last executing test programs: 12.109763765s ago: executing program 4 (id=2945): r0 = socket(0xa, 0x1, 0x0) close(r0) (async) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @local}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @local}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x3}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100800000000000000005000000180001801400020074756e6c3000000000000000000000000500070005"], 0x34}}, 0x0) socket(0xa, 0x3, 0xff) (async) r5 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r5, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x4, @empty, 0xf0}, 0x1c, 0x0}, 0x20008b98) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x93, "da5629d32374d4f9bd88f9bc22f238868d5808ec9aa61152f33f3fd5bed75d3620c622cdc06eed92d4666bc9e491639ab00183a1a1cf6455995ce9487d5cda8e92e9c3f14d98e16e509d69c83e34fea892bf6c4c57420663b170791aba09474fc788fd86590ddfd10fa964e299ffe24979a0c83987cb55eb98519188eab3822ef2855af5ed6d8b3205c37a9c9bed482b49c850"}, &(0x7f0000000440)=0x9b) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={r7, 0x1131}, 0x8) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'bond_slave_1\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x4c, 0x9, 0x7, 0x7, 0x5, 0xff, 0x8, 0x6, 0x0, 0x9, [0x5, 0x9, 0x2, 0x400, 0x3, 0x7, 0x7, 0x2]}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'bond_slave_1\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x4c, 0x9, 0x7, 0x7, 0x5, 0xff, 0x8, 0x6, 0x0, 0x9, [0x5, 0x9, 0x2, 0x400, 0x3, 0x7, 0x7, 0x2]}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb0800450000140000000001060000000203040506070800000c0002000600200086dd00000c0003"], 0x58}}, 0x0) (async) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb0800450000140000000001060000000203040506070800000c0002000600200086dd00000c0003"], 0x58}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) read(r10, &(0x7f0000000080)=""/180, 0xb4) (async) read(r10, &(0x7f0000000080)=""/180, 0xb4) socket$inet6(0xa, 0x3, 0x1) (async) socket$inet6(0xa, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.70554838s ago: executing program 4 (id=2949): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)={0x14, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x0, 0x4, {{0x7, 0x4, 0x3, 0x2, 0x1c, 0x65, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0xc, [@broadcast]}]}}}}}) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0x504, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_FAMILY={0x5, 0xd, 0x2b}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) 11.429234447s ago: executing program 4 (id=2954): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, 0x8032, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000002180)={0x7, &(0x7f0000002080)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @remote}]}) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000300)={{0x2, 0x4e23, @broadcast}, {0x6, @remote}, 0x10, {0x2, 0x4e24, @loopback}, 'nr0\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000002000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x1, &(0x7f0000001000)=""/4096, 0x1000}, &(0x7f0000002040)=0x40) 11.15377155s ago: executing program 4 (id=2957): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x3ff, 0x5d5, 0x2, 0xffffffff, 0x5, 0x9, 0x5, 0x4, r1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x1, 0x2, 0x4, 0x3, 0xff, 0xd8, 0x4, 0xb6, 0x4, 0x2, 0x2, 0x65, 0xf1}, 0xe) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e1f, @loopback}, @in6={0xa, 0x4e24, 0xf711, @loopback, 0xfffff8f6}]}, &(0x7f0000000440)=0x10) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@private1, 0x0}, &(0x7f0000000180)=0x14) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=r3], 0x4b) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={r3, 0x10}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1830000001000000000000000300000095000000000000006b37c23dd648c3d427c6434a9fda9166783375c7a14c803f16ff4f7b20fd38a0e4c66269f17f11f5d74ab5fa4d505c347cab2e98b0cd7d6b17e92f30ca169b00de5b23a54dea9622cb37064e68f67e12f5dc9d1dc4b97c981892a9ed72d00e1048d3eda9168a59f41bbf6c75db215df5fb6cbc0012d0cb4c2dcf922f2f2dc553e5cae0da9aae8f1ac577d689106b1800a163a8a79f8ffcfb03b20b8b242178d6ef5839cbbe392fe204130787616e2e6e570b69b2d645f2a4a9219fb234b10005275b12bd0d70d4149f103a3c67ebff1c8365d5ab9d"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 32) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl2\x00', r5, 0x4, 0x9, 0xf, 0x10000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x80, 0x7800, 0x80, 0x10000}}) 10.873628291s ago: executing program 4 (id=2960): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x46, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='.\x00', &(0x7f0000000300)=[0x0], 0x0, 0x1, 0x1}}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x891e, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) syz_emit_ethernet(0x6f, &(0x7f0000000100)=ANY=[], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x2, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x94}, 0x1, 0x7a00}, 0x0) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c40000000a06010100000000000000000300000908000944800000010900020073797a31000000000500010007000000080009400000000588000880"], 0x13a}, 0x1, 0x0, 0x0, 0x90be2d9b0c93a716}, 0x48084) r9 = socket(0x2b, 0x80801, 0x1) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) poll(&(0x7f0000000a00)=[{r9, 0x3000}], 0x1, 0xb) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="5e6970ca37673104000000000000"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000095000000000000005882"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r7, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) 2.554112802s ago: executing program 2 (id=3027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r2, 0x16, 0x1, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000600), 0x80400) sendmsg$tipc(r3, &(0x7f0000000b00)={&(0x7f0000000640)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x3}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000680)="544c3191d5df1992ee74df75e20a08c0f7f3b1ddb017a12f83f1815dda3a5836cb50eb30ff24ecb394c00f185413f73e64b17146fe027d69eb9ef70986023932d3008f8f71ee937b9f043340260437d7c03a84f6ed85512c5415eb12fdcc06f0c50c678dab7a8dbb8ee2d5550f83f7cc98ea059ef93939e8630540dd66c9784b3f88f26bcf5dc8e8d2f31bd296696815698d7c24dae3a61b3ad38a45f8bdad", 0x9f}, {&(0x7f0000000740)="b39b80221b87b418b5143cf477676d99c1c87858445fb1dae4e302cdf9bf1b30bc291d239c884351692b48d0c268f3a44216ead117c121bd7d1aac5b5dfae39148689e4fd0f687b485c48fd3bbf1c173d667fbb90e95d6a96160c59ceb1f80534f026fa5ed7bd01c4a9a8f6f9a1a1e2c74e955828948f61060212b1e9f", 0x7d}, {&(0x7f00000007c0)="9e9400f769408fa0d57c9028132f550c67c2d1d826b52339b3", 0x19}, {&(0x7f0000000800)="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", 0xfc}, {&(0x7f0000000900)="cd1781bdadd901a2b3ac3e84fd2d9371657d25c891f71e4ed10ec8a74274a68e85ed2161c88fef8a911c16cd489ba198f1b1ff2500b176f9f5e516a2f2d5ab52b98880adb0a860b7ca", 0x49}, {&(0x7f0000000980)="3e7b42a8a87fe8ce38d27ce1e5f5dc5f95adfc5e8c19cb4229baf8c4", 0x1c}], 0x6, &(0x7f0000000a40)="d0c4c9b96bbde08c56fa16305705ec710a36d8ec9032a3a810c16d0b64e1844af14079c6ea0d50db867f6f03b761361518de851f9c87fcf94f53a3ebd74286f5517ae8a5545ac22abe0c5d3c51651113541523805717c25ed391fabc9bc660b4e20dbbba248fc64e1fe13b4906f1bf4a1c3e30de683f38f75baa54a81d3eefca4e44fcfa6b502cb4c0ae9027b04e3c74c933f7b1", 0x94, 0x40000}, 0x20048000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6001}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0x91, 0x11, 0xff, @local, @remote, {[], "16c5d734de3851802dacf81b59e777df562600d5c3452d9d3bd93794cb1c088f0087f7be90e90126c6baf8f61b32c62ecb6255c2d515e4812f3f66d95c54055d059845cb1eff62b23143db27deafb318f405f0b072c59927ff91da443e9d49978a22a7ed7d3d2dff5ed3c553feabedeb14c967afbb66b1f13d290f276534c4e95f26c8f93b12e1c948476c9008af8364bf"}}}}, 0xc7) 2.029027727s ago: executing program 2 (id=3031): r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) connect$rxrpc(r0, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async) connect$rxrpc(r0, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async) 1.785590284s ago: executing program 2 (id=3034): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)={0xc}, 0x8) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e27, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x200) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000000), 0x4) sendto(0xffffffffffffffff, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000001f40)=""/13, 0xd}, {&(0x7f0000000b00)=""/163, 0xa3}, {&(0x7f0000000a00)=""/230, 0xe6}], 0x6}, 0x4}], 0x38, 0x40000001, 0x0) recvfrom(r5, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x14, r3, 0xe701ac47a3d23ecd}, 0x14}}, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f00000000c0)={@dev, @remote, 0x0}, &(0x7f0000000100)=0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newlink={0xdc, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x1260c}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "b965cdcac0f3abc2b9596b4f574f168e"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_PROFILE={0x9, 0x2, 'icmp\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6977dd2ba03a5eb186c747a4e429e1c3"}]}, @IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r8}, @IFLA_GRE_LINK={0x8, 0x1, r10}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x38}}]}}}]}, 0xdc}}, 0x0) 1.54170378s ago: executing program 1 (id=3038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x841}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="cd26d0940000000000fc1996000000ee81d31a00"]) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r7, 0xff07, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0xfffffffffffffdd1, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\b', @ANYRES16=r6, @ANYRES32=r3, @ANYRES64=r10], 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x10) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0xfffffffffffffdd1, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\b', @ANYRES16=r6, @ANYRES32=r3, @ANYRES64=r10], 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x10) 1.541265715s ago: executing program 0 (id=3039): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x2010, 0xffffffffffffffff, 0x0) 1.476574545s ago: executing program 0 (id=3040): socket$nl_generic(0x11, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x0, 0x800000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, '\x00\x00C\x00'}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4e}]}, 0x38}}, 0x4) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x10000000) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x83}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="4ba72c080000575075be9ef16a9aba2164c926f551140000aef900000000b98b26427ea583e3e16860640d556220a0cfcd89d072452251cd414d73f20addcff501b334fca3aece08217834b3fc933d392b4d26d9295804966343b1d07c088ca142b4aa1b1f814971d90f8c801217299a2099d895b71a9d06c3845d7dedf68a5d4438902d85bd1b4cb99e98407d6ecda97760", 0x92}, {&(0x7f0000000140)="9662886e7853c18710f51373b303c87c793e52099b2b6854e0557609ab9244f91e2f9ddaba829c43f9b54b568b252a2655f976a6bc66ba870ac1c2e720ebc9863d0f136ba72850146b25a5edb6037372a5d49e1bfe11aef123df77754eda445720cef356fea41ddc0f34d31945740648f2628c1e642c49e77f468a09905a3b9de1bd0ec3be54c8717f95b4a42256c947387c2f3ad0c5e2851d5a9c6fefab95890441cf2a894fc5c6dbe04fdcb2cd3487b2d4152d1e89cd51b25dc6cce3df4365", 0xc0}], 0x2, 0x0, 0x0, 0x11000000}, 0x20004010) 1.454407718s ago: executing program 3 (id=3041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.265674676s ago: executing program 0 (id=3042): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a40)=""/4138, 0x102a}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000100)=""/17, 0x11}], 0x5}, 0xd}], 0x1, 0x40000102, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010001b1d00070000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c0000080002800400130008000400070000000c00240069d0d385efc6b62708000400010100"], 0x54}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000001c0)) 1.254870757s ago: executing program 3 (id=3043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x1e, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004fc0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004fc0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000)=0x2, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002000000000008000340000000d50800044000000001080006400000000408000140000000130900010073797a3000af59000900020073797a32"], 0x94}}, 0x8000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002000000000008000340000000d50800044000000001080006400000000408000140000000130900010073797a3000af59000900020073797a32"], 0x94}}, 0x8000) 1.206894888s ago: executing program 1 (id=3044): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xa, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, &(0x7f0000000040)) 1.038090976s ago: executing program 0 (id=3045): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x23010}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x12, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 1.02962326s ago: executing program 3 (id=3046): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x8502}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3}]}}}]}, 0x3c}}, 0x8000084) r3 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}, 0x40000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000040)=0xecf) 929.986624ms ago: executing program 1 (id=3047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@typed={0x39, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c325"}, @typed={0x7, 0x1b, 0x0, 0x0, @str='{:\x00'}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) 773.018755ms ago: executing program 2 (id=3048): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getpid() sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r7, 0xc003}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x4880) writev(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r9, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r9, 0x0, 0x20000000}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) socket$inet6_icmp(0xa, 0x2, 0x3a) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r12, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r10}, 0x20) sendmmsg$inet6(r10, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) sendto$inet6(r10, &(0x7f0000000000)="18f9", 0xc3ff, 0x4, 0x0, 0x0) 762.923299ms ago: executing program 3 (id=3049): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) 718.400877ms ago: executing program 1 (id=3050): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5c6}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x0, 0x2, 0x94}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7d}, @NFTA_EXTHDR_TYPE={0xfffffffffffffdc3, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x20000000) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x0, 0x2, 0x94}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7d}, @NFTA_EXTHDR_TYPE={0xfffffffffffffdc3, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x20000000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x18, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r11, &(0x7f00000005c0)=[{&(0x7f0000000800)='//', 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r12, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r12, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r12, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, 0x0, 0x577801, 0x100408) bind$netlink(r10, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) bind$netlink(r10, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r13, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 562.732709ms ago: executing program 0 (id=3051): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000001100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"], 0x48) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 453.641998ms ago: executing program 3 (id=3052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r0], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x7800, 0x1, 0x4, 0x7, {{0x40, 0x4, 0x3, 0x7, 0x100, 0x67, 0x0, 0x23, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, {[@timestamp_addr={0x44, 0x24, 0x9d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}, {@multicast2, 0x40}, {@remote}, {@private=0xa010102, 0x1ff}]}, @timestamp_addr={0x44, 0x24, 0x74, 0x1, 0x8, [{@private=0xa010101, 0x3e20}, {@private=0xa010102, 0x3c}, {@rand_addr=0x64010101, 0x800}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x16}]}, @cipso={0x86, 0x68, 0x3, [{0x0, 0x11, "d937e1ebfd4efc0e4017c337c240cf"}, {0x2, 0x9, "8c25c80a4335bb"}, {0x1, 0xd, "87116228e5cd699b027573"}, {0x0, 0x11, "07a3db687d6454eff95450cd05add6"}, {0x6, 0x6, "9915c011"}, {0x0, 0x5, ';y]'}, {0x6, 0x6, "5eb85b68"}, {0x1, 0x8, "4efc816d2e25"}, {0x5, 0x11, "0a166d2036a5ec8243f1eb6ec92966"}]}, @rr={0x7, 0x7, 0x38, [@private=0xa010100]}, @generic={0x86, 0xa, "ffbf971683f0d874"}, @noop, @cipso={0x86, 0x27, 0x3, [{0x6, 0xe, "9ab8de40e164242dcf7a81b3"}, {0x6, 0xb, "591e8627bc7089ad84"}, {0x5, 0x2}, {0x7, 0x6, '~Elg'}]}]}}}}}) 430.681361ms ago: executing program 1 (id=3053): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x18, 0x810}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) 342.70808ms ago: executing program 0 (id=3054): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) splice(r2, &(0x7f0000000040)=0xfffffffffffffffc, r1, 0x0, 0x800000000ff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711067000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 193.821691ms ago: executing program 3 (id=3055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xb15}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r5 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r7, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_UNRESVSP64(r3, 0x4030582b, &(0x7f0000000240)={0x1, 0x1, 0x1ff, 0xfffffffffffffffe, 0x3, 0x401}) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x840) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r16], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0xfc, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0xc6, 0x19, "fe7c5a63dba519f4251aba29bd9a4b76a3b5883c5f6efd9ed8cebfa7c02d14669b3e8f89341bff3f4433f62a54402fe9c1cdff67c35530e83c4d784326c836651bab53e2bf27fdde2a1a8ab0c380bc8edb1a03a53a8666dfc93d890fc75b2d6b8ca5cf93fdb7211ece61cd52658516080cf2af31d201767c2bdcf46b6a1cd7d10b639bd564786e1250968d2515a7271b86b7ecc0605501fb6fabad80fd88511bb212634b371e48a27b1c270a025cfce9deee75f694041b18a89202a03fe0149d625c"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x40) write$nci(r6, &(0x7f0000000140)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x0, 0x3, 0x9, 0x69}, 0x3) bind$inet6(r4, &(0x7f0000000480)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) 191.043013ms ago: executing program 2 (id=3056): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x8, 0x2}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = socket$l2tp(0x2, 0x2, 0x73) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 187.632523ms ago: executing program 1 (id=3057): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021000000000005001b000000000005000c0001000000080022"], 0x84}}, 0x200088c2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000200)={'gretap0\x00', r2, 0x700, 0x7800, 0xfffffffd, 0x876, {{0x13, 0x4, 0x3, 0x23, 0x4c, 0x66, 0x0, 0xc, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp={0x44, 0x20, 0x41, 0x0, 0x1, [0xf, 0x200, 0x0, 0x4, 0x2b6, 0x1, 0x8]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xf3, 0x1, 0x9, [{@local, 0x7ff}, {@local, 0x73}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@delqdisc={0x98, 0x25, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x6, 0x8}, {0x4, 0x2}, {0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}, @TCA_RATE={0x6, 0x5, {0x6, 0xf9}}, @qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xfff}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x6ce}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x3}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3, 0x2, 0x5f, 0x0, 0xfffffa04, 0x9, 0x2}}, {0x8, 0x2, [0x40, 0x94]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf25040000000800040002000000040005"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) (async) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf25040000000800040002000000040005"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r12, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r12, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x67, 0x2, {{'cbc(serpent)\x00'}, 0xf8, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b270566"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x67, 0x2, {{'cbc(serpent)\x00'}, 0xf8, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c994df42d7b270566"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 146.306866ms ago: executing program 4 (id=2964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x6c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x4a, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb08002c00001c0000000001010000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e8f67a6eae8c74bb6d88367cdb0c8571c"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x6c}}, 0x0) mmap(&(0x7f0000cee000/0x2000)=nil, 0x2000, 0x4000002, 0x3032, r1, 0x2a1cf000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r3, 0x100000000) r4 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fe500000007110160000000000181602000f8c600687b9c5d999d1428afdb4f1b96bbabe5797e01d7d7fa8e1a35db8bf29906d1129441e16511eaf9be4795c1cceb72f0b298c2fa51c4dda6ec24abea87100ecdc2a5a83761a14990f9feb03291dc240d05e6fa42080a3de41c8f29f9cc457754cd6dbe1a6c8b7383c59cd072c98406f", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 0s ago: executing program 2 (id=3058): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000090000006b1141000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffc84, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) (async) bind$packet(0xffffffffffffffff, &(0x7f0000001600)={0x11, 0x19, r3, 0x1, 0x5, 0x6, @broadcast}, 0x14) (async, rerun: 64) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)="354adaf017527beee2d9bd4b726fa6376280517e193daaba65a5d85e8ed71c1ad06f2d7554f678ebf321dfe07321d9c3f06105c2cd2dcc55a669a73fb78c4770279f844092a89c71470ae33786bdb480e4a72bff503f75f3893f28bbc9fb84bd3b285d6fcba00627b0df9331f38e5e1a7d6669daf653013fc7b6e3ff049469c64488624fb22979ebd60eb1204fe95baff9e36d1fb2dfd6b027a502e25e4866152533affc08006c78f3fd34e870b181ec808ff654589204bcd1967f1ba656abe67ae009f16205328fa155cf579281b4e9f406560fba5153908e0b94eb49399a2e7faac3e4d9b2800d7c74050009bf53ee47f131f73895", 0xf6}, {&(0x7f0000000200)="d4ca9bd34551359a8ca68c737f4df11cd499525fcb545f2e6a5c59da413101b25858", 0x22}, {&(0x7f00000003c0)="a535a6d282df9d162757eb58e4d8cb5255e7468a496aacca1811c97884218069170bd40f2b0c15d95ba9932e6c5b763182e92b16662affca87cfa7e127d8bbcac0daa09d5d057bb36e63a54005712441bf40d5ffe304d057fc9cafec27c3c1a32696cb61d080f00517fe90d7cb5987f8bca9a393dac07dda1909a2407fcc15732b17f842fb3b8fd098c34da2b0a9c83a5b972c2f990789b463ccfdb8a393870721e6424d39be75e37876a458d3f5d8405b7caec0c6f126b512901b93851c40", 0xbf}, {&(0x7f0000000480)="182260dcca6aeed8add61985ae187c15eed4a4c92615d2c2c3c9fe4b74248c2896410763", 0x24}, {&(0x7f00000004c0)="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", 0x1000}], 0x5, &(0x7f0000001540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x48}, 0xc0) (rerun: 64) kernel console output (not intermixed with test programs): 3772][ T8685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.601573][ T8682] sctp: [Deprecated]: syz.0.811 (pid 8682) Use of int in max_burst socket option. [ 151.601573][ T8682] Use struct sctp_assoc_value instead [ 151.663007][ T8685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.775176][ T8694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.087051][ T8710] netlink: 'syz.0.822': attribute type 14 has an invalid length. [ 152.097158][ T8711] netlink: 'syz.2.821': attribute type 16 has an invalid length. [ 152.108477][ T8710] netlink: 'syz.0.822': attribute type 13 has an invalid length. [ 152.175942][ T8715] xt_nfacct: accounting object `' does not exist [ 152.463690][ T8730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.675466][ T8736] xt_nat: multiple ranges no longer supported [ 153.228916][ T8763] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 153.322339][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.330585][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.895464][ T8798] macsec1: entered promiscuous mode [ 154.361716][ T8830] netlink: 'syz.3.860': attribute type 21 has an invalid length. [ 154.536628][ T79] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.560743][ T79] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.604637][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.612890][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.641823][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.749453][ T8842] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 154.846700][ T79] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.930284][ T8858] __nla_validate_parse: 80 callbacks suppressed [ 154.930312][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 155.047569][ T8862] netlink: 48 bytes leftover after parsing attributes in process `syz.3.867'. [ 155.456617][ T8887] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 156.086367][ T8919] netlink: 248 bytes leftover after parsing attributes in process `syz.2.882'. [ 156.231155][ T8930] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.337454][ T8941] bridge2: entered promiscuous mode [ 156.363216][ T8941] bridge2: entered allmulticast mode [ 157.189476][ T8975] netlink: 'syz.4.897': attribute type 4 has an invalid length. [ 157.206667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.242159][ T8978] netlink: 'syz.4.897': attribute type 4 has an invalid length. [ 157.416782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.796734][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 157.807578][ T1621] block nbd0: Possible stuck request ffff8880276de000: control (read@0,1024B). Runtime 30 seconds [ 157.818919][ T1621] block nbd0: Possible stuck request ffff8880276de1c0: control (read@1024,1024B). Runtime 30 seconds [ 157.829926][ T1621] block nbd0: Possible stuck request ffff8880276de380: control (read@2048,1024B). Runtime 30 seconds [ 157.840923][ T1621] block nbd0: Possible stuck request ffff8880276de540: control (read@3072,1024B). Runtime 30 seconds [ 157.846150][ T8997] netlink: 76 bytes leftover after parsing attributes in process `syz.1.899'. [ 157.902221][ T9005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.905'. [ 157.913338][ T9003] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 158.132982][ T9003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.159629][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 158.186738][ T9003] syzkaller0: entered promiscuous mode [ 158.197167][ T9023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.908'. [ 158.211563][ T9003] syzkaller0: entered allmulticast mode [ 158.276670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.358766][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.440447][ T9036] bond2: entered promiscuous mode [ 158.443212][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.455612][ T9036] bond2: entered allmulticast mode [ 158.456095][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.472092][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.480516][ T9036] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.488588][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.500092][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.516008][ T6992] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.527448][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.549962][ T149] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.566543][ T149] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.591296][ T149] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.700570][ T9048] openvswitch: netlink: Missing valid actions attribute. [ 158.735374][ T9053] openvswitch: netlink: Missing valid actions attribute. [ 158.773454][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'. [ 158.807920][ T9052] netlink: 14 bytes leftover after parsing attributes in process `syz.1.914'. [ 158.907545][ T9054] netlink: 'syz.2.913': attribute type 1 has an invalid length. [ 158.935287][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 159.482829][ T9085] netlink: 'syz.4.927': attribute type 3 has an invalid length. [ 159.549756][ T9090] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 159.643005][ T9096] ip6t_rpfilter: unknown options [ 159.725218][ T9093] macvlan2: entered promiscuous mode [ 159.730753][ T9093] macvlan2: entered allmulticast mode [ 159.740190][ T9093] bond4: entered promiscuous mode [ 159.753864][ T9093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 159.772037][ T9093] bond4: left promiscuous mode [ 159.805007][ T9098] tipc: Enabling of bearer rejected, media not registered [ 160.005292][ T9111] __nla_validate_parse: 2 callbacks suppressed [ 160.005311][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 160.141939][ T9118] netlink: 'syz.4.938': attribute type 27 has an invalid length. [ 160.400811][ T9123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.512181][ T9126] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.941'. [ 160.624772][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'. [ 160.652041][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'. [ 160.682792][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'. [ 160.739104][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'. [ 160.760790][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.947'. [ 160.773719][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'. [ 160.784491][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'. [ 160.803213][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'. [ 160.823888][ T9146] block nbd0: reconnected socket [ 160.835314][ T9150] erspan0: entered promiscuous mode [ 160.878696][ T5632] block nbd0: Receive control failed (result -32) [ 161.029460][ T9154] 8021q: VLANs not supported on ip6_vti0 [ 161.088726][ T9155] 8021q: VLANs not supported on ip6_vti0 [ 161.178886][ T9155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.828344][ T9185] gretap0: entered promiscuous mode [ 162.018192][ T13] IPVS: starting estimator thread 0... [ 162.116758][ T9193] IPVS: using max 25 ests per chain, 60000 per kthread [ 162.235951][ T9198] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 162.265160][ T9202] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 162.292910][ T9198] gretap1: entered promiscuous mode [ 162.329517][ T9198] gretap1: entered allmulticast mode [ 162.674759][ T9216] syzkaller0: entered promiscuous mode [ 162.695118][ T9216] syzkaller0: entered allmulticast mode [ 163.349187][ T9238] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 163.365192][ T9243] veth1_to_bond: entered allmulticast mode [ 163.417805][ T9243] veth1_to_bond: entered promiscuous mode [ 163.468186][ T9243] veth1_to_bond (unregistering): left allmulticast mode [ 163.490446][ T9243] veth1_to_bond (unregistering): left promiscuous mode [ 163.512355][ T9243] bond0: (slave bond_slave_1): Releasing backup interface [ 163.533653][ T9255] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 163.543489][ T9255] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 163.555468][ T9243] bond_slave_1 (unregistering): left allmulticast mode [ 163.637622][ T36] net_ratelimit: 45 callbacks suppressed [ 163.637640][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.655145][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.669656][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.727274][ T9254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.037115][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.198280][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.212419][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.242832][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.763107][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.994858][ T9321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.341844][ T9330] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 165.484760][ T9337] netlink: 'syz.1.1007': attribute type 1 has an invalid length. [ 165.613806][ T9337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.720068][ T9340] bond1: (slave gretap1): making interface the new active one [ 165.760466][ T9340] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 166.144819][ T9366] __nla_validate_parse: 37 callbacks suppressed [ 166.144838][ T9366] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1013'. [ 166.228043][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 166.396283][ T9376] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 166.412752][ T9376] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1017'. [ 166.428329][ T9378] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 166.458024][ T9378] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1017'. [ 166.497737][ T9376] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 166.535955][ T9376] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1017'. [ 166.556569][ T9380] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 166.579901][ T9380] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1017'. [ 167.274164][ T9430] syzkaller0: entered promiscuous mode [ 167.304735][ T9430] syzkaller0: entered allmulticast mode [ 167.381630][ T9434] xt_SECMARK: invalid mode: 9 [ 167.962676][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 168.182466][ T9475] syzkaller0: entered promiscuous mode [ 168.198835][ T9475] syzkaller0: entered allmulticast mode [ 168.281486][ T9485] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1048'. [ 168.314846][ T9475] xt_hashlimit: size too large, truncated to 1048576 [ 168.478344][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.536134][ T9496] lo: entered promiscuous mode [ 168.579233][ T9496] tunl0: entered promiscuous mode [ 168.685878][ T9496] gre0: entered promiscuous mode [ 168.783622][ T9496] gretap0: entered promiscuous mode [ 168.906390][ T9496] erspan0: entered promiscuous mode [ 168.942750][ T9496] ip_vti0: entered promiscuous mode [ 169.352017][ T9533] net_ratelimit: 9 callbacks suppressed [ 169.352037][ T9533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.089959][ T9568] netlink: 'syz.3.1060': attribute type 1 has an invalid length. [ 171.105864][ T9559] tc_dump_action: action bad kind [ 171.121988][ T9571] macvtap0: mtu less than device minimum [ 171.287720][ T9574] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 171.368772][ T9574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1064'. [ 171.392870][ T9583] netlink: 'syz.2.1068': attribute type 1 has an invalid length. [ 171.419067][ T9574] x_tables: duplicate underflow at hook 1 [ 171.428748][ T9583] netlink: 'syz.2.1068': attribute type 4 has an invalid length. [ 171.443788][ T9583] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1068'. [ 171.523815][ T9579] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.580640][ T9579] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.793983][ T9608] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1072'. [ 171.813336][ T9610] netlink: 'syz.0.1074': attribute type 1 has an invalid length. [ 171.822746][ T9608] xt_hashlimit: size too large, truncated to 1048576 [ 171.851168][ T9610] netlink: 'syz.0.1074': attribute type 268 has an invalid length. [ 171.886253][ T9610] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1074'. [ 171.922187][ T9579] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.932929][ T9579] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.961243][ T9617] bond0: option miimon: invalid value (18446744071829782528) [ 171.969106][ T9617] bond0: option miimon: allowed values 0 - 2147483647 [ 171.982455][ T9620] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.041731][ T9620] bridge_slave_0 (unregistering): left allmulticast mode [ 172.089190][ T9620] bridge_slave_0 (unregistering): left promiscuous mode [ 172.101415][ T9620] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.249600][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 172.351374][ T9579] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.376588][ T9579] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.561183][ T9579] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.584797][ T9579] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.602415][ T9639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1082'. [ 172.649633][ T9639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.660750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.999847][ T9652] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 173.043780][ T9652] bond5 (unregistering): Released all slaves [ 173.121076][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1088'. [ 173.319421][ T9669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.338316][ T9669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.362656][ T9671] set match dimension is over the limit! [ 173.372431][ T9669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.398921][ T9671] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 173.413327][ T9672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.465641][ T9672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.505913][ T9676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.557702][ T9674] set match dimension is over the limit! [ 173.741109][ T9684] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1095'. [ 173.755872][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1095'. [ 173.796937][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 174.001112][ T9698] tunl0: entered promiscuous mode [ 174.051671][ T9698] netlink: 'syz.1.1098': attribute type 3 has an invalid length. [ 174.096536][ T9698] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1098'. [ 174.169228][ T9703] netlink: 'syz.4.1101': attribute type 3 has an invalid length. [ 174.405636][ T9715] net_ratelimit: 338 callbacks suppressed [ 174.405656][ T9715] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 174.437993][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.671746][ T9721] syzkaller0: entered promiscuous mode [ 174.678279][ T9721] syzkaller0: entered allmulticast mode [ 174.688408][ T9733] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.798181][ T9768] Cannot find del_set index 3 as target [ 176.106178][ T9770] ipt_REJECT: TCP_RESET invalid for non-tcp [ 176.764271][ T9781] __nla_validate_parse: 6 callbacks suppressed [ 176.764284][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 176.786243][ T9783] IPVS: rr: TCP 127.0.0.1:5376 - no destination available [ 176.810026][ T9783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.831592][ T9781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1122'. [ 176.964398][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 177.061167][ T9796] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 177.130244][ T9803] netlink: 'syz.1.1126': attribute type 8 has an invalid length. [ 177.460054][ T9819] netlink: 'syz.3.1135': attribute type 1 has an invalid length. [ 177.472215][ T9820] lo: MTU too low for tipc bearer [ 177.480515][ T9820] tipc: Enabling of bearer rejected, failed to enable media [ 177.518601][ T9819] bond5: entered promiscuous mode [ 177.524259][ T9819] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.687730][ T9822] bond5: (slave bridge5): making interface the new active one [ 177.759703][ T9822] bridge5: entered promiscuous mode [ 177.789142][ T9822] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 178.050118][ T9838] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 178.099482][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'. [ 178.235341][ T9847] h: entered promiscuous mode [ 178.243028][ T9847] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 178.281042][ T9858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1145'. [ 178.345637][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.355978][ T9861] Driver unsupported XDP return value 0 on prog (id 240) dev N/A, expect packet loss! [ 178.368409][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.376237][ T5724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.387994][ T9861] Bluetooth: hci0: unsupported parameter 5135 [ 178.394404][ T9861] Bluetooth: hci0: unsupported parameter 8192 [ 178.401703][ T9861] Bluetooth: hci0: unsupported parameter 5135 [ 178.409089][ T9861] Bluetooth: hci0: unsupported parameter 8192 [ 178.529527][ T9857] veth9: entered promiscuous mode [ 178.656515][ T9878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1150'. [ 178.871969][ T9885] syzkaller0: entered promiscuous mode [ 178.891217][ T9885] syzkaller0: entered allmulticast mode [ 178.899268][ T5724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.968587][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 179.012899][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 179.058012][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 179.074551][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 179.099735][ T9895] tipc: Started in network mode [ 179.108222][ T9895] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 179.119623][ T9895] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 179.129802][ T9895] tipc: Enabled bearer , priority 10 [ 179.158605][ T5724] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.072096][ T9932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.182308][ T9932] syzkaller1: entered promiscuous mode [ 180.203791][ T9932] syzkaller1: entered allmulticast mode [ 180.395385][ T5724] tipc: Node number set to 1 [ 180.743381][ T9946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.857137][ T9959] team0 (unregistering): Port device team_slave_0 removed [ 180.878352][ T9959] team0 (unregistering): Port device team_slave_1 removed [ 181.048121][ T9946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.098610][ T9949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.282648][ T9946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.358305][ T9985] xt_hashlimit: size too large, truncated to 1048576 [ 181.542157][ T9946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.931126][T10020] __nla_validate_parse: 52 callbacks suppressed [ 181.931144][T10020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1191'. [ 182.056487][T10020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1191'. [ 182.075023][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'. [ 182.544209][T10057] bridge_slave_1: left allmulticast mode [ 182.591272][T10062] xt_ecn: cannot match TCP bits for non-tcp packets [ 182.602475][T10057] bridge_slave_1: left promiscuous mode [ 182.618560][T10057] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.652368][T10057] bridge_slave_0: left allmulticast mode [ 182.674391][T10057] bridge_slave_0: left promiscuous mode [ 182.698859][T10057] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.738591][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 182.756633][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.083878][T10091] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20000 [ 183.283763][T10099] netlink: 'syz.0.1209': attribute type 1 has an invalid length. [ 183.357748][T10099] bond5: entered promiscuous mode [ 183.363374][T10099] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.386178][T10104] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.404069][T10104] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 183.418876][T10104] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 183.450927][T10109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1211'. [ 183.476984][T10104] bond5: (slave ip6gre2): making interface the new active one [ 183.513187][T10104] ip6gre2: entered promiscuous mode [ 183.545015][T10104] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 183.595730][T10114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1212'. [ 184.039156][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.045621][T10129] netlink: 'syz.1.1214': attribute type 1 has an invalid length. [ 184.090043][T10129] netlink: 'syz.1.1214': attribute type 2 has an invalid length. [ 184.126619][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 184.147526][T10129] bridge0: port 2(bridge_slave_1) entered listening state [ 184.161186][T10127] netlink: 'syz.1.1214': attribute type 1 has an invalid length. [ 184.181410][T10127] netlink: 'syz.1.1214': attribute type 2 has an invalid length. [ 184.202625][T10127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 184.224217][T10127] bridge0: port 2(bridge_slave_1) entered listening state [ 184.679273][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.065337][T10177] syzkaller0: entered allmulticast mode [ 185.102050][T10177] tipc: Started in network mode [ 185.142125][T10177] tipc: Node identity 5e62bece0b89, cluster identity 4711 [ 185.165719][T10177] tipc: Enabled bearer , priority 0 [ 185.174540][T10189] smc: net device lo applied user defined pnetid SYZ0 [ 185.182204][T10189] smc: smcd device lo applied user defined pnetid SYZ0 [ 185.383411][T10175] tipc: Disabling bearer [ 185.605774][T10213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1234'. [ 185.759633][T10221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.767081][T10221] IPv6: NLM_F_CREATE should be set when creating new route [ 185.795778][T10221] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 186.020454][T10233] netlink: 'syz.2.1243': attribute type 1 has an invalid length. [ 186.210502][T10233] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.405535][T10239] vlan2: entered promiscuous mode [ 186.425866][T10239] bond3: entered promiscuous mode [ 186.457069][T10239] vlan2: entered allmulticast mode [ 186.479311][T10239] bond3: entered allmulticast mode [ 186.702956][T10269] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 186.791449][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'. [ 187.479006][T10314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1258'. [ 187.489129][T10314] xt_hashlimit: overflow, try lower: 3/0 [ 187.504969][T10314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1258'. [ 187.567723][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 187.712703][T10324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1262'. [ 187.869009][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 187.889749][ T1621] block nbd0: Possible stuck request ffff8880276de000: control (read@0,1024B). Runtime 60 seconds [ 187.905259][ T1621] block nbd0: Possible stuck request ffff8880276de1c0: control (read@1024,1024B). Runtime 60 seconds [ 187.917184][ T1621] block nbd0: Possible stuck request ffff8880276de380: control (read@2048,1024B). Runtime 60 seconds [ 187.930701][ T25] block nbd0: Dead connection, failed to find a fallback [ 187.944207][ T1621] block nbd0: Possible stuck request ffff8880276de540: control (read@3072,1024B). Runtime 60 seconds [ 188.227745][T10351] netlink: 'syz.2.1270': attribute type 8 has an invalid length. [ 188.480997][T10361] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 188.528805][T10363] xt_hashlimit: size too large, truncated to 1048576 [ 188.567000][T10363] xt_hashlimit: max too large, truncated to 1048576 [ 188.588170][T10363] xt_hashlimit: overflow, rate too high: 0 [ 188.605015][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1274'. [ 188.686151][T10361] bond7: entered promiscuous mode [ 188.695464][T10361] 8021q: adding VLAN 0 to HW filter on device bond7 [ 188.786761][T10376] bond7: (slave bridge8): making interface the new active one [ 188.808042][T10376] bridge8: entered promiscuous mode [ 188.830785][T10376] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 188.908827][T10374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.549114][T10408] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1285'. [ 189.673448][T10408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.761157][T10408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.019913][T10433] xt_TPROXY: Can be used only with -p tcp or -p udp [ 190.362254][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'. [ 190.423379][T10459] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1296'. [ 190.702529][T10472] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1300'. [ 191.541768][T10517] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 191.552607][T10517] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 191.565192][T10524] netlink: 'syz.4.1315': attribute type 11 has an invalid length. [ 191.634649][T10518] bond8: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 191.677858][T10518] bond8 (unregistering): Released all slaves [ 191.716815][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.809851][T10531] bridge0: port 1(vlan3) entered blocking state [ 191.821038][T10531] bridge0: port 1(vlan3) entered disabled state [ 191.867874][T10531] vlan3: entered allmulticast mode [ 191.892546][T10531] geneve0: entered allmulticast mode [ 191.939765][T10531] vlan3: entered promiscuous mode [ 191.953281][T10531] geneve0: entered promiscuous mode [ 192.437867][T10577] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 192.438009][T10572] netlink: 'syz.3.1327': attribute type 1 has an invalid length. [ 192.621964][T10583] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 193.062909][T10602] openvswitch: netlink: Unknown key attributes 1 [ 193.243926][T10611] netlink: 'syz.1.1340': attribute type 11 has an invalid length. [ 193.254941][T10611] __nla_validate_parse: 3 callbacks suppressed [ 193.254958][T10611] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1340'. [ 193.515771][T10619] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1343'. [ 193.796121][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 193.817560][T10645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1349'. [ 193.869658][T10645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1349'. [ 194.221669][T10668] xt_policy: too many policy elements [ 194.281029][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.288167][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.299129][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.406824][T10673] syz_tun: refused to change device tx_queue_len [ 194.413801][T10674] syz_tun: refused to change device tx_queue_len [ 194.492269][T10682] team0: Device ipvlan0 failed to register rx_handler [ 194.773985][T10693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1361'. [ 195.048911][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 195.097442][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1366'. [ 195.160240][T10704] netlink: 'syz.3.1366': attribute type 15 has an invalid length. [ 195.320434][T10721] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 195.489695][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 195.625891][T10743] netlink: 'syz.0.1377': attribute type 25 has an invalid length. [ 195.644765][T10743] team0: Device gtp2 is up. Set it down before adding it as a team port [ 195.679837][T10745] netlink: 'syz.4.1376': attribute type 1 has an invalid length. [ 195.723732][T10745] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.758030][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'. [ 195.917688][T10749] bond4: (slave geneve3): making interface the new active one [ 195.945707][T10749] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 196.251214][T10769] x_tables: unsorted underflow at hook 1 [ 196.404050][T10774] xt_nat: multiple ranges no longer supported [ 196.482665][T10776] ip6gre1: entered promiscuous mode [ 196.507211][T10776] ip6gre1: entered allmulticast mode [ 196.559032][T10776] netlink: 'syz.1.1387': attribute type 6 has an invalid length. [ 196.633833][T10776] netlink: 'syz.1.1387': attribute type 2 has an invalid length. [ 196.750353][T10776] : entered promiscuous mode [ 197.085731][T10809] netlink: 'syz.4.1396': attribute type 4 has an invalid length. [ 197.219950][T10814] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 198.269709][T10854] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 198.782529][ T1171] IPVS: starting estimator thread 0... [ 198.785514][T10882] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 198.909577][T10888] IPVS: using max 25 ests per chain, 60000 per kthread [ 199.118993][T10896] netlink: 'syz.1.1413': attribute type 1 has an invalid length. [ 199.178444][T10896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 199.409240][T10896] bond4: (slave geneve3): making interface the new active one [ 199.561220][T10896] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 199.642989][T10921] xt_l2tp: invalid flags combination: 8 [ 199.685906][T10921] __nla_validate_parse: 11 callbacks suppressed [ 199.685925][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 200.036161][T10928] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1420'. [ 200.517726][T10956] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1428'. [ 200.550647][T10956] xt_ecn: cannot match TCP bits for non-tcp packets [ 200.695692][T10962] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1431'. [ 201.555297][T11000] bridge9: entered promiscuous mode [ 201.571291][T11000] bridge9: entered allmulticast mode [ 201.688019][T11002] batman_adv: batadv0: Adding interface: gretap2 [ 201.703515][T11002] batman_adv: batadv0: The MTU of interface gretap2 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.732903][T11002] batman_adv: batadv0: Interface activated: gretap2 [ 202.007054][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1444'. [ 202.574371][T11031] tc action pedit offset 1997406208 out of bounds [ 202.683920][T11033] wg1: entered promiscuous mode [ 202.690802][T11033] wg1: entered allmulticast mode [ 202.723020][T11033] netlink: 'syz.0.1450': attribute type 7 has an invalid length. [ 202.765369][T11033] netlink: 'syz.0.1450': attribute type 7 has an invalid length. [ 203.115487][T11046] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.315426][T11052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1454'. [ 203.482529][T11058] openvswitch: netlink: VLAN attribute unexpected. [ 203.547723][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1457'. [ 203.665376][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'. [ 203.877453][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.965114][T11075] netlink: 'syz.0.1460': attribute type 8 has an invalid length. [ 204.119360][T11078] netlink: 'syz.0.1460': attribute type 12 has an invalid length. [ 204.540232][T11095] Bluetooth: hci0: unsupported parameter 5134 [ 204.549780][T11095] Bluetooth: hci0: unsupported parameter 8192 [ 204.555982][T11095] Bluetooth: hci0: unsupported parameter 5134 [ 204.563700][T11095] Bluetooth: hci0: unsupported parameter 8192 [ 204.982177][T11112] netlink: 'syz.4.1471': attribute type 58 has an invalid length. [ 205.020819][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1471'. [ 205.156754][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 205.469056][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'. [ 205.554131][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'. [ 205.649197][T11141] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.682908][T11141] bond0: (slave bond4): Enslaving as an active interface with an up link [ 206.353758][T11170] netlink: 'syz.3.1483': attribute type 2 has an invalid length. [ 206.390432][T11169] x_tables: unsorted entry at hook 1 [ 206.681868][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1489'. [ 206.851334][T11186] ip_tables: iptables: counters copy to user failed while replacing table [ 207.383090][T11211] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 207.473803][T11216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1497'. [ 207.701304][T11222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1499'. [ 207.768075][T11223] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1500'. [ 207.793108][T11222] syzkaller0: left promiscuous mode [ 207.809860][T11222] syzkaller0: left allmulticast mode [ 207.849863][T11229] No such timeout policy "syz0" [ 207.860300][T11236] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1501'. [ 208.356694][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.815194][T11264] netlink: 'syz.0.1511': attribute type 1 has an invalid length. [ 208.928338][T11267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1511'. [ 209.028820][T11266] veth3: entered promiscuous mode [ 209.051584][T11266] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 209.064053][T11267] 8021q: adding VLAN 0 to HW filter on device bond6 [ 209.224823][T11281] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1514'. [ 209.305823][T11289] pimreg: entered allmulticast mode [ 209.911434][T11314] netlink: 'syz.2.1523': attribute type 22 has an invalid length. [ 210.114819][T11314] netlink: 'syz.2.1523': attribute type 22 has an invalid length. [ 210.125643][T11320] pim6reg527: entered allmulticast mode [ 210.137310][T11328] nbd: couldn't find device at index 1 [ 210.167594][T11319] __nla_validate_parse: 1 callbacks suppressed [ 210.167611][T11319] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1525'. [ 210.196305][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'. [ 211.278294][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'. [ 211.345060][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'. [ 211.462177][T11378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1540'. [ 211.584154][T11378] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 212.079564][T11403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1550'. [ 212.105853][T11401] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1548'. [ 212.123471][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 212.124831][T11404] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 212.212513][T11404] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1547'. [ 212.285247][T11404] netlink: 'syz.3.1547': attribute type 8 has an invalid length. [ 212.285698][T11408] gtp1: entered promiscuous mode [ 212.354895][T11408] gtp1: entered allmulticast mode [ 212.381255][T11414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 212.400584][T11401] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.996099][T11481] netlink: 'syz.4.1570': attribute type 12 has an invalid length. [ 214.655019][T11504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.985502][T11514] netlink: 'syz.4.1581': attribute type 1 has an invalid length. [ 215.218111][T11519] veth5: entered promiscuous mode [ 215.243848][T11519] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 215.263434][T11525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.484699][T11541] xt_l2tp: v2 doesn't support IP mode [ 215.504570][T11541] Unknown options in mask 4 [ 215.688077][T11550] __nla_validate_parse: 3 callbacks suppressed [ 215.688098][T11550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'. [ 215.713385][T11552] netlink: 'syz.4.1590': attribute type 4 has an invalid length. [ 215.722012][T11553] netlink: 'syz.4.1590': attribute type 4 has an invalid length. [ 216.040133][T11564] Cannot find map_set index 135 as target [ 216.148975][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'. [ 216.589390][T11584] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 216.661750][T11588] x_tables: duplicate underflow at hook 2 [ 216.902132][T11597] netlink: 'syz.3.1603': attribute type 5 has an invalid length. [ 217.111225][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 217.138696][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'. [ 217.243121][T11608] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 217.552556][T11612] 8021q: adding VLAN 0 to HW filter on device bond7 [ 217.632057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.280944][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'. [ 218.361421][T11660] veth1_to_bond: entered allmulticast mode [ 218.424411][T11660] veth1_to_bond: left allmulticast mode [ 218.444126][T11657] wg0 speed is unknown, defaulting to 1000 [ 218.461629][T11657] wg0 speed is unknown, defaulting to 1000 [ 218.505487][T11657] wg0 speed is unknown, defaulting to 1000 [ 218.529183][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.588215][T11657] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 218.694857][T11657] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 218.730603][T11657] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 218.800632][T11657] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 218.826207][T11657] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 218.843508][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1624'. [ 218.868140][T11686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1625'. [ 218.902389][T11686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1625'. [ 218.973576][T11657] wg0 speed is unknown, defaulting to 1000 [ 219.013905][T11657] wg0 speed is unknown, defaulting to 1000 [ 219.049698][T11657] wg0 speed is unknown, defaulting to 1000 [ 219.070228][T11657] wg0 speed is unknown, defaulting to 1000 [ 219.081949][T11657] wg0 speed is unknown, defaulting to 1000 [ 219.394327][T11705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1630'. [ 219.943652][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1641'. [ 220.220414][T11740] tipc: Enabling of bearer rejected, failed to enable media [ 220.271310][T11740] netlink: 'syz.2.1646': attribute type 1 has an invalid length. [ 220.301840][T11744] netlink: 'syz.1.1647': attribute type 2 has an invalid length. [ 220.686199][T11765] siw: device registration error -23 [ 221.224695][T11792] __nla_validate_parse: 6 callbacks suppressed [ 221.224716][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1659'. [ 221.285384][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1659'. [ 221.509975][T11807] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20001 [ 221.523008][T11806] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1665'. [ 221.548794][T11806] xt_hashlimit: size too large, truncated to 1048576 [ 221.672973][T11815] –: renamed from vxcan1 [ 221.715915][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1665'. [ 222.419710][T11847] netlink: 'syz.3.1677': attribute type 16 has an invalid length. [ 222.445451][T11847] netlink: 'syz.3.1677': attribute type 17 has an invalid length. [ 222.461639][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 222.504055][ T13] IPVS: starting estimator thread 0... [ 222.515541][T11861] IPVS: rr: TCP 127.0.0.1:5376 - no destination available [ 222.612990][T11847] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.622092][T11862] IPVS: using max 28 ests per chain, 67200 per kthread [ 222.713514][T11847] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 222.730721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.793151][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.800493][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.808440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.845117][T11875] netlink: 'syz.1.1683': attribute type 1 has an invalid length. [ 222.856128][T11867] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1681'. [ 222.924206][T11875] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.970142][T11876] bond5: (slave gretap3): making interface the new active one [ 222.978827][T11876] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 223.175025][T11891] netlink: 'syz.2.1687': attribute type 1 has an invalid length. [ 223.288165][T11891] bond5: entered promiscuous mode [ 223.293881][T11891] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.361058][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1690'. [ 223.629008][T11911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1692'. [ 223.650809][T11911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1692'. [ 223.823217][T11911] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 223.864196][T11911] bond6 (unregistering): Released all slaves [ 224.066680][T11926] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 224.279721][T11913] netlink: 'syz.4.1693': attribute type 2 has an invalid length. [ 224.295515][T11936] netlink: 'syz.1.1701': attribute type 5 has an invalid length. [ 224.314491][T11913] tipc: Enabled bearer , priority 10 [ 224.425802][T11941] netlink: 'syz.0.1702': attribute type 26 has an invalid length. [ 224.427819][T11940] netlink: 'syz.0.1702': attribute type 26 has an invalid length. [ 224.724665][T11960] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 224.809373][T11960] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20004 [ 224.843693][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1706'. [ 224.896585][T11960] block nbd2: Unsupported socket: should be TCP or UNIX. [ 225.130389][T11978] 8021q: VLANs not supported on sit0 [ 225.280342][T11987] netlink: zone id is out of range [ 225.308655][T11987] netlink: zone id is out of range [ 225.326595][T11989] netlink: 'syz.4.1714': attribute type 30 has an invalid length. [ 225.335736][T11987] netlink: zone id is out of range [ 225.404248][T11987] netlink: zone id is out of range [ 225.452614][T11987] netlink: zone id is out of range [ 225.463163][T11997] Bluetooth: hci0: unsupported parameter 5134 [ 225.491047][T11997] Bluetooth: hci0: unsupported parameter 8192 [ 225.508963][T11997] Bluetooth: hci0: unsupported parameter 5134 [ 225.529949][T11997] Bluetooth: hci0: unsupported parameter 8192 [ 226.179107][T12023] xt_hashlimit: size too large, truncated to 1048576 [ 226.259769][T12026] __nla_validate_parse: 7 callbacks suppressed [ 226.259789][T12026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1725'. [ 226.325297][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'. [ 226.339959][T12031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1727'. [ 226.451138][T12006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1719'. [ 226.478667][T12036] netlink: 'syz.2.1729': attribute type 4 has an invalid length. [ 226.504273][T12036] netlink: 'syz.2.1729': attribute type 4 has an invalid length. [ 226.620557][T12047] netlink: 'syz.4.1730': attribute type 11 has an invalid length. [ 226.650369][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 226.685427][T12047] netlink: 'syz.4.1730': attribute type 11 has an invalid length. [ 226.734803][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 227.104541][T12062] netlink: 'syz.3.1732': attribute type 10 has an invalid length. [ 227.221674][T12071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1734'. [ 227.470448][T12080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1735'. [ 227.720565][T12093] net_ratelimit: 9 callbacks suppressed [ 227.720584][T12093] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 227.839865][T12093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1742'. [ 228.263083][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 228.642302][T12140] openvswitch: netlink: Duplicate key (type 0). [ 228.924635][T12155] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 229.057150][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880363c3400: rx timeout, send abort [ 229.429247][T12140] infiniband syz2: set down [ 229.442732][T12140] infiniband syz2: added ipvlan0 [ 229.494437][T12175] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 229.521308][T12140] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 229.538112][T12140] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 229.556209][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880363c1000: rx timeout, send abort [ 229.565741][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880363c3400: abort rx timeout. Force session deactivation [ 229.578393][T12140] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 229.698954][T12184] hsr_slave_0: left promiscuous mode [ 229.711180][T12140] RDS/IB: syz2: added [ 229.721835][T12140] smc: adding ib device syz2 with port count 1 [ 229.728909][T12184] hsr_slave_1: left promiscuous mode [ 229.748534][T12140] smc: ib device syz2 port 1 has no pnetid [ 229.793860][T12181] openvswitch: netlink: Message has 8 unknown bytes. [ 229.802843][T12181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.001634][T12196] ksmbd: Unknown IPC event: 1, ignore. [ 230.056298][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880363c1000: abort rx timeout. Force session deactivation [ 230.121696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.313966][T12208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.789056][T12281] __nla_validate_parse: 12 callbacks suppressed [ 231.789076][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'. [ 231.857153][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1792'. [ 232.130546][T12296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1798'. [ 232.131360][T12295] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1797'. [ 232.497433][T12304] xt_policy: output policy not valid in PREROUTING and INPUT [ 232.843256][T12312] openvswitch: netlink: Message has 8 unknown bytes. [ 232.859650][T12312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.276759][T12336] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1809'. [ 233.820271][T12354] x_tables: duplicate underflow at hook 1 [ 234.040811][T12358] syzkaller0: entered promiscuous mode [ 234.067243][T12358] syzkaller0: entered allmulticast mode [ 234.095880][T12360] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 234.321542][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1821'. [ 234.477891][T12373] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.497445][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 234.555879][T12379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.563225][T12379] IPv6: NLM_F_CREATE should be set when creating new route [ 234.570561][T12379] IPv6: NLM_F_CREATE should be set when creating new route [ 234.577828][T12379] IPv6: NLM_F_CREATE should be set when creating new route [ 234.586131][T12379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.901787][T12392] tipc: Started in network mode [ 234.917590][T12392] tipc: Node identity ac14140f, cluster identity 4711 [ 234.935308][T12392] tipc: New replicast peer: 255.255.255.255 [ 234.958908][T12392] tipc: Enabled bearer , priority 10 [ 235.283912][T12412] x_tables: duplicate underflow at hook 3 [ 235.397434][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1834'. [ 235.442241][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1834'. [ 235.739783][T12444] netlink: 'syz.0.1840': attribute type 29 has an invalid length. [ 235.869360][T12448] netlink: 'syz.2.1843': attribute type 2 has an invalid length. [ 235.891567][T12448] : entered promiscuous mode [ 236.062506][T12451] syzkaller0: entered promiscuous mode [ 236.072491][T12451] syzkaller0: entered allmulticast mode [ 236.084719][ T1217] tipc: Node number set to 2886997007 [ 236.418271][T12471] netlink: 'syz.2.1852': attribute type 1 has an invalid length. [ 236.590900][T12471] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.190646][T12536] netlink: 'syz.4.1866': attribute type 20 has an invalid length. [ 238.202310][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 238.281212][T12541] netlink: 'syz.4.1866': attribute type 20 has an invalid length. [ 238.304314][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 238.370589][T12536] netlink: 'syz.4.1866': attribute type 20 has an invalid length. [ 238.402265][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 238.447788][T12541] netlink: 'syz.4.1866': attribute type 20 has an invalid length. [ 238.465343][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 238.652617][T12562] Cannot find map_set index 135 as target [ 239.149971][T12586] netlink: 'syz.4.1880': attribute type 13 has an invalid length. [ 239.160142][T12586] veth1_macvtap: left promiscuous mode [ 239.165691][T12586] macsec0: entered allmulticast mode [ 239.240477][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807f599400: rx timeout, send abort [ 239.470455][T12602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1885'. [ 239.501537][T12602] netlink: 'syz.2.1885': attribute type 11 has an invalid length. [ 239.695635][T12608] netlink: 'syz.2.1887': attribute type 24 has an invalid length. [ 239.699248][T12609] netlink: 'syz.2.1887': attribute type 24 has an invalid length. [ 239.740700][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807f59ac00: rx timeout, send abort [ 239.749829][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807f599400: abort rx timeout. Force session deactivation [ 240.128007][T12619] ipt_ECN: cannot use operation on non-tcp rule [ 240.242892][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057707c00: rx timeout, send abort [ 240.252442][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807f59ac00: abort rx timeout. Force session deactivation [ 240.338961][T12632] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1891'. [ 240.384274][T12633] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1891'. [ 240.414657][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'. [ 240.454151][T12632] macvlan0: left promiscuous mode [ 240.670317][T12646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.751357][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057707c00: abort rx timeout. Force session deactivation [ 241.187904][T12664] validate_nla: 2 callbacks suppressed [ 241.187934][T12664] netlink: 'syz.2.1903': attribute type 2 has an invalid length. [ 241.430268][T12675] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1907'. [ 241.556412][T12676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1906'. [ 242.085842][T12702] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 242.140454][T12702] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 242.276802][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.651602][T12721] xt_l2tp: missing protocol rule (udp|l2tpip) [ 242.958339][T12731] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 242.975382][T12731] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 243.194156][T12744] tipc: Started in network mode [ 243.219069][T12744] tipc: Node identity ac14140f, cluster identity 4711 [ 243.234464][T12744] tipc: New replicast peer: 255.255.255.255 [ 243.243439][T12745] __nla_validate_parse: 7 callbacks suppressed [ 243.243455][T12745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1924'. [ 243.263107][T12744] tipc: Enabled bearer , priority 10 [ 243.301841][T12745] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1924'. [ 243.733014][T12769] bridge3: entered promiscuous mode [ 243.815397][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1930'. [ 243.826988][T12774] openvswitch: netlink: IP tunnel TTL not specified. [ 244.117989][T12782] netlink: 'syz.1.1935': attribute type 12 has an invalid length. [ 244.187485][T12782] netlink: 'syz.1.1935': attribute type 12 has an invalid length. [ 244.218864][T12782] netlink: 'syz.1.1935': attribute type 12 has an invalid length. [ 244.240991][T12782] netlink: 'syz.1.1935': attribute type 12 has an invalid length. [ 244.266051][ T5709] tipc: Node number set to 2886997007 [ 244.277489][T12789] netlink: 'syz.3.1936': attribute type 5 has an invalid length. [ 244.297480][T12782] netlink: 'syz.1.1935': attribute type 12 has an invalid length. [ 244.368339][T12782] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1935'. [ 244.435557][T12782] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1935'. [ 244.496246][T12782] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1935'. [ 244.602588][T12782] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1935'. [ 244.652066][T12782] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1935'. [ 244.934345][T12810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1938'. [ 245.264716][T12782] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1935'. [ 245.508806][T12822] netlink: 'syz.1.1944': attribute type 12 has an invalid length. [ 245.946194][T12839] syzkaller0: left promiscuous mode [ 245.968552][T12839] syzkaller0: left allmulticast mode [ 246.542436][T12864] xt_TPROXY: Can be used only with -p tcp or -p udp [ 246.667858][T12870] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 246.675542][T12870] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 246.812743][T12880] validate_nla: 2 callbacks suppressed [ 246.812762][T12880] netlink: 'syz.2.1960': attribute type 2 has an invalid length. [ 247.035863][T12888] atomic_op ffff88807bd051e0 conn xmit_atomic 0000000000000000 [ 247.643473][T12916] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 247.763329][T12919] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.094839][T12934] ip_tables: iptables: counters copy to user failed while replacing table [ 248.207861][T12931] bond7 (unregistering): Released all slaves [ 248.527042][T12961] __nla_validate_parse: 7 callbacks suppressed [ 248.527060][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 248.534439][T12959] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1980'. [ 248.631063][T12957] macvlan0: entered promiscuous mode [ 248.663018][T12974] Bluetooth: hci0: unsupported parameter 5135 [ 248.677272][T12974] Bluetooth: hci0: unsupported parameter 8192 [ 248.693855][T12974] Bluetooth: hci0: unsupported parameter 5135 [ 248.711785][T12974] Bluetooth: hci0: unsupported parameter 8192 [ 248.919322][T12982] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1986'. [ 248.946232][T12986] netlink: 'syz.0.1987': attribute type 12 has an invalid length. [ 249.274177][T13009] netlink: 'syz.0.1994': attribute type 11 has an invalid length. [ 249.298997][T13009] netlink: 'syz.0.1994': attribute type 4 has an invalid length. [ 249.361021][T13009] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1994'. [ 249.700460][T13029] bond7: invalid ARP target 0.0.0.0 specified for addition [ 249.717810][T13029] bond7: option arp_ip_target: invalid value (0) [ 249.731215][T13029] bond7 (unregistering): Released all slaves [ 249.882507][T13030] bond7: invalid ARP target 0.0.0.0 specified for addition [ 249.892313][T13030] bond7: option arp_ip_target: invalid value (0) [ 249.901976][T13030] bond7 (unregistering): Released all slaves [ 249.975299][T13044] Bluetooth: hci0: unsupported parameter 5135 [ 249.993236][T13044] Bluetooth: hci0: unsupported parameter 8192 [ 250.008886][T13044] Bluetooth: hci0: unsupported parameter 5135 [ 250.031802][T13044] Bluetooth: hci0: unsupported parameter 8192 [ 250.469898][T13067] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2005'. [ 250.565297][T13066] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 250.810194][T13024] wg0 speed is unknown, defaulting to 1000 [ 251.033014][T13089] pim6reg: entered allmulticast mode [ 251.039534][T13086] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2016'. [ 251.192554][T13099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2020'. [ 251.331836][T13103] x_tables: unsorted underflow at hook 1 [ 251.357369][T13103] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2021'. [ 251.867591][T13124] netlink: 'syz.0.2027': attribute type 83 has an invalid length. [ 252.049842][T13137] xt_SECMARK: invalid mode: 9 [ 252.541380][T13149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2035'. [ 252.607211][T13154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.717946][T13149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.745543][T13153] syzkaller0: entered promiscuous mode [ 252.758881][T13153] syzkaller0: entered allmulticast mode [ 252.810941][T13149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.944428][T13156] syzkaller1: entered promiscuous mode [ 252.951410][T13156] syzkaller1: entered allmulticast mode [ 253.086232][T13163] netlink: 'syz.4.2038': attribute type 2 has an invalid length. [ 253.095393][T13163] netlink: 'syz.4.2038': attribute type 11 has an invalid length. [ 253.105254][T13163] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2038'. [ 253.426111][T13182] netlink: 'syz.3.2044': attribute type 1 has an invalid length. [ 253.506353][T13185] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 253.573489][T13182] 8021q: adding VLAN 0 to HW filter on device bond8 [ 253.633722][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2048'. [ 253.862250][T13206] netlink: 'syz.2.2050': attribute type 2 has an invalid length. [ 253.897866][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2050'. [ 254.168705][T13221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2053'. [ 254.188476][T13221] netlink: 'syz.4.2053': attribute type 7 has an invalid length. [ 254.203484][T13221] netlink: 'syz.4.2053': attribute type 8 has an invalid length. [ 254.225242][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 254.751722][T13247] netlink: 'syz.0.2062': attribute type 2 has an invalid length. [ 254.811028][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'. [ 254.962614][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2064'. [ 254.988854][T13249] nbd: couldn't find a device at index 458752 [ 255.480227][T13283] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2073'. [ 255.684966][T13294] netlink: 'syz.2.2075': attribute type 3 has an invalid length. [ 255.723095][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.730144][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.744458][T13296] netlink: 'syz.0.2076': attribute type 83 has an invalid length. [ 255.954234][T13305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2077'. [ 256.017381][T13305] unsupported nlmsg_type 40 [ 256.187279][T13314] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2080'. [ 256.214562][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2078'. [ 256.262160][T13319] netlink: Invalid conntrack timeout [ 256.284237][T13319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.151868][T13376] xt_hashlimit: overflow, try lower: 3/0 [ 257.268715][T13384] bridge6: entered allmulticast mode [ 257.847614][T13421] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 257.857222][T13421] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 257.865905][T13421] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 257.879544][T13423] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 258.486680][T13449] validate_nla: 1 callbacks suppressed [ 258.486748][T13449] netlink: 'syz.3.2120': attribute type 8 has an invalid length. [ 258.879940][T13446] wg0 speed is unknown, defaulting to 1000 [ 258.923286][T13461] __nla_validate_parse: 12 callbacks suppressed [ 258.923309][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2124'. [ 258.977410][T13461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'. [ 259.102296][T13447] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2119'. [ 259.525730][T13482] netlink: 'syz.1.2128': attribute type 4 has an invalid length. [ 259.541613][T13482] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2128'. [ 259.553632][T13481] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.583160][T13482] .`: renamed from bond0 (while UP) [ 259.866255][T13494] tipc: Can't bind to reserved service type 2 [ 260.718414][T13516] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2141'. [ 261.104149][ T5632] block nbd2: Receive control failed (result -32) [ 261.121753][T13534] netlink: 'syz.1.2145': attribute type 13 has an invalid length. [ 261.172819][T13534] netlink: 'syz.1.2145': attribute type 17 has an invalid length. [ 261.204889][T13534] tunl0: left promiscuous mode [ 261.301627][T13534] 8021q: adding VLAN 0 to HW filter on device .` [ 261.354340][T13534] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.361699][T13534] bridge0: port 1(bridge_slave_0) entered listening state [ 261.404388][T13534] hsr0: left allmulticast mode [ 261.410293][T13534] hsr_slave_0: left allmulticast mode [ 261.415954][T13534] hsr_slave_1: left allmulticast mode [ 261.426250][T13534] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 261.759428][T13565] netlink: 'syz.2.2154': attribute type 2 has an invalid length. [ 261.801754][T13565] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2154'. [ 261.824392][T13566] netlink: 'syz.1.2153': attribute type 1 has an invalid length. [ 261.858617][T13569] openvswitch: netlink: Invalid VLAN frame [ 261.917393][T13566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.920765][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2155'. [ 261.955322][T13571] bond0: (slave veth0_to_bond): making interface the new active one [ 261.983367][T13571] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 262.092677][T13579] Unknown options in mask 4 [ 262.097752][T13579] mac80211_hwsim hwsim6 pim6reg0: entered promiscuous mode [ 262.181028][T13583] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 262.199891][T13582] netlink: 'syz.0.2159': attribute type 3 has an invalid length. [ 262.210209][T13582] netlink: 'syz.0.2159': attribute type 1 has an invalid length. [ 262.228290][T13582] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2159'. [ 262.330667][T13587] bond7: (slave veth9): Enslaving as an active interface with a down link [ 262.414724][T13583] 8021q: adding VLAN 0 to HW filter on device bond7 [ 262.662574][T13602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2163'. [ 262.870154][T13610] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2164'. [ 263.491063][T13653] netlink: 'syz.2.2176': attribute type 4 has an invalid length. [ 265.237821][T13738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.307602][T13746] syzkaller0: entered promiscuous mode [ 265.337862][T13746] syzkaller0: entered allmulticast mode [ 265.349444][T13735] __nla_validate_parse: 6 callbacks suppressed [ 265.349462][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2195'. [ 265.831336][T13779] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 265.974309][T13779] xt_hashlimit: size too large, truncated to 1048576 [ 266.141541][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2213'. [ 266.264780][T13797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2212'. [ 266.541034][T13797] vlan2: left allmulticast mode [ 266.546151][T13797] .`: left allmulticast mode [ 266.554982][T13797] bond_slave_0: left allmulticast mode [ 266.563821][T13797] geneve2: left promiscuous mode [ 266.570529][T13797] geneve2: left allmulticast mode [ 266.580126][T13797] h: left promiscuous mode [ 266.585099][T13797] ip6gre1: left promiscuous mode [ 266.591534][T13797] ip6gre1: left allmulticast mode [ 266.885309][T13823] syzkaller0: left promiscuous mode [ 266.909059][T13823] syzkaller0: left allmulticast mode [ 267.239290][T13833] Bluetooth: hci0: unsupported parameter 5135 [ 267.264689][T13833] Bluetooth: hci0: unsupported parameter 8192 [ 267.291467][T13833] Bluetooth: hci0: unsupported parameter 5135 [ 267.324721][T13837] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2223'. [ 267.338966][T13833] Bluetooth: hci0: unsupported parameter 8192 [ 267.360571][T13841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2225'. [ 267.390444][T13833] netlink: 13183 bytes leftover after parsing attributes in process `syz.1.2223'. [ 267.432994][T13833] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 267.655485][T13856] netlink: 'syz.4.2229': attribute type 64 has an invalid length. [ 267.701909][T13856] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2229'. [ 267.834659][T13866] ip6erspan1: entered allmulticast mode [ 268.407603][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2238'. [ 268.470752][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2238'. [ 268.526642][T13888] openvswitch: netlink: Flow actions attr not present in new flow. [ 268.711238][T13900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2242'. [ 269.198399][T13931] netlink: 'syz.4.2250': attribute type 12 has an invalid length. [ 269.233399][ T30] audit: type=1804 audit(1787609008.654:6): pid=13933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2251" name="/newroot/443/cgroup.controllers" dev="tmpfs" ino=2284 res=1 errno=0 [ 269.319599][ T30] audit: type=1800 audit(1787609008.654:7): pid=13933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2251" name="cgroup.controllers" dev="tmpfs" ino=2284 res=0 errno=0 [ 269.376299][T13937] netlink: 'syz.1.2254': attribute type 1 has an invalid length. [ 269.939241][T13964] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 270.208431][T13972] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 270.263281][T13972] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 271.001756][T14029] __nla_validate_parse: 3 callbacks suppressed [ 271.001777][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2283'. [ 271.021262][T14030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2282'. [ 271.076938][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 271.131479][T14035] vlan5: entered allmulticast mode [ 271.153039][T14035] bridge2: entered allmulticast mode [ 271.263236][T14041] bond9: Removing last arp target with arp_interval on [ 271.347499][T14045] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 271.380514][T14036] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 271.456050][T14056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2291'. [ 272.033701][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2298'. [ 272.102942][T14083] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 272.113723][T14079] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 272.127195][T14079] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 272.148263][T14082] netlink: 'syz.0.2300': attribute type 1 has an invalid length. [ 272.281666][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'. [ 272.380529][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2304'. [ 272.432072][T14099] syzkaller0: entered promiscuous mode [ 272.445320][T14099] syzkaller0: entered allmulticast mode [ 272.453723][T14099] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 272.475624][T14099] lo: entered allmulticast mode [ 272.489240][T14099] tunl0: entered allmulticast mode [ 272.501756][T14099] gre0: entered allmulticast mode [ 272.527781][T14099] gretap0: entered allmulticast mode [ 272.535467][T14099] ip_vti0: entered allmulticast mode [ 272.542931][T14099] ip6_vti0: entered allmulticast mode [ 272.550482][T14099] sit0: entered allmulticast mode [ 272.572932][T14099] ip6tnl0: entered allmulticast mode [ 272.580589][T14099] ip6gre0: entered allmulticast mode [ 272.588821][T14099] syz_tun: entered allmulticast mode [ 272.595586][T14099] ip6gretap0: entered allmulticast mode [ 272.671790][T14110] netdevsim netdevsim4: Direct firmware load for ÿ failed with error -2 [ 272.686319][T14110] netdevsim netdevsim4: Falling back to sysfs fallback for: ÿ [ 272.892838][T14124] xt_connbytes: Forcing CT accounting to be enabled [ 272.900919][T14124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.227426][T14142] netlink: Only one type of NAT may be specified [ 273.233933][T14142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.359571][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2317'. [ 273.371480][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2317'. [ 273.551964][T14111] netdevsim netdevsim4: Direct firmware load for ÿ failed with error -2 [ 273.568053][T14111] netdevsim netdevsim4: Falling back to sysfs fallback for: ÿ [ 273.728838][T14165] netlink: 'syz.4.2322': attribute type 49 has an invalid length. [ 274.132504][T14179] tunl0: entered allmulticast mode [ 274.177982][T14179] gre0: entered allmulticast mode [ 274.240980][T14187] openvswitch: netlink: IP tunnel dst address not specified [ 274.269006][T14187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.288259][T14179] gretap0: left promiscuous mode [ 274.299772][T14179] gretap0: entered allmulticast mode [ 274.314971][T14179] erspan0: entered allmulticast mode [ 274.327530][T14179] ip_vti0: entered allmulticast mode [ 274.337223][T14179] ip6_vti0: entered allmulticast mode [ 274.345972][T14179] sit0: entered allmulticast mode [ 274.367216][T14179] ip6tnl0: entered allmulticast mode [ 274.378477][T14179] ip6gre0: entered allmulticast mode [ 274.392399][T14179] syz_tun: left promiscuous mode [ 274.398608][T14179] syz_tun: entered allmulticast mode [ 274.412764][T14179] bridge0: entered allmulticast mode [ 274.524554][T14188] bond0 (unregistering): (slave batadv_slave_0): Releasing active interface [ 274.569179][T14188] bond0 (unregistering): Released all slaves [ 274.749024][T14198] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2331'. [ 274.989273][T14209] bond7: option all_slaves_active: invalid value (222) [ 274.999465][T14209] bond7 (unregistering): Released all slaves [ 275.122341][T14224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2338'. [ 275.943355][T14249] netlink: 'syz.0.2344': attribute type 2 has an invalid length. [ 275.993121][T14249] tunl0: entered promiscuous mode [ 276.002962][T14249] tunl0: left allmulticast mode [ 276.009675][T14251] __nla_validate_parse: 2 callbacks suppressed [ 276.009693][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2345'. [ 276.027348][T14249] netlink: 'syz.0.2344': attribute type 4 has an invalid length. [ 276.049702][T14249] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2344'. [ 276.179767][T14256] netlink: 'syz.3.2346': attribute type 4 has an invalid length. [ 276.189015][T14256] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2346'. [ 276.485980][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2353'. [ 276.577585][T14277] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 276.773250][T14290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.838263][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 276.879733][T14298] x_tables: unsorted entry at hook 2 [ 276.985457][T14300] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 277.173586][T14306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2364'. [ 277.858407][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2377'. [ 278.059733][T14362] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 278.332410][T14382] xt_l2tp: v2 doesn't support IP mode [ 278.359621][T14385] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2384'. [ 278.961516][T14403] syzkaller0: entered promiscuous mode [ 278.977273][T14403] syzkaller0: entered allmulticast mode [ 279.038040][T14405] netlink: 81 bytes leftover after parsing attributes in process `syz.0.2394'. [ 279.478559][T14393] syzkaller0: entered promiscuous mode [ 279.487587][T14393] syzkaller0: entered allmulticast mode [ 281.451871][T14398] wg0 speed is unknown, defaulting to 1000 [ 281.938008][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2406'. [ 282.393653][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'. [ 282.631720][T14497] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2412'. [ 282.643741][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'. [ 282.990708][T14508] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2415'. [ 283.143990][T14507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2413'. [ 283.186191][T14519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2416'. [ 283.231495][T14519] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2416'. [ 283.381407][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2418'. [ 283.394641][T14530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2419'. [ 283.455194][ T30] audit: type=1804 audit(1787609022.874:8): pid=14535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2420" name="/newroot/533/cgroup.controllers" dev="tmpfs" ino=2737 res=1 errno=0 [ 283.483177][ T30] audit: type=1800 audit(1787609022.894:9): pid=14535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2420" name="cgroup.controllers" dev="tmpfs" ino=2737 res=0 errno=0 [ 283.615049][T14523] team0: Port device team_slave_0 removed [ 284.024492][T14548] macsec0: entered promiscuous mode [ 284.043079][T14548] macsec0: left allmulticast mode [ 284.165535][T14551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.230331][T14554] netlink: 'syz.1.2427': attribute type 1 has an invalid length. [ 284.570712][T14570] netlink: 'syz.2.2433': attribute type 21 has an invalid length. [ 284.600449][T14570] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 284.954087][T14593] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 285.468871][T14613] bridge0: left allmulticast mode [ 285.770527][T14629] netlink: 'syz.4.2452': attribute type 1 has an invalid length. [ 285.827092][T14629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.303824][T14650] syzkaller1: entered promiscuous mode [ 286.310808][T14650] syzkaller1: entered allmulticast mode [ 286.394014][T14651] netlink: 'syz.0.2459': attribute type 9 has an invalid length. [ 286.563718][T14667] netlink: 'syz.3.2463': attribute type 3 has an invalid length. [ 286.964175][T14689] ip6t_srh: unknown srh match flags 5F28 [ 287.202517][T14699] __nla_validate_parse: 15 callbacks suppressed [ 287.202538][T14699] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2472'. [ 288.957638][ T1217] wg0 speed is unknown, defaulting to 1000 [ 289.279522][T14724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.795985][T14752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2488'. [ 289.996094][T14761] netlink: 'syz.1.2492': attribute type 2 has an invalid length. [ 290.028678][T14761] netlink: 'syz.1.2492': attribute type 2 has an invalid length. [ 290.057142][T14761] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2492'. [ 290.248424][T14776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2495'. [ 290.268237][T14779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2495'. [ 290.339699][T14784] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 290.393530][T14780] lo: entered promiscuous mode [ 290.435440][T14780] netlink: 'syz.3.2497': attribute type 2 has an invalid length. [ 290.471249][T14780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.698611][T14799] x_tables: unsorted underflow at hook 4 [ 290.716213][T14800] x_tables: unsorted underflow at hook 4 [ 290.770033][T14804] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2502'. [ 290.799104][T14804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2502'. [ 290.824780][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2502'. [ 291.015529][T14813] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2506'. [ 291.100590][T14818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'. [ 291.738040][T14855] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 291.764523][T14855] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 292.196474][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.203788][ C1] bridge0: topology change detected, propagating [ 292.241344][T14872] netlink: 'syz.3.2518': attribute type 1 has an invalid length. [ 292.328966][T14883] __nla_validate_parse: 3 callbacks suppressed [ 292.329007][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2522'. [ 292.331927][T14872] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 292.389312][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2519'. [ 292.435028][T14887] netlink: 'syz.4.2523': attribute type 1 has an invalid length. [ 292.521664][T14890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2523'. [ 292.549453][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2525'. [ 292.662522][T14897] batadv0: entered promiscuous mode [ 292.682202][T14894] netlink: 'syz.1.2524': attribute type 1 has an invalid length. [ 292.708178][T14897] macsec1: entered promiscuous mode [ 292.713566][T14894] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2524'. [ 292.734994][T14897] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 292.834959][T14910] vlan3: left allmulticast mode [ 292.850580][T14910] geneve0: left allmulticast mode [ 292.860744][T14910] vlan3: left promiscuous mode [ 292.866277][T14910] geneve0: left promiscuous mode [ 292.895797][T14910] bridge0: port 1(vlan3) entered disabled state [ 292.950093][T14910] bridge_slave_1: left promiscuous mode [ 292.990111][T14910] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.058411][T14916] netlink: 'syz.3.2531': attribute type 1 has an invalid length. [ 293.151303][T14922] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 293.197908][T14916] 8021q: adding VLAN 0 to HW filter on device bond10 [ 293.220737][T14920] syzkaller1: entered promiscuous mode [ 293.253434][T14920] syzkaller1: entered allmulticast mode [ 293.273945][T14928] netlink: 'syz.1.2534': attribute type 2 has an invalid length. [ 293.545468][T14940] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2538'. [ 293.591799][T14942] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2540'. [ 293.602230][T14943] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2540'. [ 293.881108][T14962] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 293.995400][T14964] openvswitch: netlink: Unknown key attributes 1 [ 294.196482][T14977] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 294.235719][T14977] bond8: entered promiscuous mode [ 294.243600][T14977] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.352072][T14977] macvtap1: entered allmulticast mode [ 294.427754][T14977] macvtap2: entered allmulticast mode [ 294.499956][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 294.650058][T14992] netlink: 'syz.0.2553': attribute type 23 has an invalid length. [ 294.698701][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2552'. [ 294.891311][T14992] bond9: option primary_reselect: invalid value (255) [ 294.935972][T14992] bond9 (unregistering): Released all slaves [ 295.052743][T15013] sctp: [Deprecated]: syz.3.2556 (pid 15013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.052743][T15013] Use struct sctp_sack_info instead [ 295.394987][T15038] validate_nla: 1 callbacks suppressed [ 295.395005][T15038] netlink: 'syz.3.2560': attribute type 2 has an invalid length. [ 295.583405][T15032] syzkaller1: entered promiscuous mode [ 295.590293][T15032] syzkaller1: entered allmulticast mode [ 295.943040][T15063] veth0_to_bond: entered promiscuous mode [ 296.581876][T15095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.702525][T15104] Cannot find set identified by id 65534 to match [ 296.712507][T15104] Cannot find set identified by id 65534 to match [ 297.199825][T15136] openvswitch: netlink: Message has 8 unknown bytes. [ 297.558624][T15156] sctp: [Deprecated]: syz.2.2590 (pid 15156) Use of int in max_burst socket option. [ 297.558624][T15156] Use struct sctp_assoc_value instead [ 297.699542][T15161] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 297.706097][T15161] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 297.808858][T15165] __nla_validate_parse: 14 callbacks suppressed [ 297.808877][T15165] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2593'. [ 297.888571][T15163] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3100376155/3100376156 [ 297.914848][T15169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2594'. [ 297.925613][T15163] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3100376155/3100376156 [ 297.965644][T15169] team0 (unregistering): Port device team_slave_0 removed [ 298.020928][T15169] team0 (unregistering): Port device team_slave_1 removed [ 298.052624][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2596'. [ 298.085943][T15178] veth1_to_bond: entered allmulticast mode [ 298.101506][T15178] veth1_to_bond: entered promiscuous mode [ 298.113696][T15184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2599'. [ 298.125948][T15167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.155197][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2598'. [ 298.205553][T15178] veth1_to_bond (unregistering): left allmulticast mode [ 298.227683][T15178] veth1_to_bond (unregistering): left promiscuous mode [ 298.241029][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2600'. [ 298.259416][T15188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2601'. [ 298.283319][T15178] .`: (slave bond_slave_1): Releasing backup interface [ 298.445362][T15193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2603'. [ 298.465660][T15193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2603'. [ 298.493962][T15193] geneve4: entered promiscuous mode [ 298.516914][T15199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2606'. [ 298.833505][T15208] team0 (unregistering): Port device team_slave_0 removed [ 298.878073][T15208] team0 (unregistering): Port device team_slave_1 removed [ 299.260620][T15246] netlink: 'syz.4.2618': attribute type 3 has an invalid length. [ 299.308654][ T30] audit: type=1804 audit(1787609038.734:10): pid=15251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2617" name="/newroot/507/cgroup.controllers" dev="tmpfs" ino=2614 res=1 errno=0 [ 299.334676][ T30] audit: type=1800 audit(1787609038.734:11): pid=15251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2617" name="cgroup.controllers" dev="tmpfs" ino=2614 res=0 errno=0 [ 299.416725][T15252] netlink: 'syz.3.2615': attribute type 10 has an invalid length. [ 300.106105][T15297] netlink: 'syz.4.2631': attribute type 11 has an invalid length. [ 300.495146][T15314] Bluetooth: MGMT ver 1.23 [ 300.826526][T15324] vcan0: tx address claim with broadcast sa [ 300.859764][T15332] netlink: 'syz.0.2641': attribute type 3 has an invalid length. [ 301.270265][T15356] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 301.282129][T15357] Bluetooth: MGMT ver 1.23 [ 301.316324][T15356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.577794][T15367] veth1_vlan: left promiscuous mode [ 301.951191][T15386] syzkaller1: entered allmulticast mode [ 302.948948][T15458] ieee802154 phy0 wpan0: encryption failed: -22 [ 302.955443][T15458] ieee802154 phy0 wpan0: encryption failed: -22 [ 303.100321][T15460] 8021q: adding VLAN 0 to HW filter on device bond9 [ 303.100323][T15464] netlink: 'syz.2.2677': attribute type 1 has an invalid length. [ 303.116821][T15464] __nla_validate_parse: 17 callbacks suppressed [ 303.116838][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2677'. [ 303.304313][T15476] netlink: 'syz.2.2679': attribute type 1 has an invalid length. [ 303.390133][T15476] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.411316][T15472] bond0: (slave veth0_to_bond): Releasing backup interface [ 303.437477][T15472] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 304.094797][T15515] netlink: 'syz.2.2692': attribute type 15 has an invalid length. [ 304.147317][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2692'. [ 304.243572][T15515] netlink: 'syz.2.2692': attribute type 15 has an invalid length. [ 304.257750][T10202] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 304.270379][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2692'. [ 304.291084][T10202] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 304.398540][T10205] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 304.422684][T10205] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 304.468603][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2697'. [ 304.493928][T15531] openvswitch: netlink: Message has 5 unknown bytes. [ 304.713147][T15546] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 304.793618][T15547] veth11: entered allmulticast mode [ 304.807177][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2704'. [ 304.828448][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2704'. [ 304.851599][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2704'. [ 304.924279][T15550] macvlan0: left promiscuous mode [ 304.986298][T15550] netlink: 'syz.2.2704': attribute type 1 has an invalid length. [ 305.044928][T15550] netlink: 'syz.2.2704': attribute type 2 has an invalid length. [ 305.262343][T15575] bond11: option all_slaves_active: invalid value (222) [ 305.315590][T15575] bond11 (unregistering): Released all slaves [ 305.354385][T15583] vcan0: entered allmulticast mode [ 305.385528][T15577] gre0: left promiscuous mode [ 305.419272][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2713'. [ 305.462790][T15577] netlink: 'syz.2.2711': attribute type 1 has an invalid length. [ 305.492161][T15577] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2711'. [ 305.888415][T15616] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2722'. [ 305.922669][T15616] syzkaller1: entered promiscuous mode [ 305.928827][T15619] netlink: 'syz.2.2723': attribute type 1 has an invalid length. [ 305.932296][T15616] syzkaller1: entered allmulticast mode [ 305.951529][T15616] netlink: 'syz.4.2722': attribute type 6 has an invalid length. [ 306.480668][T15651] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.339148][T15690] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 307.635189][T15699] netlink: 'syz.0.2741': attribute type 1 has an invalid length. [ 308.376551][T15737] __nla_validate_parse: 8 callbacks suppressed [ 308.376572][T15737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2753'. [ 308.571112][T15740] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2753'. [ 308.867590][T15760] vlan3: entered allmulticast mode [ 308.889073][T15760] bond0: entered allmulticast mode [ 308.912503][T15762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2761'. [ 308.928468][T15760] bond_slave_0: entered allmulticast mode [ 308.959769][T15760] bond_slave_1: entered allmulticast mode [ 308.990310][T15760] bond4: entered allmulticast mode [ 309.045849][T15729] netlink: 'syz.1.2750': attribute type 2 has an invalid length. [ 309.091553][T15729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2750'. [ 309.248139][T15737] wg0 speed is unknown, defaulting to 1000 [ 309.598076][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2769'. [ 309.720167][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2770'. [ 309.816322][T15794] hsr_slave_1 (unregistering): left promiscuous mode [ 310.010375][T15813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2774'. [ 310.118725][T15818] syzkaller0: entered promiscuous mode [ 310.124421][T15818] syzkaller0: entered allmulticast mode [ 310.247884][T15824] netlink: 'syz.4.2778': attribute type 23 has an invalid length. [ 310.774188][T15842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 310.793004][T15844] x_tables: duplicate underflow at hook 1 [ 311.010766][T15848] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2785'. [ 311.271442][T15854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2787'. [ 311.319715][T15854] bond7: entered promiscuous mode [ 311.325018][T15854] bond7: entered allmulticast mode [ 311.844692][T15876] netlink: 'syz.0.2792': attribute type 24 has an invalid length. [ 312.011702][T15882] netlink: 'syz.2.2793': attribute type 12 has an invalid length. [ 312.463660][T15910] netlink: 'syz.0.2800': attribute type 10 has an invalid length. [ 312.526503][T15913] tipc: Enabling not permitted [ 312.553921][T15913] tipc: Enabling of bearer rejected, failed to enable media [ 312.824398][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.839751][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.847666][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.861809][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.870082][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.900371][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.909315][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.926221][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.936112][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.945466][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 313.123839][T15935] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 313.859391][T10205] bridge_slave_1: left allmulticast mode [ 313.882813][T10205] bridge_slave_1: left promiscuous mode [ 313.917329][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.010996][T10205] bridge_slave_0: left allmulticast mode [ 314.033307][T10205] bridge_slave_0: left promiscuous mode [ 314.051679][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.289232][T15992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.299867][T15993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.315886][T10205] pim6reg527: left allmulticast mode [ 314.338374][T10205] dvmrp0: left allmulticast mode [ 314.371170][T10205] batman_adv: batadv0: Interface deactivated: gretap2 [ 314.908350][T10205] batman_adv: batadv0: Removing interface: gretap2 [ 315.010606][ T5632] Bluetooth: hci5: command tx timeout [ 315.029479][T10205] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 315.039822][T10205] bridge5 (unregistering): left promiscuous mode [ 315.064210][T10205] bond7 (unregistering): (slave bridge8): Releasing backup interface [ 315.072462][T10205] bridge8 (unregistering): left promiscuous mode [ 315.142869][T10205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.161686][T10205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.173934][T10205] bond0 (unregistering): Released all slaves [ 315.185280][T10205] bond1 (unregistering): Released all slaves [ 315.201524][T10205] bond2 (unregistering): Released all slaves [ 315.217341][T10205] bond3 (unregistering): Released all slaves [ 315.232920][T10205] bond4 (unregistering): Released all slaves [ 315.252371][T10205] bond5 (unregistering): Released all slaves [ 315.277193][T10205] bond6 (unregistering): Released all slaves [ 315.292531][T10205] bond7 (unregistering): Released all slaves [ 315.308511][T10205] bond8 (unregistering): Released all slaves [ 315.324303][T10205] bond9 (unregistering): Released all slaves [ 315.352741][T10205] bond10 (unregistering): Released all slaves [ 315.396016][T16007] vlan6: entered allmulticast mode [ 315.420045][T16007] veth1_virt_wifi: entered allmulticast mode [ 315.452210][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 315.681785][T16046] __nla_validate_parse: 4 callbacks suppressed [ 315.681804][T16046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2828'. [ 316.080026][T10205] IPVS: stopping master sync thread 10577 ... [ 316.088991][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2828'. [ 316.381892][T16072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2834'. [ 316.443759][T16072] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2834'. [ 316.667107][T16086] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 316.730524][T15929] wg0 speed is unknown, defaulting to 1000 [ 317.077831][ T5632] Bluetooth: hci5: command tx timeout [ 317.169235][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.404062][T16108] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2844'. [ 317.624833][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 318.131812][T16130] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2849'. [ 318.170127][T16130] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2849'. [ 318.323364][T16136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2851'. [ 318.981718][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2854'. [ 319.055030][T16162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2856'. [ 319.158934][ T5632] Bluetooth: hci5: command tx timeout [ 319.245053][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 319.293764][T10205] hsr_slave_0: left promiscuous mode [ 319.304459][T10205] hsr_slave_1: left promiscuous mode [ 319.311689][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.322151][T10205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.370853][T10205] veth0_macvtap: left promiscuous mode [ 319.473717][T16191] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 319.553925][T16194] netlink: 'syz.1.2863': attribute type 11 has an invalid length. [ 319.566602][T16196] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 320.307592][T16208] bridge0: port 3(ipvlan1) entered blocking state [ 320.314292][T16208] bridge0: port 3(ipvlan1) entered disabled state [ 320.321040][T16208] ipvlan1: entered allmulticast mode [ 320.327490][T16208] bridge0: entered allmulticast mode [ 320.334399][T16213] netlink: 'syz.4.2868': attribute type 1 has an invalid length. [ 320.343186][T16208] ipvlan1: left allmulticast mode [ 320.343205][T16208] bridge0: left allmulticast mode [ 320.423491][T16213] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 320.642944][T10205] IPVS: stop unused estimator thread 0... [ 320.711127][T15929] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.740843][T15929] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.770988][T15929] bridge_slave_0: entered allmulticast mode [ 320.798267][T15929] bridge_slave_0: entered promiscuous mode [ 320.815980][T15929] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.833545][T15929] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.843054][T15929] bridge_slave_1: entered allmulticast mode [ 320.883619][T15929] bridge_slave_1: entered promiscuous mode [ 320.955119][T16250] __nla_validate_parse: 6 callbacks suppressed [ 320.955139][T16250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2875'. [ 321.026057][T16251] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2874'. [ 321.055660][T15929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.090645][T15929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.232157][T15929] team0: Port device team_slave_0 added [ 321.238387][ T5632] Bluetooth: hci5: command tx timeout [ 321.259791][T15929] team0: Port device team_slave_1 added [ 321.443223][T15929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.469580][T15929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.537033][T15929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.552876][T15929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.584072][T15929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.628049][T15929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.642617][T16281] netlink: 'syz.0.2882': attribute type 11 has an invalid length. [ 321.673840][T16281] netlink: 'syz.0.2882': attribute type 83 has an invalid length. [ 321.782570][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 321.924745][T15929] hsr_slave_0: entered promiscuous mode [ 321.940003][T15929] hsr_slave_1: entered promiscuous mode [ 322.082980][T16297] netlink: 'syz.1.2888': attribute type 2 has an invalid length. [ 322.100269][T16297] netlink: 'syz.1.2888': attribute type 2 has an invalid length. [ 322.111938][T16298] netlink: 'syz.1.2888': attribute type 2 has an invalid length. [ 322.127570][T16298] netlink: 'syz.1.2888': attribute type 2 has an invalid length. [ 322.384629][T16313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2891'. [ 322.659627][T16323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2895'. [ 323.025265][T16343] netlink: 'syz.0.2899': attribute type 23 has an invalid length. [ 323.121001][T16347] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2898'. [ 323.145413][T16350] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004 [ 323.161538][T16345] batman_adv: batadv0: Adding interface: dummy0 [ 323.182539][T16345] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.248500][T16345] batman_adv: batadv0: Interface activated: dummy0 [ 323.295775][T16351] batadv0: mtu less than device minimum [ 323.318852][T16351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.331635][T16351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.343524][T16351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.355557][T16351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.367470][T16351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.379300][T16351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.391172][T16351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.403023][T16351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.414879][T16351] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 323.441918][ T5632] Bluetooth: hci5: command tx timeout [ 324.388773][T16394] netlink: 'syz.4.2907': attribute type 1 has an invalid length. [ 324.532842][T16394] bond10: entered promiscuous mode [ 324.540384][T16394] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.618559][T16402] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.651746][T16402] bond10: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 324.677766][T16402] bond10: (slave ip6tnl2): Setting fail_over_mac to active for active-backup mode [ 324.711430][T16402] bond10: (slave ip6tnl2): making interface the new active one [ 324.730957][T16402] ip6tnl2: entered promiscuous mode [ 324.744124][T16402] bond10: (slave ip6tnl2): Enslaving as an active interface with an up link [ 324.928258][T15929] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 324.983695][T15929] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.028385][T16434] veth0_macvtap: entered allmulticast mode [ 325.069759][T15929] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 325.149896][T15929] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.187821][T15929] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 325.232616][T15929] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.269445][T15929] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 325.299588][T15929] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.504551][T16463] netlink: 'syz.0.2918': attribute type 4 has an invalid length. [ 325.721413][T15929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.841141][T15929] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.894108][T10205] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.901458][T10205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.964181][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.971461][ T6992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.016514][T16479] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 326.196739][T15929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.387895][T16491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2924'. [ 326.974085][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2927'. [ 327.128316][T16521] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2929'. [ 327.199767][T16527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2930'. [ 327.271858][T16532] sctp: [Deprecated]: syz.4.2931 (pid 16532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.271858][T16532] Use struct sctp_sack_info instead [ 327.463311][T16540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2933'. [ 327.481411][T16532] .`: (slave team0): Releasing backup interface [ 327.549097][T16532] team0 (unregistering): Port device team_slave_1 removed [ 327.647856][T16540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2933'. [ 327.700388][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2933'. [ 327.782293][T16543] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 327.921405][T15929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.957992][T10202] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.998111][ T137] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.051095][ T137] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.167517][ T79] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.290025][T15929] veth0_vlan: entered promiscuous mode [ 328.333925][T15929] veth1_vlan: entered promiscuous mode [ 328.479607][T15929] veth0_macvtap: entered promiscuous mode [ 328.520401][T15929] veth1_macvtap: entered promiscuous mode [ 328.562601][T15929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.608551][T15929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.667954][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.706736][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.773453][T16583] tipc: Enabled bearer , priority 10 [ 328.868669][ T137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.920129][ T6992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.995571][T10205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.040196][T10205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.155937][ T6992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.192302][ T6992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.488881][T16610] netlink: 'syz.0.2946': attribute type 2 has an invalid length. [ 329.534279][T16620] net_ratelimit: 46 callbacks suppressed [ 329.534315][T16620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.549942][T16610] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2946'. [ 329.921276][T16640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2951'. [ 329.980221][T16642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2951'. [ 330.659416][T16672] veth3: entered promiscuous mode [ 330.944550][T16685] bridge_slave_1: left allmulticast mode [ 330.966300][T16685] bridge_slave_1: left promiscuous mode [ 330.976608][T16685] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.005477][T16685] bridge_slave_0: left allmulticast mode [ 331.024042][T16685] bridge_slave_0: left promiscuous mode [ 331.041615][T16685] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.196999][T16694] mac80211_hwsim hwsim10 ÿ: renamed from wlan1 [ 331.335751][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.348402][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.357079][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.367140][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.377016][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.632967][ T5614] .`: (slave syz_tun): Releasing backup interface [ 331.754051][T16718] __nla_validate_parse: 8 callbacks suppressed [ 331.754073][T16718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2970'. [ 332.195373][T16731] bridge8: entered allmulticast mode [ 332.262276][T16739] IPv6: sit1: Disabled Multicast RS [ 332.511795][T16749] syzkaller0: Caught tx_queue_len zero misconfig [ 332.594684][T16756] syzkaller0: entered promiscuous mode [ 332.655476][T16756] syzkaller0: entered allmulticast mode [ 332.712012][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2979'. [ 332.842678][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2978'. [ 332.852598][T16756] openvswitch: netlink: Message has 4 unknown bytes. [ 332.892052][T16755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.943664][T16755] bond0: (slave bond1): Enslaving as an active interface with an up link [ 333.289283][T16729] wg0 speed is unknown, defaulting to 1000 [ 333.479540][ T5632] Bluetooth: hci4: command tx timeout [ 333.896847][T16802] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2989'. [ 334.027261][T16809] netlink: 'syz.1.2991': attribute type 1 has an invalid length. [ 334.039279][T16809] netlink: 'syz.1.2991': attribute type 4 has an invalid length. [ 334.049043][T16809] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2991'. [ 334.059562][T16809] netlink: 'syz.1.2991': attribute type 1 has an invalid length. [ 334.100696][T16809] netlink: 'syz.1.2991': attribute type 4 has an invalid length. [ 334.129270][T16810] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2991'. [ 334.140300][T16809] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2991'. [ 334.186773][T16700] wg0 speed is unknown, defaulting to 1000 [ 334.234693][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'. [ 334.411375][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2993'. [ 334.515800][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2993'. [ 335.541798][T16700] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.549254][T16700] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.556572][ T5632] Bluetooth: hci4: command tx timeout [ 335.562188][T16700] bridge_slave_0: entered allmulticast mode [ 335.570573][T16700] bridge_slave_0: entered promiscuous mode [ 335.579441][T16700] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.586778][T16700] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.594039][T16700] bridge_slave_1: entered allmulticast mode [ 335.601896][T16700] bridge_slave_1: entered promiscuous mode [ 335.650483][T16700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.663815][T16700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.713112][T16700] team0: Port device team_slave_0 added [ 335.731957][T16700] team0: Port device team_slave_1 added [ 335.811417][T16700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.819514][T16700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.847136][T16700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.860667][T16700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.867835][T16700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.895176][T16700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.947896][T16869] sctp: [Deprecated]: syz.0.3000 (pid 16869) Use of int in max_burst socket option. [ 335.947896][T16869] Use struct sctp_assoc_value instead [ 335.982818][T16700] hsr_slave_0: entered promiscuous mode [ 335.989402][T16700] hsr_slave_1: entered promiscuous mode [ 335.995587][T16700] debugfs: 'hsr0' already exists in 'hsr' [ 336.001763][T16700] Cannot create hsr debugfs directory [ 336.144773][T16700] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.157141][T16700] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.167602][T16700] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 336.249481][T16700] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.260091][T16700] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.270715][T16700] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 336.362908][T16700] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.374937][T16700] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.385588][T16700] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 336.456124][T16700] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.467602][T16700] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.478204][T16700] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 337.166985][T16813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.215588][T16700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 337.261182][T16700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.284479][T16700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 337.331709][T16700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.355624][T16700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 337.379971][T16700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.389424][T16874] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 337.402927][T16700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 337.433779][T16700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.499222][T16880] Cannot find set identified by id 0 to match [ 337.637209][ T5629] Bluetooth: hci4: command tx timeout [ 337.686873][T16700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.764553][T16700] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.819974][T16897] netlink: 'syz.2.3010': attribute type 1 has an invalid length. [ 337.831221][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.838414][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.859274][T16900] __nla_validate_parse: 3 callbacks suppressed [ 337.859292][T16900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3009'. [ 337.976158][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3010'. [ 338.049677][T10205] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.056948][T10205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.318479][T16927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3018'. [ 338.547035][T16937] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3021'. [ 338.588665][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3021'. [ 338.619514][T16925] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3016'. [ 338.982386][T16956] netlink: 'syz.1.3025': attribute type 1 has an invalid length. [ 339.054017][T16956] 8021q: adding VLAN 0 to HW filter on device bond8 [ 339.189238][T16965] vlan1: entered promiscuous mode [ 339.205304][T16965] bond8: entered promiscuous mode [ 339.211610][T16965] vlan1: entered allmulticast mode [ 339.221575][T16965] bond8: entered allmulticast mode [ 339.279477][T16956] bond8: (slave bridge5): making interface the new active one [ 339.315149][T16956] bridge5: entered promiscuous mode [ 339.331377][T16956] bridge5: entered allmulticast mode [ 339.340572][T16956] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 339.360580][T16973] vlan2: entered promiscuous mode [ 339.374113][T16973] hsr0: entered promiscuous mode [ 339.382389][T16973] vlan2: entered allmulticast mode [ 339.387952][T16973] hsr0: entered allmulticast mode [ 339.393176][T16973] hsr_slave_0: entered allmulticast mode [ 339.413498][T16973] hsr_slave_1: entered allmulticast mode [ 339.522861][T16700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.716878][ T5629] Bluetooth: hci4: command tx timeout [ 339.790976][T16996] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 340.025955][T17014] syzkaller0: entered promiscuous mode [ 340.056838][T17014] syzkaller0: entered allmulticast mode [ 340.258534][T16700] veth0_vlan: entered promiscuous mode [ 340.282669][T17025] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 340.282669][T17025] Please contact the netfilter-devel mailing list or update your nftables rules. [ 340.301282][T16700] veth1_vlan: entered promiscuous mode [ 340.348193][T16700] veth0_macvtap: entered promiscuous mode [ 340.380763][T16700] veth1_macvtap: entered promiscuous mode [ 340.410615][T17028] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 340.450623][T16700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.477290][T16700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.542608][T17033] macvlan0: entered promiscuous mode [ 340.549550][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3045'. [ 340.588403][T17034] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3045'. [ 340.811701][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3050'. [ 340.819881][ T6992] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.840404][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3050'. [ 340.855420][T17045] 8021q: VLANs not supported on ip_vti0 [ 340.875175][T17047] 8021q: VLANs not supported on ip_vti0 [ 340.950263][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.973151][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.066582][T10194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.109947][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.127900][T10194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.132417][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.164209][T10194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.480083][ T31] INFO: task kworker/1:0H:25 blocked for more than 143 seconds. [ 341.503219][ T31] Not tainted syzkaller #0 [ 341.508715][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.517807][ T31] task:kworker/1:0H state:D stack:26568 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 341.530563][ T31] Workqueue: kblockd blk_mq_requeue_work [ 341.537252][ T31] Call Trace: [ 341.542018][ T31] [ 341.545849][ T31] __schedule+0x17d4/0x5630 [ 341.552011][ T31] ? __lock_acquire+0x683/0x2cf0 [ 341.561533][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 341.569202][ T31] ? __pfx___schedule+0x10/0x10 [ 341.574498][ T31] ? schedule+0x90/0x2b0 [ 341.579294][ T31] schedule+0x164/0x2b0 [ 341.583625][ T31] schedule_timeout+0x152/0x2c0 [ 341.597429][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 341.606045][T17075] syz_tun: entered promiscuous mode [ 341.616167][ T31] ? __pfx_process_timeout+0x10/0x10 [ 341.632082][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 341.653287][ T31] ? prepare_to_wait_event+0x436/0x480 [ 341.681086][ T31] nbd_queue_rq+0x889/0x1150 [ 341.689915][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 341.695130][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 341.701791][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 341.707662][ T31] ? sbitmap_get+0x229/0x390 [ 341.712430][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 341.718861][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 341.724834][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 341.731366][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 341.738337][ T31] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 341.745200][ T31] ? blk_mq_run_hw_queue+0x321/0x4f0 [ 341.750855][ T31] ? blk_mq_run_hw_queue+0x321/0x4f0 [ 341.757381][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 341.763622][ T31] ? blk_mq_run_hw_queue+0x321/0x4f0 [ 341.769416][ T31] blk_mq_run_hw_queue+0x34a/0x4f0 [ 341.774890][ T31] blk_mq_run_hw_queues+0x268/0x3f0 [ 341.781164][ T31] blk_mq_requeue_work+0x703/0x760 [ 341.786592][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 341.792412][ T31] ? rcu_is_watching+0x16/0xb0 [ 341.807034][ T31] ? process_scheduled_works+0xa1a/0x14c0 [ 341.812959][ T31] process_scheduled_works+0xa88/0x14c0 [ 341.818946][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 341.825086][ T31] ? assign_work+0x3cf/0x5d0 [ 341.829902][ T31] worker_thread+0xa47/0xfb0 [ 341.834651][ T31] kthread+0x38b/0x480 [ 341.838947][ T31] ? __pfx_worker_thread+0x10/0x10 [ 341.844274][ T31] ? __pfx_kthread+0x10/0x10 [ 341.849071][ T31] ret_from_fork+0x514/0xb70 [ 341.853799][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 341.860283][ T31] ? __switch_to+0xc89/0x1420 [ 341.865129][ T31] ? __pfx_kthread+0x10/0x10 [ 341.870882][ T31] ret_from_fork_asm+0x1a/0x30 [ 341.875788][ T31] [ 341.885726][ T31] [ 341.885726][ T31] Showing all locks held in the system: [ 341.897845][ T31] locks held by kworker/0:1/10: 3, last CPU#0: [ 341.904224][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 341.915545][ T31] #1: ffffc900000f7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 341.928633][ T31] #2: ffff888034aa2250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 341.939190][ T31] locks held by kworker/1:0H/25: 4, on CPU#1: [ 341.945418][ T31] #0: ffff88801ea90140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 341.957243][ T31] #1: ffffc900001f7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 341.973149][ T31] #2: ffff8880274d0418 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x321/0x4f0 [ 341.984179][ T31] #3: ffff8880276de338 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 341.993713][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 342.000218][ T31] #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 342.010644][ T31] locks held by getty/5368: 2, on CPU#1: [ 342.016542][ T31] #0: ffff88803219a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 342.026674][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 342.037512][ T31] locks held by udevd/5630: 1, on CPU#1: [ 342.043287][ T31] #0: ffff888027610350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 342.052894][ T31] locks held by syz.3.3055/17066: 4, on CPU#1: [ 342.059613][ T31] #0: ffffffff900a7268 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.068331][ T31] #1: ffffffff900a70a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 342.077515][ T31] #2: ffff888072079140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3c/0x350 [ 342.086629][ T31] #3: ffff8880356f4348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdc0 [ 342.095867][ T31] locks held by syz.3.3055/17086: 2, on CPU#1: [ 342.102315][ T31] #0: ffffffff900a7268 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 342.110759][ T31] #1: ffffffff900a70a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 342.121678][ T31] [ 342.124064][ T31] ============================================= [ 342.124064][ T31] [ 342.144748][ T31] NMI backtrace for cpu 1 [ 342.144775][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 342.144796][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.144807][ T31] Call Trace: [ 342.144814][ T31] [ 342.144822][ T31] dump_stack_lvl+0xe8/0x150 [ 342.144858][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 342.144900][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 342.144934][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 342.144971][ T31] sys_info+0x135/0x170 [ 342.145002][ T31] watchdog+0xfd7/0x1030 [ 342.145056][ T31] ? watchdog+0x1c7/0x1030 [ 342.145093][ T31] kthread+0x38b/0x480 [ 342.145124][ T31] ? __pfx_watchdog+0x10/0x10 [ 342.145150][ T31] ? __pfx_kthread+0x10/0x10 [ 342.145183][ T31] ret_from_fork+0x514/0xb70 [ 342.145218][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 342.145249][ T31] ? __switch_to+0xc89/0x1420 [ 342.145279][ T31] ? __pfx_kthread+0x10/0x10 [ 342.145312][ T31] ret_from_fork_asm+0x1a/0x30 [ 342.145365][ T31] [ 342.145395][ T31] Sending NMI from CPU 1 to CPUs 0: [ 342.258714][ C0] NMI backtrace for cpu 0 [ 342.258732][ C0] CPU: 0 UID: 0 PID: 3 Comm: pool_workqueue_ Not tainted syzkaller #0 PREEMPT(full) [ 342.258753][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.258765][ C0] RIP: 0010:zap_class+0xf7/0x330 [ 342.258790][ C0] Code: 48 29 e8 48 c1 f8 05 48 8b 0c 24 48 0f ab 41 10 48 ff 05 fc 63 d2 14 4d 8b 6d 08 4d 85 ed 74 b5 49 83 c5 f8 74 af 45 8b 75 00 <41> f6 c6 fc 74 e7 41 c1 ee 08 4a 8d 1c 75 10 75 76 93 49 81 fe 00 [ 342.258806][ C0] RSP: 0018:ffffc90000087c50 EFLAGS: 00000093 [ 342.258823][ C0] RAX: 0000000000031a61 RBX: ffffffff937ca9d2 RCX: 0000000000031a5b [ 342.258836][ C0] RDX: ffffffff94317538 RSI: 0000000000000002 RDI: 000000000006bbd5 [ 342.258849][ C0] RBP: ffffffff947579b0 R08: ffffffff81b02868 R09: 0000000000000000 [ 342.258862][ C0] R10: 0000000000000000 R11: ffffffff8eb5a1e0 R12: 000000000004e718 [ 342.258875][ C0] R13: ffffffff9481a4d0 R14: 000000000190c114 R15: 0000000000000cab [ 342.258888][ C0] FS: 0000000000000000(0000) GS:ffff888124f23000(0000) knlGS:0000000000000000 [ 342.258902][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.258915][ C0] CR2: 00007f8bcb3f14b8 CR3: 000000007e2f4000 CR4: 00000000003526f0 [ 342.258931][ C0] Call Trace: [ 342.258939][ C0] [ 342.258949][ C0] lockdep_unregister_key+0x1c3/0x350 [ 342.258981][ C0] pwq_release_workfn+0x746/0x880 [ 342.259009][ C0] kthread_worker_fn+0x4eb/0xb20 [ 342.259037][ C0] ? kthread_worker_fn+0xdf/0xb20 [ 342.259063][ C0] ? __pfx_pwq_release_workfn+0x10/0x10 [ 342.259087][ C0] kthread+0x38b/0x480 [ 342.259112][ C0] ? __pfx_kthread_worker_fn+0x10/0x10 [ 342.259136][ C0] ? __pfx_kthread+0x10/0x10 [ 342.259161][ C0] ret_from_fork+0x514/0xb70 [ 342.259189][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 342.259213][ C0] ? __switch_to+0xc89/0x1420 [ 342.259236][ C0] ? __pfx_kthread+0x10/0x10 [ 342.259273][ C0] ret_from_fork_asm+0x1a/0x30 [ 342.259306][ C0] [ 342.455648][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 342.462556][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 342.471693][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.481797][ T31] Call Trace: [ 342.485105][ T31] [ 342.488073][ T31] vpanic+0x56d/0xa60 [ 342.492123][ T31] ? __pfx___schedule+0x10/0x10 [ 342.497001][ T31] ? __pfx_vpanic+0x10/0x10 [ 342.501529][ T31] ? nmi_trigger_cpumask_backtrace+0x20a/0x390 [ 342.507714][ T31] panic+0xc5/0xd0 [ 342.511455][ T31] ? __pfx_panic+0x10/0x10 [ 342.515910][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 342.521372][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 342.526755][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 342.532947][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 342.539141][ T31] watchdog+0x1030/0x1030 [ 342.543490][ T31] ? watchdog+0x1c7/0x1030 [ 342.547937][ T31] kthread+0x38b/0x480 [ 342.552015][ T31] ? __pfx_watchdog+0x10/0x10 [ 342.556696][ T31] ? __pfx_kthread+0x10/0x10 [ 342.561296][ T31] ret_from_fork+0x514/0xb70 [ 342.565896][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 342.571016][ T31] ? __switch_to+0xc89/0x1420 [ 342.575710][ T31] ? __pfx_kthread+0x10/0x10 [ 342.580341][ T31] ret_from_fork_asm+0x1a/0x30 [ 342.585172][ T31] [ 342.588828][ T31] Kernel Offset: disabled [ 342.593178][ T31] Rebooting in 86400 seconds..