrying later): interface not active [ 1694.232004][T31555] siw: device registration error -23 [ 1695.717277][T31599] netlink: 'syz.4.22893': attribute type 3 has an invalid length. [ 1695.743280][T31569] bridge15: left promiscuous mode [ 1695.751421][T31569] bridge15: left allmulticast mode [ 1695.763588][T16415] lo speed is unknown, defaulting to 1000 [ 1695.776992][T16415] syz2: Port: 1 Link DOWN [ 1695.982228][T31607] __nla_validate_parse: 7 callbacks suppressed [ 1695.982253][T31607] netlink: 64 bytes leftover after parsing attributes in process `syz.1.22896'. [ 1696.011772][T31605] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22894'. [ 1696.078977][T31610] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22894'. [ 1696.165023][T31605] bridge0: port 1(veth0_to_team) entered blocking state [ 1696.216298][T31605] bridge0: port 1(veth0_to_team) entered disabled state [ 1696.254480][T31605] veth0_to_team: entered allmulticast mode [ 1696.309165][T31605] veth0_to_team: entered promiscuous mode [ 1696.938610][T31627] syzkaller0: entered promiscuous mode [ 1696.954614][T31627] syzkaller0: entered allmulticast mode [ 1697.655963][T31646] syzkaller0: entered promiscuous mode [ 1697.672694][T31646] syzkaller0: entered allmulticast mode [ 1697.713929][T31646] 0: reclassify loop, rule prio 0, protocol 700 [ 1697.804507][ T29] audit: type=1800 audit(1777561983.321:29): pid=31649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.22903" name="memory.events" dev="tmpfs" ino=22830 res=0 errno=0 [ 1698.104321][T31654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22906'. [ 1698.209236][T31656] lo speed is unknown, defaulting to 1000 [ 1698.238301][T31656] lo speed is unknown, defaulting to 1000 [ 1699.510564][T31668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22909'. [ 1699.625687][T31669] netlink: 52 bytes leftover after parsing attributes in process `syz.4.22909'. [ 1699.723785][T31672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1699.731398][T31672] IPv6: NLM_F_CREATE should be set when creating new route [ 1699.738900][T31672] IPv6: NLM_F_CREATE should be set when creating new route [ 1699.746369][T31672] IPv6: NLM_F_CREATE should be set when creating new route [ 1699.777092][T31673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1700.743543][T31696] lo speed is unknown, defaulting to 1000 [ 1700.784413][T31696] lo speed is unknown, defaulting to 1000 [ 1700.932775][T31701] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1700.943201][T31701] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1700.988373][T31701] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22917'. [ 1701.192313][T31707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22919'. [ 1701.218518][T31707] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1701.415531][T13509] TC_ACT_REPEAT abuse ? [ 1701.971673][T31723] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.22921'. [ 1702.134437][T31725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22923'. [ 1702.735954][T31745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22927'. [ 1702.876472][ T4943] block nbd9: Receive control failed (result -1) [ 1703.778448][T31769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22932'. [ 1704.091925][T31775] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1704.225446][T31779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22933'. [ 1704.250425][T31779] netem: incorrect gi model size [ 1704.271062][T31779] netem: change failed [ 1704.331672][T31783] xt_hashlimit: size too large, truncated to 1048576 [ 1704.494278][T16454] lo speed is unknown, defaulting to 1000 [ 1704.822094][T31790] xt_hashlimit: size too large, truncated to 1048576 [ 1704.910865][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1704.941958][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1704.969085][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1705.028863][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1706.223246][T31792] __nla_validate_parse: 75 callbacks suppressed [ 1706.223272][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1706.256586][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1706.273252][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1706.296276][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1706.317545][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1706.339882][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1706.365395][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1706.386421][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1706.403046][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1706.419735][T31792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22939'. [ 1706.476355][T31792] tipc: Resetting bearer [ 1706.685364][T13509] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.730893][T13509] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.760667][T13509] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.789322][T31819] bond0: Removing last ns target with arp_interval on [ 1706.842886][T13509] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.978711][T31836] netlink: 'syz.1.22946': attribute type 8 has an invalid length. [ 1707.046373][T31835] sctp: [Deprecated]: syz.3.22948 (pid 31835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1707.046373][T31835] Use struct sctp_sack_info instead [ 1707.107674][T31835] sctp: [Deprecated]: syz.3.22948 (pid 31835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1707.107674][T31835] Use struct sctp_sack_info instead [ 1707.446997][T31853] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1707.662873][T31860] xt_hashlimit: size too large, truncated to 1048576 [ 1707.957071][T31878] xt_hashlimit: size too large, truncated to 1048576 [ 1707.969393][T31871] lo speed is unknown, defaulting to 1000 [ 1708.015813][T31871] lo speed is unknown, defaulting to 1000 [ 1709.013020][T31898] netlink: zone id is out of range [ 1709.042539][T31898] netlink: zone id is out of range [ 1709.074868][T31898] netlink: zone id is out of range [ 1709.116576][T31898] netlink: zone id is out of range [ 1709.200330][T31898] netlink: zone id is out of range [ 1709.216013][T31903] netlink: 'syz.1.22959': attribute type 2 has an invalid length. [ 1709.247062][T31898] netlink: zone id is out of range [ 1709.272940][T31898] netlink: zone id is out of range [ 1709.276189][T31906] netlink: 'syz.1.22959': attribute type 2 has an invalid length. [ 1709.310420][T31898] netlink: zone id is out of range [ 1709.315703][T31898] netlink: zone id is out of range [ 1709.334976][T31898] netlink: zone id is out of range [ 1710.240442][T31922] lo speed is unknown, defaulting to 1000 [ 1710.471157][T31922] lo speed is unknown, defaulting to 1000 [ 1710.908323][T31951] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1710.946036][T31951] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1711.070749][ T4943] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1711.756586][T31967] __nla_validate_parse: 111 callbacks suppressed [ 1711.756609][T31967] netlink: 52 bytes leftover after parsing attributes in process `syz.3.22968'. [ 1711.998101][T31971] xt_hashlimit: size too large, truncated to 1048576 [ 1712.801440][T31981] netlink: 40 bytes leftover after parsing attributes in process `syz.0.22972'. [ 1713.250194][T31989] SET target dimension over the limit! [ 1713.623787][T32015] netlink: 'syz.0.22977': attribute type 4 has an invalid length. [ 1713.695213][T32010] smbdirect: ib_dev[syz2] renamed to [syz ] [ 1713.812218][T32017] block nbd10: server does not support multiple connections per device. [ 1713.963162][T32017] block nbd10: shutting down sockets [ 1713.970246][T32026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22978'. [ 1714.226430][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22980'. [ 1714.318442][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22980'. [ 1714.369842][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22980'. [ 1714.404208][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22980'. [ 1714.434165][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22980'. [ 1714.544665][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22980'. [ 1714.580098][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22980'. [ 1714.628553][T32046] netlink: 'syz.3.22983': attribute type 27 has an invalid length. [ 1714.656559][T32046] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1714.710783][T32046] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1714.744305][T32051] xt_hashlimit: size too large, truncated to 1048576 [ 1714.777391][T32046] bond27: left promiscuous mode [ 1714.810750][T32046] vti1: left promiscuous mode [ 1714.901919][T32046] bond28: left promiscuous mode [ 1714.952180][T32046] bridge18: left promiscuous mode [ 1715.021088][T32046] macvtap1: left allmulticast mode [ 1715.155904][T32046] gretap6: left promiscuous mode [ 1715.317909][T32048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1715.394492][T32048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1715.554967][T32048] net_ratelimit: 336 callbacks suppressed [ 1715.554990][T32048] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1715.578491][ T48] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1715.588252][ T48] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1715.642174][T12599] lo speed is unknown, defaulting to 1000 [ 1715.648036][ T5287] veth0_macvtap: left promiscuous mode [ 1715.666218][T12599] sqz0: Port: 1 Link ACTIVE [ 1715.778985][ T48] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1715.798361][T32079] bond0: Device is already in use. [ 1715.825846][T16454] lo speed is unknown, defaulting to 1000 [ 1715.892349][T12599] syz0: Port: 1 Link ACTIVE [ 1715.925617][ T48] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1715.949917][T32070] lo speed is unknown, defaulting to 1000 [ 1716.017533][T32070] lo speed is unknown, defaulting to 1000 [ 1716.037734][T32083] lo speed is unknown, defaulting to 1000 [ 1716.650636][T32083] lo speed is unknown, defaulting to 1000 [ 1716.766631][T32122] __nla_validate_parse: 35 callbacks suppressed [ 1716.766657][T32122] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.22994'. [ 1717.169415][T32122] gretap3: entered promiscuous mode [ 1719.394188][T32150] xt_hashlimit: size too large, truncated to 1048576 [ 1720.834300][T32177] lo speed is unknown, defaulting to 1000 [ 1720.835746][T32185] netlink: 'syz.2.23007': attribute type 27 has an invalid length. [ 1720.853974][T32186] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1720.871775][T32185] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1720.892525][T32185] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1720.917479][T32186] netlink: 'syz.4.23006': attribute type 11 has an invalid length. [ 1720.927757][T32185] gretap5: left promiscuous mode [ 1721.014465][T32189] 8021q: adding VLAN 0 to HW filter on device team0 [ 1721.040950][T32189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1721.278090][T32189] veth0_vlan: left promiscuous mode [ 1721.302290][T32189] veth0_vlan: entered promiscuous mode [ 1721.340907][T32189] tipc: Resetting bearer [ 1721.411555][T32189] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1721.466266][T32177] lo speed is unknown, defaulting to 1000 [ 1721.491486][T21027] bridge0: port 1(veth0_to_team) entered blocking state [ 1721.498718][T21027] bridge0: port 1(veth0_to_team) entered forwarding state [ 1721.633718][ T4119] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.664572][ T4119] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.707731][ T4119] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.718203][T32197] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23008'. [ 1721.743776][ T4119] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.845117][T32192] lo speed is unknown, defaulting to 1000 [ 1722.192484][T32192] lo speed is unknown, defaulting to 1000 [ 1722.211737][T32214] xt_hashlimit: size too large, truncated to 1048576 [ 1722.800622][T32224] syzkaller1: entered promiscuous mode [ 1722.806260][T32224] syzkaller1: entered allmulticast mode [ 1723.527676][T32232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23016'. [ 1724.105089][T32243] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.23018'. [ 1724.233206][T32250] netlink: 'syz.4.23021': attribute type 13 has an invalid length. [ 1724.253437][T32250] netlink: 'syz.4.23021': attribute type 17 has an invalid length. [ 1724.481435][T32256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23021'. [ 1724.541592][T32269] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.23020'. [ 1724.541842][T32250] 8021q: adding VLAN 0 to HW filter on device  [ 1724.612734][T32250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.803907][T32250] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1724.851593][T32260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23020'. [ 1724.869146][T32260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23020'. [ 1724.901920][T32260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23020'. [ 1724.930415][T32260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23020'. [ 1725.095439][T32269] gretap6: entered promiscuous mode [ 1725.193892][T13509] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.225278][T13509] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.313622][T13509] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.332044][T13509] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.390931][T32283] lo speed is unknown, defaulting to 1000 [ 1725.423134][T32283] lo speed is unknown, defaulting to 1000 [ 1725.430516][T32291] netlink: 'syz.4.23026': attribute type 4 has an invalid length. [ 1725.713431][T32297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23029'. [ 1726.179753][T32299] netlink: 'syz.3.23030': attribute type 10 has an invalid length. [ 1727.123108][T32330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23038'. [ 1727.243612][T32335] netlink: 'syz.3.23038': attribute type 13 has an invalid length. [ 1727.262334][T32335] netlink: 'syz.3.23038': attribute type 17 has an invalid length. [ 1727.305861][T32335] netlink: 'syz.3.23038': attribute type 27 has an invalid length. [ 1727.972635][T32329] lo speed is unknown, defaulting to 1000 [ 1727.980635][T12599] lo speed is unknown, defaulting to 1000 [ 1727.988044][T12599] sqz0: Port: 1 Link DOWN [ 1728.004065][T16193] syz0: Port: 1 Link DOWN [ 1728.072718][T16455] lo speed is unknown, defaulting to 1000 [ 1728.229763][T32329] lo speed is unknown, defaulting to 1000 [ 1728.398644][T32345] lo speed is unknown, defaulting to 1000 [ 1728.740710][T32358] __nla_validate_parse: 2 callbacks suppressed [ 1728.740735][T32358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23046'. [ 1728.889751][T32345] lo speed is unknown, defaulting to 1000 [ 1730.606067][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.623336][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.646142][T32359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23046'. [ 1731.425128][T32408] tipc: Resetting bearer [ 1731.776204][T32430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23058'. [ 1731.786675][T13509] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.810935][T32421] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.23057'. [ 1731.827096][T13509] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.868268][T32425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23057'. [ 1731.883758][T32425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23057'. [ 1731.893575][T32425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23057'. [ 1731.903367][T32425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23057'. [ 1731.995385][T32435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23058'. [ 1732.095149][T32421] gretap3: entered promiscuous mode [ 1732.139266][T13509] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.171667][T13509] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.318558][T32439] netlink: 'syz.3.23061': attribute type 9 has an invalid length. [ 1732.641504][T32447] lo speed is unknown, defaulting to 1000 [ 1732.669389][T32447] lo speed is unknown, defaulting to 1000 [ 1733.288266][T32465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23067'. [ 1733.593213][T32472] xt_hashlimit: size too large, truncated to 1048576 [ 1734.687283][T32494] __nla_validate_parse: 5 callbacks suppressed [ 1734.687305][T32494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23074'. [ 1734.792950][T32494] bond0: entered promiscuous mode [ 1734.819150][T32494] batadv0: entered promiscuous mode [ 1734.842863][T32494] debugfs: 'hsr1' already exists in 'hsr' [ 1734.851317][T32494] Cannot create hsr debugfs directory [ 1735.808918][T32540] xt_hashlimit: size too large, truncated to 1048576 [ 1736.054474][T32554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23090'. [ 1736.100348][T32554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23090'. [ 1737.602227][T32579] infiniband syz2: set down [ 1737.617889][T32579] infiniband syz2: added ipvlan1 [ 1737.645524][T32579] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1737.652706][T32579] infiniband syz2: Couldn't open port 1 [ 1737.686314][T32606] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23105'. [ 1737.698816][T32579] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1737.750197][T32579] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1737.792265][T32579] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1737.889273][T32615] xt_hashlimit: size too large, truncated to 1048576 [ 1737.930879][T32579] RDS/IB: syz2: added [ 1737.949021][T32579] smc: adding ib device syz2 with port count 1 [ 1737.967105][T32579] smc: ib device syz2 port 1 has no pnetid [ 1738.099030][T32602] bridge0: port 1(veth0_to_team) entered disabled state [ 1738.228207][T32629] netlink: 6 bytes leftover after parsing attributes in process `syz.0.23112'. [ 1738.264301][T32629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1739.044100][T32647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23115'. [ 1739.417726][T32602] tipc: Resetting bearer [ 1739.586489][T32637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23113'. [ 1739.616898][T32637] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23113'. [ 1739.656795][T32637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23113'. [ 1739.690470][T32637] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23113'. [ 1739.888045][T32646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1739.934735][T32646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1740.085259][T32646] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1740.188062][ T4119] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.213588][ T4119] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.234106][T16454] lo speed is unknown, defaulting to 1000 [ 1740.249702][T16454] syz : Port: 1 Link ACTIVE [ 1740.405385][ T4119] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.436293][T32643] lo speed is unknown, defaulting to 1000 [ 1740.437582][ T4119] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.490376][T32643] lo speed is unknown, defaulting to 1000 [ 1742.492697][T32711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1742.506931][T32711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1742.684208][T32711] veth0_vlan: left promiscuous mode [ 1742.722626][T32711] veth0_vlan: entered promiscuous mode [ 1742.776900][T32711] tipc: Resetting bearer [ 1742.815156][T32711] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1742.902515][T13509] bridge0: port 1(veth0_to_team) entered blocking state [ 1742.909848][T13509] bridge0: port 1(veth0_to_team) entered forwarding state [ 1743.002417][ T1355] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.061938][T32731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23128'. [ 1743.703081][ T1355] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.735576][T16412] lo speed is unknown, defaulting to 1000 [ 1743.743237][ T1355] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.761467][T16412] syz : Port: 1 Link DOWN [ 1743.830525][ T1355] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.353723][T32760] netlink: 76 bytes leftover after parsing attributes in process `syz.1.23135'. [ 1744.527409][ T301] No such timeout policy "syz0" [ 1744.855968][ T311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23141'. [ 1744.979229][ T317] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23142'. [ 1745.516912][ T313] bridge0: port 1(veth0_to_team) entered disabled state [ 1745.667982][ T338] netlink: 'syz.3.23147': attribute type 27 has an invalid length. [ 1746.451937][ T313] tipc: Resetting bearer [ 1746.534990][ T311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23141'. [ 1746.546795][ T311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23141'. [ 1746.557143][ T311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23141'. [ 1746.566788][ T311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23141'. [ 1746.576391][ T311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23141'. [ 1746.586374][ T311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23141'. [ 1746.596151][ T311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23141'. [ 1746.605936][ T311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23141'. [ 1746.659042][ T4111] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.681299][ T4111] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.722270][ T4111] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.746594][ T4111] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.811740][ T345] lo speed is unknown, defaulting to 1000 [ 1746.842220][ T345] lo speed is unknown, defaulting to 1000 [ 1748.150620][ T402] xt_CT: No such helper "syz0" [ 1748.887156][ T420] lo speed is unknown, defaulting to 1000 [ 1748.927475][ T434] No such timeout policy "syz0" [ 1749.040722][ T420] lo speed is unknown, defaulting to 1000 [ 1750.368352][ T474] __nla_validate_parse: 151 callbacks suppressed [ 1750.368374][ T474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23184'. [ 1750.521564][ T477] xt_hashlimit: size too large, truncated to 1048576 [ 1751.189184][ T490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23189'. [ 1751.676945][ T505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23195'. [ 1751.706767][ T505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23195'. [ 1751.860660][ T508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23196'. [ 1752.417501][ T532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23205'. [ 1752.461535][ T536] netlink: 'syz.1.23206': attribute type 10 has an invalid length. [ 1752.503987][ T536] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.23206'. [ 1752.634560][ T540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23209'. [ 1752.651924][ T540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23209'. [ 1752.968493][ T556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23215'. [ 1753.795800][ T597] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1753.802995][ T597] syzkaller1: linktype set to 1 [ 1755.379127][ T667] Timeout policy `syz0' can only be used by L3 protocol number 245 [ 1755.770618][ T681] __nla_validate_parse: 9 callbacks suppressed [ 1755.770644][ T681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23259'. [ 1756.018880][ T688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23261'. [ 1756.540299][ T710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23271'. [ 1756.619029][ T715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23273'. [ 1756.807392][ T727] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23276'. [ 1756.844102][ T727] netem: change failed [ 1757.106084][ T738] netlink: 56 bytes leftover after parsing attributes in process `syz.4.23282'. [ 1757.412080][ T749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23287'. [ 1758.170316][ T781] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23301'. [ 1758.236597][ T783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23302'. [ 1758.776320][ T806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23314'. [ 1760.595721][ T882] xt_hashlimit: size too large, truncated to 1048576 [ 1760.800690][ T893] nbd0: detected capacity change from 0 to 128 [ 1760.853079][ T895] block nbd0: Dead connection, failed to find a fallback [ 1761.033690][T19776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.408088][ T919] __nla_validate_parse: 5 callbacks suppressed [ 1761.408114][ T919] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23352'. [ 1761.705491][ T932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23357'. [ 1761.744644][ T932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23357'. [ 1761.878090][ T943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23356'. [ 1761.903330][ T943] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23356'. [ 1761.950418][ T943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23356'. [ 1761.993799][ T943] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23356'. [ 1762.093553][ T952] xt_hashlimit: size too large, truncated to 1048576 [ 1762.283894][ T962] syzkaller1: entered promiscuous mode [ 1762.312960][ T962] syzkaller1: entered allmulticast mode [ 1762.478378][ T967] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.23364'. [ 1762.651300][ T971] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23366'. [ 1763.588094][ T1012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23379'. [ 1764.208649][ T1037] xt_hashlimit: size too large, truncated to 1048576 [ 1766.135998][ T1118] xt_hashlimit: size too large, truncated to 1048576 [ 1766.175499][ T1119] No such timeout policy "syz0" [ 1766.471275][ T1129] __nla_validate_parse: 4 callbacks suppressed [ 1766.471303][ T1129] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23405'. [ 1766.865080][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23410'. [ 1766.926624][ T1144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23410'. [ 1767.159302][ T1163] Timeout policy `syz0' can only be used by L3 protocol number 8939 [ 1767.258198][ T1169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23418'. [ 1767.294133][ T1171] xt_hashlimit: size too large, truncated to 1048576 [ 1768.220466][ T1212] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23430'. [ 1768.484469][ T1222] xt_hashlimit: size too large, truncated to 1048576 [ 1769.676712][ T1260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23441'. [ 1770.416260][ T1286] xt_hashlimit: size too large, truncated to 1048576 [ 1770.484860][ T1290] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 1770.857152][ T1313] netlink: 104 bytes leftover after parsing attributes in process `syz.4.23456'. [ 1771.390326][ T1333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23461'. [ 1771.412788][ T1333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23461'. [ 1771.473422][ T1337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23462'. [ 1771.502350][ T1333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23461'. [ 1771.512219][ T1355] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1771.520085][ T1337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23462'. [ 1771.527790][ T1355] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1771.546114][ T1333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23461'. [ 1771.563418][ T1355] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1771.563486][ T1337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23462'. [ 1771.578620][ T1355] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1771.616090][ T1337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23462'. [ 1772.323750][ T1377] xt_hashlimit: size too large, truncated to 1048576 [ 1773.284577][ T1422] syzkaller1: entered promiscuous mode [ 1773.293340][ T1422] syzkaller1: entered allmulticast mode [ 1774.603797][ T1478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23495'. [ 1774.841716][ T1485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23498'. [ 1775.523500][ T1521] netlink: 36 bytes leftover after parsing attributes in process `syz.3.23509'. [ 1775.535233][ T1521] netlink: 36 bytes leftover after parsing attributes in process `syz.3.23509'. [ 1775.865702][T13509] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1776.167246][ T1547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23515'. [ 1777.379059][ T1596] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1777.595519][ T1601] lo speed is unknown, defaulting to 1000 [ 1777.624343][ T1601] lo speed is unknown, defaulting to 1000 [ 1777.724305][ T1613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23532'. [ 1777.914753][ T1619] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1777.923521][ T1619] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1777.957127][T13510] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1777.974310][T13510] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1777.994749][T13510] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1778.022218][T13510] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1779.107513][ T1659] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1779.204452][ T1662] xt_hashlimit: size too large, truncated to 1048576 [ 1779.213393][ T1664] netlink: 'syz.1.23546': attribute type 27 has an invalid length. [ 1779.726788][ T1664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1779.843154][ T1664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1780.304669][ T1664] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1780.362659][T16193] lo speed is unknown, defaulting to 1000 [ 1780.378079][T16193] syz : Port: 1 Link ACTIVE [ 1780.397664][ T1695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23551'. [ 1780.662983][ T1688] lo speed is unknown, defaulting to 1000 [ 1780.720869][ T1688] lo speed is unknown, defaulting to 1000 [ 1780.979105][ T1715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23557'. [ 1781.017476][ T1715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23557'. [ 1781.205689][ T1723] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1781.227233][ T1723] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1781.552153][ T1739] syzkaller1: entered promiscuous mode [ 1781.558128][ T1739] syzkaller1: entered allmulticast mode [ 1782.164217][ T1757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23571'. [ 1782.173599][ T1757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23571'. [ 1782.305407][ T1759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23572'. [ 1782.370392][ T1759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23572'. [ 1782.390092][ T1759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23572'. [ 1782.410443][ T1759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23572'. [ 1784.053107][ T1790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1784.300701][T16193] lo speed is unknown, defaulting to 1000 [ 1784.315000][ T1829] netlink: 'syz.3.23592': attribute type 27 has an invalid length. [ 1784.324053][T16193] syz : Port: 1 Link DOWN [ 1784.370284][ T1829] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1784.381066][ T1829] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1784.531359][ T1833] 8021q: adding VLAN 0 to HW filter on device team0 [ 1784.634530][ T1833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1784.974323][ T1833] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1784.991166][T23938] lo speed is unknown, defaulting to 1000 [ 1784.997378][T23938] sqz0: Port: 1 Link ACTIVE [ 1785.003062][T16455] lo speed is unknown, defaulting to 1000 [ 1785.182424][T16409] syz0: Port: 1 Link ACTIVE [ 1785.218412][ T1838] lo speed is unknown, defaulting to 1000 [ 1785.261459][ T1838] lo speed is unknown, defaulting to 1000 [ 1785.640509][ T1868] netlink: 48 bytes leftover after parsing attributes in process `syz.2.23601'. [ 1785.670941][ T1868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23601'. [ 1785.690211][ T1868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23601'. [ 1785.885740][ T1880] sctp: [Deprecated]: syz.4.23603 (pid 1880) Use of int in maxseg socket option. [ 1785.885740][ T1880] Use struct sctp_assoc_value instead [ 1786.373939][ T1897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23609'. [ 1786.491117][ T1900] xt_hashlimit: size too large, truncated to 1048576 [ 1787.220584][ T1917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.23614'. [ 1787.254684][ T1917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23614'. [ 1787.286328][ T1917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23614'. [ 1787.323432][ T1923] netlink: 64 bytes leftover after parsing attributes in process `syz.4.23615'. [ 1787.643742][ T1920] syzkaller1: entered promiscuous mode [ 1787.664855][ T1920] syzkaller1: entered allmulticast mode [ 1788.156142][ T1946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23622'. [ 1788.322223][ T1949] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 1788.341129][ T1949] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1788.470532][ T1955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23625'. [ 1788.628396][ T1970] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1788.636498][ T1970] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1789.754050][ T2011] netlink: 'syz.0.23638': attribute type 27 has an invalid length. [ 1789.874476][ T2011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1790.561940][ T2011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1790.590442][ T2011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1790.654455][ T2011] A link change request failed with some changes committed already. Interface ªªªªª may have been left with an inconsistent configuration, please check. [ 1791.010947][ T2047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23646'. [ 1791.510175][T23938] syz1: Port: 1 Link ACTIVE [ 1791.510263][T16412] lo speed is unknown, defaulting to 1000 [ 1791.525430][ T2021] lo speed is unknown, defaulting to 1000 [ 1791.537411][T16454] syz0: Port: 1 Link DOWN [ 1791.569885][T16412] sqz0: Port: 1 Link DOWN [ 1791.571242][ T2021] lo speed is unknown, defaulting to 1000 [ 1791.594104][T16408] lo speed is unknown, defaulting to 1000 [ 1791.701698][ T2064] netlink: 'syz.1.23649': attribute type 2 has an invalid length. [ 1792.040765][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1792.073558][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.038409][ T2104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23661'. [ 1793.543949][ T2120] xt_hashlimit: size too large, truncated to 1048576 [ 1794.517081][T16200] syz1: Port: 1 Link DOWN [ 1794.563890][ T2147] syzkaller0: entered promiscuous mode [ 1794.600530][ T2147] syzkaller0: entered allmulticast mode [ 1794.816642][ T2157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23669'. [ 1797.394597][ T2225] lo speed is unknown, defaulting to 1000 [ 1797.417954][ T2225] lo speed is unknown, defaulting to 1000 [ 1798.060728][ T2218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1798.631972][ T2260] netlink: 'syz.0.23694': attribute type 3 has an invalid length. [ 1798.655534][ T2260] netlink: 'syz.0.23694': attribute type 3 has an invalid length. [ 1798.708181][ T2265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23696'. [ 1802.508132][ T2288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1803.035931][ T2338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23720'. [ 1803.061114][ T2338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23720'. [ 1803.071378][ T2338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23720'. [ 1803.084757][ T2345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23723'. [ 1803.094121][ T2338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23720'. [ 1803.104918][ T2338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23720'. [ 1803.132511][ T2338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23720'. [ 1803.198661][ T2338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23720'. [ 1803.262196][ T2338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23720'. [ 1803.939125][ T2382] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 1804.069688][ T2382] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1804.325966][ T2396] netlink: 'syz.0.23738': attribute type 1 has an invalid length. [ 1804.404176][ T2396] bond24: entered promiscuous mode [ 1804.410713][ T2396] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1804.448412][ T2400] bond24: (slave bridge16): making interface the new active one [ 1804.457219][ T2400] bridge16: entered promiscuous mode [ 1804.465011][ T2400] bond24: (slave bridge16): Enslaving as an active interface with an up link [ 1804.475906][ T2389] lo speed is unknown, defaulting to 1000 [ 1804.573788][ T2389] lo speed is unknown, defaulting to 1000 [ 1804.625259][ T2396] bridge0: Device is already in use. [ 1804.821424][ T2412] bond24: left promiscuous mode [ 1804.833048][ T2412] bridge16: left promiscuous mode [ 1804.871343][ T2420] __nla_validate_parse: 176 callbacks suppressed [ 1804.871368][ T2420] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23741'. [ 1805.338439][ T2427] xt_hashlimit: size too large, truncated to 1048576 [ 1807.286768][ T2391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1807.885491][ T2462] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1807.899580][ T2462] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1807.940279][ T2463] tipc: Enabling of bearer rejected, already enabled [ 1808.104913][ T2470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23753'. [ 1808.200670][ T2479] netlink: 'syz.4.23756': attribute type 9 has an invalid length. [ 1808.215189][ T2484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23757'. [ 1808.442786][ T2487] lo speed is unknown, defaulting to 1000 [ 1808.450815][ T2493] tipc: Enabled bearer , priority 0 [ 1808.470510][ T2493] syzkaller0: entered promiscuous mode [ 1808.479911][ T2493] syzkaller0: entered allmulticast mode [ 1808.535540][ T2487] lo speed is unknown, defaulting to 1000 [ 1808.552295][ T2493] tipc: Resetting bearer [ 1808.589880][ T2491] tipc: Resetting bearer [ 1808.669643][ T2491] tipc: Disabling bearer [ 1808.798573][ T2507] syzkaller0: entered promiscuous mode [ 1808.818334][ T2507] syzkaller0: entered allmulticast mode [ 1810.007532][ T2550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23772'. [ 1810.315888][ T2555] syzkaller0: entered promiscuous mode [ 1810.361540][ T2555] syzkaller0: entered allmulticast mode [ 1810.873207][ T2591] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23778'. [ 1811.072072][ T2599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23778'. [ 1811.104925][ T2599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23778'. [ 1811.137302][ T2605] xt_hashlimit: size too large, truncated to 1048576 [ 1811.140110][ T2599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23778'. [ 1811.157686][ T2599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23778'. [ 1811.167919][ T2599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23778'. [ 1811.178288][ T2599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23778'. [ 1811.193701][ T2599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23778'. [ 1811.207011][ T2599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23778'. [ 1811.331943][ T2614] syzkaller0: entered promiscuous mode [ 1811.338330][ T2614] syzkaller0: entered allmulticast mode [ 1811.694650][ T2622] syzkaller0: entered promiscuous mode [ 1811.709583][ T2622] syzkaller0: entered allmulticast mode [ 1813.894425][ T2596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1814.748222][ T2681] lo speed is unknown, defaulting to 1000 [ 1814.863788][ T2681] lo speed is unknown, defaulting to 1000 [ 1815.668891][ T2714] xt_hashlimit: size too large, truncated to 1048576 [ 1817.168808][ T2751] __nla_validate_parse: 24 callbacks suppressed [ 1817.168832][ T2751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23810'. [ 1818.419218][ T2702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1818.684841][ T2773] tc action pedit 'at' offset 6 out of bounds [ 1819.116053][ T2799] syzkaller0: entered promiscuous mode [ 1819.122412][ T2799] syzkaller0: entered allmulticast mode [ 1819.142503][ T2799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23819'. [ 1819.155166][ T2799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23819'. [ 1820.201138][ T2855] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1820.249127][ T2855] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1822.531630][ T2820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1822.767183][ T2881] netlink: 44 bytes leftover after parsing attributes in process `syz.4.23833'. [ 1822.822940][ T2887] syzkaller0: entered promiscuous mode [ 1822.837940][ T2894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23835'. [ 1822.851263][ T2887] syzkaller0: entered allmulticast mode [ 1822.886281][ T2896] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23834'. [ 1823.285518][ T2902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23838'. [ 1823.758154][ T2908] lo speed is unknown, defaulting to 1000 [ 1823.778305][ T2917] syzkaller0: entered promiscuous mode [ 1823.788336][ T2917] syzkaller0: entered allmulticast mode [ 1823.922764][ T2908] lo speed is unknown, defaulting to 1000 [ 1825.006377][ T2958] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.23850'. [ 1825.018102][ T2958] siw: device registration error -23 [ 1825.128954][ T2962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23851'. [ 1825.219600][T19776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1827.280237][ T2942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1827.485355][ T2982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23858'. [ 1827.511176][ T2982] ksmbd: Unknown IPC event: 0, ignore. [ 1827.668786][ T2990] bond0: Device is already in use. [ 1827.708185][ T2993] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1827.739733][ T2993] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1827.911170][ T2997] vlan2: entered promiscuous mode [ 1827.916624][ T2997] team0: entered promiscuous mode [ 1827.924934][ T2997] macvlan2: entered promiscuous mode [ 1827.934827][ T2997] vlan2: left promiscuous mode [ 1827.941492][ T2997] team0: left promiscuous mode [ 1828.043133][ T3004] netlink: 68 bytes leftover after parsing attributes in process `syz.4.23862'. [ 1828.102965][ T3008] syzkaller0: entered promiscuous mode [ 1828.118819][ T3008] syzkaller0: entered allmulticast mode [ 1828.794030][ T3029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23869'. [ 1828.857669][ T3034] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1828.866601][ T3034] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1828.880310][ T3034] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23868'. [ 1831.575340][ T3021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1831.964494][ T3071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23879'. [ 1832.212278][ T3076] syzkaller0: entered promiscuous mode [ 1832.228337][ T3076] syzkaller0: entered allmulticast mode [ 1832.332759][ T3079] tipc: Enabling of bearer rejected, already enabled [ 1832.439353][ T3081] tipc: Enabling of bearer rejected, already enabled [ 1832.462976][ T3081] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1832.480405][ T3081] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1832.501243][ T3085] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1832.508638][ T3085] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1832.621178][ T3089] xt_hashlimit: size too large, truncated to 1048576 [ 1833.046849][ T3107] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1833.058000][ T3107] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1833.522698][ T3119] xt_nfacct: accounting object `syz0' does not exist [ 1833.950695][ T3130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23893'. [ 1833.969543][ T3130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23893'. [ 1834.215449][ T3135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23895'. [ 1834.228883][ T3135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23895'. [ 1835.854260][ T3101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1836.162199][ T3144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23900'. [ 1836.200968][ T3144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1836.875719][ T3160] tipc: Resetting bearer [ 1836.910705][ T3160] tipc: Resetting bearer [ 1837.436056][ T3199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23905'. [ 1837.976865][ T3213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23906'. [ 1838.000841][ T3213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23906'. [ 1838.261021][ T3221] lo speed is unknown, defaulting to 1000 [ 1838.277849][ T3221] lo speed is unknown, defaulting to 1000 [ 1838.472490][ T3238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23912'. [ 1838.561991][ T3245] netlink: 'syz.4.23910': attribute type 3 has an invalid length. [ 1838.584909][ T3245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23910'. [ 1841.370791][ T3236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1841.628202][ T3272] __nla_validate_parse: 1 callbacks suppressed [ 1841.628228][ T3272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23920'. [ 1841.705705][ T3272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23920'. [ 1841.741594][ T3266] TC_ACT_REPEAT abuse ? [ 1841.771518][ T3266] TC_ACT_REPEAT abuse ? [ 1842.240971][ T3296] netlink: 'syz.1.23922': attribute type 1 has an invalid length. [ 1842.600903][ T3302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23922'. [ 1843.005745][ T3311] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 1843.033279][ T3311] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1843.383534][ T3326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23932'. [ 1843.395729][ T3326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23932'. [ 1843.601258][ T3341] netlink: 72 bytes leftover after parsing attributes in process `syz.0.23933'. [ 1843.695439][ T3341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23933'. [ 1844.205370][ T3356] netlink: 'syz.1.23936': attribute type 27 has an invalid length. [ 1844.282109][ T3356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1844.295685][ T3356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1844.410879][ T3356] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1844.453185][T16415] lo speed is unknown, defaulting to 1000 [ 1844.472436][T16415] syz : Port: 1 Link ACTIVE [ 1844.585988][ T3359] lo speed is unknown, defaulting to 1000 [ 1844.614522][ T3359] lo speed is unknown, defaulting to 1000 [ 1846.412247][ T3329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1846.421733][ T3345] netlink: 'syz.0.23933': attribute type 1 has an invalid length. [ 1846.880386][ T3381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23944'. [ 1846.914249][ T3381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23944'. [ 1847.321943][ T3407] lo speed is unknown, defaulting to 1000 [ 1847.335232][ T3407] lo speed is unknown, defaulting to 1000 [ 1848.395969][ T3433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23960'. [ 1848.424849][ T3433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23960'. [ 1848.672173][ T3436] lo speed is unknown, defaulting to 1000 [ 1848.713164][ T3436] lo speed is unknown, defaulting to 1000 [ 1850.168686][ T3398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1850.472171][ T3453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23964'. [ 1850.863007][ T3480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23972'. [ 1850.880268][ T3480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23972'. [ 1851.087549][ T3484] lo speed is unknown, defaulting to 1000 [ 1851.136727][ T3484] lo speed is unknown, defaulting to 1000 [ 1853.471804][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.481727][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.117467][ T3492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1854.383335][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23985'. [ 1854.406406][ T3531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23985'. [ 1854.769291][ T3558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23996'. [ 1854.802317][ T3553] lo speed is unknown, defaulting to 1000 [ 1854.897492][ T3553] lo speed is unknown, defaulting to 1000 [ 1855.603857][ T3592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24005'. [ 1855.628361][ T3592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24005'. [ 1855.748275][ T3594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24006'. [ 1855.771829][ T3594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24006'. [ 1855.782906][ T3594] netlink: 22 bytes leftover after parsing attributes in process `syz.0.24006'. [ 1856.610966][ T3616] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24015'. [ 1857.886386][ T3565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1858.274705][ T3624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.286672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.292296][ T3632] lo speed is unknown, defaulting to 1000 [ 1858.336921][ T3632] lo speed is unknown, defaulting to 1000 [ 1858.343095][ T3624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.461850][ T3624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.473976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.530119][ T3624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.555740][ T3624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.565157][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.589295][ T3624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.620519][ T3624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1858.650218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.100573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.113358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.251026][ T3619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.615308][ T3691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24039'. [ 1859.640576][ T3691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24039'. [ 1859.842713][ T3698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1860.663374][ T3721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24052'. [ 1860.677076][ T3721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24052'. [ 1861.074002][ T3731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24055'. [ 1861.498673][T16200] lo speed is unknown, defaulting to 1000 [ 1861.512245][T16200] syz : Port: 1 Link DOWN [ 1861.598343][ T3737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24056'. [ 1861.777858][ T3739] lo speed is unknown, defaulting to 1000 [ 1861.787498][ T3739] lo speed is unknown, defaulting to 1000 [ 1861.854881][ T3660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1862.177312][ T3746] xt_CT: No such helper "syz0" [ 1862.684223][ T3780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24067'. [ 1862.829110][ T3784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24069'. [ 1863.737670][ T3809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24078'. [ 1865.936598][ T3786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1866.197105][ T3825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24082'. [ 1866.239981][ T3829] netlink: 79 bytes leftover after parsing attributes in process `syz.1.24085'. [ 1866.662401][ T3851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24094'. [ 1867.005268][ T3863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24098'. [ 1867.775342][ T3908] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24116'. [ 1868.072779][ T3918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24121'. [ 1868.124632][ T3920] netlink: 'syz.2.24122': attribute type 1 has an invalid length. [ 1868.150771][ T3920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1868.626527][ T3949] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1868.629371][ T3951] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24135'. [ 1868.647695][ T3949] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1868.677813][ T3947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24133'. [ 1868.690066][ T3949] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24136'. [ 1868.988614][ T4992] udevd[4992]: worker [895] /devices/virtual/block/nbd0 is taking a long time [ 1869.496568][ T3985] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24149'. [ 1870.133189][ T4016] No such timeout policy "syz0" [ 1871.353271][ T4076] No such timeout policy "syz0" [ 1871.781099][ T4091] __nla_validate_parse: 4 callbacks suppressed [ 1871.781158][ T4091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24180'. [ 1871.903827][ T4099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24183'. [ 1872.316539][ T4112] netlink: 64 bytes leftover after parsing attributes in process `syz.2.24186'. [ 1872.403077][ T4118] netlink: 71 bytes leftover after parsing attributes in process `syz.0.24190'. [ 1872.575635][ T4112] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1872.746920][ T4128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24193'. [ 1872.805706][ T4135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24194'. [ 1872.811928][ T4137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24195'. [ 1873.232816][ T4156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24199'. [ 1873.473340][ T4167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24203'. [ 1873.803851][ T4184] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24208'. [ 1875.464753][ T4267] hsr_slave_0: left promiscuous mode [ 1875.473702][ T4267] hsr_slave_1: left promiscuous mode [ 1877.267098][ T4342] __nla_validate_parse: 4 callbacks suppressed [ 1877.267124][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24261'. [ 1877.308825][ T4342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24261'. [ 1878.370225][ T4386] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1878.626659][ T4394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24275'. [ 1878.695026][ T4397] siw: device registration error -23 [ 1879.476492][ T4412] xt_hashlimit: size too large, truncated to 1048576 [ 1879.890748][ T4431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24283'. [ 1880.433384][ T4440] lo speed is unknown, defaulting to 1000 [ 1880.482113][ T4440] lo speed is unknown, defaulting to 1000 [ 1880.625451][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24289'. [ 1880.644631][ T4452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24289'. [ 1882.276362][ T4502] netlink: 92 bytes leftover after parsing attributes in process `syz.3.24298'. [ 1882.304198][ T4503] xt_hashlimit: size too large, truncated to 1048576 [ 1883.649777][ T4539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24308'. [ 1884.443685][ T4564] xt_hashlimit: size too large, truncated to 1048576 [ 1884.515513][ T4572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1885.891965][ T4626] netlink: 'syz.0.24328': attribute type 4 has an invalid length. [ 1886.014195][ T4628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24329'. [ 1886.038484][ T4625] lo speed is unknown, defaulting to 1000 [ 1886.121537][ T4625] lo speed is unknown, defaulting to 1000 [ 1886.173458][ T4635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24331'. [ 1886.303895][ T4645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24334'. [ 1886.329848][ T4645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24334'. [ 1886.339811][ T4645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24334'. [ 1886.359705][ T4645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24334'. [ 1887.264959][ T4673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24344'. [ 1887.687631][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24345'. [ 1887.835976][ T4686] netlink: 36 bytes leftover after parsing attributes in process `syz.3.24346'. [ 1888.519398][ T4702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24351'. [ 1888.829240][ T4712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24354'. [ 1888.858217][ T4712] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24354'. [ 1888.873624][ T4712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24354'. [ 1888.894830][ T4712] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24354'. [ 1888.983493][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24355'. [ 1889.444977][ T4735] syzkaller1: entered promiscuous mode [ 1889.461783][ T4735] syzkaller1: entered allmulticast mode [ 1890.002949][ T4749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24367'. [ 1890.115384][T19776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1890.221737][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24371'. [ 1890.574833][ T4778] openvswitch: netlink: Duplicate key (type 21). [ 1890.896726][ T4786] lo speed is unknown, defaulting to 1000 [ 1890.907706][ T4786] lo speed is unknown, defaulting to 1000 [ 1890.915049][ T4791] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1893.616529][ T4855] lo speed is unknown, defaulting to 1000 [ 1893.680072][ T4855] lo speed is unknown, defaulting to 1000 [ 1893.968684][ T4865] netlink: 'syz.4.24401': attribute type 1 has an invalid length. [ 1894.102219][ T4865] 8021q: adding VLAN 0 to HW filter on device bond34 [ 1894.148569][ T4873] __nla_validate_parse: 9 callbacks suppressed [ 1894.148620][ T4873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24403'. [ 1895.005435][ T4897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24410'. [ 1896.684728][ T4927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24418'. [ 1897.257413][ T4953] netlink: 220 bytes leftover after parsing attributes in process `syz.3.24423'. [ 1897.279644][ T4953] netlink: 'syz.3.24423': attribute type 2 has an invalid length. [ 1897.655205][ T4962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24426'. [ 1898.972925][ T4986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24432'. [ 1899.093199][ T4991] netlink: 'syz.4.24434': attribute type 28 has an invalid length. [ 1900.294240][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24444'. [ 1900.435589][ T5031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24448'. [ 1900.482037][ T5029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24447'. [ 1900.681159][ T5034] lo speed is unknown, defaulting to 1000 [ 1900.706168][ T5034] lo speed is unknown, defaulting to 1000 [ 1900.721435][ T5038] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24450'. [ 1900.820618][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24450'. [ 1901.213035][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24455'. [ 1901.260107][ T5057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24455'. [ 1901.676058][ T5071] netlink: 36 bytes leftover after parsing attributes in process `syz.0.24459'. [ 1901.723823][ T5072] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24460'. [ 1901.851375][ T5075] syzkaller1: entered promiscuous mode [ 1901.857055][ T5075] syzkaller1: entered allmulticast mode [ 1902.005120][ T5080] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24463'. [ 1903.413401][ T5132] netlink: 'syz.4.24477': attribute type 1 has an invalid length. [ 1903.478253][ T5132] 8021q: adding VLAN 0 to HW filter on device bond35 [ 1903.654503][ T5134] bond35: (slave veth21): Enslaving as an active interface with a down link [ 1903.685994][ T5132] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1903.698387][ T5132] bond35: (slave batadv4): making interface the new active one [ 1903.712044][ T5132] batadv4: entered promiscuous mode [ 1903.718247][ T5132] bond35: (slave batadv4): Enslaving as an active interface with an up link [ 1908.540978][ T5140] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1908.553796][ T5140] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1908.564407][ T5140] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1908.926074][ T5161] __nla_validate_parse: 10 callbacks suppressed [ 1908.926097][ T5161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24484'. [ 1908.948917][ T5161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24484'. [ 1908.975389][ T5161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24484'. [ 1909.011419][ T5161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24484'. [ 1909.467290][ T5188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.24489'. [ 1909.597745][ T5193] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1909.629999][ T5193] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1909.675855][ T5196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24492'. [ 1909.736795][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24492'. [ 1909.845015][ T5207] netlink: 36 bytes leftover after parsing attributes in process `syz.4.24497'. [ 1910.012742][ T5217] syzkaller0: entered promiscuous mode [ 1910.025126][ T5217] syzkaller0: entered allmulticast mode [ 1910.264755][ T5223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24504'. [ 1910.344502][ T5225] lo speed is unknown, defaulting to 1000 [ 1910.355684][ T5225] lo speed is unknown, defaulting to 1000 [ 1910.790154][ T5242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24511'. [ 1911.712057][ T5274] syzkaller0: entered promiscuous mode [ 1911.718004][ T5274] syzkaller0: entered allmulticast mode [ 1912.656498][ T5305] lo speed is unknown, defaulting to 1000 [ 1912.707020][ T5305] lo speed is unknown, defaulting to 1000 [ 1912.791456][ T5318] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 1912.808977][ T5318] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1913.273006][ T5334] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1913.287848][ T5334] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1913.336331][ T5333] syzkaller0: entered promiscuous mode [ 1913.356658][ T5333] syzkaller0: entered allmulticast mode [ 1914.755661][ T5374] __nla_validate_parse: 9 callbacks suppressed [ 1914.755708][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24551'. [ 1914.921953][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1914.933276][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1914.966218][ T5377] netlink: 32 bytes leftover after parsing attributes in process `syz.3.24552'. [ 1915.070373][ T4111] batadv4: left promiscuous mode [ 1916.514059][ T5347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1916.737674][ T5388] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 1916.747022][ T5388] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1916.805904][ T5393] syzkaller0: entered promiscuous mode [ 1916.812378][ T5393] syzkaller0: entered allmulticast mode [ 1916.866414][ T5401] netlink: 'syz.2.24558': attribute type 4 has an invalid length. [ 1916.875535][ T5401] netlink: 152 bytes leftover after parsing attributes in process `syz.2.24558'. [ 1916.911886][ T5401] .`: renamed from bond0 [ 1919.730847][ T5389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1919.998815][ T5410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24561'. [ 1920.143010][ T5422] netlink: 'syz.1.24565': attribute type 14 has an invalid length. [ 1920.160767][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24565'. [ 1920.180159][ T5422] bond0: option xmit_hash_policy: invalid value (191) [ 1920.569369][ T5435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.24569'. [ 1921.531201][ T5470] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24578'. [ 1923.870356][ T30] INFO: task udevd:895 blocked for more than 143 seconds. [ 1923.878023][ T30] Not tainted syzkaller #0 [ 1923.883527][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1923.892696][ T30] task:udevd state:D stack:23400 pid:895 tgid:895 ppid:4992 task_flags:0x400040 flags:0x00080000 [ 1923.905164][ T30] Call Trace: [ 1923.908461][ T30] [ 1923.911932][ T30] __schedule+0x17b4/0x5680 [ 1923.916539][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1923.923203][ T30] ? __blk_flush_plug+0x416/0x4d0 [ 1923.928367][ T30] ? __pfx___schedule+0x10/0x10 [ 1923.934027][ T30] ? schedule+0x90/0x360 [ 1923.938315][ T30] schedule+0x164/0x360 [ 1923.943079][ T30] schedule_timeout+0x158/0x2c0 [ 1923.948074][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1923.954081][ T30] ? __pfx_process_timeout+0x10/0x10 [ 1923.959914][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1923.965754][ T30] ? prepare_to_wait_event+0x436/0x480 [ 1923.971626][ T30] nbd_queue_rq+0x857/0x1100 [ 1923.976246][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1923.978164][ T5448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1923.981769][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1924.009947][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1924.016160][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1924.035361][ T30] ? sbitmap_get+0x229/0x390 [ 1924.061302][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1924.078508][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1924.097319][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1924.111122][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1924.121167][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 1924.127270][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1924.133482][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1924.140546][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1924.145884][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 1924.151325][ T30] blk_mq_dispatch_list+0xd16/0xe10 [ 1924.156908][ T30] ? bdev_count_inflight+0x1cf/0x210 [ 1924.162420][ T30] ? blk_mq_dispatch_list+0x1b0/0xe10 [ 1924.167863][ T30] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1924.174402][ T30] ? rcu_is_watching+0x15/0xb0 [ 1924.179260][ T30] blk_mq_flush_plug_list+0x48d/0x570 [ 1924.185839][ T30] ? blk_add_rq_to_plug+0x300/0x450 [ 1924.192278][ T30] ? blk_mq_submit_bio+0x1acf/0x28e0 [ 1924.197687][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1924.204195][ T30] __blk_flush_plug+0x3ed/0x4d0 [ 1924.209199][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 1924.215138][ T30] __submit_bio+0x28d/0x580 [ 1924.220413][ T30] ? __pfx___submit_bio+0x10/0x10 [ 1924.225499][ T30] ? bio_associate_blkg+0x6d/0x230 [ 1924.231190][ T30] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1924.236937][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1924.243716][ T30] block_read_full_folio+0x7b7/0x830 [ 1924.249182][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 1924.255264][ T30] filemap_read_folio+0x137/0x3b0 [ 1924.260716][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1924.266232][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 1924.274926][ T30] ? filemap_add_folio+0x356/0x530 [ 1924.280597][ T30] do_read_cache_folio+0x358/0x590 [ 1924.285850][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1924.292029][ T30] read_part_sector+0xb6/0x2b0 [ 1924.296950][ T30] adfspart_check_ICS+0xb1/0x960 [ 1924.302565][ T30] ? seq_buf_printf+0x212/0x2d0 [ 1924.307479][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1924.314522][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1924.320657][ T30] bdev_disk_changed+0x817/0x1770 [ 1924.325840][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1924.331856][ T30] blkdev_get_whole+0x380/0x510 [ 1924.337142][ T30] bdev_open+0x31e/0xd30 [ 1924.341632][ T30] blkdev_open+0x470/0x610 [ 1924.346185][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1924.351443][ T30] do_dentry_open+0x785/0x14e0 [ 1924.356291][ T30] vfs_open+0x3b/0x340 [ 1924.360572][ T30] ? path_openat+0x2df0/0x3860 [ 1924.365594][ T30] path_openat+0x2e08/0x3860 [ 1924.370760][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1924.376171][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1924.382210][ T30] ? __pfx_path_openat+0x10/0x10 [ 1924.387183][ T30] ? __x64_sys_openat+0x138/0x170 [ 1924.392782][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1924.397771][ T30] do_file_open+0x23e/0x4a0 [ 1924.402864][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1924.408065][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1924.413626][ T30] ? alloc_fd+0x64b/0x6c0 [ 1924.418125][ T30] do_sys_openat2+0x113/0x200 [ 1924.423524][ T30] ? __pfx___up_read+0x10/0x10 [ 1924.428705][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1924.434398][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 1924.440234][ T30] __x64_sys_openat+0x138/0x170 [ 1924.445240][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.451838][ T30] do_syscall_64+0x15f/0xf80 [ 1924.456558][ T30] ? trace_irq_disable+0x3b/0x140 [ 1924.462145][ T30] ? clear_bhb_loop+0x40/0x90 [ 1924.466886][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.473345][ T30] RIP: 0033:0x7f8af60a7407 [ 1924.477937][ T30] RSP: 002b:00007ffd6103c590 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1924.487083][ T30] RAX: ffffffffffffffda RBX: 00007f8af6835880 RCX: 00007f8af60a7407 [ 1924.495585][ T30] RDX: 00000000000a0800 RSI: 000056385363e4d0 RDI: ffffffffffffff9c [ 1924.504101][ T30] RBP: 000056385363d910 R08: 0000000000000000 R09: 0000000000000000 [ 1924.513049][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563853650e20 [ 1924.521635][ T30] R13: 000056385364b190 R14: 00007ffd6103c658 R15: 0000563853650e20 [ 1924.531215][ T30] [ 1924.534562][ T30] [ 1924.534562][ T30] Showing all locks held in the system: [ 1924.542506][ T30] 1 lock held by khungtaskd/30: [ 1924.547413][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1924.557469][ T30] 2 locks held by getty/5383: [ 1924.562738][ T30] #0: ffff888036f570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1924.573159][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1924.584238][ T30] 5 locks held by kworker/u8:10/13509: [ 1924.590455][ T30] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1924.600955][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1924.610339][ T30] #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 1924.620086][ T30] #3: ffffffff9a679020 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 1924.631270][ T30] #4: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 1924.640918][ T30] 3 locks held by udevd/895: [ 1924.645655][ T30] #0: ffff88808667d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1924.655582][ T30] #1: ffff888056ab7c18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 1924.665795][ T30] #2: ffff888096820178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1924.675797][ T30] [ 1924.678209][ T30] ============================================= [ 1924.678209][ T30] [ 1924.694414][ T30] NMI backtrace for cpu 1 [ 1924.694439][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1924.694460][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1924.694473][ T30] Call Trace: [ 1924.694481][ T30] [ 1924.694491][ T30] dump_stack_lvl+0xe8/0x150 [ 1924.694521][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1924.694562][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1924.694584][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1924.694613][ T30] sys_info+0x135/0x170 [ 1924.694636][ T30] watchdog+0xfd3/0x1030 [ 1924.694670][ T30] ? watchdog+0x1c9/0x1030 [ 1924.694703][ T30] kthread+0x388/0x470 [ 1924.694736][ T30] ? __pfx_watchdog+0x10/0x10 [ 1924.694759][ T30] ? __pfx_kthread+0x10/0x10 [ 1924.694784][ T30] ret_from_fork+0x514/0xb70 [ 1924.694808][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1924.694828][ T30] ? __switch_to+0xc79/0x1410 [ 1924.694857][ T30] ? __pfx_kthread+0x10/0x10 [ 1924.694883][ T30] ret_from_fork_asm+0x1a/0x30 [ 1924.694929][ T30] [ 1924.694959][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1924.810209][ C0] NMI backtrace for cpu 0 [ 1924.810231][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1924.810251][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1924.810261][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1924.810294][ C0] Code: 7b 7e 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 b1 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1924.810309][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 1924.810326][ C0] RAX: 00000000003e6faf RBX: ffffffff819a815a RCX: 0000000080000001 [ 1924.810339][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa39f2 RDI: ffffffff8c28aa60 [ 1924.810350][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 1924.810363][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 1924.810374][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 1924.810387][ C0] FS: 0000000000000000(0000) GS:ffff888125293000(0000) knlGS:0000000000000000 [ 1924.810400][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1924.810412][ C0] CR2: 00007f77a43e8158 CR3: 0000000074e7e000 CR4: 00000000003526f0 [ 1924.810429][ C0] Call Trace: [ 1924.810437][ C0] [ 1924.810443][ C0] default_idle+0x9/0x20 [ 1924.810463][ C0] default_idle_call+0x72/0xb0 [ 1924.810483][ C0] do_idle+0x36a/0x5f0 [ 1924.810506][ C0] ? __pfx_do_idle+0x10/0x10 [ 1924.810531][ C0] cpu_startup_entry+0x43/0x60 [ 1924.810549][ C0] rest_init+0x2de/0x300 [ 1924.810571][ C0] start_kernel+0x38a/0x3e0 [ 1924.810591][ C0] x86_64_start_reservations+0x24/0x30 [ 1924.810625][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1924.810646][ C0] common_startup_64+0x13e/0x147 [ 1924.810675][ C0] [ 1924.993312][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1925.000339][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1925.009472][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1925.019571][ T30] Call Trace: [ 1925.022866][ T30] [ 1925.025825][ T30] vpanic+0x56c/0xa60 [ 1925.029820][ T30] ? __pfx___schedule+0x10/0x10 [ 1925.034704][ T30] ? __pfx_vpanic+0x10/0x10 [ 1925.039212][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1925.045429][ T30] panic+0xc5/0xd0 [ 1925.049164][ T30] ? __pfx_panic+0x10/0x10 [ 1925.053594][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1925.059051][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1925.065221][ T30] watchdog+0x102c/0x1030 [ 1925.069698][ T30] ? watchdog+0x1c9/0x1030 [ 1925.074141][ T30] kthread+0x388/0x470 [ 1925.078395][ T30] ? __pfx_watchdog+0x10/0x10 [ 1925.083261][ T30] ? __pfx_kthread+0x10/0x10 [ 1925.087881][ T30] ret_from_fork+0x514/0xb70 [ 1925.092667][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1925.097796][ T30] ? __switch_to+0xc79/0x1410 [ 1925.103395][ T30] ? __pfx_kthread+0x10/0x10 [ 1925.108004][ T30] ret_from_fork_asm+0x1a/0x30 [ 1925.112797][ T30] [ 1925.116706][ T30] Kernel Offset: disabled [ 1925.121138][ T30] Rebooting in 86400 seconds..