last executing test programs: 16.864848292s ago: executing program 4 (id=7714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16.513579833s ago: executing program 4 (id=7717): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080) (async) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@local, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x1000000}}}}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) (rerun: 32) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800, 0x200, 0x3}, 0x20) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 9.286778025s ago: executing program 4 (id=7722): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff05, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="180000001600010000000000000000000a00c3"], 0x18}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}]}, 0x28}}, 0xc090) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x1, {0xd, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 9.262645776s ago: executing program 4 (id=7734): r0 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000b80)=@nat={'nat\x00', 0x19, 0x3, 0x3b2, [0x2000000007c0, 0x0, 0x0, 0x2000000007f0, 0x200000000a9c], 0x0, &(0x7f0000000080), &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x37, 0x0, 'pim6reg0\x00', 'macvlan0\x00', 'vcan0\x00', 'team_slave_1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0xd6, 0x126, 0x15e, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x2000, 0x1}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0xd, 0x9, 0x1}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz1\x00', {0x9}}}}], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 0xfffffffffffffffd}}}}, {0x5, 0x2, 0x9200, 'pim6reg\x00', 'wg1\x00', 'ip6tnl0\x00', '\x00', @remote, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @random="7ec5f42c582f", [0xff, 0xff, 0xff], 0x6e, 0xd6, 0x11e, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xd81}}}, @snat={'snat\x00', 0x10, {{@empty, 0x10}}}], @common=@ERROR={'ERROR\x00', 0x20, {"239bce8c0ca85f597c1f5fd96648c4e066e68141d050f4d43d35b9ad7a7d"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x9, 0x2, 0x8917, 'tunl0\x00', 'ipvlan0\x00', 'virt_wifi0\x00', 'vlan0\x00', @link_local, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xffffffffffffffff}}}}]}]}, 0x42a) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1700000000000000090000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1700000000000000090000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x19, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x28}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @jmp={0x5, 0x1, 0xd, 0x7, 0x0, 0x100, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5c99, 0x0, 0x0, 0x0, 0xc}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x14d1}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x8b, &(0x7f0000000100)=""/139, 0x0, 0x29, '\x00', 0x0, 0x0, r3}, 0x94) 8.946260581s ago: executing program 4 (id=7738): r0 = socket(0xa, 0x5, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000280)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002680)=[{0x0, 0x2}]}, 0x90) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYBLOB="d046ec117ff4f083212147aeb12436f55916962a94b1e9da97788dc7d6b551c18ec1c7ede0d2001d6a8ef6b30e72e2cac44d4116f79d35da67da86cc168736502ca7ef5a84c2b06af15e5137eab81b946887e8837b89f24b8090875201ac285b36aefbd69aa49fcdf5feee5ac58b0aabc913fcaae3930af3d143c87995b3527403f017536ddb5153f582a5d2db089ded479beaa0a59594af7813b5251f22b0cf8998367752499b3499e079b6", @ANYRES16=r3, @ANYRES8=r1, @ANYRESDEC=r2, @ANYRES16=r2, @ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a110400000000000000000100000008000a4000000000020073797a32000000000900010073797a3000000000080005400000001f400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800400018008000a40000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xc4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x28, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELRULE={0x0, 0x8, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x28}, [@NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID, @NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x3}]}], {0x14}}, 0xd0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000300)={0x3, 0x1de00, 0x1, 0xe, 0xa948}) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000033e64773d286927a624360bfa71887fb5f827bd2408000050000081300000014000200fc02000000000000000000000000000014000100200100000000000000"], 0x44}}, 0x40000) socket$alg(0x26, 0x5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x1000000, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000294fe9699700a4090000000000000000000000000000000000000000000000feffffff00000000"]}, 0x10d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0xac, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x68, 0x12, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xadc}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4080000}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xd6}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000009fafc5486477cae00000000000000080004400000000314000000110000000000000000000100000a00000000000000000000000000000000323f2ee4ee86ba7bb46b3fdcd39da07e85050a58e886ce05c1da4926ab30012290c0912258765379b9f6498a5dabd5975136a254a33ac9103c3065f45ba8ea57ee64b0b30042d3b58cee84cd122058d39bde4e90f2bbc21b"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000040) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r10) 7.91123342s ago: executing program 4 (id=7751): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4044101) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x1, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@ip4=@empty, 0x800}}}]}, 0x38}}, 0x0) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) recvfrom(r3, &(0x7f0000002300)=""/4103, 0x1007, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) (async) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000006c0)=""/194, 0xc2}], 0x2}, 0x40000000) (async) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r7, 0x29, 0x14, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r9 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500050040"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r6, 0x8000, 0x1008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.239007699s ago: executing program 0 (id=7758): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r0, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/time_for_children\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001180)={@val={0x0, 0x86dd}, @val={0x0, 0x3, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x3c}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x19, 0xb, "68b221212701229eef96453f92c74956377e0ee0b4d368b74711618c3a0f2d41cd57d92a7284e1e26a46ee6abda18869b35cb216edd0a0ffbc70fc4f537dff97a5954d1bafa8a22ebc17113645f9968cbc9a7f76ca31"}, {0x1f, 0x20, "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"}, {0x2, 0x12, "d00267dacbc68021c0b3a1390895049c3de366c3aa8653a6fcba5804868e50ed2daa13b9dd4cb73a0a7ab11286709990ef1db4d2e6b8976029967226cbe3ade8efc8862bc22963c54fe23cdc08373ed52f2482f8459da8f33d246726977f33fe2cb7a691b161a814812d2b181415828465a6a6a2346b757a20cd497a4dff4511039f3ee898c6f75e342cfbbac07f3c0b965d95"}, {0x5, 0x2, "1a51e8434bbc75afff3e391f153ee15250fa"}, {0xd, 0x1a, "39f85c27c51259c3bb081e8209ebbe7b168b1878c7bebe3383e86f3b5ee892c5c4d064ccc24e05a5cb0f6d9aa4f649c58b212dd03541f51c3906e3e8ced0cbe40311dfe21cae347dc7322240dc4935d6d1f3160dd8478c69bdedeb2516a50ef7044ae0c101897d4c73aa06c9058f86083f263c38647a89e754773acdb71f616f69826f3e515dd55e56d098e0aea8fcbfa5f069f1e0ce33f327203a251832e35d27033f994a3bd4f011d97d80944b037c0c4056cfcf3549f6104cfbb04fcec5066e7af66c6273d0ff5d8eb563d155c55a3c4f"}, {0x1b, 0x5, "196e1787ef24fd1e1a6c1d09fb96a26b2d0105ef33120866d0bdb0119c529f5c68b6934e1a0e427a6afb45"}, {0x5, 0x1, "0d21ad86cbc69bfdec74edce02"}, {0xe, 0x17, "ff4e9a50e3c9058ba689db036f8288e303397778a528c5b595aea5cdc09cccb60cc2fbab14d3d7257ea9f1f3c69fb870becbebf4e2b23315944c55899b5317ce0616eea7f58224e4473732e637ae845702b373b2f513ee347b0ce2c4fa85fdb4434e45ebf43f6bea4a0917ddf61f0a71d2e943ac99fd89562c9c6721daf0e2793eaba683d18ad217f87696f20ffa8b8b900704e5946b29f428b688ccaa1fa6bf217c337caef63601212e8bd7954e3fcb916b08939b8a61d163bb4c7c"}, {0x3, 0x177, "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"}]}}}}}, 0xfce) socket$inet6(0xa, 0xa, 0xfffffff9) 7.01887404s ago: executing program 2 (id=7761): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a0080000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_STATUS={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2406}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 6.856628766s ago: executing program 2 (id=7763): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$phonet(r0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x42e, 0x100, 0x20000005, 0x3, 0x0, 0x0, 0x10007fff}}) 6.822809445s ago: executing program 0 (id=7764): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="29908231db0794467111ed689e0866f8fe322148afedf55e8765ea2b41d85d17f55285f4d73a9d86028cd80c59a6cdc148a0092564ac6b191138381eb17a606bb994a0f41c36283dad5331e3eefc6692", 0x50}], 0x1}, 0x40000) (async) sendmsg$inet6(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="29908231db0794467111ed689e0866f8fe322148afedf55e8765ea2b41d85d17f55285f4d73a9d86028cd80c59a6cdc148a0092564ac6b191138381eb17a606bb994a0f41c36283dad5331e3eefc6692", 0x50}], 0x1}, 0x40000) recvmsg$qrtr(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ec0)=""/64, 0x40}, {&(0x7f0000000740)=""/178, 0xb2}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa4ed2558ca45f208}, 0x40) (async) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa4ed2558ca45f208}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x2, 0xffffffffffffffff, 0x5, 0xfffffffd}, 0x4e}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r8) (async) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004012ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) recvmmsg$unix(r3, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) (async) recvmmsg$unix(r3, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) 6.092659245s ago: executing program 3 (id=7773): syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aa8caaaaaaaaffffffffaa777e70a1dfff0000d60b5ea2000000000000000000a7657a291729c3000000fe80004000000000810000e4ff0000aa0000400100000000000000000012cfa439b47248e8fb78ff670a7f61104455722c70bad122f8b3fa107c69ab13128339aa71a2fcae40e3516fc651a8cbe2f493f8de4f7681344dbb401a99e692c310e410538b7857f1680e10253b789117b3febbfb4eff8992f7ce2599fff8aeca935ed198d8449e651dd7ed305c230f55306e0600975391eaa2489f21287e93ce1a9b1a83ce3da8f5866a9ada09b56db94d54ba8c61b778774dc0", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000fe02fe087701d734ec220000"], 0x0) 6.043316177s ago: executing program 3 (id=7774): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4c000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000401a800080008000a400400000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r7 = socket(0x2a, 0x2, 0x13) write$tun(r7, &(0x7f0000000580)={@val={0x0, 0x200}, @void, @ipv6=@udp={0x4, 0x6, "0ac54a", 0x257, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@hopopts={0x87, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x800}, @pad1, @jumbo={0xc2, 0x4, 0x8}]}, @srh={0x67, 0xc, 0x4, 0x6, 0xd, 0x20, 0x3, [@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x1d, 0x0, 0x2, 0x1, 0x0, 0x7, 0x67}, @dstopts={0xc, 0x28, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0xa, 0xf2, "ba84978524c91f6fa266e7edd205f9bcf69fe5c606e71cacbac1c5adfb90ec653a1b2c3ddf45b64d267b37e4508bedfdb13fc181c625cf4908c5bae2477746e935e7adf9f5163610740d456290c6e93b53373e1a348deaec3b06be90154bccbdf475abc9a2a852aef5c765d0e91486dbbeb6ee2973932e0614331bef852b040c77413f500e17a8d3f7216530ae4838500cc020bdc57af8485498cfff91acfd43f3994f30ddb4353360dae8e226bf9afffdd56716f232b61426caba3c5efa677f0518a01d592b9cdf13017fc28f87ed489d59f61d6fd4d2bf0164dccbd49986874b93a39b4d503e9912c95d71072291a644ae"}, @calipso={0x7, 0x38, {0x3, 0xc, 0x8, 0xb0, [0x3, 0x43d, 0x8, 0xed, 0x7, 0x900]}}]}, @fragment={0x87, 0x0, 0x8, 0x1, 0x0, 0x12, 0x68}], {0x4e20, 0x4e21, 0x77, 0x0, @gue={{0x2, 0x0, 0x1, 0xa5}, "ce73d327f7221731eb7e3a15ceaaa7b3f822c03ae69ce2462f90e19a36e6eaebd1989b5bb00ac0cffec1639df543e94958096752f69232a514acebf5ec31c23260e0870a35c08dc94bf7bc19ac35cef979f398de819f5c81a34039b48e1b85cce0de72215c3e92"}}}}}, 0x283) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0xc, 0x3, "e4edf2b75cc7c0a3"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.27549932s ago: executing program 2 (id=7776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) (async, rerun: 32) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xfff8}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c044}, 0x40) (async) r10 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x25, &(0x7f0000000000), 0x20000010) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) (async, rerun: 32) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001d80)={'wlan0\x00', 0x20}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x1, r11, 0x7}, 0x10) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="781b0000", @ANYRES16=r3, @ANYBLOB="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"], 0x1b78}, 0x1, 0x0, 0x0, 0x7f1c95a68fac22d1}, 0x20000800) r12 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x1, 0x0, 0xffff, 0xfffffff9, {{0x5, 0x4, 0x0, 0x32, 0x14, 0x67, 0x0, 0xb, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a2f0000060001"], 0x1c}}, 0x0) (async) shutdown(r5, 0x1) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r14, 0x89e0, 0x500) getsockopt$inet_int(r13, 0x0, 0xd, 0x0, &(0x7f0000000080)) 5.215528221s ago: executing program 0 (id=7777): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000019000109000000080000000002000000fd010000000008000100ac141400080005000a0101020c0016800571dfce5179000400810000000600150008"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x1d, 0x9d3f, 0x78}, 0x2c) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x210, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000200), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e10db43ed722", @remote, @empty, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "bcd914152c7cb847f81626eb91ca4489bd9397e0b92b1fcc2a1f66e83c16"}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x13}, @broadcast, 0xffffffff, 0xffffff00, 0x4, 0x8, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x9, 0x9, 0x9, 0x8000, 0x4, 'ip6erspan0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x0, 0x106}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0xcd, 0x0, 0xfffffffe}}, 0x44) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), 0x0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) write(r4, &(0x7f0000000300)="1c0000001a005f0214f9f4070d0903001f000000fe05000000020000", 0x1c) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000080)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x200000a0) socket$kcm(0xa, 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000019000109000000080000000002000000fd010000000008000100ac141400080005000a0101020c0016800571dfce5179000400810000000600150008"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x1d, 0x9d3f, 0x78}, 0x2c) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x210, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000200), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e10db43ed722", @remote, @empty, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "bcd914152c7cb847f81626eb91ca4489bd9397e0b92b1fcc2a1f66e83c16"}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x13}, @broadcast, 0xffffffff, 0xffffff00, 0x4, 0x8, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x9, 0x9, 0x9, 0x8000, 0x4, 'ip6erspan0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x0, 0x106}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0xcd, 0x0, 0xfffffffe}}, 0x44) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), 0x0}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) (async) write(r4, &(0x7f0000000300)="1c0000001a005f0214f9f4070d0903001f000000fe05000000020000", 0x1c) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) (async) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000080)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x200000a0) (async) 5.208819298s ago: executing program 2 (id=7778): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="c301000100b3", 'wg1\x00'}}, 0x1e) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) 5.082332972s ago: executing program 3 (id=7779): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) r3 = socket(0x2, 0xa, 0x400000) sendmmsg(r3, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000001"], 0x30}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8) socket$nl_rdma(0x10, 0x3, 0x14) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) socket$vsock_stream(0x28, 0x1, 0x0) 4.984769345s ago: executing program 3 (id=7780): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) close(0x4) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 4.944834893s ago: executing program 0 (id=7781): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000200)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002, 0xfffffffe}}}}}, 0x0) 4.858442475s ago: executing program 2 (id=7782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r0, 0xd95e, 0x7ff, 0x81}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0xb, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x2d}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0x9}, @union={0xa, 0x6, 0x0, 0x5, 0x0, 0x3, [{0xc, 0x2, 0x800}, {0xa, 0x3, 0x5}, {0x0, 0x1, 0xef4}, {0x8, 0x0, 0xc139}, {0xc, 0x1, 0x36c}, {0x5, 0x1, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x400}}]}, {0x0, [0x61, 0x2e, 0x2e, 0x0, 0x30, 0x61, 0x0, 0x61, 0x61]}}, &(0x7f0000000780)=""/67, 0xaf, 0x43, 0x0, 0x9, 0x10000}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r1, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], 0x0, 0x70, &(0x7f00000009c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0x0, 0x3, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x11, &(0x7f00000004c0)=@raw=[@exit, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x5, 0x7, 0x7, 0x6, 0x1}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x560}}, @generic={0x0, 0x5, 0x4, 0x2, 0xf}], &(0x7f0000000580)='syzkaller\x00', 0x80000000, 0x17, &(0x7f00000005c0)=""/23, 0x20980, 0x30, '\x00', r6, 0x1b, r7, 0x8, &(0x7f0000000840)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, 0x0, 0x4, &(0x7f0000000c40)=[r9, 0xffffffffffffffff, 0xffffffffffffffff, r10], &(0x7f0000000c80)=[{0x5, 0x5, 0xa, 0x4}, {0x1, 0x2, 0x5, 0x2}, {0x0, 0x3, 0x1, 0x7}, {0x0, 0x3, 0x7, 0x1}], 0x10, 0x9}, 0x94) close(r0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r13 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r13, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x41}}, &(0x7f0000000480)='GPL\x00', 0x7}, 0x90) 4.839971269s ago: executing program 0 (id=7783): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) (async) close(0x3) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, 0xffffffffffffffff, 0x0) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x2, 0xeab, 0x7fffffff, 0xffff, 0x0, 0x5, 0x40, 0xfffffff8}}}}]}, 0x58}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0x1, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0xa, 0x3, 0xffffffff, 0x8, 0x9, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x206, 0x5f, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0xafb, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0xa, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x79cf, 0x4) (async) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x19, @private0, 0x1f}, 0x1c) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x78, "92307f649b573ebfc7829b4719d2452ea54ca1b9ef0ff072a676e4ee1f350061f94cf1def1e6383be423e366236226c67ad42c0ce41dc8a47582bb68c0e116eb619b21c18c6c52fd028a20ae468da0c85367d49530d85487c472439fc5e46e9764a2e7b392d468d0d38458138d67ed440060e7e0e672866f"}, &(0x7f0000000100)=0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x101, 0xf, 0x20e, 0x4, 0x3, 0x9, 0x9, 0xfffffffe, r12}, &(0x7f00000001c0)=0x20) 4.823497883s ago: executing program 2 (id=7784): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x4}}, 0x10) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000000)='yeah\x00', 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)={0x18, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x24000000) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="80fdc7000040", 0x6}], 0x1, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) 4.27272113s ago: executing program 1 (id=7785): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r1 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) (async) close(r1) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000007110b800000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)) (async) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000001380)={0x2, 0x2}) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x104, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @synproxy={{0xd}, @void}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0xaf, 0xd, 0x1, 0x0, "25e2d9462003c80114b0f383d126cb6a673bec6c055a484f2b2c797d6cafc99cd804414d46d30b18250c2d77212287e2d05058adf66c336c97907e67bb3a52f8889670360b1792024115da3f9cea98cc8f682e30b0fadc98e92b133fcd89e4624d34e7b53f04aff41f474dd59287c690f00041f28f7457d9e5838a67b7d89bea971952fc5f485bd7c8a14d8bfdfb799da5fed30fd2c1b121be6743c00e43b49bfed8a93451daa23dfc6ff1"}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "142e"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x16c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2010a00) (async, rerun: 32) recvfrom(r4, 0x0, 0x0, 0x2120, 0x0, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4.271494959s ago: executing program 1 (id=7786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 4.062515586s ago: executing program 3 (id=7787): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'macsec0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x61, &(0x7f00000002c0)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x6dc4, 0x7, 0x5, 0x8}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x0, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_rr={{}, {0x0, 0x2, {0x0, "6d04000000144675b4197d001300003f"}}}]}, 0x16}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240080, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="17b352a666c9f2985a8b", 0xa}, {&(0x7f0000000100)="301ed9f9a338ef93c403155b88", 0xd}], 0x3) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 335.833734ms ago: executing program 1 (id=7788): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) 198.507373ms ago: executing program 1 (id=7789): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x54, r1, 0x852dd6c070cd7e4b, 0x0, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfffd}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x54}, 0x4, 0x700000000000000}, 0x0) 186.0854ms ago: executing program 3 (id=7790): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) read(r1, &(0x7f0000000040)=""/244, 0xf4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) 146.119151ms ago: executing program 1 (id=7791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r2, 0x101, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x41}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2d, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0x11, 0x0, 0x0, 0x4, 0xccce, {0x5, 0x4, 0x2, 0x1, 0x8, 0x67, 0x3, 0xe8, 0x33, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)={0x20, 0x42, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x146}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x64}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000) 30.432634ms ago: executing program 1 (id=7792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000100)) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000100)=""/138, 0x8a, 0x4, 0xc}) 0s ago: executing program 0 (id=7793): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)=r0}, 0x20) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001840)={@empty, @loopback, 0x0}, &(0x7f0000001880)=0xc) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x9, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001900)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x19, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000008c4a5ae86de1d000005000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018410000fcffffff0000000000000000184100000800000000000000000000001857000001000000000000000000000022b11800000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x1, 0x1000, &(0x7f0000000840)=""/4096, 0x41100, 0x30, '\x00', r2, @fallback=0xc, r3, 0x8, &(0x7f00000018c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001940)=[{0x1, 0x1, 0x1, 0x1}, {0x4, 0x1, 0xf, 0x4}, {0x0, 0x1, 0xa}, {0x0, 0x3, 0x0, 0x2}, {0x0, 0x1, 0x7, 0xc}, {0x5, 0x5, 0x6, 0x3}, {0x5, 0x1, 0x8}, {0x4, 0x4, 0xe, 0x1}], 0x10, 0x3}, 0x94) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1a0026bdf244b59afe127000040000000500004c0800a50a000008040b00000000000600010007000000050012000900000000000000"], 0x3c}}, 0x20) kernel console output (not intermixed with test programs): interface: batadv_slave_1 [ 858.196036][T29655] netlink: 'syz.2.6173': attribute type 39 has an invalid length. [ 858.213517][T15706] veth0_macvtap: left promiscuous mode [ 858.219235][T15706] veth1_vlan: left promiscuous mode [ 858.409296][T15706] pim6reg (unregistering): left allmulticast mode [ 858.895923][T15706] team0 (unregistering): Port device team_slave_1 removed [ 858.913293][T15706] team0 (unregistering): Port device team_slave_0 removed [ 859.101081][T15708] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.108286][T15708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.211603][T13109] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.218922][T13109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.348200][T29669] x_tables: unsorted underflow at hook 1 [ 859.753653][T29255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.827466][T29255] veth0_vlan: entered promiscuous mode [ 859.862201][T29255] veth1_vlan: entered promiscuous mode [ 859.918734][T29255] veth0_macvtap: entered promiscuous mode [ 859.931391][T29255] veth1_macvtap: entered promiscuous mode [ 859.973341][T29255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.991564][T29255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.005010][T15707] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.013900][T15707] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.029618][T15708] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.038712][T15708] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.264303][T15708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.280047][T15708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.331109][T15706] IPVS: stop unused estimator thread 0... [ 860.342417][T13109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.350349][T13109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.128150][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 862.136301][ C0] lec:lec_tx_timeout: lec0 [ 862.141477][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 865.721393][ T1579] block nbd4: Possible stuck request ffff888027a8e000: control (read@0,4096B). Runtime 30 seconds [ 866.260860][T29718] netlink: 'syz.3.6185': attribute type 1 has an invalid length. [ 866.370080][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 866.439612][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 866.458510][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 866.467904][T29718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 866.479838][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 866.511462][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 866.570918][T29720] macvlan2: entered promiscuous mode [ 866.588827][T29720] macvlan2: entered allmulticast mode [ 866.632920][T29719] tipc: Resetting bearer [ 866.653108][T29719] tipc: Resetting bearer [ 866.684372][T29719] wg1 speed is unknown, defaulting to 1000 [ 866.692148][T29719] lo speed is unknown, defaulting to 1000 [ 866.738861][T29733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6187'. [ 866.832302][T29737] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 866.870700][T29733] bond2: option xmit_hash_policy: invalid value (64) [ 866.879189][T29733] bond2 (unregistering): Released all slaves [ 866.903412][T29737] ip6t_srh: unknown srh invflags 4000 [ 867.098732][T29740] tipc: Started in network mode [ 867.103677][T29740] tipc: Node identity ae36273ca3eb, cluster identity 4711 [ 867.110996][T29740] tipc: Enabled bearer , priority 0 [ 867.188222][T29741] tipc: Enabling of bearer rejected, already enabled [ 867.250458][T29740] tipc: Disabling bearer [ 867.298497][T29752] xt_hashlimit: size too large, truncated to 1048576 [ 867.335896][T29719] chnl_net:caif_netlink_parms(): no params data found [ 867.535063][T29719] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.542412][T29719] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.549760][T29719] bridge_slave_0: entered allmulticast mode [ 867.558005][T29719] bridge_slave_0: entered promiscuous mode [ 867.566836][T29719] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.574102][T29719] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.581417][T29719] bridge_slave_1: entered allmulticast mode [ 867.589644][T29719] bridge_slave_1: entered promiscuous mode [ 867.689939][T29719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.703006][T29719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.809857][T29772] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 867.949595][T29777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6198'. [ 867.998533][T29719] team0: Port device team_slave_0 added [ 868.007391][T29719] team0: Port device team_slave_1 added [ 868.227069][T29778] tipc: Started in network mode [ 868.232110][T29778] tipc: Node identity , cluster identity 4711 [ 868.238228][T29778] tipc: Failed to obtain node identity [ 868.243724][T29778] tipc: Enabling of bearer rejected, failed to enable media [ 868.249310][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6130 ms [ 868.260661][ C0] lec:lec_tx_timeout: lec0 [ 868.266107][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 868.275248][T29719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.282669][T29719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.309516][T29719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.322723][T29719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.331831][T29719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.358778][T29719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.572580][T21484] Bluetooth: hci1: command tx timeout [ 869.114178][T29811] netlink: 'syz.1.6207': attribute type 10 has an invalid length. [ 869.128325][T29811] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6207'. [ 869.150362][T29811] netlink: 'syz.1.6207': attribute type 10 has an invalid length. [ 869.158483][T29811] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6207'. [ 869.168677][T29811] netlink: 'syz.1.6207': attribute type 10 has an invalid length. [ 869.176595][T29811] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6207'. [ 870.687684][T21484] Bluetooth: hci1: command tx timeout [ 871.982388][T29813] bridge1: entered promiscuous mode [ 871.987763][T29813] bridge1: entered allmulticast mode [ 872.003619][T29719] hsr_slave_0: entered promiscuous mode [ 872.010825][T29719] hsr_slave_1: entered promiscuous mode [ 872.017934][T29719] debugfs: 'hsr0' already exists in 'hsr' [ 872.023727][T29719] Cannot create hsr debugfs directory [ 872.115665][T29815] tipc: Started in network mode [ 872.123950][T29815] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 872.135242][T29815] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 872.144652][T29815] tipc: Enabled bearer , priority 10 [ 872.179170][T29815] netlink: 'syz.1.6208': attribute type 1 has an invalid length. [ 872.219423][T29822] tipc: Enabling of bearer rejected, already enabled [ 872.483552][T29828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6213'. [ 872.527039][T29832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6210'. [ 872.530630][T29828] block nbd5: Unsupported socket: should be TCP or UNIX. [ 872.689915][T29841] netlink: 'syz.4.6210': attribute type 4 has an invalid length. [ 872.733004][T21484] Bluetooth: hci1: command tx timeout [ 872.759602][T29719] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.773553][T29719] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.230619][T29719] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.307281][T29719] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.480563][T10099] tipc: Node number set to 1 [ 873.814333][T29719] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.827837][T29888] netlink: 'syz.3.6221': attribute type 1 has an invalid length. [ 873.835754][T29719] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.918349][T29888] bond2: entered promiscuous mode [ 873.924691][T29888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 873.936747][T29891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6222'. [ 873.988773][T29888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 873.997824][T29888] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 874.010090][T29888] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 874.023680][T29888] bond2: (slave ip6gre1): making interface the new active one [ 874.031660][T29888] ip6gre1: entered promiscuous mode [ 874.038109][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 874.046377][ C0] lec:lec_tx_timeout: lec0 [ 874.055096][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 874.063599][T29888] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 874.700352][T29719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 874.710190][T29719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 874.718364][T29719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 874.756364][T29719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 874.764492][T29719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 874.774884][T29719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 874.783030][T29719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 874.790270][T21484] Bluetooth: hci1: command tx timeout [ 874.798769][T29719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 874.880987][T29719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.901585][T29719] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.914071][T15707] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.921245][T15707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.936828][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.953377][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.143237][T29719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.212113][T29719] veth0_vlan: entered promiscuous mode [ 875.224149][T29719] veth1_vlan: entered promiscuous mode [ 875.255704][T29719] veth0_macvtap: entered promiscuous mode [ 875.266304][T29719] veth1_macvtap: entered promiscuous mode [ 875.293658][T29719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.307469][T29719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.329959][T13127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.340130][T13127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.350603][T13127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.359414][T13127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.471426][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.479652][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.527265][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.535218][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.540622][T29926] netlink: 'syz.4.6227': attribute type 1 has an invalid length. [ 878.628301][T29926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 878.713302][T29926] bond1: (slave gretap1): making interface the new active one [ 878.723730][T29926] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 878.807125][T29939] netlink: 'syz.3.6229': attribute type 10 has an invalid length. [ 878.839141][ T30] audit: type=1800 audit(1777012334.552:19): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6228" name="memory.events" dev="tmpfs" ino=2870 res=0 errno=0 [ 878.861198][T29939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 878.901904][T29939] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 878.905716][ T30] audit: type=1800 audit(1777012334.552:20): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6228" name="memory.events" dev="tmpfs" ino=2870 res=0 errno=0 [ 878.985903][ T30] audit: type=1800 audit(1777012334.552:21): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6228" name="memory.events" dev="tmpfs" ino=2870 res=0 errno=0 [ 879.058525][T29948] syzkaller1: entered promiscuous mode [ 879.065053][ T30] audit: type=1800 audit(1777012334.552:22): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6228" name="memory.events" dev="tmpfs" ino=2870 res=0 errno=0 [ 879.087696][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 879.087732][ C0] lec:lec_tx_timeout: lec0 [ 879.096093][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 879.132627][T29948] syzkaller1: entered allmulticast mode [ 879.177664][ T30] audit: type=1800 audit(1777012334.612:23): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6228" name="memory.events" dev="tmpfs" ino=2870 res=0 errno=0 [ 879.202658][ T30] audit: type=1800 audit(1777012334.612:24): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6228" name="memory.events" dev="tmpfs" ino=2870 res=0 errno=0 [ 879.224490][ T30] audit: type=1800 audit(1777012334.612:25): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6228" name="memory.events" dev="tmpfs" ino=2870 res=0 errno=0 [ 879.289130][ T30] audit: type=1800 audit(1777012334.612:26): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6228" name="memory.events" dev="tmpfs" ino=2870 res=0 errno=0 [ 879.311117][ T30] audit: type=1800 audit(1777012334.612:27): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6228" name="memory.events" dev="tmpfs" ino=2870 res=0 errno=0 [ 879.332501][ T30] audit: type=1800 audit(1777012334.612:28): pid=29940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6228" name="memory.events" dev="tmpfs" ino=2870 res=0 errno=0 [ 879.780046][T29980] wg1 speed is unknown, defaulting to 1000 [ 879.787369][T29980] lo speed is unknown, defaulting to 1000 [ 879.836901][T29948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 880.057173][T29987] netlink: 'syz.3.6241': attribute type 4 has an invalid length. [ 880.111538][T29991] netlink: 'syz.3.6241': attribute type 4 has an invalid length. [ 880.345793][T29996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6245'. [ 880.428881][T30000] netlink: 'syz.3.6246': attribute type 1 has an invalid length. [ 880.459578][T30001] netlink: 'syz.3.6246': attribute type 1 has an invalid length. [ 880.535050][T30006] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6245'. [ 880.622289][T30000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 880.672821][T29996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6245'. [ 880.754533][T30017] netlink: 'syz.1.6247': attribute type 21 has an invalid length. [ 881.038674][T30030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6252'. [ 881.211475][T30036] syzkaller0: entered promiscuous mode [ 881.221002][T30036] syzkaller0: entered allmulticast mode [ 881.270387][T30042] netlink: 'syz.2.6258': attribute type 4 has an invalid length. [ 881.280523][T30042] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6258'. [ 882.536082][T28451] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 882.568130][T28451] CPU: 0 UID: 0 PID: 28451 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 882.568161][T28451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 882.568175][T28451] Call Trace: [ 882.568184][T28451] [ 882.568193][T28451] dump_stack_lvl+0xe8/0x150 [ 882.568231][T28451] dump_header+0xd3/0x4c0 [ 882.568260][T28451] oom_kill_process+0x3ab/0x970 [ 882.568298][T28451] out_of_memory+0x106c/0x1410 [ 882.568327][T28451] ? try_charge_memcg+0xba6/0x1560 [ 882.568363][T28451] ? __pfx___mutex_lock+0x10/0x10 [ 882.568401][T28451] ? __pfx_out_of_memory+0x10/0x10 [ 882.568430][T28451] ? do_raw_spin_unlock+0xf5/0x210 [ 882.568465][T28451] try_charge_memcg+0xc53/0x1560 [ 882.568520][T28451] ? __pfx_try_charge_memcg+0x10/0x10 [ 882.568560][T28451] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 882.568596][T28451] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 882.568641][T28451] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 882.568679][T28451] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 882.568718][T28451] __swap_cache_prepare_and_add+0xe8/0x760 [ 882.568754][T28451] ? page_rmappable_folio+0x9a/0x170 [ 882.568797][T28451] swap_cache_alloc_folio+0xf1/0x240 [ 882.568828][T28451] swap_cluster_readahead+0x369/0x690 [ 882.568859][T28451] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 882.568898][T28451] ? get_vma_policy+0x27b/0x3c0 [ 882.568921][T28451] swapin_readahead+0x196/0xc50 [ 882.568949][T28451] ? swap_table_get+0x1e/0x260 [ 882.568978][T28451] ? __pfx_swapin_readahead+0x10/0x10 [ 882.569004][T28451] ? swap_table_get+0x1e/0x260 [ 882.569026][T28451] ? swap_table_get+0x1e/0x260 [ 882.569046][T28451] ? swap_table_get+0x1e/0x260 [ 882.569069][T28451] ? swap_table_get+0x216/0x260 [ 882.569094][T28451] ? swap_cache_get_folio+0x513/0x520 [ 882.569123][T28451] do_swap_page+0x56f/0x5a20 [ 882.569169][T28451] ? do_swap_page+0x127/0x5a20 [ 882.569191][T28451] ? __pfx_do_swap_page+0x10/0x10 [ 882.569212][T28451] ? __pte_offset_map+0x1ae/0x240 [ 882.569241][T28451] ? pte_offset_map_rw_nolock+0xea/0x160 [ 882.569270][T28451] handle_mm_fault+0x12d2/0x3310 [ 882.569311][T28451] ? handle_mm_fault+0xee/0x3310 [ 882.569343][T28451] ? __pfx_handle_mm_fault+0x10/0x10 [ 882.569366][T28451] ? lock_vma_under_rcu+0x45a/0x500 [ 882.569420][T28451] do_user_addr_fault+0xa73/0x1340 [ 882.569456][T28451] ? rcu_is_watching+0x15/0xb0 [ 882.569484][T28451] ? trace_page_fault_user+0x84/0x1e0 [ 882.569514][T28451] exc_page_fault+0x6a/0xc0 [ 882.569541][T28451] asm_exc_page_fault+0x26/0x30 [ 882.569560][T28451] RIP: 0033:0x7f5f9b66adf7 [ 882.569580][T28451] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c0 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 a8 ed 00 48 01 d1 39 7c 24 [ 882.569597][T28451] RSP: 002b:00007ffdb96d88a0 EFLAGS: 00010206 [ 882.569615][T28451] RAX: 0000001b2dd24000 RBX: 00000000000000b3 RCX: 00000000000d7550 [ 882.569629][T28451] RDX: 00000000045990fd RSI: 00007ffdb96d8930 RDI: 000000000000000f [ 882.569642][T28451] RBP: 00007ffdb96d88dc R08: 000000001097eb27 R09: 3fffffffffffffff [ 882.569655][T28451] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 882.569668][T28451] R13: 00000000000927c0 R14: 00000000000d7343 R15: 00007ffdb96d8930 [ 882.569700][T28451] [ 882.569908][T28451] memory: usage 307200kB, limit 307200kB, failcnt 602 [ 882.925037][T28451] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 882.934009][T28451] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 882.941728][T28451] Memory cgroup stats for /syz3: [ 882.954491][T28451] cache 0 [ 882.963018][T28451] rss 0 [ 882.965940][T28451] rss_huge 0 [ 882.969617][T28451] shmem 0 [ 882.972631][T28451] mapped_file 0 [ 882.976230][T28451] dirty 0 [ 882.983362][T28451] writeback 0 [ 882.986814][T28451] workingset_refault_anon 10 [ 882.994098][T28451] workingset_refault_file 112 [ 882.999760][T28451] swap 188416 [ 883.003141][T28451] swapcached 253952 [ 883.006983][T28451] pgpgin 112969 [ 883.011111][T28451] pgpgout 112963 [ 883.016639][T28451] pgfault 243645 [ 883.020776][T28451] pgmajfault 9 [ 883.024264][T28451] inactive_anon 8192 [ 883.029401][T28451] active_anon 16384 [ 883.033364][T28451] inactive_file 0 [ 883.037096][T28451] active_file 0 [ 883.041167][T28451] unevictable 0 [ 883.044958][T28451] hierarchical_memory_limit 314572800 [ 883.050814][T28451] hierarchical_memsw_limit 9223372036854771712 [ 883.057162][T28451] total_cache 0 [ 883.062110][T28451] total_rss 0 [ 883.069904][T28451] total_rss_huge 0 [ 883.073838][T28451] total_shmem 0 [ 883.077386][T28451] total_mapped_file 0 [ 883.082003][T28451] total_dirty 0 [ 883.085668][T28451] total_writeback 0 [ 883.089948][T28451] total_workingset_refault_anon 10 [ 883.095213][T28451] total_workingset_refault_file 112 [ 883.101015][T28451] total_swap 188416 [ 883.104998][T28451] total_swapcached 253952 [ 883.109967][T28451] total_pgpgin 112977 [ 883.114155][T28451] total_pgpgout 112971 [ 883.121156][T28451] total_pgfault 243709 [ 883.125466][T28451] total_pgmajfault 9 [ 883.129874][T28451] total_inactive_anon 8192 [ 883.134460][T28451] total_active_anon 16384 [ 883.139392][T28451] total_inactive_file 0 [ 883.143669][T28451] total_active_file 0 [ 883.147804][T28451] total_unevictable 0 [ 883.152479][T28451] anon_cost 0 [ 883.155839][T28451] file_cost 0 [ 883.159693][T28451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6257,pid=30039,uid=0 [ 883.181309][T28451] Memory cgroup out of memory: Killed process 30039 (syz.3.6257) total-vm:102424kB, anon-rss:1240kB, file-rss:23392kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 884.140961][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5060 ms [ 884.149197][ C0] lec:lec_tx_timeout: lec0 [ 884.155217][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 885.235335][ T32] oom_reaper: reaped process 30039 (syz.3.6257), now anon-rss:0kB, file-rss:22208kB, shmem-rss:0kB [ 887.225842][T30078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6268'. [ 887.234803][T30078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6268'. [ 887.243713][T30078] netlink: 'syz.1.6268': attribute type 14 has an invalid length. [ 887.266342][T30078] netlink: 'syz.1.6268': attribute type 13 has an invalid length. [ 887.437714][T30086] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6268'. [ 890.028209][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5890 ms [ 890.036370][ C0] lec:lec_tx_timeout: lec0 [ 890.043318][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 893.554717][T15708] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 893.574619][T30112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 893.620517][T30127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6272'. [ 893.683241][T30127] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6272'. [ 893.932400][T30136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6277'. [ 894.078054][T30152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6282'. [ 894.136146][T30155] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 894.181898][T30162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6285'. [ 894.298972][T30172] netlink: 'syz.1.6279': attribute type 1 has an invalid length. [ 894.396254][T30177] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6287'. [ 894.572124][T30183] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6290'. [ 894.656025][T30190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6292'. [ 894.668360][T30191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6292'. [ 894.685388][T30179] nbd6: detected capacity change from 0 to 127 [ 894.695669][T21484] block nbd6: Receive control failed (result -32) [ 894.700213][T29062] block nbd6: Send control failed (result -32) [ 894.732376][T30193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6291'. [ 894.744816][T29062] block nbd6: Request send failed, requeueing [ 894.759208][ T1579] block nbd6: Dead connection, failed to find a fallback [ 894.766331][ T1579] block nbd6: shutting down sockets [ 894.771764][ T1579] blk_print_req_error: 138 callbacks suppressed [ 894.771784][ T1579] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.801951][ T1579] buffer_io_error: 138 callbacks suppressed [ 894.801973][ T1579] Buffer I/O error on dev nbd6, logical block 0, async page read [ 894.815948][T29062] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.825037][T29062] Buffer I/O error on dev nbd6, logical block 1, async page read [ 894.833281][T29062] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.842400][T29062] Buffer I/O error on dev nbd6, logical block 2, async page read [ 894.850378][T29062] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.859488][T29062] Buffer I/O error on dev nbd6, logical block 3, async page read [ 894.867491][T29062] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.876628][T29062] Buffer I/O error on dev nbd6, logical block 0, async page read [ 894.884699][T29062] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.893803][T29062] Buffer I/O error on dev nbd6, logical block 1, async page read [ 894.918940][T29062] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.929552][T29062] Buffer I/O error on dev nbd6, logical block 2, async page read [ 894.938294][T29062] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.947392][T29062] Buffer I/O error on dev nbd6, logical block 3, async page read [ 894.955363][T29062] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.964478][T29062] Buffer I/O error on dev nbd6, logical block 0, async page read [ 894.985936][T29062] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 894.995054][T29062] Buffer I/O error on dev nbd6, logical block 1, async page read [ 895.005791][T29062] ldm_validate_partition_table(): Disk read failed. [ 895.048049][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 895.056147][ C0] lec:lec_tx_timeout: lec0 [ 895.061794][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 895.087232][T29062] Dev nbd6: unable to read RDB block 0 [ 895.094947][T29062] nbd6: unable to read partition table [ 895.157950][T29062] ldm_validate_partition_table(): Disk read failed. [ 895.167234][T29062] Dev nbd6: unable to read RDB block 0 [ 895.174974][T29062] nbd6: unable to read partition table [ 895.181604][T30196] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 895.236629][T30198] netlink: 'syz.4.6294': attribute type 1 has an invalid length. [ 895.244436][T30198] netlink: 'syz.4.6294': attribute type 1 has an invalid length. [ 895.305480][T30198] netlink: 'syz.4.6294': attribute type 8 has an invalid length. [ 895.315180][T30200] netlink: 'syz.4.6294': attribute type 1 has an invalid length. [ 895.334268][T30200] netlink: 'syz.4.6294': attribute type 1 has an invalid length. [ 895.342443][T30200] netlink: 'syz.4.6294': attribute type 8 has an invalid length. [ 895.793875][T30225] xt_time: unknown flags 0xf4 [ 895.857771][ T1579] block nbd4: Possible stuck request ffff888027a8e000: control (read@0,4096B). Runtime 60 seconds [ 895.875536][T30229] xt_time: unknown flags 0xf4 [ 895.903539][T30233] tap0: tun_chr_ioctl cmd 1074025676 [ 895.910070][T30233] tap0: owner set to 0 [ 899.483898][ T5192] udevd[5192]: worker [28105] /devices/virtual/block/nbd4 is taking a long time [ 900.078362][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 900.086488][ C0] lec:lec_tx_timeout: lec0 [ 900.091473][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 905.098418][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 905.106656][ C0] lec:lec_tx_timeout: lec0 [ 905.111976][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 910.138151][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 910.146351][ C0] lec:lec_tx_timeout: lec0 [ 910.152018][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 914.915117][T30290] syzkaller0: entered promiscuous mode [ 914.920765][T30290] syzkaller0: entered allmulticast mode [ 914.933468][T30290] __nla_validate_parse: 11 callbacks suppressed [ 914.933488][T30290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6313'. [ 915.207802][T30298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 915.247417][T30301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6317'. [ 915.257809][T30301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6317'. [ 915.374509][T30307] netlink: 'syz.3.6317': attribute type 1 has an invalid length. [ 916.239304][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6090 ms [ 916.247401][ C0] lec:lec_tx_timeout: lec0 [ 916.252465][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 918.076022][T30315] x_tables: duplicate underflow at hook 2 [ 918.303459][T30322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6324'. [ 918.826472][T30340] syzkaller0: entered promiscuous mode [ 918.832033][T30340] syzkaller0: entered allmulticast mode [ 918.883741][T30345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6333'. [ 918.970268][T30348] netlink: 'syz.3.6332': attribute type 1 has an invalid length. [ 919.075946][T30354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6332'. [ 922.028088][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 922.036257][ C0] lec:lec_tx_timeout: lec0 [ 922.042425][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 923.054338][T30384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6342'. [ 923.107726][T30387] netlink: 'syz.0.6342': attribute type 4 has an invalid length. [ 923.136191][T30384] netlink: 'syz.0.6342': attribute type 4 has an invalid length. [ 923.169472][T30384] netlink: 'syz.0.6342': attribute type 4 has an invalid length. [ 923.195450][T30392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6344'. [ 923.343705][T30392] syzkaller0: entered promiscuous mode [ 923.349343][T30392] syzkaller0: entered allmulticast mode [ 923.513442][T30401] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6346'. [ 925.929940][ T1579] block nbd4: Possible stuck request ffff888027a8e000: control (read@0,4096B). Runtime 90 seconds [ 927.058405][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 927.066530][ C0] lec:lec_tx_timeout: lec0 [ 927.071525][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 932.108215][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 932.116317][ C0] lec:lec_tx_timeout: lec0 [ 932.121395][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 936.929862][T30441] IPv6: NLM_F_CREATE should be specified when creating new route [ 937.298173][T30467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6361'. [ 937.433513][T30470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6363'. [ 937.516271][T30470] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6363'. [ 937.776548][T30495] netem: incorrect ge model size [ 937.795228][T30495] netem: change failed [ 937.849522][T30495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6369'. [ 937.958022][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5840 ms [ 937.966164][ C0] lec:lec_tx_timeout: lec0 [ 937.972626][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 938.051292][T30504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6373'. [ 938.363260][T30519] netlink: 'syz.3.6378': attribute type 26 has an invalid length. [ 938.557648][T30526] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 938.570781][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6379'. [ 938.602846][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6379'. [ 938.634809][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6379'. [ 938.788514][T30530] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 938.876409][T30530] bond5 (unregistering): Released all slaves [ 939.284371][T30556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6386'. [ 939.305633][T30556] netlink: 'syz.0.6386': attribute type 1 has an invalid length. [ 939.317408][T30559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6387'. [ 939.336479][T30556] netlink: 'syz.0.6386': attribute type 1 has an invalid length. [ 939.472160][T30565] xt_socket: unknown flags 0x8 [ 939.537692][T30565] syzkaller0: entered promiscuous mode [ 939.550224][T30565] syzkaller0: entered allmulticast mode [ 942.998359][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 943.006473][ C0] lec:lec_tx_timeout: lec0 [ 943.011602][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 945.292824][T30586] __nla_validate_parse: 3 callbacks suppressed [ 945.292845][T30586] netlink: 596 bytes leftover after parsing attributes in process `syz.0.6389'. [ 945.336444][T30586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6389'. [ 945.383775][T30593] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 945.479506][T30593] : entered promiscuous mode [ 945.515748][T30600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6395'. [ 945.645176][T30605] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6396'. [ 945.798932][T30612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6399'. [ 945.843648][T30615] veth1_macvtap: left promiscuous mode [ 946.841596][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 946.852822][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 946.861474][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 946.869587][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 946.879160][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 947.046859][T30640] wg1 speed is unknown, defaulting to 1000 [ 947.054993][T30640] lo speed is unknown, defaulting to 1000 [ 947.095400][T30646] openvswitch: netlink: Invalid VLAN frame [ 947.691383][T30661] xt_cgroup: path and classid specified [ 947.831782][T30650] tipc: Started in network mode [ 947.836733][T30650] tipc: Node identity , cluster identity 4711 [ 947.843289][T30650] tipc: Failed to obtain node identity [ 947.848832][T30650] tipc: Enabling of bearer rejected, failed to enable media [ 947.938417][T30670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6414'. [ 948.004581][T30650] syzkaller0: entered promiscuous mode [ 948.010153][T30650] syzkaller0: entered allmulticast mode [ 948.028541][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 948.036675][ C0] lec:lec_tx_timeout: lec0 [ 948.041515][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 948.070031][T30670] erspan0: entered promiscuous mode [ 948.304159][T30680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6417'. [ 948.609218][T30691] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6417'. [ 949.041290][ T5828] Bluetooth: hci3: command tx timeout [ 951.162933][ T5828] Bluetooth: hci3: command tx timeout [ 951.621525][T30690] tap0: tun_chr_ioctl cmd 1074025678 [ 951.638413][T30690] tap0: group set to 0 [ 951.818348][T30640] chnl_net:caif_netlink_parms(): no params data found [ 951.846149][T30705] netlink: 'syz.1.6423': attribute type 4 has an invalid length. [ 951.853992][T30705] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6423'. [ 952.014392][T30640] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.029650][T30640] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.041004][T30640] bridge_slave_0: entered allmulticast mode [ 952.049860][T30640] bridge_slave_0: entered promiscuous mode [ 952.060374][T30640] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.067877][T30640] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.087418][T30640] bridge_slave_1: entered allmulticast mode [ 952.110554][T30640] bridge_slave_1: entered promiscuous mode [ 952.210152][T30640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.232037][T30640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.306152][T30640] team0: Port device team_slave_0 added [ 952.315279][T30640] team0: Port device team_slave_1 added [ 952.398620][T30640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.416955][T30640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.475557][T30640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.500664][T30640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.507671][T30726] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6428'. [ 952.517387][T30640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.546206][T30640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.628822][T30640] hsr_slave_0: entered promiscuous mode [ 952.635965][T30640] hsr_slave_1: entered promiscuous mode [ 952.653447][T30640] debugfs: 'hsr0' already exists in 'hsr' [ 952.667045][T30640] Cannot create hsr debugfs directory [ 952.693439][T30731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6428'. [ 952.710739][T30726] tls_set_device_offload: netdev not found [ 952.853608][T30640] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.865420][T30640] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.877668][T30640] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 953.032677][T30640] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.042572][T30640] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.052572][T30640] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 953.063124][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 953.063152][ C0] lec:lec_tx_timeout: lec0 [ 953.072563][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 953.188441][T30640] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.198277][T30640] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.208695][ T5828] Bluetooth: hci3: command tx timeout [ 953.215992][T30640] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 953.346576][T30640] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.356496][T30640] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.368031][T30640] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 953.559951][T30640] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 953.573362][T30640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 953.581388][T30640] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 953.591280][T30640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 953.599355][T30640] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 953.610453][T30640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 953.618630][T30640] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 953.628119][T30640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 953.707605][T30640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.738295][T30640] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.751082][T13127] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.758324][T13127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.788874][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.797392][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.981732][T30640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.039422][T30640] veth0_vlan: entered promiscuous mode [ 954.051507][T30640] veth1_vlan: entered promiscuous mode [ 954.083990][T30640] veth0_macvtap: entered promiscuous mode [ 954.094606][T30640] veth1_macvtap: entered promiscuous mode [ 954.124555][T30640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.137473][T30640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.158447][T13127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.169082][T15708] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.177887][T15708] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.187357][T15708] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.304048][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.312376][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.362597][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.370484][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.307415][T21484] Bluetooth: hci3: command tx timeout [ 956.612395][ T1579] block nbd4: Possible stuck request ffff888027a8e000: control (read@0,4096B). Runtime 120 seconds [ 958.108997][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 958.117071][ C0] lec:lec_tx_timeout: lec0 [ 958.122776][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 959.297614][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 961.529465][T30775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6430'. [ 961.540884][T30773] netlink: 'syz.1.6431': attribute type 12 has an invalid length. [ 961.554160][T30778] syzkaller0: entered promiscuous mode [ 961.588435][T30778] syzkaller0: entered allmulticast mode [ 961.882553][T30794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6436'. [ 962.003213][T30793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6438'. [ 962.181323][T30793] veth0_macvtap: left promiscuous mode [ 962.608474][T30824] netlink: zone id is out of range [ 962.613694][T30824] netlink: zone id is out of range [ 962.618861][T30824] netlink: zone id is out of range [ 962.624033][T30824] netlink: zone id is out of range [ 962.629322][T30824] netlink: zone id is out of range [ 962.634485][T30824] netlink: zone id is out of range [ 962.639650][T30824] netlink: zone id is out of range [ 962.644805][T30824] netlink: zone id is out of range [ 962.650042][T30824] netlink: zone id is out of range [ 962.655218][T30824] netlink: zone id is out of range [ 962.964810][T30836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6448'. [ 963.010358][T30843] netlink: 'syz.3.6450': attribute type 1 has an invalid length. [ 963.020103][T30843] netlink: 'syz.3.6450': attribute type 23 has an invalid length. [ 963.148173][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 963.156295][ C0] lec:lec_tx_timeout: lec0 [ 963.161475][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 963.220724][T30850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6449'. [ 963.243212][T30854] veth0: entered promiscuous mode [ 963.262746][T30854] veth0: left promiscuous mode [ 963.635571][T30874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6458'. [ 963.671430][T30874] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6458'. [ 964.049091][T30890] netlink: 'syz.2.6464': attribute type 8 has an invalid length. [ 964.078697][T30890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6464'. [ 964.135452][T30890] bond0: entered promiscuous mode [ 964.140694][T30890] bond_slave_0: entered promiscuous mode [ 964.146959][T30890] bond_slave_1: entered promiscuous mode [ 964.156375][T30890] gretap0: entered promiscuous mode [ 964.164085][T30890] hsr1: entered promiscuous mode [ 964.173634][T30894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6465'. [ 964.345376][T30901] netlink: 'syz.3.6468': attribute type 4 has an invalid length. [ 964.354823][T30898] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 964.365567][T30901] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6468'. [ 964.376274][T30898] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 964.395700][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 964.432127][T30898] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 964.599166][T30909] vcan1: entered promiscuous mode [ 964.604288][T30909] vcan1: entered allmulticast mode [ 965.702210][T30966] xt_hashlimit: size too large, truncated to 1048576 [ 965.946279][T30969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 965.953910][T30969] IPv6: NLM_F_CREATE should be set when creating new route [ 966.172549][T30978] sctp: [Deprecated]: syz.2.6489 (pid 30978) Use of int in maxseg socket option. [ 966.172549][T30978] Use struct sctp_assoc_value instead [ 966.569857][T30982] netlink: 'syz.2.6491': attribute type 4 has an invalid length. [ 966.608072][T30982] __nla_validate_parse: 2 callbacks suppressed [ 966.608096][T30982] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6491'. [ 966.651535][T30982] netlink: 'syz.2.6491': attribute type 4 has an invalid length. [ 966.704224][T30982] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6491'. [ 966.713909][T30982] netlink: 'syz.2.6491': attribute type 4 has an invalid length. [ 966.763257][T30982] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6491'. [ 966.922672][T30996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6492'. [ 967.405200][T31006] wg1: entered promiscuous mode [ 967.427467][T31006] wg1: entered allmulticast mode [ 967.503236][T30998] netlink: 'syz.4.6494': attribute type 2 has an invalid length. [ 967.555808][T31006] syzkaller1: entered promiscuous mode [ 967.561362][T31006] syzkaller1: entered allmulticast mode [ 967.698474][T31018] x_tables: duplicate entry at hook 1 [ 967.907081][T31034] tipc: Started in network mode [ 967.912292][T31034] tipc: Node identity 080211000001, cluster identity 4711 [ 967.920167][T31034] tipc: Enabled bearer , priority 0 [ 967.928332][T31034] mac80211_hwsim hwsim72 syzkaller0: entered promiscuous mode [ 967.937412][T31034] mac80211_hwsim hwsim72 syzkaller0: entered allmulticast mode [ 968.170283][T31046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6507'. [ 968.270137][T31046] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6507'. [ 968.358757][T31055] net_ratelimit: 138 callbacks suppressed [ 968.358781][T31055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 968.514144][T31059] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6513'. [ 968.752053][T31066] netlink: 'syz.2.6516': attribute type 4 has an invalid length. [ 968.895884][T31036] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 968.904324][T31036] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 968.932012][T10098] tipc: Node number set to 134418688 [ 968.938076][T31066] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6516'. [ 969.012506][T31066] .`¹: renamed from bond0 (while UP) [ 969.399616][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6260 ms [ 969.407749][ C0] lec:lec_tx_timeout: lec0 [ 969.414360][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 969.513699][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 969.528046][T31094] openvswitch: netlink: Flow actions attr not present in new flow. [ 972.606746][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 975.148177][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 975.156229][ C0] lec:lec_tx_timeout: lec0 [ 975.161897][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 975.672176][T31151] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6531'. [ 975.682367][T31150] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6531'. [ 975.695210][T31151] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6531'. [ 975.706137][T31151] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6531'. [ 975.707680][T31150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6531'. [ 975.865554][T31150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6531'. [ 976.530135][T31193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6540'. [ 976.650733][T31185] delete_channel: no stack [ 976.724162][T31201] sctp: [Deprecated]: syz.2.6544 (pid 31201) Use of int in max_burst socket option. [ 976.724162][T31201] Use struct sctp_assoc_value instead [ 977.184839][T31228] netlink: 'syz.0.6553': attribute type 1 has an invalid length. [ 977.225693][T31226] bond1: (slave geneve2): making interface the new active one [ 977.233840][T31226] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 977.242619][T15708] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 977.252400][T15708] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 977.262938][T15708] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 977.272971][T15708] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 977.363033][T31232] syzkaller0: entered allmulticast mode [ 977.371321][T31232] veth0: entered promiscuous mode [ 977.387844][T31232] syzkaller0 (unregistering): left allmulticast mode [ 977.806559][T31246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6558'. [ 977.816526][T31246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6558'. [ 977.842083][ T1152] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 977.851274][T31246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6558'. [ 977.863051][ T1152] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 977.889519][ T1152] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 977.909115][ T1152] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.033887][T31256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.048857][T31256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.060331][T31256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.068654][T31256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.186695][T31231] veth0: left promiscuous mode [ 978.694677][T31285] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 978.694677][T31284] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 978.721059][T31284] syzkaller0: entered promiscuous mode [ 978.726981][T31284] syzkaller0: entered allmulticast mode [ 979.476320][T31316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 979.483624][T31316] IPv6: NLM_F_CREATE should be set when creating new route [ 979.490890][T31316] IPv6: NLM_F_CREATE should be set when creating new route [ 979.515111][T31318] bridge2: port 1(bond2) entered blocking state [ 979.522414][T31318] bridge2: port 1(bond2) entered disabled state [ 979.529254][T31318] bond2: entered allmulticast mode [ 979.537550][T31318] bond2: entered promiscuous mode [ 979.735869][T31330] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 979.745119][T31330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.755530][T31327] veth3: entered promiscuous mode [ 979.800778][T31327] veth3: entered allmulticast mode [ 980.033939][T31336] syzkaller1: entered promiscuous mode [ 980.046408][T31336] syzkaller1: entered allmulticast mode [ 980.952191][T31388] __nla_validate_parse: 13 callbacks suppressed [ 980.952218][T31388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6596'. [ 981.044554][T31388] team1: entered promiscuous mode [ 981.049758][T31388] team1: entered allmulticast mode [ 981.142255][T31392] bond4: entered allmulticast mode [ 981.263943][T31392] bridge1: entered promiscuous mode [ 981.271099][T31392] bridge1: entered allmulticast mode [ 981.278372][T31401] xt_hashlimit: size too large, truncated to 1048576 [ 981.548043][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6390 ms [ 981.556196][ C0] lec:lec_tx_timeout: lec0 [ 981.562209][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 981.626389][T31406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.637514][T31406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 981.953482][T31406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.963847][T31406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 982.068080][T31406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.078412][T31406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 982.392038][T31406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.402442][T31406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 982.701551][T15708] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 982.710403][T15708] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 982.730431][T13109] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 982.738777][T13109] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 982.758414][T15708] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 982.766778][T15708] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 982.795004][T13118] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 982.803348][T13118] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 982.893327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 986.751955][ T1579] block nbd4: Possible stuck request ffff888027a8e000: control (read@0,4096B). Runtime 150 seconds [ 987.277980][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 987.286141][ C0] lec:lec_tx_timeout: lec0 [ 987.292148][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 987.316675][T31442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 987.368397][T31444] netlink: 'syz.0.6604': attribute type 1 has an invalid length. [ 987.523394][T31453] xt_cgroup: xt_cgroup: no path or classid specified [ 987.538267][T31454] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6610'. [ 987.583220][T31451] bond2: (slave ip6gretap1): making interface the new active one [ 987.600439][T31451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 987.650802][T31451] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 987.684605][T31451] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 987.751647][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 987.751666][ T30] audit: type=1107 audit(1777012443.492:84): pid=31462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÜCjžDü¶Æ¦ÁL]þAi©s€”¬‡Ø,’^yZ‘î¹£vvLu'̉m" {¾()ä˜Ð‚¨°Ùß•ŒÓHyG®/Äa];—0t§è‹ôÛfKºã#êr ç…Æ{Ë;Z¤ÊŽŒÕ¡>)eFÄS€×€ë)Ø©‰C¿¤e#Æd' [ 987.887927][T31470] netlink: 'syz.1.6616': attribute type 12 has an invalid length. [ 987.999331][T31470] bond1: option primary_reselect: invalid value (255) [ 988.090154][T31470] bond1 (unregistering): Released all slaves [ 988.332337][T31494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6619'. [ 988.563889][T31509] netlink: 146576 bytes leftover after parsing attributes in process `syz.2.6624'. [ 988.799735][T31519] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6626'. [ 989.033977][T31529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6630'. [ 989.103925][T31536] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 989.109678][T31533] tipc: Started in network mode [ 989.118967][T31533] tipc: Node identity f7ffffffffffffff01, cluster identity 4711 [ 989.197105][T31543] pimreg3: entered allmulticast mode [ 989.336141][T31547] netlink: 'syz.0.6636': attribute type 12 has an invalid length. [ 989.442676][T31555] wg1 speed is unknown, defaulting to 1000 [ 989.478457][T31555] lo speed is unknown, defaulting to 1000 [ 990.509363][T31610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6656'. [ 990.596117][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6655'. [ 990.942493][T31611] team0: Port device team_slave_0 removed [ 991.385047][T31648] tap0: tun_chr_ioctl cmd 1074025676 [ 991.390786][T31648] tap0: owner set to 0 [ 991.729353][T31662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6670'. [ 991.780203][T31663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6669'. [ 992.122043][T31686] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6677'. [ 992.519744][T31656] delete_channel: no stack [ 993.076091][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 993.084354][ C0] lec:lec_tx_timeout: lec0 [ 993.089683][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 995.052137][T31681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 995.288004][T31721] macvtap1: entered promiscuous mode [ 995.294060][T31721] macvtap1: entered allmulticast mode [ 995.299965][T31721] veth1_vlan: entered allmulticast mode [ 995.321838][T31724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.336459][T31724] __nla_validate_parse: 2 callbacks suppressed [ 995.336481][T31724] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6686'. [ 995.366190][T31727] macvtap2: entered promiscuous mode [ 995.372075][T31727] macvtap2: entered allmulticast mode [ 995.422510][T31722] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6688'. [ 995.443660][T31722] netlink: 'syz.3.6688': attribute type 10 has an invalid length. [ 995.565851][T31727] netlink: 404 bytes leftover after parsing attributes in process `syz.1.6690'. [ 995.609293][T31727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6690'. [ 995.643517][T31727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6690'. [ 995.668836][T31727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6690'. [ 995.706297][T31739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6687'. [ 995.823496][T31741] Cannot find add_set index 2 as target [ 995.898289][T31747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6694'. [ 995.941607][T31746] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 995.952642][T31746] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.960623][T31746] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.999437][T31748] veth0: entered promiscuous mode [ 996.007042][T31744] veth0: left promiscuous mode [ 996.118699][T31750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6696'. [ 996.155524][T31750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6696'. [ 996.455967][T31765] xt_hashlimit: size too large, truncated to 1048576 [ 997.388095][T31820] netlink: 'syz.3.6722': attribute type 4 has an invalid length. [ 997.495042][T31824] 8021q: VLANs not supported on lo [ 997.574371][T31823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 998.098726][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 998.106851][ C0] lec:lec_tx_timeout: lec0 [ 998.112012][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 998.531197][T31865] xt_hashlimit: size too large, truncated to 1048576 [ 998.601092][T31855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 998.608577][T31855] IPv6: NLM_F_CREATE should be set when creating new route [ 998.681092][T31855] lo: entered allmulticast mode [ 998.698695][T31855] tunl0: entered allmulticast mode [ 998.736786][T31869] SET target dimension over the limit! [ 998.745750][T31855] gre0: entered allmulticast mode [ 998.758194][T31871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 998.876962][T31855] gretap0: entered allmulticast mode [ 998.940894][T31855] erspan0: entered allmulticast mode [ 999.022954][T31855] ip_vti0: entered allmulticast mode [ 999.041915][T31855] ip6_vti0: entered allmulticast mode [ 999.087034][T31855] sit0: entered allmulticast mode [ 999.102432][T31855] ip6tnl0: entered allmulticast mode [ 999.164376][T31855] ip6gre0: entered allmulticast mode [ 999.195679][T31855] syz_tun: entered allmulticast mode [ 999.255050][T31855] ip6gretap0: entered allmulticast mode [ 999.473234][T31855] bridge0: entered allmulticast mode [ 999.478991][T31855] vcan0: entered allmulticast mode [ 999.566809][T31855] bond0: entered allmulticast mode [ 999.572373][T31855] bond_slave_0: entered allmulticast mode [ 999.578355][T31855] bond_slave_1: entered allmulticast mode [ 999.639242][T31855] team0: entered allmulticast mode [ 999.644565][T31855] team_slave_0: entered allmulticast mode [ 999.650434][T31855] team_slave_1: entered allmulticast mode [ 999.709099][T31855] dummy0: entered allmulticast mode [ 999.772908][T31855] nlmon0: entered allmulticast mode [ 999.832818][T31855] caif0: entered allmulticast mode [ 999.838322][T31855] batadv0: entered allmulticast mode [ 999.872569][T31917] rdma_rxe: rxe_newlink: failed to add lo [ 999.895408][T31855] vxcan0: entered allmulticast mode [ 999.933123][T31855] vxcan1: entered allmulticast mode [ 999.951755][T31855] veth0: entered allmulticast mode [ 999.983046][T31855] veth1: entered allmulticast mode [ 1000.012455][T31855] wg0: entered allmulticast mode [ 1000.036251][T31855] wg1: left promiscuous mode [ 1000.050302][T31855] wg2: entered allmulticast mode [ 1000.059108][T31855] veth0_to_bridge: entered allmulticast mode [ 1000.095273][T31855] veth1_to_bridge: entered allmulticast mode [ 1000.143598][T31855] veth0_to_bond: entered allmulticast mode [ 1000.165030][T31855] veth1_to_bond: entered allmulticast mode [ 1000.177764][T31855] veth0_to_team: entered allmulticast mode [ 1000.230760][T31855] veth1_to_team: entered allmulticast mode [ 1000.247784][T31855] veth0_to_batadv: entered allmulticast mode [ 1000.258828][T31855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.266331][T31855] batadv_slave_0: entered allmulticast mode [ 1000.276130][T31855] veth1_to_batadv: entered allmulticast mode [ 1000.285750][T31855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.293250][T31855] batadv_slave_1: entered allmulticast mode [ 1000.335791][T31855] xfrm0: entered allmulticast mode [ 1000.344833][T31855] veth0_to_hsr: entered allmulticast mode [ 1000.355336][T31855] hsr_slave_0: entered allmulticast mode [ 1000.366649][T31855] veth1_to_hsr: entered allmulticast mode [ 1000.377328][T31855] hsr_slave_1: entered allmulticast mode [ 1000.386755][T31855] hsr0: entered allmulticast mode [ 1000.397182][T31855] veth1_virt_wifi: entered allmulticast mode [ 1000.407576][T31855] veth0_virt_wifi: entered allmulticast mode [ 1000.420002][T31855] virt_wifi0: entered allmulticast mode [ 1000.426266][T31855] veth1_vlan: entered allmulticast mode [ 1000.445729][T31855] veth0_vlan: entered allmulticast mode [ 1000.475628][T31855] vlan0: entered allmulticast mode [ 1000.482170][T31855] vlan1: entered allmulticast mode [ 1000.488344][T31855] macvlan0: entered allmulticast mode [ 1000.499585][T31855] macvlan1: entered allmulticast mode [ 1000.509025][T31855] ipvlan0: entered allmulticast mode [ 1000.514839][T31855] ipvlan1: entered allmulticast mode [ 1000.522607][T31855] veth1_macvtap: entered allmulticast mode [ 1000.554707][T31855] veth0_macvtap: entered allmulticast mode [ 1000.566060][T31855] macvtap0: entered allmulticast mode [ 1000.575576][T31855] macsec0: entered allmulticast mode [ 1000.585055][T31855] geneve0: entered allmulticast mode [ 1000.594121][T31855] geneve1: entered allmulticast mode [ 1000.607061][T31855] mac80211_hwsim hwsim80 wlan0: entered allmulticast mode [ 1000.620612][T31855] mac80211_hwsim hwsim81 wlan1: entered allmulticast mode [ 1000.630169][T31855] bridge1: entered allmulticast mode [ 1000.636244][T31855] bridge2: entered allmulticast mode [ 1000.675501][T31855] bridge3: entered allmulticast mode [ 1000.683410][T31855] mac80211_hwsim hwsim88 wlan2: entered allmulticast mode [ 1000.691079][T31855] bond1: entered allmulticast mode [ 1000.696333][T31855] geneve2: entered allmulticast mode [ 1000.712562][T31855] team1: left promiscuous mode [ 1000.717650][T31855] netdevsim netdevsim0 eth0: entered allmulticast mode [ 1000.725296][T31855] netdevsim netdevsim0 eth1: entered allmulticast mode [ 1000.732593][T31855] netdevsim netdevsim0 eth2: entered allmulticast mode [ 1000.739879][T31855] netdevsim netdevsim0 eth3: entered allmulticast mode [ 1000.746996][T31855] bond2: entered allmulticast mode [ 1000.752162][T31855] ip6gretap1: entered allmulticast mode [ 1000.796064][T31855] macsec1: entered allmulticast mode [ 1000.813679][T31874] IPVS: Error connecting to the multicast addr [ 1000.963169][T15708] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1000.978025][T15708] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1000.995938][T15708] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1001.015735][T15708] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1001.043286][T15708] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1001.051825][T15708] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1001.060241][T15708] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1001.068729][T15708] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1003.108870][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1003.117537][ C0] lec:lec_tx_timeout: lec0 [ 1003.122370][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1005.402700][T31946] __nla_validate_parse: 8 callbacks suppressed [ 1005.402722][T31946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6744'. [ 1005.499136][T31956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1005.509152][T31951] netlink: 'syz.1.6745': attribute type 2 has an invalid length. [ 1005.943423][T31981] tipc: Enabled bearer , priority 10 [ 1006.267936][T31994] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1006.302002][T31998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1006.674719][T32000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1006.683780][T32000] nbd: nbd64 already in use [ 1006.887115][T32037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.948157][T21159] tipc: Node number set to 232597308 [ 1007.073799][T32048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6771'. [ 1007.202515][T32054] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1007.390678][T32062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6776'. [ 1007.566121][T32070] netlink: 'syz.4.6776': attribute type 1 has an invalid length. [ 1007.569011][T32071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6778'. [ 1007.586268][T32070] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6776'. [ 1007.710011][T32075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6781'. [ 1007.734998][T32081] mac80211_hwsim hwsim80 wlan0: entered promiscuous mode [ 1007.749218][T32081] mac80211_hwsim hwsim80 wlan0: left allmulticast mode [ 1007.856613][T32086] netlink: 'syz.0.6784': attribute type 22 has an invalid length. [ 1007.864604][T32086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6784'. [ 1007.916309][T32086] netlink: 'syz.0.6784': attribute type 22 has an invalid length. [ 1007.924407][T32086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6784'. [ 1008.168015][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5060 ms [ 1008.176444][ C0] lec:lec_tx_timeout: lec0 [ 1008.177210][T32098] netlink: 'syz.1.6790': attribute type 21 has an invalid length. [ 1008.189081][T32098] netlink: 'syz.1.6790': attribute type 5 has an invalid length. [ 1008.190266][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1008.196844][T32098] netlink: 'syz.1.6790': attribute type 6 has an invalid length. [ 1008.666424][T32115] syzkaller0: entered promiscuous mode [ 1008.680833][T32115] syzkaller0: entered allmulticast mode [ 1009.294520][T32141] netlink: 'syz.2.6803': attribute type 4 has an invalid length. [ 1009.494224][T32155] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1009.545627][T32159] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1009.609511][T32163] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1009.619763][T32163] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1010.109449][T32181] netlink: 'syz.0.6809': attribute type 1 has an invalid length. [ 1010.545102][T32201] __nla_validate_parse: 5 callbacks suppressed [ 1010.545122][T32201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6816'. [ 1010.624561][T32197] netlink: set zone limit has 4 unknown bytes [ 1010.639785][T32197] netlink: zone id is out of range [ 1010.644970][T32197] netlink: zone id is out of range [ 1010.650340][T32197] netlink: zone id is out of range [ 1010.662536][T32197] netlink: zone id is out of range [ 1010.667986][T32197] netlink: zone id is out of range [ 1010.887847][T32206] syz_tun: refused to change device tx_queue_len [ 1010.902543][T32208] netlink: 'syz.2.6818': attribute type 1 has an invalid length. [ 1010.915185][T32208] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6818'. [ 1011.083864][T32216] netlink: 'syz.4.6819': attribute type 21 has an invalid length. [ 1011.163614][T32216] IPv6: NLM_F_CREATE should be specified when creating new route [ 1011.266747][T32216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1011.274030][T32216] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.281308][T32216] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.291620][T32216] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.449318][T32233] netlink: 'syz.4.6824': attribute type 3 has an invalid length. [ 1011.461392][T32233] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6824'. [ 1011.778581][T32251] ipt_ECN: cannot use operation on non-tcp rule [ 1011.803042][T32251] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6830'. [ 1011.824211][T32251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6830'. [ 1011.947389][T32246] IPv6: sit1: Disabled Multicast RS [ 1011.961894][T32251] veth0_to_bridge: entered promiscuous mode [ 1012.013399][T32246] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6826'. [ 1012.025538][T32251] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1012.083348][T32263] netlink: 'syz.4.6830': attribute type 25 has an invalid length. [ 1012.098950][T32246] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6826'. [ 1012.220657][T32250] veth0_to_bridge: left promiscuous mode [ 1012.533390][T32286] netlink: 'syz.4.6835': attribute type 2 has an invalid length. [ 1012.580706][T32286] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6835'. [ 1013.146015][T32318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6844'. [ 1013.160268][T32316] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1013.407767][T32330] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6848'. [ 1013.665708][T32330] syzkaller0: entered promiscuous mode [ 1013.688084][T32330] syzkaller0: entered allmulticast mode [ 1013.777525][T32337] syzkaller0: entered promiscuous mode [ 1013.784372][T32337] syzkaller0: entered allmulticast mode [ 1014.178082][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6000 ms [ 1014.186486][ C0] lec:lec_tx_timeout: lec0 [ 1014.193920][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1014.424120][T32363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1014.689989][T32377] tipc: Enabled bearer , priority 0 [ 1014.700272][T32377] mac80211_hwsim hwsim75 syzkaller0: entered promiscuous mode [ 1014.709474][T32377] mac80211_hwsim hwsim75 syzkaller0: entered allmulticast mode [ 1014.851353][T32382] syzkaller0: entered promiscuous mode [ 1014.929161][T32382] syzkaller0: entered allmulticast mode [ 1014.959175][T32382] tipc: Enabled bearer , priority 0 [ 1014.994928][T32381] tipc: Resetting bearer [ 1015.260124][T32381] tipc: Disabling bearer [ 1015.512714][T32414] vcan0: tx address claim with different name [ 1015.827234][T32427] x_tables: duplicate underflow at hook 4 [ 1015.858481][T32427] __nla_validate_parse: 4 callbacks suppressed [ 1015.858502][T32427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6870'. [ 1015.908298][T32427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6870'. [ 1015.911919][T32439] netlink: 'syz.0.6873': attribute type 1 has an invalid length. [ 1015.918796][T32434] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1015.935768][T32436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6872'. [ 1016.022499][T32439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1016.040082][T32442] veth0_to_bond: left allmulticast mode [ 1016.064957][T32442] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1016.080742][T32439] bond3: entered promiscuous mode [ 1016.087180][T32439] bond3: entered allmulticast mode [ 1016.159932][T32439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6873'. [ 1016.166728][T32446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6874'. [ 1016.198825][T32446] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6874'. [ 1016.213127][T32446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6874'. [ 1016.265634][T32452] netlink: 'syz.4.6874': attribute type 1 has an invalid length. [ 1016.278771][T32439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1016.321851][T32452] netlink: 'syz.4.6874': attribute type 1 has an invalid length. [ 1016.345991][ T13] tipc: Resetting bearer [ 1016.379960][T32452] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.6874'. [ 1016.439414][T32459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6877'. [ 1016.517210][T32459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6877'. [ 1016.729886][T32469] netlink: 'syz.0.6880': attribute type 64 has an invalid length. [ 1017.395454][ T1579] block nbd4: Possible stuck request ffff888027a8e000: control (read@0,4096B). Runtime 180 seconds [ 1018.066302][T32549] netlink: 'syz.2.6899': attribute type 29 has an invalid length. [ 1018.075881][T32549] netlink: 'syz.2.6899': attribute type 29 has an invalid length. [ 1019.382691][T32608] wireguard0: entered promiscuous mode [ 1019.395189][T32608] wireguard0: entered allmulticast mode [ 1019.770466][T32634] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1019.928161][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 1019.936321][ C0] lec:lec_tx_timeout: lec0 [ 1019.945646][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1020.146731][T32648] netlink: 'syz.1.6925': attribute type 1 has an invalid length. [ 1020.233150][T32648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1020.254492][T32652] bond1: (slave ip6erspan0): making interface the new active one [ 1020.265306][T32652] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1020.347738][ T1152] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.367894][ T1152] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.376831][ T1152] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.480369][ T1152] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1020.905784][T32679] hsr_slave_1 (unregistering): left promiscuous mode [ 1020.939147][T32687] __nla_validate_parse: 16 callbacks suppressed [ 1020.939170][T32687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6934'. [ 1020.971885][T32689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6934'. [ 1021.012834][T32695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6936'. [ 1021.042300][T32695] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1021.276265][T32695] veth1: entered allmulticast mode [ 1021.449021][T32718] 8021q: VLANs not supported on lo [ 1021.759735][T32737] netlink: 'syz.4.6945': attribute type 3 has an invalid length. [ 1021.768020][T32737] netlink: 'syz.4.6945': attribute type 3 has an invalid length. [ 1024.948904][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1024.956977][ C0] lec:lec_tx_timeout: lec0 [ 1024.961785][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1025.664809][ T5192] udevd[5192]: worker [28105] /devices/virtual/block/nbd4 timeout; kill it [ 1025.673732][ T5192] udevd[5192]: seq 32713 '/devices/virtual/block/nbd4' killed [ 1028.024368][ T312] delete_channel: no stack [ 1028.283039][ T328] batman_adv: batadv0: Adding interface: dummy0 [ 1028.313577][ T328] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.360774][ T328] batman_adv: batadv0: Interface activated: dummy0 [ 1028.474035][ T344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6957'. [ 1028.501205][ T328] batadv0: mtu less than device minimum [ 1028.508269][ T328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.520109][ T328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.531982][ T328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.543478][ T328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.567427][ T328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.579358][ T328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.591193][ T328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.602985][ T328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.614822][ T328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1028.815967][ T354] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6959'. [ 1029.110168][ T368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6964'. [ 1029.411629][ T380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.521585][ T385] delete_channel: no stack [ 1029.594091][ T383] ip6_vti0: entered promiscuous mode [ 1029.608089][ T383] ip6_vti0: left allmulticast mode [ 1029.617211][ T383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6967'. [ 1029.881720][ T406] macvlan0: entered promiscuous mode [ 1029.968825][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1029.977019][ C0] lec:lec_tx_timeout: lec0 [ 1029.982418][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1030.101983][ T415] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1030.204475][ T419] netlink: 'syz.3.6983': attribute type 2 has an invalid length. [ 1030.273925][ T421] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 1030.373173][ T426] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1030.689422][ T442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6993'. [ 1030.699453][ T444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6989'. [ 1030.717714][ T445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6995'. [ 1030.818104][ T448] netlink: 'syz.2.6995': attribute type 17 has an invalid length. [ 1030.832332][ T450] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6996'. [ 1030.844594][ T450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6996'. [ 1030.861487][ T448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6995'. [ 1031.990950][ T510] syzkaller1: entered promiscuous mode [ 1031.996689][ T510] syzkaller1: entered allmulticast mode [ 1032.053853][ T517] netlink: 'syz.1.7014': attribute type 1 has an invalid length. [ 1032.086221][ T517] netlink: 'syz.1.7014': attribute type 3 has an invalid length. [ 1032.326159][ T531] netlink: 'syz.3.7017': attribute type 4 has an invalid length. [ 1032.337949][ T532] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1032.354541][ T532] bond2: (slave lo): Enslaving as an active interface with an up link [ 1032.404611][ T531] netlink: 'syz.3.7017': attribute type 4 has an invalid length. [ 1032.445635][T21484] block nbd8: Receive control failed (result -32) [ 1032.678599][ T544] netlink: 'syz.3.7022': attribute type 1 has an invalid length. [ 1032.856059][ T550] netlink: 'syz.2.7023': attribute type 10 has an invalid length. [ 1032.968666][ T550] batman_adv: batadv0: Adding interface: netdevsim0 [ 1032.978103][ T550] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.006063][ T550] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1033.592579][ T585] "syz.1.7035" (585) uses obsolete ecb(arc4) skcipher [ 1033.735968][ T595] veth1_macvtap: left promiscuous mode [ 1033.741791][ T595] macsec0: entered promiscuous mode [ 1033.749287][ T595] macsec0: entered allmulticast mode [ 1033.774931][ T589] veth1_macvtap: entered promiscuous mode [ 1033.799052][ T589] veth1_macvtap: entered allmulticast mode [ 1033.805336][ T589] macsec0: left promiscuous mode [ 1033.868315][ T589] macsec0: left allmulticast mode [ 1033.873450][ T589] veth1_macvtap: left allmulticast mode [ 1034.223638][ T618] __nla_validate_parse: 11 callbacks suppressed [ 1034.223664][ T618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7042'. [ 1034.654350][ T629] set match dimension is over the limit! [ 1034.794512][ T634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7048'. [ 1034.866313][ T639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7049'. [ 1034.887229][ T644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1034.916147][ T641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7050'. [ 1035.008972][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 1035.017102][ C0] lec:lec_tx_timeout: lec0 [ 1035.022060][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1035.261582][ T655] bond3 (unregistering): Released all slaves [ 1035.401699][ T663] net_ratelimit: 13 callbacks suppressed [ 1035.401722][ T663] openvswitch: netlink: IPv4 tun info is not correct [ 1035.428582][ T654] +: renamed from syzkaller0 [ 1040.048143][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1040.056230][ C0] lec:lec_tx_timeout: lec0 [ 1040.061773][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1041.464879][ T689] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7058'. [ 1041.532062][ T697] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.7060'. [ 1041.575082][ T700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7060'. [ 1041.689985][ T707] --map-set only usable from mangle table [ 1041.700385][ T700] team0 (unregistering): Port device team_slave_0 removed [ 1041.714684][ T700] team0 (unregistering): Port device team_slave_1 removed [ 1041.761976][ T705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7063'. [ 1041.905182][ T715] netlink: 'syz.1.7067': attribute type 1 has an invalid length. [ 1041.914166][ T713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7066'. [ 1042.045830][ T726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7069'. [ 1042.058906][ T713] hsr_slave_1 (unregistering): left promiscuous mode [ 1042.073366][ T696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.094680][ T726] bond3: (slave veth0_to_bond): Releasing active interface [ 1042.312395][ T732] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7071'. [ 1042.585814][ T749] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.7075'. [ 1042.595419][ T749] openvswitch: netlink: Message has 6 unknown bytes. [ 1042.841441][ T761] netlink: 'syz.3.7080': attribute type 1 has an invalid length. [ 1042.949224][ T761] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1043.024003][ T761] bond6: (slave veth5): Enslaving as an active interface with a down link [ 1043.090612][ T761] bond6: (slave veth7): Enslaving as an active interface with a down link [ 1043.125209][ T761] netlink: 'syz.3.7080': attribute type 1 has an invalid length. [ 1043.173400][ T761] netlink: 'syz.3.7080': attribute type 2 has an invalid length. [ 1043.202856][ T772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7083'. [ 1043.519460][ T788] netlink: 'syz.4.7089': attribute type 1 has an invalid length. [ 1043.561588][ T788] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1043.594275][ T788] vlan2: entered allmulticast mode [ 1043.600038][ T788] bond3: entered allmulticast mode [ 1043.676284][ T788] bond3: (slave geneve2): making interface the new active one [ 1043.684076][ T788] geneve2: entered allmulticast mode [ 1043.693299][ T788] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1043.705043][ T792] netlink: 'syz.2.7091': attribute type 29 has an invalid length. [ 1043.714384][ T795] openvswitch: netlink: IP tunnel TTL not specified. [ 1043.831765][ T800] bond4: entered allmulticast mode [ 1043.840113][ T798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7093'. [ 1043.853285][ T801] bridge4: entered promiscuous mode [ 1043.860536][ T801] bridge4: entered allmulticast mode [ 1043.872739][ T801] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1044.188549][ T817] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '/dev/net/tun' [ 1044.255388][ T817] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '/dev/net/tun' [ 1044.608086][ T843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1044.810079][ T846] netlink: 'syz.2.7107': attribute type 12 has an invalid length. [ 1044.840239][ T846] tipc: Started in network mode [ 1044.845377][ T846] tipc: Node identity 4, cluster identity 4711 [ 1044.855278][ T846] tipc: Node number set to 4 [ 1045.098047][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5060 ms [ 1045.106217][ C0] lec:lec_tx_timeout: lec0 [ 1045.111742][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1045.121594][ T860] netlink: 'syz.0.7110': attribute type 2 has an invalid length. [ 1045.244432][ T886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1045.769001][ T925] netlink: 'syz.3.7125': attribute type 7 has an invalid length. [ 1045.825638][ T925] netlink: 'syz.3.7125': attribute type 4 has an invalid length. [ 1046.197534][ T947] netlink: zone id is out of range [ 1046.202935][ T947] netlink: zone id is out of range [ 1046.208635][ T947] netlink: zone id is out of range [ 1046.214497][ T947] netlink: zone id is out of range [ 1046.220132][ T947] netlink: zone id is out of range [ 1046.225451][ T947] netlink: zone id is out of range [ 1046.306601][ T932] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1046.317989][ T953] wg1 speed is unknown, defaulting to 1000 [ 1046.987551][T26859] IPVS: starting estimator thread 0... [ 1047.119015][ T991] IPVS: using max 27 ests per chain, 64800 per kthread [ 1047.242603][ T1006] SET target dimension over the limit! [ 1047.490392][ T1579] block nbd4: Possible stuck request ffff888027a8e000: control (read@0,4096B). Runtime 210 seconds [ 1050.117993][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1050.126203][ C0] lec:lec_tx_timeout: lec0 [ 1050.130946][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1053.528900][ T1045] validate_nla: 1 callbacks suppressed [ 1053.528923][ T1045] netlink: 'syz.4.7147': attribute type 2 has an invalid length. [ 1053.565738][ T1054] __nla_validate_parse: 4 callbacks suppressed [ 1053.565760][ T1054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7143'. [ 1053.604640][ T1054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7143'. [ 1053.825342][ T1069] x_tables: unsorted underflow at hook 2 [ 1054.144349][ T1088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7155'. [ 1054.153933][ T1088] netlink: 'syz.3.7155': attribute type 7 has an invalid length. [ 1054.162466][ T1088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7155'. [ 1054.468092][ T1095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7158'. [ 1054.543595][ T1095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7158'. [ 1054.585457][ T1095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7158'. [ 1054.644989][ T1095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7158'. [ 1055.121730][ T1132] syzkaller0: entered promiscuous mode [ 1055.127320][ T1132] syzkaller0: entered allmulticast mode [ 1055.148230][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1055.156392][ C0] lec:lec_tx_timeout: lec0 [ 1055.161955][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1055.354769][ T1143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7169'. [ 1055.776025][ T1151] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7172'. [ 1060.061908][ T1178] netlink: 'syz.2.7180': attribute type 1 has an invalid length. [ 1060.534859][ T1198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7187'. [ 1060.544415][ T1198] netlink: 'syz.2.7187': attribute type 1 has an invalid length. [ 1060.724202][ T1212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7192'. [ 1061.225206][ T1225] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7198'. [ 1061.304812][ T1232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7199'. [ 1061.518957][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6380 ms [ 1061.527182][ C0] lec:lec_tx_timeout: lec0 [ 1061.533603][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1061.690345][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 1061.724013][ T1256] netlink: 'syz.1.7203': attribute type 1 has an invalid length. [ 1061.790924][ T1262] net_ratelimit: 6 callbacks suppressed [ 1061.790944][ T1262] openvswitch: netlink: IP tunnel dst address not specified [ 1061.852446][ T1254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7204'. [ 1061.868135][ T1256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7203'. [ 1061.877548][ T1254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7204'. [ 1061.907215][ T1263] bond6: (slave geneve2): making interface the new active one [ 1061.916746][ T1263] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 1061.954455][T15708] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1062.025066][ T1263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7203'. [ 1062.043171][ T1256] bond7 (unregistering): Released all slaves [ 1062.123250][T15708] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1062.151483][T15708] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1062.173799][T15708] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1062.197188][ T1277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7209'. [ 1062.222269][ T1278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7209'. [ 1062.304652][ T1281] netlink: 'syz.0.7210': attribute type 5 has an invalid length. [ 1062.480978][ T1290] macvtap1: entered promiscuous mode [ 1062.486541][ T1290] macvtap1: entered allmulticast mode [ 1062.491953][ T1290] veth1_vlan: entered allmulticast mode [ 1062.505885][ T1295] ksmbd: Unknown IPC event: 3, ignore. [ 1062.999762][ T1321] netlink: 'syz.3.7222': attribute type 5 has an invalid length. [ 1063.099167][ T1329] syzkaller0: entered promiscuous mode [ 1063.104718][ T1329] syzkaller0: entered allmulticast mode [ 1063.174402][ T1335] netlink: 'syz.4.7227': attribute type 1 has an invalid length. [ 1063.642240][ T1356] netlink: 'syz.0.7232': attribute type 1 has an invalid length. [ 1063.744532][ T1356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1064.319699][ T1395] vlan2: entered allmulticast mode [ 1064.737067][ T1409] geneve3: entered promiscuous mode [ 1064.769577][ T1409] geneve3: entered allmulticast mode [ 1064.835462][T13125] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1064.870091][T13125] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1064.933516][T13125] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1064.984125][T13125] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1065.063421][ T1413] wg1 speed is unknown, defaulting to 1000 [ 1065.112406][ T1413] lo speed is unknown, defaulting to 1000 [ 1065.500121][ T1434] netlink: 'syz.0.7252': attribute type 1 has an invalid length. [ 1065.623240][ T1445] __nla_validate_parse: 7 callbacks suppressed [ 1065.623262][ T1445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7255'. [ 1065.790747][ T1448] netlink: 'syz.2.7256': attribute type 1 has an invalid length. [ 1065.803197][ T1448] netlink: 'syz.2.7256': attribute type 1 has an invalid length. [ 1065.815431][ T1448] netlink: 15906 bytes leftover after parsing attributes in process `syz.2.7256'. [ 1067.268915][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 1067.277064][ C0] lec:lec_tx_timeout: lec0 [ 1067.282218][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1071.281809][ T1477] netlink: 'syz.2.7259': attribute type 1 has an invalid length. [ 1071.284339][ T1480] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7257'. [ 1071.299941][ T1482] netlink: 'syz.3.7260': attribute type 1 has an invalid length. [ 1071.313255][ T1482] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7260'. [ 1071.447101][ T1477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.497422][ T1494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7259'. [ 1071.506573][ T1494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7259'. [ 1071.565903][ T1492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7263'. [ 1071.842848][ T1505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7265'. [ 1072.543956][ T1547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7281'. [ 1072.629179][ T1553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7283'. [ 1072.844474][ T1558] netlink: 'syz.1.7285': attribute type 58 has an invalid length. [ 1072.859918][ T1568] netlink: 'syz.1.7285': attribute type 58 has an invalid length. [ 1072.884925][ T1558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7285'. [ 1072.901890][ T1568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7285'. [ 1073.068082][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 1073.076349][ C0] lec:lec_tx_timeout: lec0 [ 1073.082404][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1073.988271][ T1628] netlink: 'syz.2.7303': attribute type 1 has an invalid length. [ 1074.050127][ T1630] syzkaller1: entered promiscuous mode [ 1074.055676][ T1630] syzkaller1: entered allmulticast mode [ 1074.189387][ T1635] syzkaller1: entered promiscuous mode [ 1074.195680][ T1635] syzkaller1: entered allmulticast mode [ 1074.205350][ T1635] openvswitch: netlink: Missing valid actions attribute. [ 1074.213724][ T1635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.510683][ T1647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.518435][ T1647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.695027][ T1669] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1074.832150][ T1647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.847397][ T1647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.947597][ T1647] macvlan0: left promiscuous mode [ 1075.070421][ T1649] nbd9: detected capacity change from 0 to 63 [ 1075.158418][T21484] block nbd9: Receive control failed (result -104) [ 1075.191119][ T5828] block nbd9: Receive control failed (result -32) [ 1075.258580][ T1647] hsr1: left promiscuous mode [ 1075.314065][T13125] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.336121][T13125] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.411931][ T1689] vlan3: entered allmulticast mode [ 1075.435380][ T1689] bond0: entered allmulticast mode [ 1075.464865][ T1689] bond_slave_0: entered allmulticast mode [ 1075.496917][ T1689] bond_slave_1: entered allmulticast mode [ 1075.531427][ T1673] wg1 speed is unknown, defaulting to 1000 [ 1075.578068][T13125] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.587199][T13125] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.616455][ T1673] lo speed is unknown, defaulting to 1000 [ 1075.655573][ T1656] wg1 speed is unknown, defaulting to 1000 [ 1075.770891][ T1656] lo speed is unknown, defaulting to 1000 [ 1076.612334][ T1742] __nla_validate_parse: 7 callbacks suppressed [ 1076.612359][ T1742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7329'. [ 1076.765657][ T1749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7331'. [ 1076.806985][ T1743] wg1 speed is unknown, defaulting to 1000 [ 1076.831326][ T1743] lo speed is unknown, defaulting to 1000 [ 1077.055761][ T1758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7334'. [ 1077.324208][ T1767] netlink: 'syz.2.7337': attribute type 4 has an invalid length. [ 1077.526344][ T1776] ip6t_REJECT: ECHOREPLY is not supported [ 1077.533522][ T1776] netlink: 'syz.3.7341': attribute type 39 has an invalid length. [ 1077.567331][ T1778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7342'. [ 1077.638172][ T1579] block nbd4: Possible stuck request ffff888027a8e000: control (read@0,4096B). Runtime 240 seconds [ 1077.777305][ T1782] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1077.788567][ T1782] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1077.817010][ T1783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7343'. [ 1077.890997][ T1785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7342'. [ 1078.006375][ T1794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7346'. [ 1078.097983][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1078.106058][ C0] lec:lec_tx_timeout: lec0 [ 1078.135412][ T1797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7348'. [ 1078.314974][ T1801] tipc: Resetting bearer [ 1078.501471][ T1810] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1078.620974][ T1819] netlink: 'syz.4.7356': attribute type 1 has an invalid length. [ 1078.658986][ T1819] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1078.677854][ T1819] bond5: (slave veth0_to_bond): making interface the new active one [ 1078.688113][ T1819] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1078.696346][ T1822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7355'. [ 1078.752499][ T1825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7355'. [ 1078.996582][ T1839] 8021q: VLANs not supported on gre0 [ 1079.004361][ T1837] veth0: entered promiscuous mode [ 1079.011211][ T1837] veth0: left promiscuous mode [ 1079.279649][ T1855] netlink: 'syz.0.7366': attribute type 10 has an invalid length. [ 1079.287822][ T1855] bridge_slave_1: left allmulticast mode [ 1079.293644][ T1855] bridge_slave_1: left promiscuous mode [ 1079.299500][ T1855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.325528][ T1855] bridge_slave_1: entered allmulticast mode [ 1079.332198][ T1855] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1079.553288][ T1865] bridge0: left allmulticast mode [ 1079.589240][ T1865] bridge0: port 2(vlan3) entered blocking state [ 1079.638865][ T1865] bridge0: port 2(vlan3) entered disabled state [ 1079.645567][ T1865] vlan3: entered allmulticast mode [ 1079.653053][ T1865] vlan3: entered promiscuous mode [ 1079.658266][ T1865] geneve0: entered promiscuous mode [ 1079.694491][ T1868] xt_hl: Unknown TTL match mode: 255 [ 1079.838685][ T1876] bond2: option lp_interval: invalid value (0) [ 1079.845779][ T1876] bond2: option lp_interval: allowed values 1 - 2147483647 [ 1079.854937][ T1876] bond2 (unregistering): Released all slaves [ 1081.446057][ T1956] tipc: Resetting bearer [ 1081.459611][ T1962] netlink: 'syz.3.7406': attribute type 2 has an invalid length. [ 1081.703806][ T1956] tipc: Resetting bearer [ 1081.938441][ T1982] __nla_validate_parse: 11 callbacks suppressed [ 1081.938463][ T1982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7410'. [ 1081.955285][ T1971] wg1 speed is unknown, defaulting to 1000 [ 1081.990702][ T1971] lo speed is unknown, defaulting to 1000 [ 1082.196476][ T1997] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7413'. [ 1082.457609][ T2007] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7417'. [ 1082.547555][ T2008] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7416'. [ 1082.810843][ T2014] netlink: 'syz.0.7419': attribute type 1 has an invalid length. [ 1082.951149][ T2028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7420'. [ 1089.750638][ T2093] netlink: 'syz.1.7428': attribute type 2 has an invalid length. [ 1089.777742][ T2093] netlink: 576 bytes leftover after parsing attributes in process `syz.1.7428'. [ 1089.913112][ T2099] netlink: 'syz.2.7432': attribute type 2 has an invalid length. [ 1089.938047][ T2099] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7432'. [ 1090.310586][ T2116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7437'. [ 1090.388859][ T2124] netlink: 'syz.4.7438': attribute type 10 has an invalid length. [ 1090.408945][ T2124] team0: Device vxcan1 is of different type [ 1090.668154][ T2135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7443'. [ 1090.700116][ T2136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7441'. [ 1090.890143][ T2147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7443'. [ 1091.035965][ T2159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7450'. [ 1091.195043][ T2164] delete_channel: no stack [ 1091.409404][ T2136] syzkaller0: entered promiscuous mode [ 1091.415012][ T2136] syzkaller0: entered allmulticast mode [ 1091.423127][ T2168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7450'. [ 1091.450376][ T2174] bond7 (unregistering): Released all slaves [ 1091.785707][ T2188] ipt_ECN: cannot use operation on non-tcp rule [ 1095.625827][ T2203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7463'. [ 1095.640459][ T2201] syzkaller0: entered promiscuous mode [ 1095.646003][ T2201] syzkaller0: entered allmulticast mode [ 1096.085590][ T2223] netlink: 'syz.4.7469': attribute type 16 has an invalid length. [ 1096.105259][ T2223] netlink: 'syz.4.7469': attribute type 17 has an invalid length. [ 1096.197939][ T2223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1096.337163][ T2229] netlink: 'syz.2.7472': attribute type 11 has an invalid length. [ 1096.367468][ T2229] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7472'. [ 1096.415175][ T2236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7474'. [ 1096.512022][ T2247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7473'. [ 1096.553218][ T2242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7476'. [ 1096.765146][ T2256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7477'. [ 1097.197878][ T2274] netlink: 'syz.1.7484': attribute type 1 has an invalid length. [ 1097.217100][ T2278] xt_l2tp: invalid flags combination: 8 [ 1097.385137][ T2260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7478'. [ 1097.407548][ T2260] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1097.415949][ T2260] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1097.439696][ T2289] netlink: 'syz.3.7486': attribute type 1 has an invalid length. [ 1097.587887][ T2291] veth1_vlan (unregistering): left allmulticast mode [ 1097.789013][ T2303] SET target dimension over the limit! [ 1097.825241][ T2306] netlink: 'syz.0.7490': attribute type 1 has an invalid length. [ 1097.970391][ T2289] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1097.978304][ T2295] netlink: 'syz.3.7486': attribute type 1 has an invalid length. [ 1098.023890][ T2304] mac80211_hwsim hwsim75 syzkaller0: left promiscuous mode [ 1098.037916][ T2304] mac80211_hwsim hwsim75 syzkaller0: left allmulticast mode [ 1098.196691][ T2316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7492'. [ 1098.316991][ T2327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7495'. [ 1098.340508][ T2327] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7495'. [ 1098.561009][ T2348] netlink: 'syz.3.7501': attribute type 5 has an invalid length. [ 1098.670496][ T2354] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 1098.714783][ T2356] netlink: 'syz.3.7503': attribute type 15 has an invalid length. [ 1098.813632][T13109] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1098.824460][ T2356] netlink: 'syz.3.7503': attribute type 15 has an invalid length. [ 1098.856584][T13109] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1098.910663][T13109] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1098.946933][T13109] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1098.961979][ T2360] tipc: Enabled bearer , priority 0 [ 1098.970320][ T2360] syzkaller0: entered promiscuous mode [ 1098.975889][ T2360] syzkaller0: entered allmulticast mode [ 1099.136058][ T2360] tipc: Resetting bearer [ 1099.293289][ T2376] : renamed from hsr0 [ 1099.310794][T29137] lec:lec_start_xmit: lec0:No lecd attached [ 1099.354884][ T2379] syzkaller1: entered promiscuous mode [ 1099.360754][ T2379] syzkaller1: entered allmulticast mode [ 1099.426915][ T2359] tipc: Resetting bearer [ 1099.474548][ T2359] tipc: Disabling bearer [ 1099.697728][ T2399] Cannot find del_set index 49151 as target [ 1099.750125][ T2403] SET target dimension over the limit! [ 1100.894906][ T2480] netlink: 'syz.2.7537': attribute type 1 has an invalid length. [ 1100.902919][ T2480] __nla_validate_parse: 11 callbacks suppressed [ 1100.902936][ T2480] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7537'. [ 1100.974194][ T2480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7537'. [ 1104.988499][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 1104.996601][ C0] lec:lec_tx_timeout: lec0 [ 1105.745796][ T1579] block nbd9: Connection timed out, retrying (0/2 alive) [ 1105.752976][ T1579] block nbd9: Connection timed out, retrying (0/2 alive) [ 1105.760243][ T1579] block nbd9: Connection timed out, retrying (0/2 alive) [ 1105.767649][ T1579] block nbd9: Connection timed out, retrying (0/2 alive) [ 1105.774998][ T1579] block nbd9: Dead connection, failed to find a fallback [ 1105.782131][ T1579] block nbd9: shutting down sockets [ 1105.787368][ T1579] blk_print_req_error: 138 callbacks suppressed [ 1105.787382][ T1579] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1105.802815][ T1579] buffer_io_error: 138 callbacks suppressed [ 1105.802831][ T1579] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1105.816708][ T1579] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1105.825764][ T1579] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1105.833579][ T1579] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1105.842634][ T1579] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1105.874546][ T1579] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1105.883928][ T1579] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1105.893430][T29062] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1105.902530][T29062] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1105.910587][T29062] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1105.919667][T29062] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1105.927650][T29062] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1105.936713][T29062] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1105.944598][T29062] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1105.953664][T29062] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1105.961624][T29062] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1105.970675][T29062] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1106.002250][T29062] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1106.011460][T29062] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1106.022155][T29062] ldm_validate_partition_table(): Disk read failed. [ 1106.030370][T29062] Dev nbd9: unable to read RDB block 0 [ 1106.037420][T29062] nbd9: unable to read partition table [ 1106.049383][T29062] ldm_validate_partition_table(): Disk read failed. [ 1106.058020][T29062] Dev nbd9: unable to read RDB block 0 [ 1106.065008][T29062] nbd9: unable to read partition table [ 1107.274181][ T2531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7541'. [ 1107.316611][ T2531] hsr_slave_0: left promiscuous mode [ 1107.331068][ T2531] hsr_slave_1: left promiscuous mode [ 1107.703041][ T2565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7551'. [ 1107.714178][ T2568] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7550'. [ 1107.746866][ T2561] IPVS: persistence engine module ip_vs_pe_À not found [ 1108.153928][ T2610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7559'. [ 1108.252331][ T2610] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1108.362937][ T1579] block nbd4: Possible stuck request ffff888027a8e000: control (read@0,4096B). Runtime 270 seconds [ 1108.496959][ T2610] macvlan2: entered promiscuous mode [ 1108.506819][ T2610] macvlan2: entered allmulticast mode [ 1108.826790][ T2655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7572'. [ 1109.139339][ T2674] xfrm2: entered allmulticast mode [ 1109.293740][ T2683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7578'. [ 1109.453767][ T2705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7581'. [ 1109.910354][ T2731] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1110.111626][ T2745] bridge0: entered allmulticast mode [ 1110.202596][ T2755] netlink: 51 bytes leftover after parsing attributes in process `syz.4.7597'. [ 1110.252804][ T2757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7598'. [ 1110.553739][ T2776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7603'. [ 1111.205106][ T2814] validate_nla: 1 callbacks suppressed [ 1111.205128][ T2814] netlink: 'syz.0.7615': attribute type 39 has an invalid length. [ 1111.480322][ T2829] syzkaller0: entered promiscuous mode [ 1111.509284][ T2829] syzkaller0: entered allmulticast mode [ 1111.666605][ T2833] bond6: Invalid ad_actor_system MAC address. [ 1111.672820][ T2833] bond6: option ad_actor_system: invalid value (1) [ 1111.694178][ T2833] bond6 (unregistering): Released all slaves [ 1112.201658][ T2863] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1112.657185][ T2889] geneve4: entered promiscuous mode [ 1112.691771][ T2891] netlink: 'syz.4.7634': attribute type 1 has an invalid length. [ 1112.704238][ T2889] geneve4: entered allmulticast mode [ 1112.779654][ T2896] __nla_validate_parse: 4 callbacks suppressed [ 1112.779677][ T2896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7634'. [ 1112.832669][ T2891] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1113.044386][ T2910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7637'. [ 1113.160859][ T2917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7642'. [ 1113.277802][ T2925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7643'. [ 1113.287062][ T2925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7643'. [ 1113.296356][ T2925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7643'. [ 1113.305745][ T2925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7643'. [ 1113.432951][ T2928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7644'. [ 1113.455744][ T2928] netlink: 'syz.4.7644': attribute type 1 has an invalid length. [ 1113.472954][ T2928] netlink: 'syz.4.7644': attribute type 1 has an invalid length. [ 1113.489948][ T2928] netlink: 'syz.4.7644': attribute type 2 has an invalid length. [ 1113.506167][ T2928] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7644'. [ 1113.554303][ T2936] syzkaller1: entered promiscuous mode [ 1113.560350][ T2936] syzkaller1: entered allmulticast mode [ 1113.861549][ T2948] geneve3: entered promiscuous mode [ 1113.866842][ T2948] geneve3: entered allmulticast mode [ 1114.218157][ T2964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7653'. [ 1114.289494][ T2971] netlink: Conntrack attr has 3 unknown bytes [ 1114.440668][ T2983] smc: net device veth1_to_team applied user defined pnetid S [ 1114.668678][ T2995] netlink: 'syz.0.7664': attribute type 1 has an invalid length. [ 1114.676599][ T2995] netlink: 'syz.0.7664': attribute type 1 has an invalid length. [ 1114.721721][ T2995] bond6: entered promiscuous mode [ 1114.727007][ T2995] bond6: entered allmulticast mode [ 1114.733578][ T2995] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1114.789200][ T3004] x_tables: duplicate underflow at hook 1 [ 1114.829166][ T3002] wg1 speed is unknown, defaulting to 1000 [ 1114.838816][ T3002] lo speed is unknown, defaulting to 1000 [ 1114.875748][ T3009] tipc: Resetting bearer [ 1115.202194][ T3019] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1115.210164][ T3019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1115.893476][ T3036] ip6erspan1: entered allmulticast mode [ 1115.953784][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1115.970191][ T3040] xt_connbytes: Forcing CT accounting to be enabled [ 1116.183760][ T3048] vlan2: entered allmulticast mode [ 1116.200351][ T3048] bond0: entered allmulticast mode [ 1116.210446][ T3048] bond_slave_0: entered allmulticast mode [ 1116.222032][ T3048] bond_slave_1: entered allmulticast mode [ 1116.233636][ T3048] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1116.343710][ T3056] netlink: 'syz.3.7687': attribute type 1 has an invalid length. [ 1116.520530][ T3056] bond8: entered promiscuous mode [ 1116.531329][ T3056] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1116.578191][ T3061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1116.755858][ T3080] block nbd10: Unsupported socket: should be TCP or UNIX. [ 1117.124327][ T3087] vlan0: entered allmulticast mode [ 1117.134292][ T3087] ip6gretap0: entered allmulticast mode [ 1117.155170][ T3104] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1117.759281][ T3136] netlink: 'syz.3.7708': attribute type 29 has an invalid length. [ 1117.938741][ T3151] netlink: 'syz.2.7710': attribute type 11 has an invalid length. [ 1117.955522][ T3139] IPVS: Unknown mcast interface: syzkaller1 [ 1118.095335][ T3157] netlink: 'syz.0.7713': attribute type 7 has an invalid length. [ 1118.192850][ T3157] netlink: 'syz.0.7713': attribute type 7 has an invalid length. [ 1118.193031][T13109] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.229244][T13109] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.269675][T13109] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.288564][T13109] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.451477][ T3173] sctp: [Deprecated]: syz.3.7716 (pid 3173) Use of int in max_burst socket option deprecated. [ 1118.451477][ T3173] Use struct sctp_assoc_value instead [ 1118.470142][ T3173] __nla_validate_parse: 17 callbacks suppressed [ 1118.470164][ T3173] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7716'. [ 1118.485597][ T3173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7716'. [ 1118.650561][ T3175] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7718'. [ 1118.771306][ T3193] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7720'. [ 1118.923369][ T3198] netlink: 'syz.1.7721': attribute type 1 has an invalid length. [ 1118.944220][ T3198] netlink: 'syz.1.7721': attribute type 2 has an invalid length. [ 1119.455360][ T3219] IPVS: Unknown mcast interface: syzkaller1 [ 1120.958710][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1120.966773][ C0] lec:lec_tx_timeout: lec0 [ 1125.689634][ T3263] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20004 [ 1125.712951][ T3263] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7732'. [ 1125.737630][ T3263] netlink: 'syz.2.7732': attribute type 13 has an invalid length. [ 1125.822436][ T3275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1125.934549][ T3261] : entered promiscuous mode [ 1126.122753][ T3290] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7738'. [ 1126.172040][ T3287] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1126.393408][ T3301] tc_dump_action: action bad kind [ 1126.443132][ T3304] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7744'. [ 1127.164694][ T3336] tipc: Resetting bearer [ 1127.526465][ T3352] netlink: 'syz.1.7754': attribute type 4 has an invalid length. [ 1127.568992][ T3352] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7754'. [ 1127.631128][ T3352] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7754'. [ 1127.654763][ T3352] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7754'. [ 1128.172999][ T3383] netlink: 'syz.3.7765': attribute type 1 has an invalid length. [ 1128.193860][ T3379] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 1128.210327][ T3379] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1128.229717][ T3383] syzkaller1: entered promiscuous mode [ 1128.239180][ T3383] syzkaller1: entered allmulticast mode [ 1128.474756][ T3405] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.7769'. [ 1128.686130][ T3418] netlink: 'syz.3.7772': attribute type 1 has an invalid length. [ 1128.719360][ T3418] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1129.095357][ T3427] netlink: 'syz.3.7774': attribute type 21 has an invalid length. [ 1129.103247][ T3427] IPv6: NLM_F_CREATE should be specified when creating new route [ 1129.720064][ T3443] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7777'. [ 1129.794692][ T3443] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1129.804147][T31888] IPVS: starting estimator thread 0... [ 1129.832325][ T3445] netem: unknown loss type 0 [ 1129.837110][ T3445] netem: change failed [ 1129.841803][ T3446] netem: unknown loss type 0 [ 1129.846724][ T3446] netem: change failed [ 1129.855157][ T3445] rdma_rxe: rxe_newlink: failed to add lo [ 1129.862604][ T3450] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7777'. [ 1129.963147][ T3447] IPVS: using max 26 ests per chain, 62400 per kthread [ 1130.196148][ T3465] syzkaller0: entered promiscuous mode [ 1130.201698][ T3465] syzkaller0: entered allmulticast mode [ 1134.616517][ T3488] tipc: Enabling of bearer rejected, already enabled [ 1134.899006][ T3506] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1135.011092][ T3517] netlink: 'syz.0.7794': attribute type 1 has an invalid length. [ 1135.116751][ T3521] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.7795'. [ 1135.547627][ T3538] netlink: 'syz.0.7799': attribute type 1 has an invalid length. [ 1135.580292][ T3538] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7799'. [ 1135.705446][ T3540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7800'. [ 1135.818606][ T3549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7802'. [ 1135.841375][ T3549] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7802'. [ 1138.966021][ T1579] block nbd4: Possible stuck request ffff888027a8e000: control (read@0,4096B). Runtime 300 seconds [ 1141.543065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1163.686758][T29137] lec:lec_start_xmit: lec0:No lecd attached [ 1168.988017][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 1168.996269][ C0] lec:lec_tx_timeout: lec0 [ 1169.126577][ T1579] block nbd4: Possible stuck request ffff888027a8e000: control (read@0,4096B). Runtime 330 seconds [ 1169.715185][ T31] INFO: task udevd:28105 blocked for more than 143 seconds. [ 1169.723352][ T31] Not tainted syzkaller #0 [ 1169.728669][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1169.737556][ T31] task:udevd state:D stack:22392 pid:28105 tgid:28105 ppid:5192 task_flags:0x400140 flags:0x00080002 [ 1169.749719][ T31] Call Trace: [ 1169.753156][ T31] [ 1169.756120][ T31] __schedule+0x17b4/0x5680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1169.760787][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1169.765876][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1169.772166][ T31] ? __pfx___schedule+0x10/0x10 [ 1169.777211][ T31] ? schedule+0x90/0x360 [ 1169.783081][ T31] schedule+0x164/0x360 [ 1169.787367][ T31] io_schedule+0x7f/0xd0 [ 1169.791729][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 1169.797223][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1169.803156][ T31] ? filemap_read_folio+0x23e/0x3b0 [ 1169.808492][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1169.814114][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1169.820913][ T31] do_read_cache_folio+0x1ad/0x590 [ 1169.826225][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1169.831824][ T31] read_part_sector+0xb6/0x2b0 [ 1169.836650][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 1169.842127][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1169.848627][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1169.854269][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1169.860363][ T31] bdev_disk_changed+0x817/0x1770 [ 1169.865471][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1169.873229][ T31] blkdev_get_whole+0x380/0x510 [ 1169.878245][ T31] bdev_open+0x31e/0xd30 [ 1169.882555][ T31] blkdev_open+0x470/0x610 [ 1169.887154][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1169.893352][ T31] do_dentry_open+0x785/0x14e0 [ 1169.898277][ T31] vfs_open+0x3b/0x340 [ 1169.902503][ T31] ? path_openat+0x2df0/0x3860 [ 1169.912715][ T31] path_openat+0x2e08/0x3860 [ 1169.936737][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1169.945276][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1169.951200][ T31] ? __pfx_path_openat+0x10/0x10 [ 1169.956246][ T31] ? __x64_sys_openat+0x138/0x170 [ 1169.961798][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1169.966845][ T31] do_file_open+0x23e/0x4a0 [ 1169.971889][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1169.977034][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1169.982365][ T31] ? alloc_fd+0x64b/0x6c0 [ 1169.986797][ T31] do_sys_openat2+0x113/0x200 [ 1169.993002][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1169.998896][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1170.004187][ T31] ? rcu_is_watching+0x15/0xb0 [ 1170.033139][ T31] __x64_sys_openat+0x138/0x170 [ 1170.066051][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.103183][ T31] do_syscall_64+0x15f/0xf80 [ 1170.107864][ T31] ? trace_irq_disable+0x3b/0x140 [ 1170.112943][ T31] ? clear_bhb_loop+0x40/0x90 [ 1170.117685][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.123660][ T31] RIP: 0033:0x7fd6f55de407 [ 1170.128153][ T31] RSP: 002b:00007ffe13945160 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1170.293795][ T31] RAX: ffffffffffffffda RBX: 00007fd6f5552880 RCX: 00007fd6f55de407 [ 1170.301846][ T31] RDX: 00000000000a0800 RSI: 000055a34e8c6360 RDI: ffffffffffffff9c [ 1170.310069][ T31] RBP: 000055a34e8b5910 R08: 0000000000000000 R09: 0000000000000000 [ 1170.318111][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a34e8ca830 [ 1170.326409][ T31] R13: 000055a34e8c3190 R14: 0000000000000000 R15: 000055a34e8ca830 [ 1170.334547][ T31] [ 1170.338550][ T31] [ 1170.338550][ T31] Showing all locks held in the system: [ 1170.346317][ T31] 1 lock held by khungtaskd/31: [ 1170.351213][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1170.361168][ T31] 2 locks held by getty/5577: [ 1170.365886][ T31] #0: ffff888035c620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1170.375723][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1170.385921][ T31] 1 lock held by udevd/28105: [ 1170.390636][ T31] #0: ffff888027934350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1170.572723][ T31] 1 lock held by syz-executor/29236: [ 1170.578086][ T31] 4 locks held by syz-executor/29255: [ 1170.583590][ T31] #0: ffff88809ffe8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1170.593604][ T31] #1: ffff88809ffe80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1170.603719][ T31] #2: ffffffff8ff5c720 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1170.613818][ T31] #3: ffff88807dd4a2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 1170.623597][ T31] 1 lock held by syz-executor/29719: [ 1170.628923][ T31] #0: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1170.639989][ T31] 1 lock held by syz-executor/30632: [ 1170.645416][ T31] 3 locks held by kworker/1:3/31884: [ 1170.650737][ T31] #0: ffff88813fe53140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1171.057869][ T31] #1: ffffc9000d48fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1171.068726][ T31] #2: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1171.085115][ T31] [ 1171.087505][ T31] ============================================= [ 1171.087505][ T31] [ 1171.095968][ T31] NMI backtrace for cpu 1 [ 1171.095990][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1171.096016][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1171.096030][ T31] Call Trace: [ 1171.096040][ T31] [ 1171.096051][ T31] dump_stack_lvl+0xe8/0x150 [ 1171.096091][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1171.096114][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1171.096148][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1171.096173][ T31] sys_info+0x135/0x170 [ 1171.096204][ T31] watchdog+0xfaa/0x1000 [ 1171.096235][ T31] ? watchdog+0x209/0x1000 [ 1171.096268][ T31] kthread+0x388/0x470 [ 1171.096291][ T31] ? __pfx_watchdog+0x10/0x10 [ 1171.096312][ T31] ? __pfx_kthread+0x10/0x10 [ 1171.096336][ T31] ret_from_fork+0x514/0xb70 [ 1171.096371][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1171.096402][ T31] ? __switch_to+0xc79/0x1410 [ 1171.096430][ T31] ? __pfx_kthread+0x10/0x10 [ 1171.096455][ T31] ret_from_fork_asm+0x1a/0x30 [ 1171.096505][ T31] [ 1171.096514][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1171.231918][ C0] NMI backtrace for cpu 0 [ 1171.231939][ C0] CPU: 0 UID: 0 PID: 13118 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 1171.231961][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1171.231974][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1171.232002][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1171.232027][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 96 f2 77 03 66 0f 1f 44 00 [ 1171.232043][ C0] RSP: 0018:ffffc9001a16f3d0 EFLAGS: 00000046 [ 1171.232059][ C0] RAX: 0000000000016eb6 RBX: ffff8880b8623e40 RCX: 0000000000000838 [ 1171.232073][ C0] RDX: 0000000000000000 RSI: 0000000000016eb6 RDI: 0000000000000838 [ 1171.232084][ C0] RBP: ffffc9001a16f490 R08: ffffffff81b2a065 R09: ffffffff9a4d75c8 [ 1171.232099][ C0] R10: 0000000000000003 R11: ffffffff8173ba10 R12: 0000000000016eb6 [ 1171.232111][ C0] R13: dffffc0000000000 R14: 00000000100053e2 R15: 0000000000000020 [ 1171.232124][ C0] FS: 0000000000000000(0000) GS:ffff888125243000(0000) knlGS:0000000000000000 [ 1171.232139][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1171.232152][ C0] CR2: 00007f03ce347e20 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 1171.232168][ C0] Call Trace: [ 1171.232176][ C0] [ 1171.232183][ C0] lapic_next_event+0x11/0x20 [ 1171.232211][ C0] clockevents_program_event+0x385/0x5f0 [ 1171.232309][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1171.232331][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1171.232361][ C0] ? tick_program_event+0x8f/0x120 [ 1171.232384][ C0] hrtimer_start_range_ns+0x940/0xed0 [ 1171.232421][ C0] finish_task_switch+0x3cd/0xbe0 [ 1171.232449][ C0] __schedule+0x17bc/0x5680 [ 1171.232470][ C0] ? irqentry_exit+0x218/0x730 [ 1171.232502][ C0] ? irqentry_exit+0x218/0x730 [ 1171.232537][ C0] ? smp_call_function_many_cond+0xe32/0x1210 [ 1171.232560][ C0] ? smp_call_function_many_cond+0xeb5/0x1210 [ 1171.232583][ C0] ? __pfx___schedule+0x10/0x10 [ 1171.232606][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1171.232629][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1171.232651][ C0] preempt_schedule_common+0x82/0xd0 [ 1171.232674][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1171.232692][ C0] preempt_schedule_thunk+0x16/0x30 [ 1171.232714][ C0] ? on_each_cpu_cond_mask+0x75/0x80 [ 1171.232737][ C0] on_each_cpu_cond_mask+0x7a/0x80 [ 1171.232761][ C0] smp_text_poke_batch_finish+0xec2/0x1160 [ 1171.232789][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1171.232812][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1171.232842][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1171.232865][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 1171.232891][ C0] static_key_disable+0x1a/0x20 [ 1171.232913][ C0] toggle_allocation_gate+0x1fe/0x290 [ 1171.232932][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1171.232950][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1171.232980][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1171.233003][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1171.233027][ C0] process_scheduled_works+0xb5d/0x1860 [ 1171.233070][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1171.233099][ C0] ? assign_work+0x3d5/0x5e0 [ 1171.233125][ C0] worker_thread+0xa53/0xfc0 [ 1171.233166][ C0] kthread+0x388/0x470 [ 1171.233185][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1171.233208][ C0] ? __pfx_kthread+0x10/0x10 [ 1171.233227][ C0] ret_from_fork+0x514/0xb70 [ 1171.233253][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1171.233277][ C0] ? __switch_to+0xc79/0x1410 [ 1171.233299][ C0] ? __pfx_kthread+0x10/0x10 [ 1171.233317][ C0] ret_from_fork_asm+0x1a/0x30 [ 1171.233353][ C0] [ 1171.689725][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1171.696641][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1171.705763][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1171.715852][ T31] Call Trace: [ 1171.719147][ T31] [ 1171.722090][ T31] vpanic+0x56c/0xa60 [ 1171.726186][ T31] ? __pfx___schedule+0x10/0x10 [ 1171.731061][ T31] ? __pfx_vpanic+0x10/0x10 [ 1171.735592][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1171.740828][ T31] panic+0xc5/0xd0 [ 1171.744592][ T31] ? __pfx_panic+0x10/0x10 [ 1171.749117][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1171.754514][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1171.760796][ T31] watchdog+0xff4/0x1000 [ 1171.765063][ T31] ? watchdog+0x209/0x1000 [ 1171.769500][ T31] kthread+0x388/0x470 [ 1171.773585][ T31] ? __pfx_watchdog+0x10/0x10 [ 1171.778276][ T31] ? __pfx_kthread+0x10/0x10 [ 1171.782971][ T31] ret_from_fork+0x514/0xb70 [ 1171.787586][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1171.792732][ T31] ? __switch_to+0xc79/0x1410 [ 1171.797465][ T31] ? __pfx_kthread+0x10/0x10 [ 1171.802135][ T31] ret_from_fork_asm+0x1a/0x30 [ 1171.806980][ T31] [ 1171.826507][ T31] Kernel Offset: disabled [ 1171.831046][ T31] Rebooting in 86400 seconds..