last executing test programs: 2m45.023673346s ago: executing program 0 (id=9827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x4008031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f0000000380)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@getchain={0x34, 0x66, 0x100, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {0xfff3, 0x9}, {0xa, 0x1}}, [{0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xf605}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller1\x00'}) 2m44.209558236s ago: executing program 0 (id=9836): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) close(r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000000010104e85983767da0bba702000000"], 0x14}}, 0x0) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xbb8}, 0x1, 0x0, 0x0, 0x10}, 0xd0) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000000)=0x1, 0x4) 2m44.207651213s ago: executing program 0 (id=9837): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f62617461647600140035000165"], 0xe8}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c000000000000050019"], 0xc8}}, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=r2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000028c0), &(0x7f0000002900)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) (async, rerun: 32) r4 = getpid() (rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0), 0x0, 0x800}}], 0x2, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) (async) r6 = getpid() sendmsg$unix(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) (async) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000027c0)={{{@in=@loopback, @in6=@dev}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) (async) getgid() (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002a80), &(0x7f0000002ac0)=0xc) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) getuid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r13 = syz_open_procfs$namespace(r10, &(0x7f0000001780)='ns/ipc\x00') getpid() sendmmsg$unix(r9, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r12}}}, @cred={{0x1c, 0x1, 0x2, {r4, r11}}}, @rights={{0x18, 0x1, 0x1, [r13, 0xffffffffffffffff]}}], 0x58, 0x40081}}], 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002b00), &(0x7f0000002b40)=0xc) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002b80)={{{@in6=@ipv4, @in6=@private0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000002c80)=0xe8) 2m44.112013007s ago: executing program 0 (id=9843): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x7fffffff, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x6, r1, 0x5de}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0x3, 0xff, 0x100, r2, 0x3, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x7}, 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x8}, 0xffffffff}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e22, 0xa, @loopback}, @in={0x2, 0x4e20, @multicast1}], 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000380)={r5, 0x54d4, 0xc}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x7f, 0x0, r3, 0x3, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14, 0x800) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f00000004c0)={0x0, 0xea60}, 0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000500)={0x0, 0x6aa, 0x2, [0x3, 0x8]}, 0xc) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f0000000540)={0x2, 0x5}) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000580)=0x7fffffff, 0x4) recvfrom$netrom(0xffffffffffffffff, &(0x7f00000005c0)=""/206, 0xce, 0x40, &(0x7f00000006c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000740)=0x1, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f0000000780)={0x8, 'bridge0\x00', {'ip6erspan0\x00'}, 0x3}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f00000007c0)=0x4467eb46, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r10, &(0x7f0000000a80)={&(0x7f0000000800), 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1a4, r11, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000ac0)={r5, @in={{0x2, 0x4e24, @private=0xa010100}}}, 0x84) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000b80)={0x18, 0x0, {0x3, @multicast, 'wlan1\x00'}}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000bc0)={0x26, 0x4, 0x0, 0x6d, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}, 0x28) 2m43.981840667s ago: executing program 0 (id=9846): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x6212633ef4a2b82, {{0x42}}}, 0x10) r1 = socket(0x1, 0x803, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x820}, 0x20004000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@newnexthop={0x48, 0x68, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x1, 0x0, 0x2}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x30000080}, 0xc0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_deladdr={0x18, 0x15, 0x800, 0x70bd25, 0x25dfdbfe, {0xa, 0x1f, 0x4, 0xfe, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x4000600}, 0x5167e5e4d12c69cc) 2m43.889229794s ago: executing program 0 (id=9849): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x0, 0x7, 0x9, 0xa37f}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 2m33.138628193s ago: executing program 3 (id=10008): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000056000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m33.093238115s ago: executing program 3 (id=10009): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd26, 0xffffffff, {0xa, 0x14, 0x20, 0x40, 0x3, 0x0, 0x0, 0x7}, [@FRA_DST={0x14, 0x1, @mcast2}, @FRA_SRC={0x14, 0x2, @private2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m33.012623037s ago: executing program 3 (id=10011): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$nfc_llcp(r0, 0x0, 0x0, 0xc00) 2m32.957837933s ago: executing program 3 (id=10013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004090) 2m32.81698635s ago: executing program 3 (id=10015): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f00000001c0), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="1258b7a7499068", 0x7}], 0x1, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48001}], 0x1, 0x4044800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c00018008000140000000020800014000000003"], 0x364}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x44, r6, 0x100, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r7 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x344}]}, 0x34}}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$int_in(r10, 0x5421, &(0x7f0000000380)=0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="208edbe64503d46500000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072616e67650000000c00028008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) 2m32.563922893s ago: executing program 3 (id=10021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8804) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf25030040000800010000000000100007800c00018008000100", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x150}, 0x20008040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8840) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) 2m28.834098985s ago: executing program 32 (id=9849): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x0, 0x7, 0x9, 0xa37f}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 2m17.491380579s ago: executing program 33 (id=10021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8804) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf25030040000800010000000000100007800c00018008000100", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x150}, 0x20008040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8840) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) 2.847131288s ago: executing program 6 (id=11055): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x29, 0x5, 0x100) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x78, 0xf, 0x8, 0x201, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic="48de0550bb74f08dbf628f98aa7521279d0ea8058c34d85bc22d9b3bc818b0d9a17d01a20c68e0552902c74790c060aa7ded0a2ff8d392d373c535bd2eff3bda88beb4861fe787d9914dc6331271e96515f60124b631f46b7492c6424f2c58070b"]}, 0x78}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/2, 0x1011000, 0x3858d19160e0873d}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440), 0x1) 2.678701692s ago: executing program 6 (id=11059): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2d) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=@newsa={0x180, 0x10, 0x200, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x2c}, {@in=@local, 0x4d4, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8}, {}, {}, 0x0, 0x3502, 0xa}, [@algo_auth_trunc={0x8d, 0x14, {{'sha1\x00'}, 0x208, 0x0, "b01f46fc7c0ff1ba6ae78607befd59c34031658fd87baff04f012138bf21fa481731c1a993da6cf3ec79d3767409b63af2c8cc54637c3d7545c6b42a31f9b7ef21"}}]}, 0x180}, 0x1, 0x0, 0x0, 0xc0}, 0x1000) 2.533549744s ago: executing program 6 (id=11062): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000001b000000000000000018130000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000c000000095"], &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="9e36d4fd3108451a7818d854b388", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f00000023c0)=[{&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000002300)=""/179, 0xb3}], 0x5, &(0x7f0000002440)=""/118, 0x76}, 0x4}, {{&(0x7f00000024c0)=@generic, 0x80, &(0x7f0000003840)=[{&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000002540)=""/44, 0x2c}, {&(0x7f0000002580)=""/212, 0xd4}, {&(0x7f0000002680)=""/188, 0xbc}, {&(0x7f0000002740)=""/78, 0x4e}, {&(0x7f00000027c0)=""/122, 0x7a}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x7, &(0x7f00000038c0)=""/70, 0x46}, 0x4}, {{&(0x7f0000003940)=@ieee802154, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000039c0)=""/153, 0x99}, {&(0x7f0000003a80)=""/36, 0x24}], 0x2, &(0x7f0000003b00)=""/132, 0x84}, 0x5}, {{&(0x7f0000003bc0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003c40)=""/194, 0xc2}], 0x1}, 0x401}, {{&(0x7f0000003d80)=@alg, 0x80, &(0x7f0000004340)=[{&(0x7f0000003e00)=""/222, 0xde}, {&(0x7f0000003f00)=""/199, 0xc7}, {&(0x7f0000004000)=""/180, 0xb4}, {&(0x7f00000040c0)=""/82, 0x52}, {&(0x7f0000004140)=""/83, 0x53}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/114, 0x72}], 0x7, &(0x7f00000043c0)=""/162, 0xa2}, 0x200000}], 0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) 2.121644643s ago: executing program 2 (id=11069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, r1, 0x4c466994d56c53cd, 0x70bd29}, 0x14}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff004}, {0x16, 0x0, 0x6, 0xfffffffe}]}) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x2f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000080) (async) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) 2.035097972s ago: executing program 5 (id=11072): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffefffff}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000001ec0)={0x0, 0x8006}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.96100717s ago: executing program 2 (id=11074): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x8168}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x8168}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) (async) 1.884610128s ago: executing program 2 (id=11076): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4000) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c08000021dfb5ff9ecd28a1669eec22ec8bfc36d1b189a96477e13d9082466aa9ed077304248de063a5fc588086dfd96b1a768635a0c197e2433316a3224770e47d599f84db3b10e6a67b662b904d226fe606bba5", @ANYRES16=r1, @ANYBLOB="010200000000000000000700260007000400ac35000114000600626f6e643000000000000000000000001400070000000000000000000000ffffac1e000105000500ac1403aa"], 0x4c}, 0x8, 0x3000000000002}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c20c, 0xd2a2}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0xe}]}, 0x28}}, 0x48040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket(0x18, 0x800, 0x70a7) 1.817832126s ago: executing program 5 (id=11077): syz_emit_ethernet(0x87, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xaa, "a5", "c4b74a", 0x8847, "f4b30fdd7674d0345794245a0bc8c46960e8cdefc72c43219e4a44529a3707897d18236b8b93d560859bd7bf16c333dfbca83c4b69af814ffd229ec7bd2be02c1b27e5dd11c05192ce492396b88d083e09a2428294bc454ed9dd4f7548cc4d3f552b86c088c936fa2acd6d6ea44b06cf72"}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x24c}, 0x1, 0x0, 0x0, 0x2000010}, 0x46004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r3, @ANYBLOB="3a000280"], 0x60}, 0x1, 0x400000000000000}, 0x40010) 1.766965229s ago: executing program 6 (id=11079): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4409deef754f9d0cf200000000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000002400128009000100626f6e64000000001400028008001f00ffffff7f0800070008000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000140)=""/103, 0x67}, {&(0x7f00000001c0)=""/158, 0x9e}, {&(0x7f0000000280)=""/56, 0x38}], 0x4}, 0x1) (async) recvmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000140)=""/103, 0x67}, {&(0x7f00000001c0)=""/158, 0x9e}, {&(0x7f0000000280)=""/56, 0x38}], 0x4}, 0x1) 1.721253687s ago: executing program 2 (id=11080): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4000}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280"], 0x48}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2d, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0x7, 0xfffffffd, 0x91b4}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x7fffffff}}]}}}]}, 0x60}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x88890) 1.58787424s ago: executing program 5 (id=11083): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0xb3, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x20001c00) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.483344496s ago: executing program 5 (id=11086): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x54200, 0x40000}}, 0x20}, 0x1, 0x2000000000000000}, 0x0) 1.438488505s ago: executing program 2 (id=11087): ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'batadv_slave_1\x00', {0x6}, 0x1}) getsockname$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) sendto(r0, &(0x7f0000000140)="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", 0xfb, 0x4000, &(0x7f0000000240)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80) r2 = accept4$rose(0xffffffffffffffff, &(0x7f00000002c0)=@full={0xb, @dev, @rose, 0x0, [@bcast, @bcast, @default, @default, @netrom, @bcast]}, &(0x7f0000000300)=0x40, 0x80000) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000340)) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000380)) read(r0, &(0x7f00000003c0)=""/29, 0x1d) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x10, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x30, 0x0, 0x4f]}}, &(0x7f0000000440)=""/5, 0x29, 0x5, 0x0, 0x3, 0x10000}, 0x28) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000004c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000500)={{r3}, r4, 0xc, @unused=[0xc0, 0xfffffffffffffff1, 0x0, 0x100000001], @subvolid=0x6}) tee(r1, 0xffffffffffffffff, 0x3, 0x8) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x28, 0x3, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)='%pB \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001780)={'team0\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000017c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x3}, @func={0xd, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000001800)=""/199, 0x40, 0xc7, 0x1, 0x1f4, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000019c0)={0x3, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001a00), &(0x7f0000001a40)}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x7, 0x7, 0x0, 0xfa, 0x20000, 0xffffffffffffffff, 0x68, '\x00', 0x0, r3, 0x5, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)='%pI4 \x00'}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@bloom_filter={0x1e, 0x4, 0x1, 0xfff, 0x41200, 0x1, 0x8, '\x00', 0x0, r3, 0x0, 0x0, 0x2, 0x1}, 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4e32e119, '\x00', 0x0, r3, 0x1, 0x5}, 0x50) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', 0x0, r3, 0x0, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x1f, 0x4, &(0x7f00000016c0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x4, 0x1, 0x0, r5}], &(0x7f0000001700)='GPL\x00', 0x8, 0x19, &(0x7f0000001740)=""/25, 0x41100, 0x1, '\x00', r6, @fallback=0x2b, r7, 0x8, &(0x7f0000001940)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001980)={0x1, 0x10, 0x0, 0x7ff}, 0x10, r8, 0xffffffffffffffff, 0x3, &(0x7f0000001d80)=[r9, r10, 0xffffffffffffffff, r11, r12, r13, r14, 0xffffffffffffffff], &(0x7f0000001dc0)=[{0x1, 0x3, 0x5, 0x4}, {0x1, 0x2, 0x7, 0xb}, {0x0, 0x4, 0x4, 0x6}], 0x10, 0x7}, 0x94) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14, 0x14, 0x2, 0x70bd28, 0x25dfdbff, {0xa, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x2000c000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000001fc0)={0x8, 'pimreg0\x00', {'dummy0\x00'}, 0x7}) r15 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000002000)=r15) write(r9, &(0x7f0000002040)="8350f5248eaa71f777fd1474db2c30d02cc84048d4ba90fba815d2e96b23807627ce0ae0c57e9c4fb04fbc3af3b94d87a5d0209ba25d97672410aef4d716917b1ee07d854a5fd0cdd3183ee7dc440ce9cd793157adf21095860308fd4e88ff4b2025faba6461def05273d52e0b8a6f3c7f6a66b59ba4f60b0e5496870132e77727f90b3001ce94256e37b115808a2bdbd3d13cbe3fd4fa195a001522ce60c2e9a6965f179bcbfa9d94f51d8e85810d2c4ea74cadf2ae19b677c507d9cc8f07628b36b2634b2b8cae2b16cdca5f4f99ad95", 0xd1) 1.368123214s ago: executing program 4 (id=11088): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) close(r4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002d40)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r5, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7e528816}}, 0x30) (async) bind$packet(r1, &(0x7f0000000140)={0x11, 0x19, r5, 0x1, 0xe, 0x6, @link_local}, 0x14) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg2\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) (async) listen(r6, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) listen(r7, 0xd) (async) r8 = socket(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r9, 0x800448d7, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000100)={'wg2\x00'}) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="340000006800010000000000fddbdf25020000000000000006000700010000000c000880050004000100000008000500", @ANYRES32=r8], 0x34}, 0x1, 0x0, 0x0, 0x440a}, 0x4040414) (async) setsockopt$netrom_NETROM_T4(r8, 0x103, 0x6, &(0x7f0000000080)=0x1ff, 0x4) (async) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x4) 1.365869204s ago: executing program 5 (id=11089): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xe, 0xb}, {0xf, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x6c}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000180)=0xdff2) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xf}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r10 = accept(r9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000007800)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000077c0)={&(0x7f0000007740)=@ipv6_getaddr={0x48, 0x16, 0x300, 0x70bd26, 0x3, {0xa, 0x10, 0x1, 0xfe, r8}, [@IFA_CACHEINFO={0x14, 0x6, {0x3c000, 0x9, 0x9, 0x6}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) sendmmsg$alg(r10, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c00)="d08c22a9424c4eb7ffcceebe7f5afa1a", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r10, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x2000002, 0xe, 0xfffffffffffffcba, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0x800000) recvmmsg(r0, &(0x7f0000007500)=[{{&(0x7f0000000640)=@phonet, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000180)}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/237, 0xed}, {&(0x7f00000007c0)=""/126, 0x7e}, {&(0x7f0000000840)=""/144, 0x90}, {&(0x7f0000000900)=""/161, 0xa1}, {&(0x7f00000005c0)=""/49, 0x31}, {&(0x7f0000001a00)=""/148, 0x94}], 0x8, &(0x7f0000001b40)=""/3, 0x3}, 0x5}, {{&(0x7f0000001b80)=@x25={0x9, @remote}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c00)=""/111, 0x6f}, {&(0x7f0000001c80)=""/106, 0x6a}, {&(0x7f0000001d00)=""/13, 0xd}], 0x3}, 0x1}, {{&(0x7f0000001d80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001e00)=""/79, 0x4f}, {&(0x7f0000001e80)=""/224, 0xe0}, {&(0x7f0000001f80)=""/243, 0xf3}, {&(0x7f0000002080)=""/102, 0x66}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000002100)=""/25, 0x19}], 0x6, &(0x7f00000021c0)=""/122, 0x7a}, 0x400}, {{&(0x7f00000032c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003340)=""/86, 0x56}, {&(0x7f00000033c0)=""/86, 0x56}, {&(0x7f0000002240)=""/60, 0x3c}], 0x3}, 0x2634}, {{&(0x7f0000003480)=@tipc=@id, 0x80, &(0x7f0000003680)=[{&(0x7f0000003500)=""/79, 0x4f}, {&(0x7f0000003580)=""/248, 0xf8}], 0x2, &(0x7f00000036c0)=""/248, 0xf8}, 0x6}, {{&(0x7f00000037c0)=@hci, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003840)=""/216, 0xd8}, {&(0x7f0000003940)=""/178, 0xb2}, {&(0x7f0000003a00)=""/129, 0x81}, {&(0x7f0000003ac0)=""/120, 0x78}, {&(0x7f0000003b40)=""/56, 0x38}, {&(0x7f0000003b80)=""/231, 0xe7}, {&(0x7f0000003c80)=""/35, 0x23}, {&(0x7f0000003cc0)=""/98, 0x62}, {&(0x7f0000003d40)=""/44, 0x2c}, {&(0x7f0000003d80)=""/84, 0x54}], 0xa, &(0x7f0000003ec0)=""/181, 0xb5}, 0xc}, {{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000003f80)=""/142, 0x8e}, {0xfffffffffffffffd}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/190, 0xbe}, {&(0x7f0000005100)=""/105, 0x69}, {&(0x7f0000005180)=""/244, 0xf4}, {&(0x7f0000005280)=""/1, 0x1}, {&(0x7f00000052c0)=""/4096, 0x1000}], 0x8, &(0x7f0000006340)=""/70, 0x46}, 0x7fff}, {{&(0x7f00000063c0)=@generic, 0x80, &(0x7f0000007440)=[{&(0x7f0000006440)=""/4096, 0x1000}], 0x1, &(0x7f0000007480)=""/96, 0x60}, 0x2e5}], 0x8, 0xc0010000, &(0x7f0000007700)={0x0, 0x989680}) 1.331621438s ago: executing program 1 (id=11090): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x6212633ef4a2b82, {{0x42}}}, 0x10) r1 = socket(0x1, 0x803, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xe8, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0xb8, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0xa8, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x14, 0x5, @private1}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x8001}, @IFLA_VTI_FWMARK={0x8, 0x6, 0xfffffffc}, @IFLA_VTI_IKEY={0x8, 0x2, 0x95bf}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3ff}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_OKEY={0x8, 0x3, 0xffff7fff}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x91d9}], @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0xcdd}], @IFLA_VTI_REMOTE={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_VTI_REMOTE={0x14, 0x5, @private0}, @IFLA_VTI_REMOTE={0x14, 0x5, @remote}, @IFLA_VTI_REMOTE={0x14, 0x5, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x600}, 0x40) 1.180663658s ago: executing program 4 (id=11091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x4000009, 0x9c4, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x67, 0x0, 0xf7, 0x4, 0x0, @multicast2, @multicast2}}}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000100)=0x9) 1.064869314s ago: executing program 1 (id=11092): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061107e000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0xfa}, 0x94) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="03"], 0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7000000010000104000000000001000000000000", @ANYRES32=r4, @ANYBLOB="000100006c300000500012800b000100697036746e6c000040000280140002002001fa9e56b97d91bf9f0dc3000000000000000000000000000206000f0003000000050006000100000008000700000100000500060007000000080014000400b04b"], 0x70}}, 0xeb64d656001f6f32) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r9, {0xc}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x2c}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$packet(r3, &(0x7f0000000200)="c80f3e787466b4cbbdd92daeeb78f6f83f6829576219aa06d8f693679856d425c9e88fe80a08bab4", 0x28, 0x20000000, &(0x7f0000000240)={0x11, 0x17, r9, 0x1, 0xb, 0x6, @broadcast}, 0x14) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600060088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.026115867s ago: executing program 1 (id=11093): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x6) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd70000000000004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 997.195519ms ago: executing program 4 (id=11094): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x6}, {0x0, 0x0, 0x4000000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa8}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) 763.575551ms ago: executing program 4 (id=11095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0f0000001000ae3b23083c3fe5b50834791300000c0010000008000100", @ANYRES32=0x0, @ANYBLOB="0c00030000000000000000000800020000000000"], 0x30}}, 0x0) 351.01084ms ago: executing program 1 (id=11096): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRESOCT, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd8, &(0x7f0000000340)=""/216}, 0x94) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000e2b1860e2aa"], 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r0}, 0x38) 338.09646ms ago: executing program 4 (id=11097): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6}, 0x4) bind$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x5, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) 335.495361ms ago: executing program 2 (id=11098): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1402, 0x8, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd23, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000103000000000000000080"], 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000300000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008900000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 332.716653ms ago: executing program 6 (id=11099): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x7, 0x10}, 0xc) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x453, 0x1, 0x70bd2c, 0x25dfdbfc, "3201287cf3966ddd60c3c4647db497d9c8619152e263b1f66b64ab3003985820a59842ee83c7e2741ed893eafa19bf42b286396927bcbf028f44b29e54af3aca30cd434acd79a447b2716d8e97bf6eb0888b1598269404525475e1eb", ["", "", "", "", "", "", "", "", ""]}, 0x6c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000240)="ed77f607b32b53e0ff1d3d361b8c0fcfa1c849e6fa37c639358254619ff45c2e59c8183aa81f4d52a3901ba60f932008559f3deb77f1b61cc63fbabb267aea7ba259470e589c1e43ea1fb82a4ce5889368eabeef43af24bcadfb9f5711c7712a25bfc632f540dd08778d8cf650") r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f00000002c0)={0x1d, r1, 0x1, {0x1, 0xff, 0x3}, 0x1}, 0x18) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000300)) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000580)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x7, 0x1, 0xb, 0xb, 0x1, 0xfffffffffffffff4, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x400, 0xa9, &(0x7f0000000480)=""/169, 0x40f00, 0x40, '\x00', r1, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3092f, r6, 0x1, &(0x7f0000000600)=[r2, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x3, 0x2, 0x6}], 0x10, 0xd2}, 0x94) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f0000000740)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000780)={0x0, 0xc}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000800)={r7, 0x10000, 0x2, 0x10001}, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) r9 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000000840), &(0x7f0000000880)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet(r8, &(0x7f00000008c0)="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", 0xfe, 0x40, &(0x7f00000009c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), r6) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r12, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r11, 0x720, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x200}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xc0) setsockopt$sock_linger(r12, 0x1, 0xd, &(0x7f0000000b80)={0x1, 0x3}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000c40)=0x0) sendto(r4, &(0x7f0000000bc0)="1a39287d3954898edb92a252bc731052d11597167b3503e261d2c89892a3b1ecc5b0060d1aa1a85f45fa44856f623c10bafaee57e91d20848d4bedc311f45d08063860570f37dffd5532f606189ce6b17810cf9a5c141476", 0x58, 0x40000, &(0x7f0000000c80)=@nfc_llcp={0x27, r13, 0x0, 0x1, 0xaa, 0x9, "f99f5dfab5e3b88a49d49214ca95e9c8a878d2bf2378d1ae58c348dae19a29106e168a5b834e777504bcd13623cbb7ee90584e5389342dfeff3b65a6fffe4f", 0x33}, 0x80) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000d00)={r7, 0xa}, 0x8) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000d80)={0x7, &(0x7f0000000d40)=[{0xffff, 0x45, 0xfc, 0xfffffffa}, {0xbf, 0x0, 0x7, 0x80000001}, {0x8, 0xae, 0xdd, 0x1}, {0x6, 0x9, 0xc, 0x7}, {0x357, 0x5, 0x9, 0x8}, {0x1, 0x2, 0x1, 0x2}, {0x4, 0x1, 0x4, 0x8}]}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000dc0)={0x2, 0x0, 0x4caf, 0x8, r7}, &(0x7f0000000e00)=0x10) getsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000e40), 0x10) 330.870222ms ago: executing program 4 (id=11100): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x300}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r2, {0x2, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x78, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x1b, 0x36, 0x1b, 0xc, 0x1, 0x16, 0x6c, 0x1, 0x6, 0x5, 0x5, 0x6, 0x2, 0x22, 0x24, 0x0, 0x60, 0x24, 0x36, 0x6, 0x6c, 0x60, 0x5, 0x18, 0x24, 0x18, 0x2, 0x3, 0x24, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1ff}]}, 0x78}}, 0x4000) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x2b}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdea, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) 288.013155ms ago: executing program 1 (id=11101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000007000000000800010000000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x1, 0x66, 0x7, 0x1, 0x6]}, &(0x7f00000000c0)=0x78) 124.685157ms ago: executing program 1 (id=11102): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x30, 0x3c, 0x1, @private1, @mcast2, {[@hopopts={0x2f, 0x4, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x2, 0x2}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7fff}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}}}}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x2000, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) shutdown(r5, 0x0) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @empty}}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r8, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) close(r3) 1.240877ms ago: executing program 6 (id=11103): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0xb081}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) (async) sendto$packet(r2, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080) (async, rerun: 64) close(r0) (rerun: 64) 0s ago: executing program 5 (id=11104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) kernel console output (not intermixed with test programs): : set [0, 0] type 1 family 0 port 8472 - 0 [ 858.161887][ T64] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.182559][ T64] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.240320][ T29] IPVS: starting estimator thread 0... [ 858.336117][ T6831] IPVS: using max 34 ests per chain, 81600 per kthread [ 859.879213][ T6762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 859.998125][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.029530][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.096593][ T6836] __nla_validate_parse: 4 callbacks suppressed [ 860.096611][ T6836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9339'. [ 860.129979][T18104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.136076][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9341'. [ 860.161556][T18104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.250047][ T6845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9343'. [ 860.267392][ T6845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9343'. [ 860.511270][ T6868] syzkaller0: entered promiscuous mode [ 860.517628][ T6868] syzkaller0: entered allmulticast mode [ 860.544773][ T6863] tipc: Started in network mode [ 860.577214][ T6863] tipc: Node identity f230922335eb, cluster identity 4711 [ 860.595015][ T6863] tipc: Enabled bearer , priority 0 [ 860.732119][ T6869] tipc: Resetting bearer [ 860.767876][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 860.779543][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 860.790864][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 860.804663][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 860.817358][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 860.924878][ T6869] tipc: Disabling bearer [ 861.094274][ T6898] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9354'. [ 861.169489][ T6881] syzkaller0 speed is unknown, defaulting to 1000 [ 861.316265][ T6920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9357'. [ 861.336276][ T6592] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.379283][ T6592] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.481665][ T6592] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.522051][ T6592] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.610241][ T6941] openvswitch: netlink: IP tunnel dst address not specified [ 861.670388][ T6592] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.691715][ T6592] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.817934][ T6948] validate_nla: 2 callbacks suppressed [ 861.817952][ T6948] netlink: 'syz.3.9365': attribute type 1 has an invalid length. [ 861.868382][ T6592] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.898457][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9365'. [ 861.913535][ T6592] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.152564][T18104] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.231391][ T6972] bond0: entered promiscuous mode [ 862.241485][ T6972] bond_slave_0: entered promiscuous mode [ 862.256587][ T6972] bond_slave_1: entered promiscuous mode [ 862.277918][ T6972] batadv0: entered promiscuous mode [ 862.287613][ T6972] batadv0: left promiscuous mode [ 862.292867][ T6972] bond0: left promiscuous mode [ 862.299126][ T6972] bond_slave_0: left promiscuous mode [ 862.307093][ T6972] bond_slave_1: left promiscuous mode [ 862.320043][ T1165] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.329645][ T6982] openvswitch: netlink: Flow key attr not present in new flow. [ 862.339881][ T6983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9374'. [ 862.394981][ T6976] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 862.407381][ T6976] bond3: entered promiscuous mode [ 862.412553][ T6976] bond3: entered allmulticast mode [ 862.418633][ T6976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 862.429830][ T6979] tap0: tun_chr_ioctl cmd 1074025672 [ 862.453746][ T6979] tap0: ignored: set checksum disabled [ 862.487611][ T6978] tipc: Enabling of bearer rejected, media not registered [ 862.520908][T25752] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.532621][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9374'. [ 862.644307][ T6881] chnl_net:caif_netlink_parms(): no params data found [ 862.719871][T18104] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.863624][ T6592] bridge_slave_1: left allmulticast mode [ 862.870708][ T5829] Bluetooth: hci1: command tx timeout [ 862.899925][ T6592] bridge_slave_1: left promiscuous mode [ 862.905820][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.980691][ T6592] bridge_slave_0: left allmulticast mode [ 862.993983][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9378'. [ 863.026939][ T6592] bridge_slave_0: left promiscuous mode [ 863.037107][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.151200][ T6993] lec:lec_atm_close: lec0: Shut down! [ 863.592831][ T6592] erspan0 (unregistering): left promiscuous mode [ 863.637746][ T6592] gretap0 (unregistering): left promiscuous mode [ 863.702085][ T6592] bond8 (unregistering): (slave gretap2): Releasing active interface [ 863.890830][ T6592] bond6 (unregistering): (slave bridge4): Releasing active interface [ 863.970775][ T6592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.983620][ T6592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.994350][ T6592] bond0 (unregistering): Released all slaves [ 864.004656][ T6592] bond1 (unregistering): Released all slaves [ 864.019766][ T6592] bond2 (unregistering): Released all slaves [ 864.034434][ T6592] bond3 (unregistering): (slave lo): Releasing backup interface [ 864.043050][ T6592] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 864.061509][ T6592] bond3 (unregistering): Released all slaves [ 864.074981][ T6592] bond4 (unregistering): Released all slaves [ 864.089116][ T6592] bond5 (unregistering): Released all slaves [ 864.102122][ T6592] bond6 (unregistering): Released all slaves [ 864.117330][ T6592] bond7 (unregistering): Released all slaves [ 864.132235][ T6592] bond8 (unregistering): Released all slaves [ 864.148787][ T6592] bond9 (unregistering): Released all slaves [ 864.223852][ T7047] veth0: entered promiscuous mode [ 864.310193][ T7049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.335605][ T7049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.360554][ T7049] bond0 (unregistering): Released all slaves [ 864.395483][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.408660][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.418238][ T6881] bridge_slave_0: entered allmulticast mode [ 864.434551][ T6881] bridge_slave_0: entered promiscuous mode [ 864.447047][ T6592] : left promiscuous mode [ 864.510463][ T7046] veth0: left promiscuous mode [ 864.516994][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.536865][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.557796][ T6881] bridge_slave_1: entered allmulticast mode [ 864.579954][ T6881] bridge_slave_1: entered promiscuous mode [ 864.597935][ T6592] tipc: Disabling bearer [ 864.603498][ T6592] tipc: Disabling bearer [ 864.632753][ T6592] tipc: Left network mode [ 864.797370][ T7082] xt_l2tp: invalid flags combination: 0 [ 864.897394][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.947767][ T5829] Bluetooth: hci1: command tx timeout [ 865.019836][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.040753][ T2150] block nbd12: Possible stuck request ffff888026bd8000: control (read@0,1024B). Runtime 30 seconds [ 865.054313][ T2150] block nbd12: Possible stuck request ffff888026bd8200: control (read@1024,1024B). Runtime 30 seconds [ 865.068371][ T2150] block nbd12: Possible stuck request ffff888026bd8400: control (read@2048,1024B). Runtime 30 seconds [ 865.081155][ T2150] block nbd12: Possible stuck request ffff888026bd8600: control (read@3072,1024B). Runtime 30 seconds [ 865.367251][ T6881] team0: Port device team_slave_0 added [ 865.471032][ T6881] team0: Port device team_slave_1 added [ 865.530971][ T7125] netlink: 'syz.1.9398': attribute type 1 has an invalid length. [ 865.544823][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.567671][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.597773][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.659554][ T7127] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 865.678372][ T7127] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 865.688827][ T7127] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 865.738532][ T1165] smc: removing ib device syz2 [ 865.768351][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.775561][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.809120][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.812539][ T7135] __nla_validate_parse: 6 callbacks suppressed [ 865.812556][ T7135] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9400'. [ 865.847605][ T5902] syzkaller0 speed is unknown, defaulting to 1000 [ 865.857484][ T5902] syz2: Port: 1 Link DOWN [ 865.879337][ T6881] hsr_slave_0: entered promiscuous mode [ 865.886859][ T6881] hsr_slave_1: entered promiscuous mode [ 865.894156][ T6881] debugfs: 'hsr0' already exists in 'hsr' [ 865.901618][ T6881] Cannot create hsr debugfs directory [ 865.908856][ T5867] syzkaller0 speed is unknown, defaulting to 1000 [ 865.922808][ T7139] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9401'. [ 866.549061][ T6881] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.672643][ T6881] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.782568][ T6881] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.923589][ T6881] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.971878][ T7146] mac80211_hwsim hwsim71 syzkaller0: entered promiscuous mode [ 866.981442][ T7146] mac80211_hwsim hwsim71 syzkaller0: entered allmulticast mode [ 867.027139][ T5829] Bluetooth: hci1: command tx timeout [ 867.895270][ T6592] hsr_slave_0: left promiscuous mode [ 867.902275][ T6592] hsr_slave_1: left promiscuous mode [ 867.912434][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.922000][ T6592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.930320][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.938121][ T6592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.951067][ T6592] veth0_macvtap: left promiscuous mode [ 868.068640][ T7099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 868.407434][ T6592] team0 (unregistering): Port device team_slave_1 removed [ 868.702277][ T6592] smc: removing net device team0 with user defined pnetid SYZ2 [ 868.788505][ T6881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 868.830544][ T6881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 868.873374][ T6881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 868.910177][ T6881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 868.945898][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 868.953958][ C0] lec:lec_tx_timeout: lec0 [ 868.998817][ T7184] netlink: 'syz.3.9410': attribute type 1 has an invalid length. [ 869.122277][ T5829] Bluetooth: hci1: command tx timeout [ 869.245680][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.340134][ T7201] ip6gre1: entered promiscuous mode [ 869.403456][ T6592] IPVS: stop unused estimator thread 0... [ 869.437760][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.468609][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.475814][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.518852][ T7208] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9413'. [ 869.558623][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.565856][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.619026][ T7214] netlink: 'syz.2.9416': attribute type 10 has an invalid length. [ 869.672056][ T7214] team0 (unregistering): Port device team_slave_0 removed [ 869.700392][ T7214] team0 (unregistering): Port device team_slave_1 removed [ 869.950619][ T7222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.162895][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 870.181345][ T7234] sctp: [Deprecated]: syz.2.9420 (pid 7234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 870.181345][ T7234] Use struct sctp_sack_info instead [ 870.498337][ T7253] netlink: 'syz.2.9425': attribute type 13 has an invalid length. [ 870.575667][ T7259] netlink: 'syz.2.9425': attribute type 16 has an invalid length. [ 870.584667][ T7259] netlink: 'syz.2.9425': attribute type 17 has an invalid length. [ 870.586090][ T7260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9424'. [ 870.637698][ T7259] ip6gre0: left promiscuous mode [ 870.679363][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9424'. [ 870.698462][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9426'. [ 870.722665][ T7259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 870.736050][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9424'. [ 870.803422][ T7263] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9426'. [ 870.855700][ T7272] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.9428'. [ 870.883350][ T7272] openvswitch: netlink: Missing key (keys=40, expected=100) [ 871.047610][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.145605][ T7282] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9432'. [ 871.172828][ T7280] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9430'. [ 871.204238][ T7280] syzkaller0: entered promiscuous mode [ 871.211668][ T7280] syzkaller0: entered allmulticast mode [ 871.494989][ T7280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 871.570739][ T6881] veth0_vlan: entered promiscuous mode [ 871.681524][ T7307] netlink: 13 bytes leftover after parsing attributes in process `syz.4.9436'. [ 871.693438][ T6881] veth1_vlan: entered promiscuous mode [ 871.762430][ T6881] veth0_macvtap: entered promiscuous mode [ 871.792141][ T6881] veth1_macvtap: entered promiscuous mode [ 871.843787][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.898291][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.943915][T20257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.969997][T20257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.034832][T20257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.071418][T20257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.126854][ T7328] netlink: 'syz.3.9440': attribute type 11 has an invalid length. [ 872.134701][ T7328] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.9440'. [ 872.227110][T26830] Bluetooth: hci0: command 0x0406 tx timeout [ 872.392067][T25752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.416383][T25752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.420953][ T7339] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9443'. [ 872.521777][T25752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.539171][ T7344] netlink: 'syz.1.9446': attribute type 9 has an invalid length. [ 872.556420][T25752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.559002][ T7342] openvswitch: netlink: Key type 320 is out of range max 32 [ 872.820038][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9348'. [ 872.855935][ T7355] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9348'. [ 872.953792][ T7364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9348'. [ 873.052494][T26830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 873.065967][T26830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 873.074409][T26830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 873.084544][T26830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 873.093765][T26830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 873.424306][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9453'. [ 873.811962][ T7415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 873.819260][ T7415] IPv6: NLM_F_CREATE should be set when creating new route [ 873.826520][ T7415] IPv6: NLM_F_CREATE should be set when creating new route [ 873.833710][ T7415] IPv6: NLM_F_CREATE should be set when creating new route [ 873.841034][ T7417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 873.899531][ T7412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 874.010174][ T7371] chnl_net:caif_netlink_parms(): no params data found [ 874.332387][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.348166][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.361153][ T7371] bridge_slave_0: entered allmulticast mode [ 874.372581][ T7371] bridge_slave_0: entered promiscuous mode [ 874.384394][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.394101][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.403169][ T7371] bridge_slave_1: entered allmulticast mode [ 874.422680][ T7371] bridge_slave_1: entered promiscuous mode [ 874.562804][ T7371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.609322][ T7371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.631933][ T7465] netlink: 'syz.3.9468': attribute type 16 has an invalid length. [ 874.640963][ T7465] netlink: 'syz.3.9468': attribute type 17 has an invalid length. [ 874.641729][ T7466] wlan1: mtu greater than device maximum [ 874.672095][ T7468] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 874.799377][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.806588][ T7465] bridge0: port 2(bridge_slave_1) entered listening state [ 874.811370][ T7476] netlink: 'syz.2.9472': attribute type 1 has an invalid length. [ 874.813933][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.828618][ T7465] bridge0: port 1(bridge_slave_0) entered listening state [ 874.857031][ T7465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 874.879737][ T7477] netlink: 'syz.2.9472': attribute type 1 has an invalid length. [ 874.913084][ T7476] lo: entered allmulticast mode [ 874.918923][ T7476] lo: left allmulticast mode [ 874.955713][ T7477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 874.973619][ T7371] team0: Port device team_slave_0 added [ 875.008131][ T7481] bond3: (slave geneve3): making interface the new active one [ 875.087611][ T7481] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 875.104312][ T7371] team0: Port device team_slave_1 added [ 875.188692][T26830] Bluetooth: hci3: command tx timeout [ 875.242485][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.297952][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.353370][ T7502] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 875.387027][ T7371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.459987][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.489630][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.604134][ T7371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.821494][ T7371] hsr_slave_0: entered promiscuous mode [ 875.857206][ T7371] hsr_slave_1: entered promiscuous mode [ 875.863567][ T7371] debugfs: 'hsr0' already exists in 'hsr' [ 875.899181][ T7371] Cannot create hsr debugfs directory [ 875.905851][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 875.913853][ C0] lec:lec_tx_timeout: lec0 [ 876.148358][ T7544] __nla_validate_parse: 10 callbacks suppressed [ 876.148377][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9483'. [ 876.193918][ T7536] sit0: entered promiscuous mode [ 876.222113][ T7536] netlink: 'syz.2.9483': attribute type 1 has an invalid length. [ 876.280617][ T7536] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9483'. [ 876.419900][ T7542] syzkaller0: entered promiscuous mode [ 876.425506][ T7542] syzkaller0: entered allmulticast mode [ 876.470896][ T6592] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.271482][T26830] Bluetooth: hci3: command tx timeout [ 878.612460][ T7371] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.641564][ T7371] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.758030][ T7371] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.783233][ T7371] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.817768][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9493'. [ 878.879971][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9493'. [ 878.910605][ T7371] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.938255][ T7371] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.031357][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9498'. [ 879.069665][ T7371] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.098934][ T7371] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.140222][ T7620] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.9498'. [ 879.347653][T26830] Bluetooth: hci3: command tx timeout [ 879.595178][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.602457][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.840678][ T7632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.869966][ T7632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.015696][ T7632] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 880.124512][ T7632] veth3: left promiscuous mode [ 880.132310][ T7632] bond2: left promiscuous mode [ 880.138631][ T7632] bond2: left allmulticast mode [ 880.145681][ T7632] bond3: left promiscuous mode [ 880.155080][ T7632] bond3: left allmulticast mode [ 880.163296][ T7632] ip6gre1: left promiscuous mode [ 880.237758][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.280964][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.375267][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.422279][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.658161][ T7371] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 880.705696][ T7371] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 880.764364][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9513'. [ 880.767059][ T7699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.781178][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9513'. [ 880.783401][T20257] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.839684][T20257] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.879547][ T7371] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 880.929441][T20257] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.976952][T20257] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.991302][ T7371] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 881.297652][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9522'. [ 881.352579][ T7736] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 881.394955][ T7736] netlink: 'syz.4.9523': attribute type 3 has an invalid length. [ 881.426973][T26830] Bluetooth: hci3: command tx timeout [ 881.441388][ T7742] netlink: 277 bytes leftover after parsing attributes in process `syz.0.9524'. [ 881.491053][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.523526][ T7371] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.563646][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.570840][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.614191][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.621381][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.647458][ T7748] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9525'. [ 881.803269][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9527'. [ 881.922999][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9530'. [ 881.960438][ T7767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9530'. [ 881.994881][ T7771] tipc: Failed to obtain node identity [ 882.017180][ T7771] tipc: Enabling of bearer rejected, failed to enable media [ 882.043579][ T7371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.104565][ T7773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.141819][ T7371] veth0_vlan: entered promiscuous mode [ 882.159600][ T7371] veth1_vlan: entered promiscuous mode [ 882.246620][ T7371] veth0_macvtap: entered promiscuous mode [ 882.318182][ T7371] veth1_macvtap: entered promiscuous mode [ 882.405155][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.485631][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9542'. [ 882.504838][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.535052][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.569138][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.585520][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9543'. [ 882.744992][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.758333][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.793123][ T7817] netlink: 'syz.2.9546': attribute type 1 has an invalid length. [ 882.965400][T25752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.974774][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9548'. [ 882.993336][T25752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.070009][ T7821] bond1: Invalid ad_actor_system MAC address. [ 883.079256][ T7821] bond1: option ad_actor_system: invalid value (1) [ 883.100088][ T7821] bond1 (unregistering): Released all slaves [ 883.154034][ T7839] netlink: 'syz.3.9551': attribute type 1 has an invalid length. [ 883.173055][T20257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.183537][T20257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.222468][ T7832] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 883.236422][ T7832] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 883.247571][ T7832] bond0: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 883.353826][ T7855] netlink: 'syz.2.9554': attribute type 12 has an invalid length. [ 884.145062][ T7896] netlink: 'syz.1.9567': attribute type 10 has an invalid length. [ 884.175020][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9568'. [ 884.278509][ T7895] netlink: 'syz.4.9568': attribute type 10 has an invalid length. [ 884.305631][ T5902] IPVS: starting estimator thread 0... [ 884.309334][ T7895] dummy0: entered promiscuous mode [ 884.348590][ T7895] bridge0: port 3(dummy0) entered blocking state [ 884.384256][ T7895] bridge0: port 3(dummy0) entered disabled state [ 884.410905][ T7895] dummy0: entered allmulticast mode [ 884.421198][ T7895] bridge0: port 3(dummy0) entered blocking state [ 884.427744][ T7895] bridge0: port 3(dummy0) entered forwarding state [ 884.437431][ T7910] IPVS: using max 32 ests per chain, 76800 per kthread [ 884.899004][ T7930] bond1: option lp_interval: invalid value (0) [ 884.915708][ T7930] bond1: option lp_interval: allowed values 1 - 2147483647 [ 884.944817][ T7930] bond1 (unregistering): Released all slaves [ 884.987411][ T7935] syzkaller1: entered promiscuous mode [ 884.992907][ T7935] syzkaller1: entered allmulticast mode [ 885.012719][ T7950] syz_tun: entered promiscuous mode [ 885.018594][ T7950] macvtap1: entered promiscuous mode [ 885.073696][ T7950] syz_tun: left promiscuous mode [ 885.171245][ T7961] netlink: 'syz.3.9586': attribute type 12 has an invalid length. [ 885.171497][ T7959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.179239][ T7961] netlink: 'syz.3.9586': attribute type 29 has an invalid length. [ 885.179265][ T7961] netlink: 'syz.3.9586': attribute type 1 has an invalid length. [ 885.417579][ T7980] netlink: 'syz.4.9592': attribute type 33 has an invalid length. [ 885.443576][ T7980] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 885.521733][ T7980] bond1 (unregistering): Released all slaves [ 886.261686][ T8028] bond0: entered promiscuous mode [ 886.269905][ T8028] bond_slave_0: entered promiscuous mode [ 886.276682][ T8028] bond_slave_1: entered promiscuous mode [ 886.284586][ T8028] batadv0: entered promiscuous mode [ 886.291779][ T8028] debugfs: 'hsr1' already exists in 'hsr' [ 886.298058][ T8028] Cannot create hsr debugfs directory [ 886.303831][ T8028] hsr1: entered promiscuous mode [ 886.309625][ T8028] hsr1: entered allmulticast mode [ 886.314777][ T8028] bond0: entered allmulticast mode [ 886.320699][ T8028] bond_slave_0: entered allmulticast mode [ 886.327479][ T8028] bond_slave_1: entered allmulticast mode [ 886.334814][ T8028] batadv0: entered allmulticast mode [ 886.341611][ T8028] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 886.672715][ T8028] bond0: left promiscuous mode [ 886.683280][ T8028] bond_slave_0: left promiscuous mode [ 886.693442][ T8028] bond_slave_1: left promiscuous mode [ 886.726058][ T8028] batadv0: left promiscuous mode [ 887.061946][ T8058] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 887.105419][ T8058] bond4 (unregistering): Released all slaves [ 887.471936][ T8096] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 887.478448][ T8096] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 887.484161][ T8095] __nla_validate_parse: 19 callbacks suppressed [ 887.484177][ T8095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9622'. [ 887.572901][ T8102] IPv6: sit2: Disabled Multicast RS [ 887.690615][ T8117] syzkaller0: entered promiscuous mode [ 887.709263][ T8117] syzkaller0: entered allmulticast mode [ 887.757422][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9628'. [ 887.802239][ T8123] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9628'. [ 887.802715][ T8125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9629'. [ 887.830116][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9629'. [ 887.839178][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9629'. [ 887.927797][ T8133] xt_connbytes: Forcing CT accounting to be enabled [ 887.934579][ T8133] xt_l2tp: missing protocol rule (udp|l2tpip) [ 887.967634][ T8138] netlink: 'syz.1.9634': attribute type 1 has an invalid length. [ 887.968257][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9632'. [ 888.017639][ T8138] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 888.095323][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9636'. [ 888.136383][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9636'. [ 888.158337][ T8153] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9638'. [ 888.565332][ T8182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 888.737636][ T8195] xt_ecn: cannot match TCP bits for non-tcp packets [ 888.804843][ T8201] syzkaller0: entered promiscuous mode [ 888.848785][ T8201] syzkaller0: entered allmulticast mode [ 889.130008][ T8216] veth0: entered promiscuous mode [ 889.141754][ T8215] veth0: left promiscuous mode [ 889.597888][ T8248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.603517][ T8249] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 889.697248][ T8254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.833480][ T8268] netlink: 'syz.4.9670': attribute type 12 has an invalid length. [ 889.845054][ T8268] netlink: 'syz.4.9670': attribute type 29 has an invalid length. [ 890.299826][ T8291] sit0: left promiscuous mode [ 890.344197][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.351880][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.572481][ T8291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.588865][ T8291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.630288][ T8291] tipc: Resetting bearer [ 890.775396][ T8291] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 890.814914][ T8291] geneve2: left promiscuous mode [ 890.820683][ T8291] geneve2: left allmulticast mode [ 890.827838][ T8291] gretap1: left promiscuous mode [ 890.833659][ T8291] bond2: left promiscuous mode [ 890.840175][ T8291] bridge1: left promiscuous mode [ 890.865346][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.924694][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.947424][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 890.968202][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.984679][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.011050][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 891.022243][ T8323] syzkaller0: entered promiscuous mode [ 891.028365][ T8323] syzkaller0: entered allmulticast mode [ 891.068404][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.078814][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.103441][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 891.136518][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.156296][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.174741][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 891.199177][ T8321] tipc: Started in network mode [ 891.204132][ T8321] tipc: Node identity e2c745e43fde, cluster identity 4711 [ 891.218688][ T8321] tipc: Enabled bearer , priority 0 [ 891.296368][ T8321] tipc: Resetting bearer [ 891.332163][ T8321] tipc: Disabling bearer [ 891.353504][ T8339] pim6reg: entered allmulticast mode [ 891.433542][ T8339] pim6reg: left allmulticast mode [ 891.523294][ T8357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 891.530603][ T8357] IPv6: NLM_F_CREATE should be set when creating new route [ 891.537982][ T8357] IPv6: NLM_F_CREATE should be set when creating new route [ 891.552105][ T8357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 891.704386][ T8369] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 891.738280][ T8371] IPVS: Error connecting to the multicast addr [ 891.776714][ T8370] syzkaller0: entered promiscuous mode [ 891.782334][ T8370] syzkaller0: entered allmulticast mode [ 891.809726][ T8374] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 891.838495][ T8369] lo: Caught tx_queue_len zero misconfig [ 892.254253][ T8414] netlink: 'syz.0.9713': attribute type 4 has an invalid length. [ 892.492640][ T8435] netlink: 'syz.1.9720': attribute type 1 has an invalid length. [ 892.506205][ T8435] nbd: illegal input index -1835131548 [ 892.705060][ T8453] netlink: 'syz.0.9726': attribute type 4 has an invalid length. [ 892.900658][ T8470] tipc: Started in network mode [ 892.905919][ T8470] tipc: Node identity 96a81f47fef3, cluster identity 4711 [ 892.913199][ T8470] tipc: Enabled bearer , priority 0 [ 892.921046][ T8473] netlink: 'syz.3.9732': attribute type 13 has an invalid length. [ 892.930478][ T8470] syzkaller0: entered promiscuous mode [ 892.936354][ T8473] netlink: 'syz.3.9732': attribute type 17 has an invalid length. [ 892.944419][ T8470] syzkaller0: entered allmulticast mode [ 893.093329][ T8473] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.104771][ T8473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 893.128139][ T8477] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 893.163308][ T8481] tipc: Resetting bearer [ 893.173745][ T8469] tipc: Resetting bearer [ 893.197471][ T8469] tipc: Disabling bearer [ 893.218232][ T8484] netlink: 'syz.2.9735': attribute type 1 has an invalid length. [ 893.258747][ T8484] bond4: entered promiscuous mode [ 893.263904][ T8484] bond4: entered allmulticast mode [ 893.270980][ T8484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 893.334274][ T8484] erspan1: entered allmulticast mode [ 893.349058][ T8484] bond4: (slave erspan1): making interface the new active one [ 893.357286][ T8484] erspan1: entered promiscuous mode [ 893.364231][ T8484] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 893.381122][ T8492] __nla_validate_parse: 17 callbacks suppressed [ 893.381141][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9737'. [ 893.442929][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9737'. [ 893.459729][T20257] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.469635][T20257] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.481315][T20257] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.521470][T20257] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.579189][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9739'. [ 893.640927][ T8501] netlink: 'syz.4.9740': attribute type 13 has an invalid length. [ 893.649316][ T8501] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9740'. [ 893.660024][ T8501] syz_tun: refused to change device tx_queue_len [ 893.874307][ T8507] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9741'. [ 893.895228][ T8509] !: renamed from dummy0 (while UP) [ 894.294407][ T8528] tipc: Enabled bearer , priority 0 [ 894.310591][ T8532] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9749'. [ 894.322962][ T8527] tipc: Enabling of bearer rejected, already enabled [ 894.337329][ T8530] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9749'. [ 894.387218][ T8535] netlink: 'syz.2.9750': attribute type 1 has an invalid length. [ 894.415527][ T8535] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9750'. [ 894.446552][ T8528] syzkaller0: entered promiscuous mode [ 894.452113][ T8528] syzkaller0: entered allmulticast mode [ 894.458732][ T8528] tipc: Resetting bearer [ 894.481121][ T8526] tipc: Resetting bearer [ 894.796318][ T5190] udevd[5190]: worker [5226] /devices/virtual/block/nbd11 is taking a long time [ 894.805701][ T5190] udevd[5190]: worker [5306] /devices/virtual/block/nbd12 is taking a long time [ 895.112524][ T2150] block nbd12: Possible stuck request ffff888026bd8000: control (read@0,1024B). Runtime 60 seconds [ 895.124080][ T2150] block nbd12: Possible stuck request ffff888026bd8200: control (read@1024,1024B). Runtime 60 seconds [ 895.136727][ T2150] block nbd12: Possible stuck request ffff888026bd8400: control (read@2048,1024B). Runtime 60 seconds [ 895.150111][ T2150] block nbd12: Possible stuck request ffff888026bd8600: control (read@3072,1024B). Runtime 60 seconds [ 896.214375][ T8526] tipc: Disabling bearer [ 896.232270][ T7851] tipc: Node number set to 3353055779 [ 896.424904][ T8570] netlink: 'syz.0.9756': attribute type 4 has an invalid length. [ 896.432866][ T8563] netlink: 'syz.0.9756': attribute type 4 has an invalid length. [ 896.831225][ T8604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 897.017953][ T8617] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9772'. [ 897.051475][ T8618] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9772'. [ 897.154588][ T8622] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 898.042240][ T8665] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 899.169692][ T8692] netlink: 'syz.3.9795': attribute type 1 has an invalid length. [ 899.196473][ T8692] __nla_validate_parse: 3 callbacks suppressed [ 899.196492][ T8692] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9795'. [ 899.222563][T16393] lec:lec_start_xmit: lec0:No lecd attached [ 899.315338][ T8698] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 899.352804][ T8698] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 899.382475][ T8698] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 899.412798][ T8698] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 899.459503][ T8698] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 899.492317][ T8698] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 899.538583][ T8698] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 899.558667][ T8698] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 899.568426][ T8698] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 899.578168][ T8698] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 899.683417][ T8723] 8021q: VLANs not supported on vxcan1 [ 899.750069][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9804'. [ 899.809098][T20257] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.819367][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9804'. [ 899.831291][T20257] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.869092][T20257] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.901261][T20257] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.018959][ T8739] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9809'. [ 900.048642][ T8739] 8021q: VLANs not supported on gre0 [ 900.111090][ T8747] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9811'. [ 900.150100][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9811'. [ 900.428261][ T8770] netlink: 'syz.3.9820': attribute type 11 has an invalid length. [ 900.437663][ T8770] netlink: 228 bytes leftover after parsing attributes in process `syz.3.9820'. [ 900.491046][ T8772] ip6t_srh: unknown srh match flags 4000 [ 900.789607][ T8791] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9826'. [ 900.831447][ T8792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 900.878190][ T8791] gretap0: entered promiscuous mode [ 900.967610][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9828'. [ 901.144739][ T8807] openvswitch: netlink: IP tunnel dst address not specified [ 901.162284][ T8809] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9831'. [ 902.123352][ T8871] bond1: option miimon: invalid value (18446744073709551585) [ 902.132009][ T8871] bond1: option miimon: allowed values 0 - 2147483647 [ 902.143222][ T8871] bond1 (unregistering): Released all slaves [ 902.298255][T26830] block nbd0: Receive control failed (result -107) [ 902.307499][ T8881] block nbd0: reconnected socket [ 902.323237][T18104] team0: left allmulticast mode [ 902.328814][T18104] team_slave_0: left allmulticast mode [ 902.334881][T18104] team_slave_1: left allmulticast mode [ 902.361043][T18104] team0: left promiscuous mode [ 902.381727][T18104] team_slave_0: left promiscuous mode [ 902.391262][T18104] team_slave_1: left promiscuous mode [ 902.403071][T18104] bridge0: port 3(team0) entered disabled state [ 902.422424][ T8889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 902.434313][T18104] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.445055][T18104] bridge_slave_0: left allmulticast mode [ 902.451238][T18104] bridge_slave_0: left promiscuous mode [ 902.459229][T18104] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.803683][T18104] bond5 (unregistering): (slave gretap4): Releasing active interface [ 903.154895][T18104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.164946][T18104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.174833][T18104] bond0 (unregistering): Released all slaves [ 903.184562][T18104] bond1 (unregistering): Released all slaves [ 903.198839][T18104] bond2 (unregistering): Released all slaves [ 903.218254][T18104] bond3 (unregistering): Released all slaves [ 903.251397][T18104] bond4 (unregistering): Released all slaves [ 903.269573][T18104] bond5 (unregistering): Released all slaves [ 903.293122][ T8898] bridge0: port 3(gretap0) entered blocking state [ 903.306715][ T8898] bridge0: port 3(gretap0) entered disabled state [ 903.313871][ T8898] gretap0: entered allmulticast mode [ 903.322818][ T8898] gretap0: entered promiscuous mode [ 903.344282][ T8905] : renamed from vxcan1 (while UP) [ 903.378881][T18104] tipc: Left network mode [ 903.635207][ T8930] net veth1_virt_wifi : renamed from virt_wifi0 [ 903.644403][ T8928] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 903.910030][ T8941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.937602][ T8941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 904.098105][ T8953] openvswitch: netlink: IP tunnel TTL not specified. [ 904.107466][T18104] hsr_slave_0: left promiscuous mode [ 904.117811][T18104] hsr_slave_1: left promiscuous mode [ 904.124309][T18104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.161150][T18104] pim6reg (unregistering): left allmulticast mode [ 904.380318][ T8972] __nla_validate_parse: 7 callbacks suppressed [ 904.380337][ T8972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9878'. [ 904.408962][ T8971] netlink: 'syz.2.9884': attribute type 2 has an invalid length. [ 904.417999][ T8971] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9884'. [ 904.429163][T18104] team0 (unregistering): Port device team_slave_1 removed [ 904.451462][T18104] team0 (unregistering): Port device team_slave_0 removed [ 904.583027][T18104] smc: removing net device team0 with user defined pnetid SYZ2 [ 904.760612][ T8983] sctp: [Deprecated]: syz.3.9886 (pid 8983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 904.760612][ T8983] Use struct sctp_sack_info instead [ 904.945780][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 904.953814][ C0] lec:lec_tx_timeout: lec0 [ 905.047121][ T8996] syzkaller1: entered promiscuous mode [ 905.056820][ T8996] syzkaller1: entered allmulticast mode [ 905.239587][ T9013] team0 (unregistering): Port device team_slave_0 removed [ 905.260076][ T9013] team0 (unregistering): Port device team_slave_1 removed [ 905.372516][ T9022] erspan0: entered promiscuous mode [ 905.691392][ T9044] netlink: 'syz.1.9908': attribute type 1 has an invalid length. [ 905.784778][ T9051] pimreg: entered allmulticast mode [ 905.972857][ T9059] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 905.979679][ T9068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9917'. [ 906.056553][ T9070] netlink: 212 bytes leftover after parsing attributes in process `syz.2.9918'. [ 906.282380][ T9091] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9923'. [ 906.327053][ T9090] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 906.338851][ T9090] bond4 (unregistering): Released all slaves [ 906.454584][ T9091] bridge0: port 3(dummy0) entered disabled state [ 906.468003][ T9091] dummy0 (unregistering): left allmulticast mode [ 906.474923][ T9091] bridge0: port 3(dummy0) entered disabled state [ 906.710395][ T9119] set match dimension is over the limit! [ 906.729794][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.754337][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.766693][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.775416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.804049][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.814833][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.824101][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.832842][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.842454][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.999651][T18104] IPVS: stop unused estimator thread 0... [ 907.002970][ T9135] xt_hashlimit: overflow, rate too high: 0 [ 907.305442][ T9158] syzkaller0: entered promiscuous mode [ 907.317281][ T9158] syzkaller0: entered allmulticast mode [ 908.358353][ T9188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.278775][ T9198] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9957'. [ 909.288693][ T9198] xt_policy: neither incoming nor outgoing policy selected [ 909.299635][ T9198] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9957'. [ 909.349845][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9958'. [ 909.364502][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9959'. [ 909.490127][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9962'. [ 909.500757][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9962'. [ 909.510918][T26830] Bluetooth: hci3: command tx timeout [ 909.679893][ T9229] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9966'. [ 909.894245][ T9247] IPv6: NLM_F_CREATE should be specified when creating new route [ 910.297160][ T9265] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 910.304837][ T9265] team0: Device macvlan3 is already an upper device of the team interface [ 910.383980][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9978'. [ 910.413845][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9978'. [ 910.486824][ T30] audit: type=1800 audit(1771622562.073:12): pid=9274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9980" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=813 res=0 errno=0 [ 910.662387][ T9280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9983'. [ 910.742247][ T9285] netlink: 516 bytes leftover after parsing attributes in process `syz.1.9984'. [ 910.791361][ T9292] x_tables: duplicate underflow at hook 1 [ 910.801013][ T9285] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 910.934241][ T9300] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9988'. [ 911.500982][ T9324] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 911.732020][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9998'. [ 911.852395][ T9342] tipc: Enabled bearer , priority 0 [ 911.865450][ T9342] syzkaller0: entered promiscuous mode [ 911.872576][ T9342] syzkaller0: entered allmulticast mode [ 911.914330][ T9342] tipc: Resetting bearer [ 911.988051][ T9340] net_ratelimit: 3 callbacks suppressed [ 911.988071][ T9340] openvswitch: netlink: Flow actions attr not present in new flow. [ 912.009770][ T9350] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10000'. [ 912.031818][ T9343] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 912.244347][ T9340] tipc: Resetting bearer [ 912.295055][ T9340] tipc: Disabling bearer [ 912.352859][ T9356] netlink: 'syz.1.10002': attribute type 1 has an invalid length. [ 912.492621][ T9366] netlink: 'syz.1.10006': attribute type 1 has an invalid length. [ 912.502770][ T9366] netlink: 'syz.1.10006': attribute type 3 has an invalid length. [ 912.511343][ T9366] NCSI netlink: No device for ifindex 813332851 [ 913.050374][ T9401] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 913.060579][ T9401] sctp: [Deprecated]: syz.1.10017 (pid 9401) Use of int in maxseg socket option. [ 913.060579][ T9401] Use struct sctp_assoc_value instead [ 913.177630][ T9407] block nbd0: reconnected socket [ 913.177649][T26830] block nbd0: Receive control failed (result -107) [ 913.649252][ T9451] netlink: 'syz.4.10034': attribute type 3 has an invalid length. [ 913.879952][ T9468] netlink: 'syz.1.10039': attribute type 25 has an invalid length. [ 913.944691][ T9470] netlink: 'syz.4.10040': attribute type 2 has an invalid length. [ 914.019963][ T9476] netlink: 'syz.4.10043': attribute type 21 has an invalid length. [ 914.033123][ T9473] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 914.440401][ T9502] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 914.452273][ T9502] bond1 (unregistering): Released all slaves [ 914.477327][ T9504] sctp: [Deprecated]: syz.1.10051 (pid 9504) Use of int in maxseg socket option. [ 914.477327][ T9504] Use struct sctp_assoc_value instead [ 914.720878][ T9512] __nla_validate_parse: 20 callbacks suppressed [ 914.720892][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10055'. [ 914.738077][ T9512] openvswitch: netlink: Unknown nsh attribute 0 [ 914.827946][ T9517] netlink: 'syz.1.10057': attribute type 3 has an invalid length. [ 915.002082][ T9524] netlink: 220 bytes leftover after parsing attributes in process `syz.2.10059'. [ 915.019645][ T9524] netlink: 220 bytes leftover after parsing attributes in process `syz.2.10059'. [ 915.113908][ T9529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10061'. [ 915.128654][ T9529] netlink: 148 bytes leftover after parsing attributes in process `syz.2.10061'. [ 915.134043][ T9531] tipc: Enabled bearer , priority 10 [ 915.150304][ T9531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 915.234848][ T9535] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 915.405216][ T9547] netlink: 'syz.1.10069': attribute type 1 has an invalid length. [ 915.567761][ T9542] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.575216][ T9542] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.832025][ T9542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.864024][ T9542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.280383][ T9547] bond1: entered promiscuous mode [ 916.287734][ T9547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 916.327783][ T9550] bond1: (slave bridge3): making interface the new active one [ 916.340067][ T9550] bridge3: entered promiscuous mode [ 916.342721][ T9567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10070'. [ 916.347688][ T9550] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 916.386407][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.395344][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.420503][ T9558] tipc: Node number set to 1750802247 [ 916.429406][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.493813][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10072'. [ 916.961934][ T9589] gretap0: left promiscuous mode [ 917.060411][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 917.067511][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 917.071402][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 917.085039][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 917.094944][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 917.103217][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 917.113327][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 917.124836][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 917.444031][ T9595] chnl_net:caif_netlink_parms(): no params data found [ 917.471167][ T9589] infiniband syz2: set down [ 917.477032][ T5867] ip6_vti0 speed is unknown, defaulting to 1000 [ 917.487274][ T9589] infiniband syz2: added ip6_vti0 [ 917.552761][ T9589] RDS/IB: syz2: added [ 917.557356][ T9589] smc: adding ib device syz2 with port count 1 [ 917.564228][ T9589] smc: ib device syz2 port 1 has no pnetid [ 917.575504][ T887] ip6_vti0 speed is unknown, defaulting to 1000 [ 917.596770][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 917.621130][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.629933][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.639273][ T9595] bridge_slave_0: entered allmulticast mode [ 917.648546][ T9595] bridge_slave_0: entered promiscuous mode [ 917.660609][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.670917][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.679631][ T9595] bridge_slave_1: entered allmulticast mode [ 917.691183][ T9595] bridge_slave_1: entered promiscuous mode [ 917.808609][ T9595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.841806][ T9595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.871801][ T9615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10084'. [ 917.909376][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10084'. [ 917.922017][ T9595] team0: Port device team_slave_0 added [ 917.932228][ T9595] team0: Port device team_slave_1 added [ 917.974753][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 918.008794][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.027327][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.058127][ T9595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.069548][ T9620] xt_hashlimit: size too large, truncated to 1048576 [ 918.071454][ T9595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.084452][ T9595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.111887][ T9595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.136475][ T9620] netlink: 'syz.4.10087': attribute type 21 has an invalid length. [ 918.144400][ T9620] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10087'. [ 918.238458][ T9595] hsr_slave_0: entered promiscuous mode [ 918.238871][ T9623] xt_hashlimit: size too large, truncated to 1048576 [ 918.266613][ T9595] hsr_slave_1: entered promiscuous mode [ 918.279592][ T9595] debugfs: 'hsr0' already exists in 'hsr' [ 918.295530][ T9595] Cannot create hsr debugfs directory [ 918.467699][ T9623] xt_hashlimit: size too large, truncated to 1048576 [ 918.485537][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 918.652334][ T9623] xt_hashlimit: size too large, truncated to 1048576 [ 918.740309][ T9595] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 918.774777][ T9595] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 918.809418][ T9595] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 918.844375][ T9595] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 918.852867][ T9623] xt_hashlimit: size too large, truncated to 1048576 [ 918.942485][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 919.027761][ T9623] xt_hashlimit: size too large, truncated to 1048576 [ 919.112279][ T9595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.191796][T26830] Bluetooth: hci4: command tx timeout [ 919.198048][ T9595] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.211025][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.218217][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.243665][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.250965][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.319872][ T9595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 919.397361][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 919.587605][ T9595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.687026][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 919.801525][ T9669] __nla_validate_parse: 2 callbacks suppressed [ 919.801542][ T9669] netlink: 59 bytes leftover after parsing attributes in process `syz.4.10095'. [ 920.008933][ T9595] veth0_vlan: entered promiscuous mode [ 920.036573][ T9595] veth1_vlan: entered promiscuous mode [ 920.077631][ T9595] veth0_macvtap: entered promiscuous mode [ 920.087807][ T9678] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10097'. [ 920.101861][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 920.125127][ T9595] veth1_macvtap: entered promiscuous mode [ 920.159138][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.195312][ T9595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.223800][ T9680] kthread_run failed with err -4 [ 920.245358][T18104] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.255583][T18104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.291402][T18104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.308430][T18104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.458097][ T6592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.469680][ T6592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.510287][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10100'. [ 920.569435][T25754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.581270][T25754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.624973][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 920.820485][ T9705] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10105'. [ 920.831865][ T9705] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.839620][ T9705] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.989234][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 921.061825][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10107'. [ 921.264138][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 921.271075][T26830] Bluetooth: hci4: command tx timeout [ 921.411458][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 921.547046][ T9589] ip6_vti0 speed is unknown, defaulting to 1000 [ 921.800431][ T9718] syzkaller0: entered promiscuous mode [ 921.809639][ T9720] netlink: 209608 bytes leftover after parsing attributes in process `syz.1.10111'. [ 921.817209][ T9718] syzkaller0: entered allmulticast mode [ 921.861755][ T9720] syzkaller0: entered promiscuous mode [ 921.869790][ T9720] syzkaller0: entered allmulticast mode [ 922.016716][ T9730] IPVS: length: 4096 != 8 [ 922.028331][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10113'. [ 922.064504][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10113'. [ 922.089918][ T9730] netlink: 'syz.4.10113': attribute type 3 has an invalid length. [ 922.148706][ T9730] netlink: 100 bytes leftover after parsing attributes in process `syz.4.10113'. [ 922.210490][ T9742] syz_tun: entered allmulticast mode [ 922.258014][ T9741] syz_tun: left allmulticast mode [ 922.320951][ T9748] netlink: 'syz.4.10122': attribute type 4 has an invalid length. [ 922.436469][ T9754] netlink: 'syz.5.10125': attribute type 1 has an invalid length. [ 922.490460][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10126'. [ 922.700195][ T9769] netlink: 'syz.2.10131': attribute type 4 has an invalid length. [ 922.828772][ T9779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 922.838332][ T9781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 922.993640][ T9792] netlink: 'syz.2.10137': attribute type 2 has an invalid length. [ 923.155237][ T9808] netlink: 'syz.1.10143': attribute type 1 has an invalid length. [ 923.167994][ T9807] netlink: 'syz.1.10143': attribute type 1 has an invalid length. [ 923.207000][ T9812] nbd: socks must be embedded in a SOCK_ITEM attr [ 923.208987][ T9807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.235048][ T9807] bond2: (slave ip6gretap1): making interface the new active one [ 923.245096][ T9807] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 923.254108][ T9807] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 923.262849][ T9807] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 923.351001][T26830] Bluetooth: hci4: command tx timeout [ 923.537766][ T9830] netlink: 'syz.4.10150': attribute type 15 has an invalid length. [ 923.571772][ T9830] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 923.692694][ T9844] netlink: 'syz.4.10155': attribute type 1 has an invalid length. [ 924.391171][ T9876] openvswitch: netlink: Unknown key attributes 2 [ 924.404490][ T9876] veth0: entered promiscuous mode [ 924.415263][ T9875] veth0: left promiscuous mode [ 924.673765][ T9904] netlink: 'syz.4.10170': attribute type 1 has an invalid length. [ 924.744783][ T9909] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 924.807105][ T9911] __nla_validate_parse: 10 callbacks suppressed [ 924.807124][ T9911] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10173'. [ 924.861493][ T9911] nbd: socks must be embedded in a SOCK_ITEM attr [ 924.903095][ T9916] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 924.923355][ T9916] bond6: (slave lo): Enslaving as an active interface with an up link [ 924.933673][ T9916] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 925.158229][ T9879] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 925.172860][ T9879] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 925.192494][ T2150] block nbd12: Possible stuck request ffff888026bd8000: control (read@0,1024B). Runtime 90 seconds [ 925.204649][ T2150] block nbd12: Possible stuck request ffff888026bd8200: control (read@1024,1024B). Runtime 90 seconds [ 925.217009][ T2150] block nbd12: Possible stuck request ffff888026bd8400: control (read@2048,1024B). Runtime 90 seconds [ 925.229310][ T2150] block nbd12: Possible stuck request ffff888026bd8600: control (read@3072,1024B). Runtime 90 seconds [ 925.231512][ T9936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 925.384309][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10183'. [ 925.420094][ T9941] tipc: Started in network mode [ 925.425147][ T9941] tipc: Node identity 8e75e6a23559, cluster identity 4711 [ 925.438208][T26830] Bluetooth: hci4: command tx timeout [ 925.443861][ T9941] tipc: Enabled bearer , priority 0 [ 925.467709][ T9939] tipc: Disabling bearer [ 925.647776][ T9960] xt_hashlimit: size too large, truncated to 1048576 [ 925.779772][ T9966] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10193'. [ 925.910934][ T9974] veth0_to_team: Caught tx_queue_len zero misconfig [ 926.124193][ T9994] netlink: 'syz.2.10201': attribute type 21 has an invalid length. [ 926.138970][ T9991] netlink: 'syz.4.10200': attribute type 24 has an invalid length. [ 926.335645][T10009] xt_ecn: cannot match TCP bits for non-tcp packets [ 926.483117][T10016] pimreg: entered allmulticast mode [ 926.643030][T10024] netlink: 'syz.1.10209': attribute type 2 has an invalid length. [ 926.755142][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10211'. [ 926.767904][T10030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10211'. [ 926.874529][T10036] netlink: 'syz.5.10213': attribute type 4 has an invalid length. [ 926.968332][T10042] netlink: 277 bytes leftover after parsing attributes in process `syz.5.10216'. [ 926.990064][T10044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 927.083018][T10050] netlink: 212 bytes leftover after parsing attributes in process `syz.5.10219'. [ 927.358307][T10065] netlink: 'syz.2.10225': attribute type 3 has an invalid length. [ 927.398766][T10071] dvmrp0: entered allmulticast mode [ 927.422990][T10075] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10225'. [ 927.580723][T10085] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10231'. [ 927.721874][T10090] veth0_to_bond: entered allmulticast mode [ 928.042260][T10113] netlink: zone id is out of range [ 928.047689][T10113] netlink: del zone limit has 4 unknown bytes [ 928.142907][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10244'. [ 928.152599][T10119] chnl_net:caif_netlink_parms(): no params data found [ 928.357131][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 928.370520][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 928.380631][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 928.400141][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 928.408241][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 928.447832][T10131] ip6_vti0 speed is unknown, defaulting to 1000 [ 929.180808][T10131] chnl_net:caif_netlink_parms(): no params data found [ 929.280524][T10184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.547412][T10204] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 929.570030][T10131] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.609099][T10131] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.624408][T10131] bridge_slave_0: entered allmulticast mode [ 929.658547][T10131] bridge_slave_0: entered promiscuous mode [ 929.695448][T10131] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.726449][T10131] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.733908][T10131] bridge_slave_1: entered allmulticast mode [ 929.762116][T10131] bridge_slave_1: entered promiscuous mode [ 929.793018][T10217] validate_nla: 1 callbacks suppressed [ 929.793036][T10217] netlink: 'syz.2.10267': attribute type 4 has an invalid length. [ 929.968047][T10131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.063145][T10131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.104855][T10215] IPVS: persistence engine module ip_vs_pe_ not found [ 930.281222][T10131] team0: Port device team_slave_0 added [ 930.318800][T10131] team0: Port device team_slave_1 added [ 930.325577][T10207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 930.354545][T10207] delete_channel: no stack [ 930.399530][T10239] syzkaller0: entered promiscuous mode [ 930.405460][T10239] syzkaller0: entered allmulticast mode [ 930.418887][T10131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.438688][T10131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.477660][ T5829] Bluetooth: hci6: command tx timeout [ 930.493688][T10131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.498371][T10205] lec:lec_atm_close: lec0: Shut down! [ 930.514623][T10242] tipc: Enabling of bearer rejected, failed to enable media [ 930.538343][T10248] IPVS: set_ctl: invalid protocol: 1 172.20.20.56:3 [ 930.572682][T10131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.580752][T10131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.610524][T10131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.779270][T10131] hsr_slave_0: entered promiscuous mode [ 930.806759][T10131] hsr_slave_1: entered promiscuous mode [ 930.813274][T10131] debugfs: 'hsr0' already exists in 'hsr' [ 930.861096][T10131] Cannot create hsr debugfs directory [ 931.003924][T10265] netlink: 'syz.4.10275': attribute type 10 has an invalid length. [ 931.034428][T10265] bridge0: entered allmulticast mode [ 931.040565][T10265] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 931.129349][T10269] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 931.450953][T10282] __nla_validate_parse: 1 callbacks suppressed [ 931.450973][T10282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10279'. [ 931.677849][T10293] netlink: 'syz.5.10281': attribute type 29 has an invalid length. [ 931.719320][T10131] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 931.742213][T10294] netlink: 'syz.5.10281': attribute type 29 has an invalid length. [ 931.764792][T10298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 931.781335][T10293] netlink: 500 bytes leftover after parsing attributes in process `syz.5.10281'. [ 931.781662][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10281'. [ 931.792515][T10131] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 931.802074][T10293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10281'. [ 931.869739][T10131] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 931.891633][T10131] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 932.139552][T10131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.161110][T10317] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10285'. [ 932.191845][T10316] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10285'. [ 932.222977][T10131] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.269825][T18104] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.277070][T18104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.324387][T18104] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.331613][T18104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.424039][T10324] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10288'. [ 932.546324][ T5829] Bluetooth: hci6: command tx timeout [ 932.609821][T10342] netlink: 144 bytes leftover after parsing attributes in process `syz.5.10294'. [ 932.850857][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10297'. [ 932.861641][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10297'. [ 932.891223][ T6592] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.901704][ T6592] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.920373][ T6592] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.967798][ T6592] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 933.032441][T10131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.625019][T10131] veth0_vlan: entered promiscuous mode [ 933.661494][T10131] veth1_vlan: entered promiscuous mode [ 933.770627][T10131] veth0_macvtap: entered promiscuous mode [ 933.822781][T10131] veth1_macvtap: entered promiscuous mode [ 933.880573][T10131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.993649][T10131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.034748][ T1165] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.082780][ T1165] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.099192][ T1165] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.110385][ T1165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.167107][T10399] xt_cluster: node mask cannot exceed total number of nodes [ 934.463491][ T6592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.500189][ T6592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.553451][T10408] syzkaller1: entered promiscuous mode [ 934.562801][T10408] syzkaller1: entered allmulticast mode [ 934.595597][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.627168][ T5829] Bluetooth: hci6: command tx timeout [ 934.633952][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.129313][T10441] netlink: 'syz.2.10323': attribute type 13 has an invalid length. [ 935.198656][T10441] netlink: 'syz.2.10323': attribute type 13 has an invalid length. [ 935.210657][T10445] netlink: 'syz.1.10326': attribute type 1 has an invalid length. [ 935.220763][T10441] tunl0: Caught tx_queue_len zero misconfig [ 935.222569][T10445] netlink: 'syz.1.10326': attribute type 4 has an invalid length. [ 935.494548][T10469] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 935.905952][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 935.914126][ C0] lec:lec_tx_timeout: lec0 [ 935.920627][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 936.360388][T10526] ip6_vti0 speed is unknown, defaulting to 1000 [ 936.520885][T10540] __nla_validate_parse: 13 callbacks suppressed [ 936.520903][T10540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10351'. [ 936.715326][ T5829] Bluetooth: hci6: command tx timeout [ 936.938304][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10355'. [ 937.070985][T10557] bond2: entered promiscuous mode [ 937.098307][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10355'. [ 937.142335][T10557] bond2: entered allmulticast mode [ 937.167458][T10557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 937.184498][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10356'. [ 937.214098][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10356'. [ 937.298920][T10577] netlink: 'syz.1.10357': attribute type 1 has an invalid length. [ 937.308454][T10577] netlink: 'syz.1.10357': attribute type 2 has an invalid length. [ 937.319311][T10577] netlink: 'syz.1.10357': attribute type 1 has an invalid length. [ 937.333125][T10577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10357'. [ 937.413304][T10577] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 937.431150][T10577] bond3 (unregistering): Released all slaves [ 937.674510][T10589] tap0: tun_chr_ioctl cmd 1074025676 [ 937.692683][T10589] tap0: owner set to 0 [ 938.150305][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10365'. [ 938.161448][T10608] erspan0: entered promiscuous mode [ 938.171288][T10606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10364'. [ 938.190567][T10606] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 938.313392][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10368'. [ 938.358313][T10615] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 938.375991][T10615] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10367'. [ 938.409220][T10620] geneve1: entered allmulticast mode [ 938.498249][T10625] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 938.597155][T10628] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 938.730277][T10643] netlink: 'syz.6.10376': attribute type 11 has an invalid length. [ 939.813674][T10699] xt_hashlimit: size too large, truncated to 1048576 [ 939.973528][T10709] netlink: 'syz.2.10397': attribute type 1 has an invalid length. [ 940.163373][T10717] netlink: zone id is out of range [ 940.169841][T10717] netlink: zone id is out of range [ 940.192025][T10717] netlink: zone id is out of range [ 940.218723][T10717] netlink: zone id is out of range [ 940.238984][T10717] netlink: zone id is out of range [ 940.269215][T10717] netlink: zone id is out of range [ 940.311591][T10717] netlink: zone id is out of range [ 940.344895][T10717] netlink: zone id is out of range [ 940.402100][T10717] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 940.440037][T10719] sctp: [Deprecated]: syz.4.10399 (pid 10719) Use of int in maxseg socket option. [ 940.440037][T10719] Use struct sctp_assoc_value instead [ 940.945862][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 940.953916][ C0] lec:lec_tx_timeout: lec0 [ 944.065183][T10774] syzkaller0: entered promiscuous mode [ 944.092688][T10774] syzkaller0: entered allmulticast mode [ 944.332179][T10791] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.400927][T10805] tipc: Enabled bearer , priority 0 [ 944.495650][T10791] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.705150][T10794] syzkaller0: entered promiscuous mode [ 944.717290][T10794] syzkaller0: entered allmulticast mode [ 944.724139][T10794] tipc: Resetting bearer [ 944.834613][ T6592] tipc: Resetting bearer [ 944.844959][T10830] netlink: 'syz.6.10428': attribute type 1 has an invalid length. [ 944.856993][T10791] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.872907][T10793] tipc: Resetting bearer [ 944.970650][T10835] __nla_validate_parse: 13 callbacks suppressed [ 944.983455][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10428'. [ 944.995792][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10428'. [ 946.623306][T10793] tipc: Disabling bearer [ 946.650941][T10791] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.693156][ T7849] tipc: Node number set to 3140282018 [ 946.842813][T10844] syzkaller0: entered promiscuous mode [ 946.857073][T10844] syzkaller0: entered allmulticast mode [ 946.882942][T10844] netlink: 'syz.1.10431': attribute type 1 has an invalid length. [ 946.909009][ T6592] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 947.049218][T18197] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 947.060538][T10861] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.10437'. [ 947.133299][T18197] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 947.166716][ T6592] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 947.544875][T10893] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.10447'. [ 947.842987][T10910] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.10453'. [ 947.883120][T10910] netlink: 'syz.2.10453': attribute type 10 has an invalid length. [ 947.892846][T10910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10453'. [ 947.903709][T10910] net_ratelimit: 52 callbacks suppressed [ 947.903725][T10910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 948.030405][T10924] syzkaller0: entered promiscuous mode [ 948.055549][T10924] syzkaller0: entered allmulticast mode [ 948.128716][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10456'. [ 948.176993][T10936] netlink: 'syz.1.10459': attribute type 4 has an invalid length. [ 948.301285][T10936] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 948.637903][T10963] netlink: 'syz.4.10466': attribute type 39 has an invalid length. [ 948.898615][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10472'. [ 949.113787][T10994] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.10477'. [ 949.289445][T11004] netlink: 'syz.2.10480': attribute type 15 has an invalid length. [ 949.297962][T11004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10480'. [ 949.509538][T11014] syzkaller0: entered promiscuous mode [ 949.518539][T11014] syzkaller0: entered allmulticast mode [ 949.972996][T11048] netlink: 'syz.2.10495': attribute type 30 has an invalid length. [ 950.022565][T11048] bond7: option arp_missed_max: invalid value (0) [ 950.041352][T11048] bond7: option arp_missed_max: allowed values 1 - 255 [ 950.051665][T11048] bond7 (unregistering): Released all slaves [ 950.140652][T11058] ip6_vti0 speed is unknown, defaulting to 1000 [ 950.219233][T11064] netlink: 'syz.4.10499': attribute type 1 has an invalid length. [ 950.257022][T11064] netlink: 'syz.4.10499': attribute type 3 has an invalid length. [ 950.264850][T11064] __nla_validate_parse: 3 callbacks suppressed [ 950.264862][T11064] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10499'. [ 950.500687][T11079] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10504'. [ 950.583370][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10505'. [ 950.868134][T11091] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.877707][T11091] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.984784][T11091] netlink: 'syz.6.10509': attribute type 16 has an invalid length. [ 950.993255][T11091] netlink: 'syz.6.10509': attribute type 17 has an invalid length. [ 951.164194][T11091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 951.378973][T11100] netpci0: tun_chr_ioctl cmd 1074025678 [ 951.384974][T11100] netpci0: group set to 0 [ 951.906913][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10515'. [ 951.937117][T11114] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10515'. [ 952.000809][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10516'. [ 952.033019][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10516'. [ 952.697043][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10529'. [ 952.718509][T11154] bond1: Unable to set down delay as MII monitoring is disabled [ 952.750719][T11154] bond1 (unregistering): Released all slaves [ 952.801562][T11152] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10527'. [ 952.950485][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10531'. [ 953.001697][T11174] xt_TPROXY: Can be used only with -p tcp or -p udp [ 953.003768][T11173] : entered promiscuous mode [ 953.167058][T11181] netlink: 'syz.1.10535': attribute type 2 has an invalid length. [ 953.190841][T11183] tipc: Trying to set illegal importance in message [ 953.535363][T11212] netlink: 'syz.4.10546': attribute type 30 has an invalid length. [ 955.270142][ T2150] block nbd12: Possible stuck request ffff888026bd8000: control (read@0,1024B). Runtime 120 seconds [ 955.281782][ T2150] block nbd12: Possible stuck request ffff888026bd8200: control (read@1024,1024B). Runtime 120 seconds [ 955.293612][ T2150] block nbd12: Possible stuck request ffff888026bd8400: control (read@2048,1024B). Runtime 120 seconds [ 955.305527][ T2150] block nbd12: Possible stuck request ffff888026bd8600: control (read@3072,1024B). Runtime 120 seconds [ 956.352686][T11199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 956.573186][T11233] mac80211_hwsim hwsim105 wlan0: entered promiscuous mode [ 956.578916][T11237] __nla_validate_parse: 6 callbacks suppressed [ 956.578932][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10554'. [ 956.624735][T11237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10554'. [ 956.741704][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10558'. [ 956.853297][T11246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 956.869699][T11255] bond0: (slave rose0): Enslaving as an active interface with an up link [ 956.967169][T11260] netlink: 'syz.5.10562': attribute type 1 has an invalid length. [ 956.977962][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10562'. [ 957.001078][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10562'. [ 957.195496][T11269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10564'. [ 957.238712][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10564'. [ 957.297760][T11277] netlink: 'syz.1.10565': attribute type 24 has an invalid length. [ 957.318162][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10564'. [ 959.267371][T26830] Bluetooth: hci2: command 0x0406 tx timeout [ 963.617620][T16393] lec:lec_start_xmit: lec0:No lecd attached [ 968.945852][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 968.953869][ C0] lec:lec_tx_timeout: lec0 [ 969.506260][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 984.866959][T26830] Bluetooth: hci1: command 0x0406 tx timeout [ 985.359490][ T2150] block nbd12: Possible stuck request ffff888026bd8000: control (read@0,1024B). Runtime 150 seconds [ 985.370925][ T2150] block nbd12: Possible stuck request ffff888026bd8200: control (read@1024,1024B). Runtime 150 seconds [ 985.383201][ T2150] block nbd12: Possible stuck request ffff888026bd8400: control (read@2048,1024B). Runtime 150 seconds [ 985.394903][ T2150] block nbd12: Possible stuck request ffff888026bd8600: control (read@3072,1024B). Runtime 150 seconds [ 993.042877][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 998.056313][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 998.064327][ C0] lec:lec_tx_timeout: lec0 [ 1014.914155][ T5190] udevd[5190]: worker [5226] /devices/virtual/block/nbd11 timeout; kill it [ 1014.923085][ T5190] udevd[5190]: seq 38587 '/devices/virtual/block/nbd11' killed [ 1014.930819][ T5190] udevd[5190]: worker [5306] /devices/virtual/block/nbd12 timeout; kill it [ 1014.939903][ T5190] udevd[5190]: seq 38589 '/devices/virtual/block/nbd12' killed [ 1015.435797][ T2150] block nbd12: Possible stuck request ffff888026bd8000: control (read@0,1024B). Runtime 180 seconds [ 1015.447564][ T2150] block nbd12: Possible stuck request ffff888026bd8200: control (read@1024,1024B). Runtime 180 seconds [ 1015.459963][ T2150] block nbd12: Possible stuck request ffff888026bd8400: control (read@2048,1024B). Runtime 180 seconds [ 1015.472323][ T2150] block nbd12: Possible stuck request ffff888026bd8600: control (read@3072,1024B). Runtime 180 seconds [ 1022.349009][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10570'. [ 1022.352276][T11292] mac80211_hwsim hwsim102 wlan0: entered promiscuous mode [ 1022.708861][T11316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10577'. [ 1022.719229][T11318] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.10578'. [ 1022.818624][T11326] x_tables: duplicate underflow at hook 3 [ 1022.930386][T11335] netlink: 'syz.2.10584': attribute type 1 has an invalid length. [ 1022.939622][T11337] netlink: 'syz.2.10584': attribute type 1 has an invalid length. [ 1023.046368][T11335] bond7: entered promiscuous mode [ 1023.052872][T11335] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1023.201270][T11357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10588'. [ 1023.221514][T11359] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.10590'. [ 1023.237644][T11359] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1023.324890][T11367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1023.390137][T11377] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20003 [ 1023.419037][T11377] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10592'. [ 1023.514015][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10592'. [ 1023.582780][T11380] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10596'. [ 1023.648307][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10599'. [ 1023.661023][T11388] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10598'. [ 1023.689178][T11390] netlink: 'syz.6.10599': attribute type 1 has an invalid length. [ 1023.704324][T11390] netlink: 'syz.6.10599': attribute type 2 has an invalid length. [ 1023.890582][T11397] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1023.911861][T11395] erspan0: entered promiscuous mode [ 1024.181685][T11407] syzkaller0: entered promiscuous mode [ 1024.188682][T11407] syzkaller0: entered allmulticast mode [ 1024.449572][T11422] bridge0: mtu less than device minimum [ 1025.651776][T11501] syzkaller0: entered promiscuous mode [ 1025.659293][T11501] syzkaller0: entered allmulticast mode [ 1025.937298][T11525] tipc: Enabling of bearer rejected, failed to enable media [ 1026.028246][T11525] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1026.325934][T11546] sctp: [Deprecated]: syz.6.10643 (pid 11546) Use of int in max_burst socket option deprecated. [ 1026.325934][T11546] Use struct sctp_assoc_value instead [ 1026.364370][T11546] netlink: 'syz.6.10643': attribute type 1 has an invalid length. [ 1026.590814][T11554] ip6_vti0 speed is unknown, defaulting to 1000 [ 1026.798481][T16393] lec:lec_start_xmit: lec0:No lecd attached [ 1027.033508][T11582] veth0: entered promiscuous mode [ 1027.091395][T11580] veth0: left promiscuous mode [ 1027.226594][T11592] netlink: 'syz.5.10662': attribute type 1 has an invalid length. [ 1027.291238][T11601] x_tables: duplicate entry at hook 1 [ 1027.423055][T11592] bond1: entered promiscuous mode [ 1027.442756][T11592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1027.465382][T11606] bond1: (slave bridge5): making interface the new active one [ 1027.474275][T11606] bridge5: entered promiscuous mode [ 1027.482134][T11606] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 1027.706268][T11630] __nla_validate_parse: 12 callbacks suppressed [ 1027.706288][T11630] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10667'. [ 1028.120423][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10675'. [ 1028.141477][T11653] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10675'. [ 1028.197348][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10676'. [ 1030.468692][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10683'. [ 1030.487087][T11693] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1030.573119][T11698] netlink: 'syz.4.10684': attribute type 6 has an invalid length. [ 1030.715604][T11707] netlink: 'syz.1.10686': attribute type 1 has an invalid length. [ 1030.743430][T11707] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.10686'. [ 1030.763217][T11704] netlink: 'syz.6.10685': attribute type 1 has an invalid length. [ 1030.828302][T11717] netlink: 'syz.6.10685': attribute type 8 has an invalid length. [ 1030.887391][T11722] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10690'. [ 1030.905152][T11720] netlink: 'syz.1.10691': attribute type 5 has an invalid length. [ 1030.951434][T26830] Bluetooth: hci3: command 0x0406 tx timeout [ 1031.003427][T11728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10694'. [ 1031.053146][T11728] syzkaller0: entered allmulticast mode [ 1031.324779][T11741] syzkaller1: entered promiscuous mode [ 1031.346631][T11741] syzkaller1: entered allmulticast mode [ 1031.568317][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10701'. [ 1031.905808][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 1031.913860][ C0] lec:lec_tx_timeout: lec0 [ 1031.923239][T11769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10707'. [ 1031.989161][T11772] ip6tnl0: Caught tx_queue_len zero misconfig [ 1032.644270][T11802] netlink: 'syz.2.10718': attribute type 39 has an invalid length. [ 1032.789142][T11806] __nla_validate_parse: 7 callbacks suppressed [ 1032.789162][T11806] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10722'. [ 1032.817096][T11808] netlink: 116 bytes leftover after parsing attributes in process `syz.5.10721'. [ 1032.893470][T11812] Bluetooth: MGMT ver 1.23 [ 1032.897807][T11809] netlink: 116 bytes leftover after parsing attributes in process `syz.5.10721'. [ 1033.117009][T11829] netlink: 'syz.4.10729': attribute type 10 has an invalid length. [ 1033.124945][T11829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10729'. [ 1033.156161][T11818] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1033.941378][T11880] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1034.043436][T11887] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10744'. [ 1034.297289][T11903] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10752'. [ 1034.312140][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10750'. [ 1034.323640][T11903] netlink: 80 bytes leftover after parsing attributes in process `syz.5.10752'. [ 1034.333524][T11903] netlink: 80 bytes leftover after parsing attributes in process `syz.5.10752'. [ 1034.460849][T11908] netlink: 'syz.4.10755': attribute type 21 has an invalid length. [ 1034.486011][T11908] IPv6: NLM_F_CREATE should be specified when creating new route [ 1034.510398][T11908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1034.517678][T11908] IPv6: NLM_F_CREATE should be set when creating new route [ 1034.524917][T11908] IPv6: NLM_F_CREATE should be set when creating new route [ 1034.532171][T11908] IPv6: NLM_F_CREATE should be set when creating new route [ 1034.541849][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10754'. [ 1034.561248][T11916] netlink: 'syz.2.10758': attribute type 1 has an invalid length. [ 1034.599499][T11916] bond9: entered promiscuous mode [ 1034.604926][T11916] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1034.629970][T11910] netlink: 'syz.5.10754': attribute type 29 has an invalid length. [ 1034.644844][T11915] vlan2: entered allmulticast mode [ 1034.651960][T11915] bridge6: entered allmulticast mode [ 1034.693377][T11916] bond9: (slave bridge5): making interface the new active one [ 1034.701678][T11916] bridge5: entered promiscuous mode [ 1034.709911][T11916] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 1034.734531][T11915] bridge6: port 1(veth5) entered blocking state [ 1034.741646][T11915] bridge6: port 1(veth5) entered disabled state [ 1034.748945][T11915] veth5: entered allmulticast mode [ 1034.755171][T11915] veth5: entered promiscuous mode [ 1034.961536][T11927] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1034.991029][T11927] bond3 (unregistering): Released all slaves [ 1035.157252][T11945] xt_l2tp: invalid flags combination: 8 [ 1035.823954][T11980] tipc: Enabling of bearer rejected, failed to enable media [ 1035.871686][T11980] xt_CT: No such helper "syz1" [ 1036.343506][T12002] netlink: zone id is out of range [ 1036.351562][T12002] netlink: zone id is out of range [ 1036.358250][T12002] netlink: zone id is out of range [ 1036.363527][T12002] netlink: zone id is out of range [ 1036.370364][T12002] netlink: zone id is out of range [ 1036.376135][T12002] netlink: zone id is out of range [ 1036.381585][T12002] netlink: zone id is out of range [ 1036.395561][T12002] netlink: zone id is out of range [ 1036.399484][T12000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.408295][T12000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.412592][T12002] netlink: zone id is out of range [ 1036.427033][T12002] netlink: zone id is out of range [ 1036.595207][T12000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.623249][T12000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.763791][T12003] geneve2: entered promiscuous mode [ 1036.772669][T12003] geneve2: entered allmulticast mode [ 1036.836714][T12023] nft_compat: unsupported protocol 0 [ 1036.852446][T18195] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.868529][T18195] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.901157][T18195] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.920172][T18195] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.095272][T12029] bond3: option fail_over_mac: invalid value (16) [ 1037.109806][T12029] bond3 (unregistering): Released all slaves [ 1037.360103][T12047] bond3: Unable to set down delay as MII monitoring is disabled [ 1037.373133][T12047] bond3 (unregistering): Released all slaves [ 1037.404652][T12055] validate_nla: 3 callbacks suppressed [ 1037.404669][T12055] netlink: 'syz.1.10798': attribute type 10 has an invalid length. [ 1037.424188][T12055] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1037.899727][T12084] xt_l2tp: v2 doesn't support IP mode [ 1037.932666][T12086] xt_l2tp: v2 doesn't support IP mode [ 1038.247217][T12102] __nla_validate_parse: 19 callbacks suppressed [ 1038.247235][T12102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10810'. [ 1038.266598][T12104] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10810'. [ 1038.461675][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10811'. [ 1038.483376][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10811'. [ 1038.507383][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10811'. [ 1038.532482][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10811'. [ 1038.992254][T12129] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10817'. [ 1039.009906][T12129] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10817'. [ 1039.300583][T12144] netlink: 'syz.4.10822': attribute type 1 has an invalid length. [ 1039.527303][T12160] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10826'. [ 1039.570053][T12167] netlink: 'syz.4.10830': attribute type 12 has an invalid length. [ 1039.579075][T12167] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.10830'. [ 1039.829809][T12176] bond3: Invalid ad_actor_system MAC address. [ 1039.836653][T12176] bond3: option ad_actor_system: invalid value (1) [ 1039.845020][T12176] bond3 (unregistering): Released all slaves [ 1040.581707][T12199] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1040.611266][T12199] team0: Port device batadv2 added [ 1042.200579][T12276] netlink: 'syz.6.10865': attribute type 1 has an invalid length. [ 1042.224825][T12274] netlink: 'syz.2.10864': attribute type 1 has an invalid length. [ 1042.259099][T12276] netlink: 'syz.6.10865': attribute type 2 has an invalid length. [ 1042.288606][T12281] IPVS: length: 239 != 24 [ 1042.542156][T12299] netlink: 'syz.2.10873': attribute type 21 has an invalid length. [ 1042.714584][T12313] veth1_to_bond: entered allmulticast mode [ 1042.801020][T12312] veth1_to_bond: left allmulticast mode [ 1042.824383][T12321] netlink: 'syz.4.10879': attribute type 16 has an invalid length. [ 1042.850339][T12321] netlink: 'syz.4.10879': attribute type 17 has an invalid length. [ 1043.001179][T12321] erspan0: left promiscuous mode [ 1043.070994][T12321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.080834][T12321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.099691][T12321] net_ratelimit: 45 callbacks suppressed [ 1043.099703][T12321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1043.126682][T12332] syzkaller1: entered promiscuous mode [ 1043.132170][T12332] syzkaller1: entered allmulticast mode [ 1043.474482][T12362] __nla_validate_parse: 14 callbacks suppressed [ 1043.474500][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10884'. [ 1043.498887][T12366] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1043.552181][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10885'. [ 1043.585101][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10886'. [ 1043.663480][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10886'. [ 1044.014465][T12393] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1044.113937][T12399] netlink: 213 bytes leftover after parsing attributes in process `syz.6.10895'. [ 1044.175472][T12397] sctp: [Deprecated]: syz.2.10894 (pid 12397) Use of int in max_burst socket option. [ 1044.175472][T12397] Use struct sctp_assoc_value instead [ 1044.245066][T12406] sctp: [Deprecated]: syz.2.10894 (pid 12406) Use of int in max_burst socket option. [ 1044.245066][T12406] Use struct sctp_assoc_value instead [ 1044.353239][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10898'. [ 1044.405901][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10898'. [ 1044.435457][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10898'. [ 1044.509340][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10898'. [ 1044.555257][T12429] netlink: 'syz.2.10902': attribute type 32 has an invalid length. [ 1044.569720][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10902'. [ 1044.681827][T12420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.695576][T12420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.753325][T12420] mac80211_hwsim hwsim102 wlan0: left promiscuous mode [ 1044.781068][T12420] bond1: left promiscuous mode [ 1044.788529][T12420] bridge5: left promiscuous mode [ 1044.908676][T12429] bond10: option coupled_control: invalid value (52) [ 1044.918701][T12429] bond10 (unregistering): Released all slaves [ 1044.969351][ T64] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.983266][ T64] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.992862][ T64] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.018443][ T64] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.058278][ T64] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.078346][ T64] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.091901][ T64] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.146754][ T64] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.203452][T12444] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1045.448682][T12457] syzkaller0: entered promiscuous mode [ 1045.454422][T12457] syzkaller0: entered allmulticast mode [ 1045.522019][ T2150] block nbd12: Possible stuck request ffff888026bd8000: control (read@0,1024B). Runtime 210 seconds [ 1045.533681][ T2150] block nbd12: Possible stuck request ffff888026bd8200: control (read@1024,1024B). Runtime 210 seconds [ 1045.546316][ T2150] block nbd12: Possible stuck request ffff888026bd8400: control (read@2048,1024B). Runtime 210 seconds [ 1045.557950][ T2150] block nbd12: Possible stuck request ffff888026bd8600: control (read@3072,1024B). Runtime 210 seconds [ 1045.619714][ T64] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.633314][ T64] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.643032][ T64] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.652952][ T64] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.848944][T12471] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1046.110491][T12473] bond2: left promiscuous mode [ 1046.130016][T12473] bond2: left allmulticast mode [ 1046.309457][T26830] Bluetooth: hci4: command 0x0406 tx timeout [ 1046.445148][T12494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.481285][T12494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.510200][T12494] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1046.545464][T12494] bond0 (unregistering): Released all slaves [ 1046.878767][T12511] netlink: 'syz.1.10928': attribute type 13 has an invalid length. [ 1047.259523][T12503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.302307][T12503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.789093][T12508] hsr_slave_0 (unregistering): left promiscuous mode [ 1047.967152][T25752] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.998530][T25752] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.032983][T25752] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.057701][T25752] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.552572][T12582] lo: entered allmulticast mode [ 1048.557514][T12583] __nla_validate_parse: 17 callbacks suppressed [ 1048.557530][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10941'. [ 1048.584626][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10941'. [ 1048.590237][T12582] lo: left allmulticast mode [ 1049.743578][T12632] ipvlan2: entered allmulticast mode [ 1049.752437][T12632] batadv_slave_1: entered allmulticast mode [ 1049.763113][T12632] batman_adv: batadv0: Adding interface: ipvlan2 [ 1049.770517][T12632] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.798391][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.809004][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.819333][T12632] batman_adv: batadv0: Interface activated: ipvlan2 [ 1049.918340][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10957'. [ 1050.112566][T12652] lo: Caught tx_queue_len zero misconfig [ 1050.338021][T12662] netlink: 9 bytes leftover after parsing attributes in process `syz.5.10965'. [ 1050.364753][T12662] gretap0: entered promiscuous mode [ 1050.478865][T12662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.498563][T12662] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.526175][T12662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1050.578304][T12676] lo: entered allmulticast mode [ 1050.583666][T12676] lo: left allmulticast mode [ 1050.822507][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10972'. [ 1050.890131][T12689] syzkaller0: entered promiscuous mode [ 1050.895623][T12689] syzkaller0: entered allmulticast mode [ 1051.431467][ T5829] Bluetooth: hci6: command 0x0405 tx timeout [ 1053.084468][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10981'. [ 1053.089876][T12716] syzkaller0: entered promiscuous mode [ 1053.099915][T12716] syzkaller0: entered allmulticast mode [ 1053.120491][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10981'. [ 1053.168968][T12738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10981'. [ 1053.216616][T12744] "syz.6.10985" (12744) uses obsolete ecb(arc4) skcipher [ 1053.640412][T12771] netlink: 220 bytes leftover after parsing attributes in process `syz.5.10986'. [ 1054.472745][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1055.184440][T12774] netlink: 83 bytes leftover after parsing attributes in process `syz.4.10989'. [ 1055.245416][T12777] syzkaller0: entered promiscuous mode [ 1055.254046][T12777] syzkaller0: entered allmulticast mode [ 1055.414672][T12779] ip6tnl0: Caught tx_queue_len zero misconfig [ 1055.499240][T12777] bond1: option mode: invalid value (133) [ 1055.519483][T12777] bond1 (unregistering): Released all slaves [ 1056.053300][T12832] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1056.201337][T12847] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11003'. [ 1058.498117][T12799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1058.992975][T12891] netlink: 'syz.4.11016': attribute type 1 has an invalid length. [ 1059.042483][T12891] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1059.092712][T12891] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1059.106592][T12880] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1059.228587][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11021'. [ 1059.354414][T12914] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1059.905924][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 1059.913977][ C0] lec:lec_tx_timeout: lec0 [ 1061.563467][T12952] mac80211_hwsim hwsim103 : renamed from wlan1 [ 1061.743841][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11035'. [ 1061.861623][T12973] Bluetooth: MGMT ver 1.23 [ 1062.433091][T13006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11046'. [ 1062.629382][T13024] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1062.733869][T13037] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11053'. [ 1063.104630][T13063] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1063.131773][T13063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1063.219151][T13067] netlink: 'syz.6.11062': attribute type 13 has an invalid length. [ 1063.232941][T13067] netlink: 'syz.6.11062': attribute type 17 has an invalid length. [ 1063.253088][T13073] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11064'. [ 1063.263258][T13073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11064'. [ 1063.270620][T13067] erspan0: left promiscuous mode [ 1063.325065][T13067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.338519][T13067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.353523][T13067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1063.725570][T13099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11072'. [ 1063.738405][T13099] netlink: 176 bytes leftover after parsing attributes in process `syz.5.11072'. [ 1063.748871][T13099] netlink: 'syz.5.11072': attribute type 5 has an invalid length. [ 1063.941639][T13115] netlink: 54 bytes leftover after parsing attributes in process `syz.5.11077'. [ 1063.997418][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11077'. [ 1064.026425][T13124] netlink: 'syz.1.11081': attribute type 1 has an invalid length. [ 1064.106150][T13126] bond0: entered promiscuous mode [ 1064.111355][T13126] bond0: entered allmulticast mode [ 1064.117624][T13126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.397379][T13155] syzkaller0: entered promiscuous mode [ 1064.416793][T13155] syzkaller0: entered allmulticast mode [ 1064.447539][T13155] __nla_validate_parse: 4 callbacks suppressed [ 1064.447557][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11089'. [ 1064.465403][T18197] syzkaller0: tun_net_xmit 48 [ 1064.477096][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11089'. [ 1064.608638][T13172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11092'. [ 1064.620093][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11092'. [ 1064.630859][T13172] openvswitch: netlink: Invalid VLAN frame [ 1064.739431][T13178] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 1064.752863][T13178] CPU: 0 UID: 0 PID: 13178 Comm: syz.1.11093 Not tainted syzkaller #0 PREEMPT(full) [ 1064.752890][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1064.752904][T13178] Call Trace: [ 1064.752913][T13178] [ 1064.752922][T13178] dump_stack_lvl+0xe8/0x150 [ 1064.752968][T13178] sysfs_warn_dup+0x8e/0xa0 [ 1064.752996][T13178] sysfs_do_create_link_sd+0xc0/0x110 [ 1064.753027][T13178] device_add_class_symlinks+0x1cf/0x240 [ 1064.753063][T13178] device_add+0x475/0xb70 [ 1064.753095][T13178] wiphy_register+0x1d73/0x2d50 [ 1064.753135][T13178] ? __pfx_wiphy_register+0x10/0x10 [ 1064.753159][T13178] ? __pfx_netdev_run_todo+0x10/0x10 [ 1064.753189][T13178] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1064.753216][T13178] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1064.753248][T13178] ieee80211_register_hw+0x3571/0x4220 [ 1064.753283][T13178] ? ieee80211_register_hw+0x13e1/0x4220 [ 1064.753313][T13178] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1064.753352][T13178] ? __hrtimer_setup+0x181/0x200 [ 1064.753378][T13178] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1064.753404][T13178] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1064.753467][T13178] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1064.753495][T13178] ? kstrndup+0xbf/0x160 [ 1064.753530][T13178] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1064.753585][T13178] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1064.753627][T13178] ? rcu_is_watching+0x15/0xb0 [ 1064.753655][T13178] ? trace_kmalloc+0x2a/0x110 [ 1064.753682][T13178] ? __nla_parse+0x40/0x60 [ 1064.753713][T13178] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1064.753752][T13178] genl_family_rcv_msg_doit+0x22a/0x330 [ 1064.753789][T13178] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1064.753833][T13178] ? bpf_lsm_capable+0x9/0x20 [ 1064.753858][T13178] ? security_capable+0x7e/0x2c0 [ 1064.753887][T13178] genl_rcv_msg+0x61c/0x7a0 [ 1064.753924][T13178] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1064.753953][T13178] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1064.753992][T13178] ? __lock_acquire+0x6b5/0x2cf0 [ 1064.754031][T13178] netlink_rcv_skb+0x232/0x4b0 [ 1064.754056][T13178] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1064.754088][T13178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1064.754132][T13178] ? down_read+0x272/0x2e0 [ 1064.754152][T13178] ? genl_rcv+0xd/0x40 [ 1064.754182][T13178] genl_rcv+0x28/0x40 [ 1064.754207][T13178] netlink_unicast+0x80f/0x9b0 [ 1064.754235][T13178] ? __pfx_netlink_unicast+0x10/0x10 [ 1064.754253][T13178] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1064.754275][T13178] ? netlink_sendmsg+0x650/0xb40 [ 1064.754295][T13178] ? skb_put+0x11b/0x210 [ 1064.754324][T13178] netlink_sendmsg+0x813/0xb40 [ 1064.754359][T13178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1064.754388][T13178] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1064.754413][T13178] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1064.754436][T13178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1064.754459][T13178] ____sys_sendmsg+0xa68/0xad0 [ 1064.754486][T13178] ? futex_unqueue+0x211/0x240 [ 1064.754518][T13178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1064.754563][T13178] ? import_iovec+0x73/0xa0 [ 1064.754595][T13178] ___sys_sendmsg+0x2a5/0x360 [ 1064.754631][T13178] ? __pfx____sys_sendmsg+0x10/0x10 [ 1064.754668][T13178] ? futex_wait+0x29a/0x380 [ 1064.754727][T13178] ? __fget_files+0x2a/0x420 [ 1064.754755][T13178] ? __fget_files+0x3a0/0x420 [ 1064.754795][T13178] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1064.754828][T13178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1064.754867][T13178] ? rcu_is_watching+0x15/0xb0 [ 1064.754909][T13178] do_syscall_64+0x14d/0xf80 [ 1064.754937][T13178] ? trace_irq_disable+0x3b/0x150 [ 1064.754974][T13178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.754995][T13178] ? clear_bhb_loop+0x40/0x90 [ 1064.755021][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.755042][T13178] RIP: 0033:0x7fc5d319c629 [ 1064.755062][T13178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.755080][T13178] RSP: 002b:00007fc5d3f98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1064.755102][T13178] RAX: ffffffffffffffda RBX: 00007fc5d3416090 RCX: 00007fc5d319c629 [ 1064.755118][T13178] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000007 [ 1064.755131][T13178] RBP: 00007fc5d3232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1064.755144][T13178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.755157][T13178] R13: 00007fc5d3416128 R14: 00007fc5d3416090 R15: 00007fff887fe718 [ 1064.755191][T13178] [ 1064.908606][ C1] syzkaller0: tun_net_xmit 48 [ 1065.480421][T13196] netlink: 'syz.1.11101': attribute type 5 has an invalid length. [ 1065.508960][T13200] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11098'. [ 1065.558914][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11098'. [ 1065.819307][T13204] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1065.999260][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11107'. [ 1066.202762][T13242] netlink: 'syz.2.11112': attribute type 3 has an invalid length. [ 1066.230330][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11113'. [ 1070.466791][ T31] INFO: task syz.3.10021:9407 blocked for more than 143 seconds. [ 1070.474523][ T31] Not tainted syzkaller #0 [ 1070.480278][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1070.489278][ T31] task:syz.3.10021 state:D stack:25768 pid:9407 tgid:9405 ppid:4170 task_flags:0x400140 flags:0x00080002 [ 1070.501505][ T31] Call Trace: [ 1070.504775][ T31] [ 1070.507973][ T31] __schedule+0x1585/0x5340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1070.512487][ T31] ? __pfx___schedule+0x10/0x10 [ 1070.517472][ T31] ? schedule+0x90/0x360 [ 1070.521735][ T31] schedule+0x164/0x360 [ 1070.526684][ T31] schedule_preempt_disabled+0x13/0x30 [ 1070.533056][ T31] __mutex_lock+0x7fe/0x1300 [ 1070.537834][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1070.542611][ T31] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1070.548632][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1070.553672][ T31] ? __nlmsg_put+0xef/0x1b0 [ 1070.558562][ T31] ? genlmsg_put+0x137/0x2e0 [ 1070.565836][ T31] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1070.571412][ T31] ? kmem_cache_free+0x187/0x630 [ 1070.643281][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1070.685806][ T31] ? dev_hard_start_xmit+0x802/0x870 [ 1070.691153][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1070.716710][ T31] ? __asan_memcpy+0x40/0x70 [ 1070.721356][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1070.746738][ T31] ? __dev_queue_xmit+0x274/0x38a0 [ 1070.751906][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1070.769251][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1070.774333][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1070.796665][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1070.801666][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1070.816697][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1070.821769][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1070.846852][ T31] ? down_read+0x272/0x2e0 [ 1070.851313][ T31] ? genl_rcv+0xd/0x40 [ 1070.868124][ T31] genl_rcv+0x28/0x40 [ 1070.872153][ T31] netlink_unicast+0x80f/0x9b0 [ 1070.886776][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1070.892114][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1070.907039][ T31] ? skb_put+0x11b/0x210 [ 1070.911322][ T31] netlink_sendmsg+0x813/0xb40 [ 1070.926780][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.932264][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1070.947040][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1070.952369][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.966389][ T31] ____sys_sendmsg+0xa68/0xad0 [ 1070.971204][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1070.976698][ T31] ? import_iovec+0x73/0xa0 [ 1070.981393][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1070.987230][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1070.992467][ T31] ? futex_wake+0x4ac/0x580 [ 1070.998189][ T31] ? __fget_files+0x2a/0x420 [ 1071.002807][ T31] ? __fget_files+0x3a0/0x420 [ 1071.008917][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1071.013876][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1071.020582][ T31] ? rcu_is_watching+0x15/0xb0 [ 1071.025380][ T31] do_syscall_64+0x14d/0xf80 [ 1071.030772][ T31] ? trace_irq_disable+0x3b/0x150 [ 1071.036834][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.042912][ T31] ? clear_bhb_loop+0x40/0x90 [ 1071.048349][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.054237][ T31] RIP: 0033:0x7fcb1a79c629 [ 1071.059325][ T31] RSP: 002b:00007fcb1b5df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1071.068965][ T31] RAX: ffffffffffffffda RBX: 00007fcb1aa15fa0 RCX: 00007fcb1a79c629 [ 1071.077583][ T31] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1071.085545][ T31] RBP: 00007fcb1a832b39 R08: 0000000000000000 R09: 0000000000000000 [ 1071.094251][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.102843][ T31] R13: 00007fcb1aa16038 R14: 00007fcb1aa15fa0 R15: 00007ffde5291c88 [ 1071.112278][ T31] [ 1071.115490][ T31] [ 1071.115490][ T31] Showing all locks held in the system: [ 1071.168147][ T31] 1 lock held by khungtaskd/31: [ 1071.173021][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1071.206591][ T31] 2 locks held by getty/5576: [ 1071.211302][ T31] #0: ffff8880371fc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1071.236011][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1071.256558][ T31] 1 lock held by udevd/5226: [ 1071.261182][ T31] #0: ffff888026a32358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1071.296412][ T31] 1 lock held by udevd/5306: [ 1071.301043][ T31] #0: ffff888026a36358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1071.355896][ T31] 1 lock held by syz-executor/5550: [ 1071.361136][ T31] 5 locks held by syz-executor/7371: [ 1071.385789][ T31] #0: ffff88809eea0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1071.415783][ T31] #1: ffff88809eea00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1071.425501][ T31] #2: ffffffff8fd57ea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1071.456379][ T31] #3: ffff88807be0caf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 1071.475838][ T31] #4: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1071.496123][ T31] 2 locks held by syz.0.9849/8857: [ 1071.501855][ T31] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1071.526487][ T31] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 1071.546693][ T31] 2 locks held by syz.3.10021/9407: [ 1071.551909][ T31] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1071.573064][ T31] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1071.596483][ T31] 2 locks held by kworker/0:6/9563: [ 1071.601697][ T31] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1071.613373][ T31] #1: ffffc900059f7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1071.624315][ T31] 3 locks held by syz-executor/9595: [ 1071.629672][ T31] #0: ffff88802b830ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1071.639736][ T31] #1: ffff88802b8300c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1071.650100][ T31] #2: ffffffff8fd57ea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1071.660807][ T31] 3 locks held by syz-executor/10131: [ 1071.667433][ T31] #0: ffff88806c4ccec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1071.678405][ T31] #1: ffff88806c4cc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1071.688790][ T31] #2: ffffffff8fd57ea8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1071.699485][ T31] [ 1071.701821][ T31] ============================================= [ 1071.701821][ T31] [ 1071.713369][ T31] NMI backtrace for cpu 1 [ 1071.713385][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1071.713411][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1071.713423][ T31] Call Trace: [ 1071.713429][ T31] [ 1071.713436][ T31] dump_stack_lvl+0xe8/0x150 [ 1071.713465][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1071.713484][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1071.713507][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1071.713530][ T31] sys_info+0x135/0x170 [ 1071.713543][ T31] watchdog+0xfd9/0x1030 [ 1071.713566][ T31] ? watchdog+0x21a/0x1030 [ 1071.713594][ T31] kthread+0x388/0x470 [ 1071.713607][ T31] ? __pfx_watchdog+0x10/0x10 [ 1071.713626][ T31] ? __pfx_kthread+0x10/0x10 [ 1071.713642][ T31] ret_from_fork+0x51e/0xb90 [ 1071.713660][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1071.713680][ T31] ? __switch_to+0xc7d/0x1450 [ 1071.713701][ T31] ? __pfx_kthread+0x10/0x10 [ 1071.713717][ T31] ret_from_fork_asm+0x1a/0x30 [ 1071.713752][ T31] [ 1071.713760][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1071.825127][ C0] NMI backtrace for cpu 0 [ 1071.825143][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1071.825160][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1071.825170][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1071.825196][ C0] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1071.825209][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 1071.825223][ C0] RAX: 0000000000448bf7 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 1071.825234][ C0] RDX: 0000000000000001 RSI: ffffffff8def1a36 RDI: ffffffff8c27a480 [ 1071.825245][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 1071.825256][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901172b0 [ 1071.825267][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 1071.825277][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 1071.825290][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1071.825300][ C0] CR2: 000056413e436f40 CR3: 000000006965e000 CR4: 00000000003526f0 [ 1071.825314][ C0] Call Trace: [ 1071.825320][ C0] [ 1071.825326][ C0] default_idle+0x9/0x20 [ 1071.825341][ C0] default_idle_call+0x72/0xb0 [ 1071.825357][ C0] do_idle+0x1bd/0x500 [ 1071.825375][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1071.825398][ C0] ? __pfx_do_idle+0x10/0x10 [ 1071.825421][ C0] cpu_startup_entry+0x43/0x60 [ 1071.825440][ C0] rest_init+0x2de/0x300 [ 1071.825457][ C0] start_kernel+0x385/0x3d0 [ 1071.825477][ C0] x86_64_start_reservations+0x24/0x30 [ 1071.825498][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1071.825514][ C0] common_startup_64+0x13e/0x147 [ 1071.825536][ C0] [ 1071.826216][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1071.826235][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1071.826261][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1071.826272][ T31] Call Trace: [ 1071.826280][ T31] [ 1071.826288][ T31] vpanic+0x56c/0xa60 [ 1071.826314][ T31] ? __pfx___schedule+0x10/0x10 [ 1071.826337][ T31] ? __pfx_vpanic+0x10/0x10 [ 1071.826367][ T31] panic+0xc5/0xd0 [ 1071.826389][ T31] ? __pfx_panic+0x10/0x10 [ 1071.826412][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1071.826437][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1071.826461][ T31] watchdog+0x1023/0x1030 [ 1071.826490][ T31] ? watchdog+0x21a/0x1030 [ 1071.826520][ T31] kthread+0x388/0x470 [ 1071.826538][ T31] ? __pfx_watchdog+0x10/0x10 [ 1071.826559][ T31] ? __pfx_kthread+0x10/0x10 [ 1071.826577][ T31] ret_from_fork+0x51e/0xb90 [ 1071.826601][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1071.826622][ T31] ? __switch_to+0xc7d/0x1450 [ 1071.826644][ T31] ? __pfx_kthread+0x10/0x10 [ 1071.826662][ T31] ret_from_fork_asm+0x1a/0x30 [ 1071.826699][ T31] [ 1072.117480][ T31] Kernel Offset: disabled [ 1072.121782][ T31] Rebooting in 86400 seconds..