last executing test programs: 2.334263918s ago: executing program 2 (id=4811): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x180}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}, 0x1, 0x2, 0x0, 0x8000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003a00), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}]}, 0x40}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a40)=ANY=[@ANYBLOB="14c40000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{&(0x7f0000001180)=@ax25={{0x3, @bcast}, [@bcast, @default, @netrom, @null, @default, @remote, @rose, @rose]}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000002900)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000001200)=@tipc=@name, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000001280)=""/123, 0x7b}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}], 0x9, 0x4022, 0x0) 2.050861631s ago: executing program 2 (id=4813): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 2.046748398s ago: executing program 0 (id=4814): accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@null, @null, @null, @netrom, @null, @netrom, @bcast]}, &(0x7f00000000c0)=0x48, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012abd7000030000002b00000008000300", @ANYRES32=r3, @ANYBLOB="040046000a00340002020202020200000a0006"], 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) 1.155619378s ago: executing program 4 (id=4816): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/167, 0xa7}], 0x1}, 0x40012062) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{}, 0x0, 0x0}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000040)=0xb, 0x12) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r4}, 0x8) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="93d0f6ec188338cc11", @ANYRES16=r6, @ANYBLOB="010026bd01006e657464657673696d0000000f000264657644696d30000008008c0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000200)="8054bcf59e97743dcc7eab6fba03e268b0028d004956c623910771713dcab7f83ab38456f145f8d21fbba1f3884782508638022e7ce578f8480dc0cda3fc22589ef4beed293566510e865a9dcdb0b3899533feddd1102f049d16c0b130e104", 0x5f}, {&(0x7f0000000280)="e963027d6f11d4ee56a86bf51bbd9320ac48d02470517b2fdf1efc4eaac7258cb7e4bbc41d749b56c0bc5d6f494015fc0991125f8e56ddc74d10db33c7fe8f9f80f0ce2a82ac10e780364e2700cc9f1f943b0d643c8b6ecc05a9b85fdfebd2dfed3ff1170840d0a5f893bb4681191597c15197d7cb762ac541d377480646d4f0fe49aba1d574da44abdd835547bccfb077804d09ade4a35afae947c1c1ed0ccdc6ef49a668b3", 0xa6}, {&(0x7f00000003c0)="70daff3471ef3d2312addaba81a2b328e95d63adf17d355efd60a4f12a9fe74a018ae499b78c7c6b5693f4fef604f8c8843d9ce3ff6cbb44b7eca932d30e4dfbd7fc75a0417f956705e9b41f8b78a9fbada0637401d739c12ee62bb5fbc95a471892401f98553188081119772ff2fd2e049db53a7e7f4ac5c6d5c47dc62cbf4e4ef4dfa4aa1a99422a6e3b8aafe666e38f8e148c56c270e7a4a72b51ae072d45888c4151e3", 0xa5}, {&(0x7f0000000480)="44be835d33a848a95d29e1ac7f4971c5c58da8a796c74895be4ff905ceace6e0d5edfdc8289ac7bba9407eea91159ce755f469e32990f58786a47cc2ca762c5bcee633559e66262f3cfce1fea528424347773921301d706bd7b33759595903365e891b655de7d14d9e256d1e3b841283068bb16dbcf0496d70730199167170949f769ade38b91a0f2b846c523505971c2f6283396bbeb308d065da0404201652", 0xa0}, {&(0x7f0000000540)="cfacb934c8f2c465d520963b8b069d5df1ec092319b6b182cb250464390b85ac4e46033bcb85e34a395a4bd9877a4e09eb97eb93f0b74b2006c1b7827841ac4dbcc6d4ed8cf14a1637429fd8866b5fd58d98354104b03f429e218ac14eb9b5d62feec4c7df756990f5168912b6a3c22e943222fff01553459e3f9ff6ba96e9fefa22c5a767920cfac12b5b64cb9c990a72647e5b8418188abf008d1f2df9b482c0c1f0dd0662ba6c7b516af61d2af868e06686e75d7d64fdad9ec4bd7d50acb3c58ffc2219243692232c394742", 0xcd}], 0x5, 0x0, 0x0, 0x4040001}, 0x10040004) 1.153704286s ago: executing program 3 (id=4817): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0x5, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) (async) bind$can_raw(r3, &(0x7f0000000000), 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x6, 0x3, 0x1, 0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x6}]}}}]}, 0x58}}, 0x0) 1.152587568s ago: executing program 1 (id=4818): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x8084) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000600000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r5 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae00000066000000000000002f000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x400000}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001600010000000000fcffffff0a000000", @ANYRES32=0x0, @ANYBLOB="140007"], 0x2c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) 1.14095161s ago: executing program 2 (id=4819): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r2, 0x0, 0x0) (async, rerun: 32) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0xc004) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc) (async) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005800)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0) 1.124779621s ago: executing program 0 (id=4820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000002c0)={0x1ef, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000039001ca708000300", @ANYRES32=r2, @ANYBLOB="14005a8010000180040001000600020000280000"], 0x30}}, 0x0) 988.213138ms ago: executing program 4 (id=4821): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0xfff, 0x8, 0x1, 0x7ff}, &(0x7f0000000240)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000f8ffffff0000050025985c410000006e000000950000f100000095"], &(0x7f0000001600)='syzkaller\x00'}, 0x90) 984.020993ms ago: executing program 3 (id=4822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x90380, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x4, 0x38, 0x3}, {0x4, 0x1, 0x8, 0x1}, {0x2000, 0x7b, 0xc, 0x6}, {0xffff, 0x0, 0x5, 0x5}, {0xff, 0xd, 0x8, 0x80}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 928.060933ms ago: executing program 1 (id=4823): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000000)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYBLOB="e71e37d636a86e16e431639de9dd049ee0792eeecb0542900a7efa5c05d021efa3d4c969703eca027d44ecbaae8e66037886db8168ab9937bc8737cab64c22b43a56a351479ee6f247c9ae8d1923ba5b8ab1d40c81386f8b541b2a4d1224cf3b89dc0084cdd08c8a88c84d70a3f7e3143418556cad4ed7e6d0581547f7670ef40fd8099a67fb64e3377c2399b134249c810814021d2d9e57f18803c638afe7c0fad62f59da3396d7b35e9d76ea1b30"], 0xfd45}}, 0x0) write$nci(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="71050409020201f80b0d031b0316050401b4"], 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES8=r7, @ANYRES8=r6], 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x4000) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004450}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x26010050) 860.386805ms ago: executing program 0 (id=4824): socket(0x1, 0x1, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 858.424139ms ago: executing program 4 (id=4825): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd700000000000110000000cf0088008000100ffff1f00"], 0x20}, 0x1, 0x0, 0x0, 0x240280d0}, 0x8090) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000180)=0x4, 0x4) listen(r0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r5, 0x0, 0x0}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 746.790109ms ago: executing program 1 (id=4826): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x28, r2, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2a}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x88}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0xa, 0x12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x683, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@private1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, {@in6=@empty, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'pcrypt(rfc4309(ccm_base(cbc(aes-aesni),wp384)))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 744.365214ms ago: executing program 3 (id=4827): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) (async) 648.594857ms ago: executing program 0 (id=4828): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in=@loopback, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x6, 0x2b}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x4e24, @private=0xa010100}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000070000000000020000000000000000000000000000000000001083de1fba4358e342b8d000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffab910c9762b1915f00000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000000000000800100000000000080b40000000000"], 0x128}}, 0x0) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000ac050000000000000000000000000000e0000002000000000000000000000000ffbf0002000000020000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="20010000000000000000000000000002000000002b00000000000000000000000000000000000000000300000000000000b40000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000043500000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r2, &(0x7f0000000080)="240000001a007f0214f9f4070009040803004000000000050002000008000f40fe00000e", 0x24) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x30}, &(0x7f0000000180)=0xc) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x3c, r12, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0x84, &(0x7f0000000380)={r10, @in6={{0xa, 0x4e20, 0x206ea, @dev={0xfe, 0x80, '\x00', 0x33}}}}, &(0x7f0000000200)=0x98) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 648.039554ms ago: executing program 4 (id=4829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x2, 0x2, 0x301, 0x70bd2c, 0x25dfdbfd, {0x3, 0x0, 0x9}, [@generic="4f290ea050063a5e343b71cb1e2e2b4cb3a8426d0c9994cba33b33a844a20eeaa7e41cbf67a014645a0645e803d948b6bf6c4b39a654dd5bba617565a931c0b2f375bae3f2756e5f", @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@mcast2}, @nested={0xc, 0x3d, 0x0, 0x1, [@generic, @nested={0x4, 0xa1}, @typed={0x4, 0x25}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004084}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) getsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000440)=""/116, &(0x7f00000004c0)=0x74) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000105000300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 602.859957ms ago: executing program 2 (id=4830): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x6020480) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x18) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x7, 0xfcc, 0x9}, 0x10, 0x11577, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r1, r5, r1, r2, r1, r2, r2, r2], 0x0, 0x10, 0x1ff}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x16, &(0x7f0000000380)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf5b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000340)='syzkaller\x00', 0x3}, 0x94) 573.919476ms ago: executing program 0 (id=4831): r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37bc21cfdc8180c7d09c35d130d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6e19946b18a45333df51d78f735999aadfcda64488160c4ae6ba9dcef0c144e3de7be7fdc1ead6a425ff6128fab1517630c1d9507e0685488a57f85298b4e4382842c0730"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r13, r13, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r12, r13, 0x2f, 0x8, 0x4}, 0x20) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r14 = socket$tipc(0x1e, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c1}, 0x1) bind$tipc(r14, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r14, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) 476.384935ms ago: executing program 1 (id=4832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x3, 0x3}, {}, {}, {0x60}, {0x6}]}) 475.851912ms ago: executing program 3 (id=4833): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r6, &(0x7f0000000280)={0x1d, r4, 0x2, {0x0, 0xf0}, 0x2}, 0x18) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x7f, 0x695, 0x7}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x6c, r9, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xffffffc0, 0x26}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2f64516057a7b85b5ccdcb0489"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "fcf6af8250"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@deltaction={0x88, 0x31, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd8cd113}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2002, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x106}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES8=r7, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00003afedc36e75bbc06849c000000050001d0bbffffffffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x4050}, 0x840) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b000100657874686472000024000280080003400000240028000140000000130500020000000000080004400000006509000100737969c4000004000900020073797a3200040000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) 473.20864ms ago: executing program 4 (id=4834): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000f9dbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="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"], 0x1bc}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r4, 0x13, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4048012) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001200)={0x14, 0x69, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r8) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01020000010000ecffff0300260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x50a, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040803}, 0x800) (async) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010101}}}, 0x108) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ppoll(&(0x7f0000000100)=[{r7, 0x2400}, {r7, 0x2040}], 0x2, &(0x7f0000000380), &(0x7f00000003c0)={[0x69a]}, 0x8) 429.206162ms ago: executing program 0 (id=4835): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) close(0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x6a, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) (async, rerun: 64) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104006e0920772a5c56902bdd01", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c00028006000f0000000000"], 0x50}}, 0x0) (async) r6 = accept(r4, &(0x7f0000000140)=@ieee802154={0x24, @long}, &(0x7f00000001c0)=0x80) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5}}}, 0x24}}, 0x0) (async, rerun: 64) recvmmsg(r8, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)}, 0x3f}, {{&(0x7f0000000300)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000000440)=""/13, 0xd}, {&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000500)=""/89, 0x59}], 0x4}, 0x9e4}, {{&(0x7f00000005c0)=@xdp, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/175, 0xaf}, {&(0x7f0000000700)=""/130, 0x82}], 0x2, &(0x7f0000000800)=""/229, 0xe5}, 0x4}], 0x4, 0x60, 0x0) (async) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000080)=0x71) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r9) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd39}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4800) (async) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) 398.783718ms ago: executing program 2 (id=4836): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40047438, 0x58e48e4c6b288518) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x203, 0xfffffffc, 0x9}}], 0x20, 0x20000000}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x800, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40040a8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffdec, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0b060300001000000025300000001a1852ba687fa56e37b56301abfa27ff0f000007000000000000008e53be7a10f4c76f64c44b9b70cbfe898d7b672607ff993923899249f374fa1e3d0a43c50000000000007d9c4c91834cf5dea473998044c6a78681090cc82463243f905058f7af47c41df955cfb7968a58499a8fbf5351781673f52f14b4766ccdafabeb8fae4cbd054904ea27428b40dee5d5df1c62bbfd030756bb1ab267932557f51c85"], 0x14}}, 0x44000) 248.166932ms ago: executing program 3 (id=4837): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x4, 0x0, @void}, 0x10) (async) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) (async) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) (async) sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000dc0)={0x1, 0xc02, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x0, 0x1}, 0x1d, 0x1, 0x0, 0x0, "62af510b0b7f04ce9bf921f6c5f5c085ede7c77fa0601b1c2f77ffaf5d4095b4c27212333d3ddd460a3fe836ce0f88ab294b8b06d2b55fb8d14a92c421a907a2"}}, 0x80}}, 0x0) (async) sendmsg$can_bcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000008db879e2b2fa56da00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x38}}, 0x20000000) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x25, r7}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}}, 0x0) 229.663465ms ago: executing program 1 (id=4838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x2400400c) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r1, 0x77a5768982e879e3, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) 163.276596ms ago: executing program 4 (id=4839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x34, r2, 0x60b, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x28, r6, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000000)=ANY=[], 0x0) 48.25495ms ago: executing program 3 (id=4840): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061", @ANYRESDEC], 0x0, 0x5a, 0x0, 0x1, 0x0, 0x10000, @value=r0}, 0x28) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42382b7f820d70da9b3621f02bf77789211581f4894e5880d039474d534e618", 0x56}], 0x1}, 0x24000008) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e1d, 0x3, @remote, 0x2}, 0x1c) (rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500001c0000000002119078ac1e0001e000000100004e20000590789b919eb95ca03d7098e43ac73a05804b03c0dc9153148d54315bf3c0ce2aea7b0d03fcbe64cc7bdddadca3eaae4f894d2f05b67ba27dc6867ba62ca08895a86e15cc279340e6b163e5349ebcdc568f437ec93c97df8a9e79a349b9d732c5298e5966fb73763d7e"], 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 31.912663ms ago: executing program 2 (id=4841): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf250800000008000c000200000008000400030000ff03000000ac14144050e1a564e5fec0538ff2469d99a5cdeefc781337f5b197a21b49b19bbc"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) (async) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf250800000008000c000200000008000400030000ff03000000ac14144050e1a564e5fec0538ff2469d99a5cdeefc781337f5b197a21b49b19bbc"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001", @ANYRES32=r0], 0x24}}, 0xc0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000"], 0xa4}}, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000200)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}}], 0x2, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="ad56b685820fae9d6dcd3292ea54c7beef915d564c90c200e2ba1812a1fea84854", 0x21) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="ad56b685820fae9d6dcd3292ea54c7beef915d564c90c200e2ba1812a1fea84854", 0x21) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$caif_stream(0x25, 0x1, 0x2) (async) r8 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000001b00)={{r8}, "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"}) (async) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000001b00)={{r8}, "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"}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000300)=0x2, 0x4) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x1e}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x11) 0s ago: executing program 1 (id=4842): socket$kcm(0x29, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): s mode [ 321.009920][T16517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.044762][T16517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.083231][ T3566] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.099187][ T3566] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.195372][T11288] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.208489][T11288] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.220633][T16817] netlink: 'syz.1.3048': attribute type 1 has an invalid length. [ 321.234417][T16817] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.3048'. [ 321.360066][T11288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.408454][T11288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.412726][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3050'. [ 321.453300][T16827] netlink: zone id is out of range [ 321.458502][T16827] netlink: zone id is out of range [ 321.464745][T16827] netlink: zone id is out of range [ 321.477775][T16827] netlink: zone id is out of range [ 321.479331][T15470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.491970][T15470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.513657][T16827] netlink: del zone limit has 4 unknown bytes [ 321.631668][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3054'. [ 322.022517][ T5870] Bluetooth: hci0: command tx timeout [ 322.300573][T16870] syzkaller1: entered promiscuous mode [ 322.345696][T16870] syzkaller1: entered allmulticast mode [ 322.728717][ T5875] syz_tun (unregistering): left allmulticast mode [ 322.748861][ T5881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.758850][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.769023][ T5881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.779033][ T5881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.788202][ T5881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.890240][T16881] wg1 speed is unknown, defaulting to 1000 [ 322.898923][T16889] sctp: [Deprecated]: syz.2.3068 (pid 16889) Use of int in max_burst socket option deprecated. [ 322.898923][T16889] Use struct sctp_assoc_value instead [ 322.907609][T16881] lo speed is unknown, defaulting to 1000 [ 323.089162][T16894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.109285][T16894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.677572][T16881] chnl_net:caif_netlink_parms(): no params data found [ 323.877352][T16881] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.895119][T16881] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.904080][T16881] bridge_slave_0: entered allmulticast mode [ 323.922058][T16881] bridge_slave_0: entered promiscuous mode [ 323.944614][T16881] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.960988][T16881] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.984412][T16881] bridge_slave_1: entered allmulticast mode [ 324.004525][T16881] bridge_slave_1: entered promiscuous mode [ 324.121138][T16881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.135093][T16881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.214725][T16881] team0: Port device team_slave_0 added [ 324.233098][T16881] team0: Port device team_slave_1 added [ 324.302327][T16949] veth0_to_bridge: entered promiscuous mode [ 324.337744][T16881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.373617][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.442300][T16881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.495093][T16881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.504510][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.536214][T16881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.550106][T16951] netlink: 'syz.3.3085': attribute type 1 has an invalid length. [ 324.561194][T16953] netlink: 'syz.2.3084': attribute type 1 has an invalid length. [ 324.735266][T16961] bond20: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 324.758105][T16961] bond20: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 324.769824][T16961] bond20: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 324.807915][T16953] bond20: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 324.820921][T16953] bond20: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 324.832371][ T5881] Bluetooth: hci4: command tx timeout [ 324.873695][T16881] hsr_slave_0: entered promiscuous mode [ 324.880252][T16881] hsr_slave_1: entered promiscuous mode [ 324.888696][T16881] debugfs: 'hsr0' already exists in 'hsr' [ 324.895006][T16881] Cannot create hsr debugfs directory [ 325.580253][T17010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.660272][T16881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.691169][T16881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.728664][T16881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 325.754262][T17010] __nla_validate_parse: 1 callbacks suppressed [ 325.754280][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3100'. [ 325.977328][T17027] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3104'. [ 326.003421][T17022] netlink: 'syz.2.3103': attribute type 16 has an invalid length. [ 326.007429][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3105'. [ 326.015709][T17022] netlink: 'syz.2.3103': attribute type 17 has an invalid length. [ 326.031304][T16881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.047414][T16881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.058642][T16881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 326.079276][T17027] (unnamed net_device) (uninitialized): (slave erspan0): Device is not bonding slave [ 326.089472][T17027] (unnamed net_device) (uninitialized): option active_slave: invalid value (erspan0) [ 326.111634][T17022] lo: left promiscuous mode [ 326.150765][T17022] 0ªî{X¹¦: left allmulticast mode [ 326.184183][T17022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.274133][T16881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.307254][T16881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.340542][T17046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3109'. [ 326.353155][T16881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 326.399998][T17052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3110'. [ 326.425799][T17052] vlan2: entered allmulticast mode [ 326.430965][T17052] hsr_slave_1: entered allmulticast mode [ 326.469737][T17051] syzkaller0: entered promiscuous mode [ 326.482443][T17055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3112'. [ 326.491552][T17051] syzkaller0: entered allmulticast mode [ 326.529175][T16881] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.549440][T16881] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.560545][T16881] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 326.763726][T17067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3115'. [ 326.845404][T17069] dvmrp1: entered allmulticast mode [ 326.902668][ T5881] Bluetooth: hci4: command tx timeout [ 326.940786][T17073] tipc: Started in network mode [ 326.955219][T17073] tipc: Node identity ac1414aa, cluster identity 4711 [ 326.966603][T17073] tipc: Enabling of bearer rejected, failed to enable media [ 326.981874][T17073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'. [ 326.996497][T17076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3118'. [ 327.005766][T17073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'. [ 327.021435][T16881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 327.063554][T17073] netlink: 'syz.0.3117': attribute type 1 has an invalid length. [ 327.069135][T16881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 327.141056][T17073] 8021q: VLANs not supported on ip6_vti0 [ 327.157023][T16881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 327.180020][T16881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 327.475895][T16881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.556579][T16881] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.587530][T11288] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.595694][T11288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.641833][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.649040][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.914211][T17122] netlink: 'syz.3.3133': attribute type 13 has an invalid length. [ 327.924305][T17122] netlink: 'syz.3.3133': attribute type 58 has an invalid length. [ 327.978117][T17122] netlink: 'syz.3.3133': attribute type 11 has an invalid length. [ 328.429373][T16881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.658808][T17156] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20004 [ 328.667159][T17157] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20004 [ 328.763800][T17151] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 328.770072][T17151] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 328.841943][T17166] tipc: Enabled bearer , priority 10 [ 328.982814][ T5881] Bluetooth: hci4: command tx timeout [ 329.149269][T17180] tunl0: left promiscuous mode [ 329.167960][T17180] erspan0: left promiscuous mode [ 329.316513][T17180] bridge_slave_0: left promiscuous mode [ 329.358020][T17180] vlan2: left promiscuous mode [ 329.369918][T17180] bond2: left promiscuous mode [ 329.381186][T17180] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 329.469463][T17194] netlink: 'syz.2.3152': attribute type 8 has an invalid length. [ 329.585287][T16881] veth0_vlan: entered promiscuous mode [ 329.633983][T16881] veth1_vlan: entered promiscuous mode [ 329.701568][T16881] veth0_macvtap: entered promiscuous mode [ 329.758147][T16881] veth1_macvtap: entered promiscuous mode [ 329.838629][T16881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.861707][T16881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.915404][ T9503] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.929187][ T9503] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.940455][ T9503] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.953872][ T6115] tipc: Node number set to 2886997162 [ 329.981643][T11293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.010577][T17215] wg1 speed is unknown, defaulting to 1000 [ 330.037828][T17219] 8021q: adding VLAN 0 to HW filter on device bond9 [ 330.058618][T17224] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 3, id = 0 [ 330.109910][T17215] lo speed is unknown, defaulting to 1000 [ 330.162083][T17222] ip6tnl0: entered promiscuous mode [ 330.197227][T17222] ip6tnl0: entered allmulticast mode [ 330.306517][T17226] veth0: renamed from ipvlan1 [ 330.439830][T11293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.493830][T11293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.658012][T17242] nbd: nbd2 already in use [ 330.906578][T17254] __nla_validate_parse: 16 callbacks suppressed [ 330.906598][T17254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3169'. [ 330.964148][T15468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.982766][T15468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.065631][ T5881] Bluetooth: hci4: command tx timeout [ 331.223984][T12728] block nbd0: Possible stuck request ffff8880254c5080: control (read@0,1024B). Runtime 210 seconds [ 331.234996][T12728] block nbd0: Possible stuck request ffff8880254c5240: control (read@1024,1024B). Runtime 210 seconds [ 331.257737][T12728] block nbd0: Possible stuck request ffff8880254c5400: control (read@2048,1024B). Runtime 210 seconds [ 331.269125][T12728] block nbd0: Possible stuck request ffff8880254c55c0: control (read@3072,1024B). Runtime 210 seconds [ 331.387661][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.412281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.429857][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.989698][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 332.219271][T17299] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3180'. [ 332.262752][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.332795][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.345105][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.359532][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.369028][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.376955][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.402303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.434651][T17307] wg1 speed is unknown, defaulting to 1000 [ 332.442380][T17307] lo speed is unknown, defaulting to 1000 [ 332.914974][T17327] netlink: 166096 bytes leftover after parsing attributes in process `syz.3.3188'. [ 332.929406][T17327] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 333.011616][T17332] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 333.239237][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3191'. [ 333.402257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.420603][T17350] netlink: 'syz.4.3195': attribute type 83 has an invalid length. [ 333.606962][T17360] 8021q: adding VLAN 0 to HW filter on device bond10 [ 333.616027][T17360] team0: Failed to send port change of device bond10 via netlink (err -105) [ 333.625568][T17360] team0: Failed to send options change via netlink (err -105) [ 333.634258][T17360] team0: Port device bond10 added [ 333.775089][T17362] netlink: 'syz.0.3199': attribute type 21 has an invalid length. [ 333.776534][T17307] chnl_net:caif_netlink_parms(): no params data found [ 333.857025][T17362] netlink: 'syz.0.3199': attribute type 22 has an invalid length. [ 333.908460][T17362] netlink: 'syz.0.3199': attribute type 23 has an invalid length. [ 333.950283][T17362] netlink: 'syz.0.3199': attribute type 25 has an invalid length. [ 334.007595][T17362] netlink: 'syz.0.3199': attribute type 26 has an invalid length. [ 334.049915][T17362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3199'. [ 334.096805][T17370] tipc: Enabling of bearer rejected, failed to enable media [ 334.116655][T17307] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.126835][T17307] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.134861][T17307] bridge_slave_0: entered allmulticast mode [ 334.145220][T17307] bridge_slave_0: entered promiscuous mode [ 334.158394][T17307] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.166203][T17307] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.173974][T17307] bridge_slave_1: entered allmulticast mode [ 334.181439][T17307] bridge_slave_1: entered promiscuous mode [ 334.192030][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'. [ 334.209363][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3201'. [ 334.266902][T17307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.301660][T17307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.369397][T17388] vlan2: entered promiscuous mode [ 334.374829][T17388] bridge0: entered promiscuous mode [ 334.386926][T17307] team0: Port device team_slave_0 added [ 334.410885][T17307] team0: Port device team_slave_1 added [ 334.417050][T17391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.424349][T17391] IPv6: NLM_F_CREATE should be set when creating new route [ 334.431606][T17391] IPv6: NLM_F_CREATE should be set when creating new route [ 334.442912][T17391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.450354][ T5870] Bluetooth: hci5: command tx timeout [ 334.472488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.526119][T17307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.533740][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.560095][T17307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.575515][T17307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.602226][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.667378][T17307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.764945][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3205'. [ 334.792923][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'. [ 334.939995][T17307] hsr_slave_0: entered promiscuous mode [ 334.984644][T17307] hsr_slave_1: entered promiscuous mode [ 334.990903][T17307] debugfs: 'hsr0' already exists in 'hsr' [ 335.008423][T17307] Cannot create hsr debugfs directory [ 335.053711][T17416] netlink: 'syz.0.3211': attribute type 1 has an invalid length. [ 335.098486][T17416] netlink: 'syz.0.3211': attribute type 2 has an invalid length. [ 335.194493][T17427] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 335.382468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.417304][T17438] tap0: tun_chr_ioctl cmd 1074025677 [ 335.423719][T17438] tap0: linktype set to 65534 [ 335.512448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.769051][T17307] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.908205][T17463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.010163][T17307] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.206546][T17307] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.253586][T17478] tipc: Enabled bearer , priority 0 [ 336.261090][T17478] syzkaller0: entered promiscuous mode [ 336.272379][T17478] syzkaller0: entered allmulticast mode [ 336.364336][T17307] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.435387][T17477] tipc: Resetting bearer [ 336.508936][ T5870] Bluetooth: hci5: command tx timeout [ 336.516416][T17477] tipc: Disabling bearer [ 336.522373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.669710][T17307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 336.691821][T17307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 336.739344][T17504] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 336.751329][T17307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 336.820826][T17307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 336.922692][T17520] lo: entered promiscuous mode [ 336.950501][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.969998][ T9503] : left allmulticast mode [ 336.978454][ T9503] : left promiscuous mode [ 336.984297][ T9503] bridge0: port 1() entered disabled state [ 337.270878][T17536] __nla_validate_parse: 4 callbacks suppressed [ 337.270896][T17536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3244'. [ 337.614935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.754557][T17543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.139961][ T9503] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 338.258861][ T9503] bond5 (unregistering): (slave gretap0): Releasing active interface [ 338.336956][ T9503] bond8 (unregistering): (slave geneve2): Releasing active interface [ 338.376635][ T9503] team0: Port device geneve0 removed [ 338.521294][ T9503] bond6 (unregistering): (slave bridge3): Releasing active interface [ 338.582545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.585423][ T5870] Bluetooth: hci5: command tx timeout [ 338.743460][ T9503] bond1 (unregistering): Released all slaves [ 338.841295][ T9503] bond2 (unregistering): Released all slaves [ 338.942880][ T9503] bond3 (unregistering): Released all slaves [ 338.959704][ T9503] bond4 (unregistering): Released all slaves [ 338.974646][ T9503] bond5 (unregistering): Released all slaves [ 338.990895][ T9503] bond6 (unregistering): Released all slaves [ 339.012740][ T9503] bond7 (unregistering): Released all slaves [ 339.111373][ T9503] bond8 (unregistering): Released all slaves [ 339.216468][ T9503] bond9 (unregistering): Released all slaves [ 339.316056][ T9503] bond10 (unregistering): Released all slaves [ 339.333244][ T9503] bond11 (unregistering): Released all slaves [ 339.348426][ T9503] smc: removing net device bond0 with user defined pnetid SYZ2 [ 339.357067][ T9503] bond0 (unregistering): Released all slaves [ 339.374003][ T9503] bond12 (unregistering): Released all slaves [ 339.482002][ T9503] bond13 (unregistering): (slave bond14): Releasing backup interface [ 339.490226][ T9503] bond14 (unregistering): left promiscuous mode [ 339.497798][ T9503] bond13 (unregistering): Released all slaves [ 339.599075][ T9503] bond14 (unregistering): Released all slaves [ 339.663119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.703487][ T9503] bond15 (unregistering): Released all slaves [ 339.801922][ T9503] bond16 (unregistering): Released all slaves [ 339.827307][ T9503] bond17 (unregistering): (slave bond18): Releasing backup interface [ 339.837416][ T9503] bond17 (unregistering): Released all slaves [ 339.942080][ T9503] bond18 (unregistering): Released all slaves [ 340.047535][ T9503] bond19 (unregistering): (slave veth13): Releasing active interface [ 340.058930][ T9503] bond19 (unregistering): (slave veth0_to_bond): Releasing active interface [ 340.071676][ T9503] bond19 (unregistering): (slave veth15): Releasing active interface [ 340.087127][ T9503] bond19 (unregistering): Released all slaves [ 340.101520][ T9503] bond20 (unregistering): Released all slaves [ 340.149493][T17506] lo: left promiscuous mode [ 340.306762][T17307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.398701][T17307] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.427169][T11288] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.434356][T11288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.497986][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.505185][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.662703][ T5870] Bluetooth: hci5: command tx timeout [ 340.722835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.100848][T17307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.154351][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'. [ 341.220598][T17307] veth0_vlan: entered promiscuous mode [ 341.261250][T17307] veth1_vlan: entered promiscuous mode [ 341.287186][T17585] veth0: entered promiscuous mode [ 341.313446][T17584] veth0: left promiscuous mode [ 341.367217][T17307] veth0_macvtap: entered promiscuous mode [ 341.391165][T17307] veth1_macvtap: entered promiscuous mode [ 341.442503][T17307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.467879][T17307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.501102][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.519433][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.568006][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.588292][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.709820][T17601] pim6reg: entered allmulticast mode [ 341.715597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.897988][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.937402][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.009192][ T9503] : left promiscuous mode [ 342.175857][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.182048][ T9503] tipc: Left network mode [ 342.212304][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.463504][T17625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3174'. [ 342.473445][T17626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3268'. [ 342.654875][T17629] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 342.685587][T17629] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 342.862348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.357268][T17648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3275'. [ 343.382552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.506356][ T5881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.526004][ T5881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.558768][ T5881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.579881][ T5881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.593349][ T5881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.690267][T17655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3277'. [ 343.705873][T17657] nbd: must specify at least one socket [ 343.718576][T17649] wg1 speed is unknown, defaulting to 1000 [ 343.762238][ T9503] hsr_slave_0: left promiscuous mode [ 343.777421][ T9503] hsr_slave_1: left promiscuous mode [ 343.786769][ T9503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.820186][ T9503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.829230][ T9503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.836756][ T9503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.862978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.874775][ T9503] veth1_macvtap: left promiscuous mode [ 343.880648][ T9503] veth1_vlan: left promiscuous mode [ 343.892926][T17663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 344.087982][ T9503] team0 (unregistering): Port device batadv1 removed [ 344.527734][ T9503] team0 (unregistering): Port device team_slave_1 removed [ 344.571400][ T9503] team0 (unregistering): Port device team_slave_0 removed [ 344.822687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.926204][ T9503] lo (unregistering): left allmulticast mode [ 344.937451][T17649] lo speed is unknown, defaulting to 1000 [ 345.124811][T17668] netlink: 'syz.2.3281': attribute type 10 has an invalid length. [ 345.151487][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3283'. [ 345.178845][T17668] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 345.222898][T17670] netlink: 'syz.4.3282': attribute type 1 has an invalid length. [ 345.311592][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3285'. [ 345.382332][T17683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3282'. [ 345.442497][T17674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.451047][T17674] bond1: (slave bond2): making interface the new active one [ 345.460256][T17674] bond1: (slave bond2): Enslaving as an active interface with an up link [ 345.494536][T17678] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 345.528115][T17681] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 345.531323][T17683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.542784][ T43] IPVS: starting estimator thread 0... [ 345.642356][T17689] IPVS: using max 27 ests per chain, 64800 per kthread [ 345.703419][ T5881] Bluetooth: hci3: command tx timeout [ 345.734180][T17696] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3287'. [ 345.943399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.957270][T12728] block nbd1: Possible stuck request ffff888025510000: control (read@0,1024B). Runtime 120 seconds [ 345.969196][T12728] block nbd1: Possible stuck request ffff8880255101c0: control (read@1024,1024B). Runtime 120 seconds [ 345.980728][T12728] block nbd1: Possible stuck request ffff888025510380: control (read@2048,1024B). Runtime 120 seconds [ 345.991873][T12728] block nbd1: Possible stuck request ffff888025510540: control (read@3072,1024B). Runtime 120 seconds [ 346.922586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.784653][ T5881] Bluetooth: hci3: command tx timeout [ 347.829200][T17717] tipc: Started in network mode [ 347.838447][T17717] tipc: Node identity ae04a2340d1c, cluster identity 4711 [ 347.864141][T17717] tipc: Enabled bearer , priority 0 [ 347.876419][T17722] syzkaller0: entered promiscuous mode [ 347.882050][T17722] syzkaller0: entered allmulticast mode [ 347.927358][ T9503] IPVS: stop unused estimator thread 0... [ 348.011615][T17649] chnl_net:caif_netlink_parms(): no params data found [ 348.042239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.054030][T17736] tipc: Resetting bearer [ 348.079555][T17736] tipc: Disabling bearer [ 348.089743][T17753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3298'. [ 348.120162][T17753] team1: entered promiscuous mode [ 348.125540][T17753] team1: entered allmulticast mode [ 348.207017][T17764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3300'. [ 348.217650][T17757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.224789][T17758] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 348.300134][ T9503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.326815][T17755] netlink: 'syz.0.3297': attribute type 1 has an invalid length. [ 348.536833][T17786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3304'. [ 348.550655][T17787] netlink: 'syz.4.3304': attribute type 10 has an invalid length. [ 348.556067][T17785] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 348.568150][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'. [ 348.569047][ T9503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.804556][ T9503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.836784][T17649] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.845126][T17649] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.855292][T17649] bridge_slave_0: entered allmulticast mode [ 348.865872][T17649] bridge_slave_0: entered promiscuous mode [ 348.890050][T17649] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.915754][T17649] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.933069][T17649] bridge_slave_1: entered allmulticast mode [ 348.942786][T17808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3308'. [ 348.958458][T17649] bridge_slave_1: entered promiscuous mode [ 349.092322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.109035][ T9503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.208312][T17828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3316'. [ 349.253410][T17649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.286206][T17649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.433516][T17649] team0: Port device team_slave_0 added [ 349.457486][T17649] team0: Port device team_slave_1 added [ 349.612050][T17649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.622731][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.651092][T17649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.695968][T17845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3322'. [ 349.718814][T17649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.733876][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.778686][T17649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.800965][ T9503] dummy0: left allmulticast mode [ 349.818781][ T9503] dummy0: left promiscuous mode [ 349.826769][ T9503] bridge0: port 1(dummy0) entered disabled state [ 349.867203][ T5881] Bluetooth: hci3: command tx timeout [ 350.014041][T17860] openvswitch: netlink: IP tunnel TTL not specified. [ 350.272377][ T5881] Bluetooth: hci0: command 0x0401 tx timeout [ 350.508224][ T9503] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 350.517424][ T9503] bridge0 (unregistering): left promiscuous mode [ 351.010418][ T9503] bond0 (unregistering): left promiscuous mode [ 351.017623][ T9503] bond0 (unregistering): Released all slaves [ 351.120062][ T9503] bond1 (unregistering): Released all slaves [ 351.223033][ T9503] bond2 (unregistering): Released all slaves [ 351.238806][ T9503] bond3 (unregistering): Released all slaves [ 351.252365][ T9503] bond4 (unregistering): Released all slaves [ 351.353278][ T9503] bond5 (unregistering): Released all slaves [ 351.367981][ T9503] bond6 (unregistering): Released all slaves [ 351.469070][ T9503] bond7 (unregistering): Released all slaves [ 351.571026][ T9503] bond8 (unregistering): Released all slaves [ 351.669589][ T9503] bond9 (unregistering): Released all slaves [ 351.768299][ T9503] team0: Port device bond10 removed [ 351.775422][ T9503] bond10 (unregistering): Released all slaves [ 351.942671][ T5881] Bluetooth: hci3: command tx timeout [ 352.012290][ T9503] tipc: Disabling bearer [ 352.032369][ T9503] tipc: Left network mode [ 352.054878][T17649] hsr_slave_0: entered promiscuous mode [ 352.064444][T17881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3335'. [ 352.095028][T17649] hsr_slave_1: entered promiscuous mode [ 352.101388][T17649] debugfs: 'hsr0' already exists in 'hsr' [ 352.139810][T17649] Cannot create hsr debugfs directory [ 352.161438][T17883] tipc: Enabled bearer , priority 0 [ 352.440553][T17898] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3343'. [ 352.441195][T17882] tipc: Disabling bearer [ 352.784053][T17902] tipc: Enabling of bearer rejected, failed to enable media [ 352.922914][ T9503] veth1: left promiscuous mode [ 352.931546][T17902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3344'. [ 352.957468][ T9503] hsr_slave_0: left promiscuous mode [ 352.963711][ T9503] hsr_slave_1: left promiscuous mode [ 353.004264][ T9503] vlan0: left allmulticast mode [ 353.009317][ T9503] vlan0: left promiscuous mode [ 353.015195][ T9503] veth0_macvtap: left promiscuous mode [ 353.021104][ T9503] veth1_vlan: left promiscuous mode [ 353.026748][ T9503] veth0_vlan: left promiscuous mode [ 353.496932][ T9503] pimreg3 (unregistering): left allmulticast mode [ 353.784315][ T9503] vlan1 (unregistering): left allmulticast mode [ 353.790621][ T9503] veth0_vlan (unregistering): left allmulticast mode [ 353.819329][T17934] netlink: 'syz.4.3352': attribute type 10 has an invalid length. [ 354.545623][T17934] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.574993][T17934] bridge_slave_1: left allmulticast mode [ 354.589048][T17934] bridge_slave_1: left promiscuous mode [ 354.604878][T17934] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.625244][T17934] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 355.106714][ T9503] IPVS: stop unused estimator thread 0... [ 355.491931][T17979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3365'. [ 355.506210][T17976] netlink: 'syz.4.3362': attribute type 21 has an invalid length. [ 355.571637][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3362'. [ 355.726971][T17649] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.763706][T17649] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.833679][T17649] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.873641][T17649] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 355.914085][T17989] netlink: 'syz.2.3367': attribute type 5 has an invalid length. [ 355.955804][T17996] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3369'. [ 355.985693][T17998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3369'. [ 356.011258][T18007] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 356.108601][T18013] netlink: 'syz.4.3373': attribute type 1 has an invalid length. [ 356.177270][T18019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3374'. [ 356.383728][T17649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.485461][T17649] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.510028][T18026] syzkaller1: entered promiscuous mode [ 356.527519][T18026] syzkaller1: entered allmulticast mode [ 356.575774][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.582990][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.625451][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.632655][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.690251][T18043] netlink: 'syz.2.3381': attribute type 27 has an invalid length. [ 356.954566][T18056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3384'. [ 356.967852][T18056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3384'. [ 357.098928][T18062] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 357.212008][T17649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.303056][T18072] tipc: Enabling of bearer rejected, failed to enable media [ 357.338713][T17649] veth0_vlan: entered promiscuous mode [ 357.358902][T18072] syzkaller0: entered promiscuous mode [ 357.364855][T18072] syzkaller0: entered allmulticast mode [ 357.410119][T17649] veth1_vlan: entered promiscuous mode [ 357.621754][T17649] veth0_macvtap: entered promiscuous mode [ 357.668720][T17649] veth1_macvtap: entered promiscuous mode [ 357.727668][T17649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.770408][T17649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.841454][T15468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.861092][T15468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.870484][T15468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.950602][T15468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.983749][T18099] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 358.140791][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.161327][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.327795][T15468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.362262][T15468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.431057][T18125] ip6erspan0: entered promiscuous mode [ 358.454543][T18125] ip6erspan0: entered allmulticast mode [ 358.574560][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3269'. [ 359.413224][T18159] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3413'. [ 359.463055][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.479193][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.491451][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.502613][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.515269][T18159] pim6reg1: entered promiscuous mode [ 359.525396][T18159] pim6reg1: entered allmulticast mode [ 359.535293][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.666366][T18161] wg1 speed is unknown, defaulting to 1000 [ 359.672348][T18163] nbd3: detected capacity change from 0 to 63 [ 359.673230][T18172] block nbd0: NBD_DISCONNECT [ 359.686085][T18161] lo speed is unknown, defaulting to 1000 [ 359.699696][T18172] block nbd0: Send disconnect failed -32 [ 359.734788][T18172] block nbd0: shutting down sockets [ 359.783926][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.793326][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 359.801134][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.810225][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 359.818073][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.827181][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 359.835002][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.844332][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 359.852679][ T5926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.873048][ T5870] block nbd3: Receive control failed (result -104) [ 359.891291][ T5926] Buffer I/O error on dev nbd0, logical block 0, async page read [ 359.902935][ T5926] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.912543][ T5926] Buffer I/O error on dev nbd0, logical block 1, async page read [ 359.921738][ T5926] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.931204][ T5926] Buffer I/O error on dev nbd0, logical block 2, async page read [ 359.941943][ T5926] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.954139][ T5926] Buffer I/O error on dev nbd0, logical block 3, async page read [ 359.963305][ T5926] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.973372][ T5926] Buffer I/O error on dev nbd0, logical block 0, async page read [ 359.981320][ T5926] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.991290][ T5926] Buffer I/O error on dev nbd0, logical block 1, async page read [ 360.035274][ T5926] ldm_validate_partition_table(): Disk read failed. [ 360.076663][ T5926] Dev nbd0: unable to read RDB block 0 [ 360.095878][ T5926] nbd0: unable to read partition table [ 360.165315][T18191] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3423'. [ 360.205168][ T5238] udevd[5238]: worker [5926] terminated by signal 9 (Killed) [ 360.230686][ T6115] IPVS: starting estimator thread 0... [ 360.242601][ T5238] udevd[5238]: worker [5926] failed while handling '/devices/virtual/block/nbd0' [ 360.356011][T18195] IPVS: using max 25 ests per chain, 60000 per kthread [ 360.549220][T18212] __nla_validate_parse: 3 callbacks suppressed [ 360.549238][T18212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3430'. [ 360.738889][T18227] tls_set_device_offload_rx: netdev not found [ 360.881890][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3435'. [ 360.922045][T18231] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3435'. [ 361.007951][T18161] chnl_net:caif_netlink_parms(): no params data found [ 361.192078][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3439'. [ 361.254401][T18161] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.261572][T18161] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.290590][T18161] bridge_slave_0: entered allmulticast mode [ 361.306687][T18161] bridge_slave_0: entered promiscuous mode [ 361.314574][T18251] netlink: 'syz.0.3441': attribute type 4 has an invalid length. [ 361.324907][T18264] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3444'. [ 361.333335][T18161] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.346372][T18161] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.371254][T18161] bridge_slave_1: entered allmulticast mode [ 361.426221][T18161] bridge_slave_1: entered promiscuous mode [ 361.489944][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3447'. [ 361.499176][T18271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3447'. [ 361.509608][T18268] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3445'. [ 361.625065][ T5870] Bluetooth: hci2: command tx timeout [ 361.628803][T18161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.696967][T18280] tipc: New replicast peer: 255.255.255.255 [ 361.704730][T18280] tipc: Enabled bearer , priority 10 [ 361.723136][T18161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.827480][T18161] team0: Port device team_slave_0 added [ 361.842060][T18161] team0: Port device team_slave_1 added [ 361.903174][T18293] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3456'. [ 361.912796][T18161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.912817][T18161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.947575][T18161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.975963][T18161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.983445][T18161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.009954][T18161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.158924][T18161] hsr_slave_0: entered promiscuous mode [ 362.174097][T18161] hsr_slave_1: entered promiscuous mode [ 362.180627][T18161] debugfs: 'hsr0' already exists in 'hsr' [ 362.195019][T18161] Cannot create hsr debugfs directory [ 362.257962][T18316] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 362.492861][T18161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.509622][T18161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.583678][T18161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.599887][T18161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.661465][T18161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.672774][T18161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.750783][T18161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.763347][T18161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.976681][T18161] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.027718][T18161] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.071174][T18161] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.095847][T18161] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 363.134117][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'. [ 363.294270][T18161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.352025][T18161] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.388951][T15464] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.396166][T15464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.424490][T15468] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.431672][T15468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.461774][T18357] ipvlan2: entered promiscuous mode [ 363.703249][ T5870] Bluetooth: hci2: command tx timeout [ 363.962690][T18381] gretap0: entered promiscuous mode [ 364.014589][T18161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.138776][T18161] veth0_vlan: entered promiscuous mode [ 364.189363][T18161] veth1_vlan: entered promiscuous mode [ 364.289379][T18403] IPVS: length: 158 != 24 [ 364.318795][T18161] veth0_macvtap: entered promiscuous mode [ 364.331963][T18405] netlink: 'syz.3.3487': attribute type 2 has an invalid length. [ 364.347567][T18161] veth1_macvtap: entered promiscuous mode [ 364.429252][T18161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.448873][T18411] netlink: 'syz.4.3489': attribute type 23 has an invalid length. [ 364.450279][T18161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.540040][T15468] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.556384][T15468] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.590042][T15468] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.613747][T18417] netlink: 'syz.4.3491': attribute type 3 has an invalid length. [ 364.628714][T15468] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.654242][T18414] tipc: Started in network mode [ 364.659302][T18414] tipc: Node identity 2ee0c7be191e, cluster identity 4711 [ 364.669229][T18414] tipc: Enabled bearer , priority 0 [ 364.828272][T18414] syzkaller0: entered promiscuous mode [ 364.837204][T18414] syzkaller0: entered allmulticast mode [ 364.852487][T18418] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 364.926950][T18414] tipc: Resetting bearer [ 364.992950][T18413] tipc: Resetting bearer [ 365.077994][T18413] tipc: Disabling bearer [ 365.196315][T15468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.222733][T15468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.346082][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.369068][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.599509][T18458] __nla_validate_parse: 9 callbacks suppressed [ 365.599526][T18458] netlink: 516 bytes leftover after parsing attributes in process `syz.2.3503'. [ 365.743432][T18463] netlink: 'syz.0.3504': attribute type 3 has an invalid length. [ 365.752314][T18463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3504'. [ 365.784191][ T5870] Bluetooth: hci2: command tx timeout [ 365.886581][T18466] tipc: Started in network mode [ 365.911699][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3506'. [ 365.911919][T18466] tipc: Node identity 8e6573c25fe4, cluster identity 4711 [ 365.932936][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3506'. [ 365.949521][T18466] tipc: Enabled bearer , priority 0 [ 366.140340][T18468] macvtap1: entered promiscuous mode [ 366.148808][T18468] vlan0: entered promiscuous mode [ 366.159291][T18468] macvtap1: entered allmulticast mode [ 366.169098][T18468] vlan0: entered allmulticast mode [ 366.177506][T18468] veth0_vlan: entered allmulticast mode [ 366.190089][T18472] syzkaller0: entered promiscuous mode [ 366.211939][T18472] syzkaller0: entered allmulticast mode [ 366.257189][T18473] : entered promiscuous mode [ 366.311327][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3509'. [ 366.332619][T18466] tipc: Resetting bearer [ 366.376138][T18466] tipc: Disabling bearer [ 366.441599][T18478] netlink: 'syz.1.3509': attribute type 10 has an invalid length. [ 366.463412][T18478] team0: Port device dummy0 added [ 366.545424][T18491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3513'. [ 366.587873][T18492] netlink: 'syz.2.3512': attribute type 1 has an invalid length. [ 366.758633][T18502] tipc: Enabling of bearer rejected, failed to enable media [ 366.785063][T18499] vxcan1: tx address claim with dlc 0 [ 367.016371][T18502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3516'. [ 367.035457][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3520'. [ 367.140633][T18523] netlink: 'syz.4.3522': attribute type 5 has an invalid length. [ 367.476063][T18532] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.483840][T18532] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.524803][T18532] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 367.541052][T18534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.598259][T18541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3528'. [ 367.749734][T18547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3530'. [ 367.776642][T18551] netlink: 'syz.4.3531': attribute type 21 has an invalid length. [ 367.800920][T18547] netlink: 'syz.3.3530': attribute type 29 has an invalid length. [ 367.802778][T18551] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.831066][T18547] netlink: 'syz.3.3530': attribute type 29 has an invalid length. [ 367.862822][ T5870] Bluetooth: hci2: command tx timeout [ 367.925198][T18554] tipc: Enabling of bearer rejected, failed to enable media [ 368.373700][T18561] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 368.387615][T18548] netlink: 'syz.1.3529': attribute type 1 has an invalid length. [ 368.409693][T18548] nbd: illegal input index 1048576 [ 368.552760][T18585] netlink: 'syz.2.3536': attribute type 10 has an invalid length. [ 368.571780][T18585] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 368.623531][T18585] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 368.661596][T18585] netlink: 'syz.2.3536': attribute type 11 has an invalid length. [ 368.706970][T18588] netlink: 'syz.2.3536': attribute type 10 has an invalid length. [ 368.756786][T18588] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 368.889446][T18604] netlink: 'syz.4.3542': attribute type 142 has an invalid length. [ 369.001561][T18602] pim6reg1: entered promiscuous mode [ 369.018981][T18602] pim6reg1: entered allmulticast mode [ 370.738734][T18635] __nla_validate_parse: 15 callbacks suppressed [ 370.738752][T18635] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3551'. [ 370.757784][T18635] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3551'. [ 370.766981][T18635] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3551'. [ 370.839866][T18648] team0: Device gtp0 is of different type [ 371.078730][T18659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3558'. [ 371.247615][T18668] ip6erspan0: entered promiscuous mode [ 371.255845][T18668] ip6erspan0: entered allmulticast mode [ 371.520366][T18688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3570'. [ 371.551606][T18688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3570'. [ 371.725329][T18701] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3574'. [ 371.922459][T18708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3575'. [ 372.208586][T18719] dvmrp0: entered allmulticast mode [ 372.506107][T18739] tipc: Enabled bearer , priority 0 [ 372.535286][T18739] syzkaller0: entered promiscuous mode [ 372.540941][T18739] syzkaller0: entered allmulticast mode [ 372.592406][T18739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3588'. [ 372.621774][T18739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3588'. [ 372.668601][T18739] tipc: Resetting bearer [ 372.678439][T18738] tipc: Resetting bearer [ 372.743492][T18746] Set syz1 is full, maxelem 1038 reached [ 372.745861][T18738] tipc: Disabling bearer [ 372.925141][T18761] validate_nla: 1 callbacks suppressed [ 372.925159][T18761] netlink: 'syz.2.3596': attribute type 29 has an invalid length. [ 372.959592][T18761] netlink: 'syz.2.3596': attribute type 29 has an invalid length. [ 373.163627][T18773] netlink: 'syz.2.3600': attribute type 1 has an invalid length. [ 373.245172][T18779] netlink: 'syz.3.3603': attribute type 2 has an invalid length. [ 373.263364][T18779] netlink: 'syz.3.3603': attribute type 2 has an invalid length. [ 373.420444][T18787] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 373.651157][T18803] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 373.960876][T18817] : renamed from hsr0 (while UP) [ 374.129234][T18835] netlink: 'syz.2.3622': attribute type 1 has an invalid length. [ 374.704650][T18868] sctp: [Deprecated]: syz.0.3632 (pid 18868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.704650][T18868] Use struct sctp_sack_info instead [ 374.734293][T18866] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.071651][T18890] netlink: 'syz.2.3635': attribute type 10 has an invalid length. [ 375.990496][T18919] netlink: 'syz.3.3643': attribute type 1 has an invalid length. [ 376.031690][T12728] block nbd1: Possible stuck request ffff888025510000: control (read@0,1024B). Runtime 150 seconds [ 376.042721][T12728] block nbd1: Possible stuck request ffff8880255101c0: control (read@1024,1024B). Runtime 150 seconds [ 376.054289][T12728] block nbd1: Possible stuck request ffff888025510380: control (read@2048,1024B). Runtime 150 seconds [ 376.065600][T12728] block nbd1: Possible stuck request ffff888025510540: control (read@3072,1024B). Runtime 150 seconds [ 376.098032][T18916] syzkaller1: entered promiscuous mode [ 376.114093][T18916] syzkaller1: entered allmulticast mode [ 376.148813][T18924] hsr0 speed is unknown, defaulting to 1000 [ 376.164789][T18924] hsr0 speed is unknown, defaulting to 1000 [ 376.171681][T18924] hsr0 speed is unknown, defaulting to 1000 [ 376.210275][T18924] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 376.417446][T18924] hsr0 speed is unknown, defaulting to 1000 [ 376.425403][T18948] __nla_validate_parse: 18 callbacks suppressed [ 376.425420][T18948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3649'. [ 376.460343][T18924] hsr0 speed is unknown, defaulting to 1000 [ 376.488994][T18924] hsr0 speed is unknown, defaulting to 1000 [ 376.508817][T18924] hsr0 speed is unknown, defaulting to 1000 [ 376.554530][T18924] hsr0 speed is unknown, defaulting to 1000 [ 376.573189][T18924] hsr0 speed is unknown, defaulting to 1000 [ 376.594542][T18924] hsr0 speed is unknown, defaulting to 1000 [ 376.602691][T18950] nbd0: detected capacity change from 0 to 127 [ 376.614211][T18924] hsr0 speed is unknown, defaulting to 1000 [ 376.618603][ T5870] block nbd0: Receive control failed (result -32) [ 376.648326][T18957] netlink: 'syz.2.3651': attribute type 1 has an invalid length. [ 376.681964][T18957] netlink: 'syz.2.3651': attribute type 1 has an invalid length. [ 377.094097][T18988] tipc: Enabled bearer , priority 0 [ 377.149021][T18988] syzkaller0: entered promiscuous mode [ 377.161768][T18993] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3664'. [ 377.162607][T18988] syzkaller0: entered allmulticast mode [ 377.188588][T18993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3664'. [ 377.223630][T18993] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3664'. [ 377.256326][T18988] tipc: Resetting bearer [ 377.337133][T19007] tipc: Resetting bearer [ 377.372575][T19007] tipc: Disabling bearer [ 377.529528][ T9503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.582013][ T9503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.867438][T19039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.881098][T19038] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3676'. [ 377.883768][T19040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3675'. [ 377.964137][T19033] validate_nla: 4 callbacks suppressed [ 377.964154][T19033] netlink: 'syz.1.3671': attribute type 16 has an invalid length. [ 377.980248][T19033] netlink: 'syz.1.3671': attribute type 17 has an invalid length. [ 377.999462][T19041] tipc: Enabling of bearer rejected, failed to enable media [ 378.265869][T19033] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.273164][T19033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.280764][T19033] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.288010][T19033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.308259][T19033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.320620][T19033] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.338356][T19033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.370015][T19044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3674'. [ 378.437576][T19056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3677'. [ 378.589939][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.608975][T19074] netlink: 'syz.1.3682': attribute type 24 has an invalid length. [ 380.328161][T19080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3684'. [ 380.432700][T19093] Bluetooth: MGMT ver 1.23 [ 380.444959][T19094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'. [ 381.146941][T19143] netlink: 'syz.1.3706': attribute type 1 has an invalid length. [ 381.270955][ T43] IPVS: starting estimator thread 0... [ 381.281878][T19150] bond2: (slave gretap1): making interface the new active one [ 381.301638][T19150] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 381.318817][T19143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 381.339288][T19154] syzkaller1: entered promiscuous mode [ 381.345601][T19154] syzkaller1: entered allmulticast mode [ 381.382772][T19155] IPVS: using max 29 ests per chain, 69600 per kthread [ 381.466008][T19161] __nla_validate_parse: 4 callbacks suppressed [ 381.466023][T19161] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3712'. [ 381.492838][T19161] netlink: zone id is out of range [ 381.498119][T19161] netlink: get zone limit has 8 unknown bytes [ 381.567849][T19164] bond1: entered promiscuous mode [ 381.574858][T19164] bond1: entered allmulticast mode [ 381.581444][T19164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.737943][T19164] bond1 (unregistering): Released all slaves [ 382.164043][T19191] netlink: 'syz.0.3724': attribute type 1 has an invalid length. [ 382.231594][T19198] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3724'. [ 382.261266][T19191] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.336639][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3726'. [ 382.354404][T19204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3726'. [ 382.387904][ T1143] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.402050][ T1143] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.423400][ T1143] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.457231][ T1143] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.726625][T19227] : renamed from veth0_vlan (while UP) [ 382.871454][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3735'. [ 382.971598][T19238] tipc: Enabling of bearer rejected, failed to enable media [ 383.114711][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3741'. [ 383.124965][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3741'. [ 383.297224][T19253] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3745'. [ 383.560210][T19272] netlink: 'syz.1.3749': attribute type 21 has an invalid length. [ 383.600608][T19272] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3749'. [ 383.814416][T19285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3755'. [ 383.863926][T19291] bridge: RTM_NEWNEIGH with invalid ether address [ 384.135630][T19301] netlink: 'syz.1.3763': attribute type 2 has an invalid length. [ 384.532887][T19323] tipc: Enabled bearer , priority 0 [ 384.543569][T19323] syzkaller0: entered promiscuous mode [ 384.562265][T19323] syzkaller0: entered allmulticast mode [ 384.586429][T19323] syzkaller0: mtu less than device minimum [ 384.622036][T19322] tipc: Resetting bearer [ 384.683915][ T43] IPVS: starting estimator thread 0... [ 384.709158][T19330] tls_set_device_offload: netdev not found [ 384.783856][T19329] IPVS: using max 30 ests per chain, 72000 per kthread [ 384.853339][T19322] tipc: Disabling bearer [ 384.854587][T19330] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 384.893212][T19335] tipc: Enabling of bearer rejected, failed to enable media [ 385.201390][T19349] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 385.255462][T19349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.301031][T19349] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 385.816242][T19373] tipc: Enabled bearer , priority 0 [ 385.829308][T19373] syzkaller0: entered promiscuous mode [ 385.837368][T19373] syzkaller0: entered allmulticast mode [ 385.915273][T19373] tipc: Resetting bearer [ 385.970508][T19372] tipc: Resetting bearer [ 386.047463][T19372] tipc: Disabling bearer [ 386.108437][T19386] gre1: entered promiscuous mode [ 386.118200][T19386] gre1: entered allmulticast mode [ 386.243800][T19399] policy can only be matched on NF_INET_PRE_ROUTING [ 386.243822][T19399] unable to load match [ 386.320534][T19403] openvswitch: netlink: Duplicate or invalid key (type 0). [ 386.339821][T19403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.643037][T19423] __nla_validate_parse: 1 callbacks suppressed [ 386.643056][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3802'. [ 386.686141][T19423] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3802'. [ 386.720208][T19423] netlink: 'syz.0.3802': attribute type 5 has an invalid length. [ 386.954009][T19438] bridge0: port 2(syz_tun) entered blocking state [ 386.961036][T19438] bridge0: port 2(syz_tun) entered disabled state [ 386.980125][T19438] syz_tun: entered allmulticast mode [ 386.991254][T19438] syz_tun: entered promiscuous mode [ 387.137652][T19446] tipc: Enabled bearer , priority 0 [ 387.145805][T19446] syzkaller0: entered promiscuous mode [ 387.151304][T19446] syzkaller0: entered allmulticast mode [ 387.162617][T19450] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 387.200529][T19456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'. [ 387.211859][T19456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'. [ 387.223245][T19456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'. [ 387.242260][T19455] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3813'. [ 387.247423][T19456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'. [ 387.288964][T19446] tipc: Resetting bearer [ 387.298607][T19459] veth0: entered promiscuous mode [ 387.316080][T19455] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3813'. [ 387.338412][T19445] tipc: Resetting bearer [ 387.379086][T19445] tipc: Disabling bearer [ 387.395889][T19451] veth0: left promiscuous mode [ 387.679473][T19480] netlink: 'syz.4.3822': attribute type 2 has an invalid length. [ 387.690476][T19480] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3822'. [ 387.710595][T19484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3821'. [ 388.009932][T19501] netlink: 'syz.4.3830': attribute type 1 has an invalid length. [ 388.023383][T19501] netlink: 'syz.4.3830': attribute type 2 has an invalid length. [ 388.158832][T19513] tipc: Enabled bearer , priority 0 [ 388.166694][T19513] syzkaller0: entered promiscuous mode [ 388.186160][T19513] syzkaller0: entered allmulticast mode [ 388.195477][T19513] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 388.249854][T19513] tipc: Resetting bearer [ 388.269313][T19507] tipc: Resetting bearer [ 388.314616][T19507] tipc: Disabling bearer [ 388.536168][T19533] netlink: 'syz.3.3838': attribute type 2 has an invalid length. [ 388.938370][T19542] netlink: 'syz.1.3842': attribute type 10 has an invalid length. [ 388.949191][T19542] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 388.973245][T19542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.775310][T19587] IPVS: persistence engine module ip_vs_pe_À not found [ 390.083714][T19608] : entered promiscuous mode [ 390.105793][ T55] block nbd3: Possible stuck request ffff8880610ae000: control (read@0,1024B). Runtime 30 seconds [ 390.116796][ T55] block nbd3: Possible stuck request ffff8880610ae1c0: control (read@1024,1024B). Runtime 30 seconds [ 390.127994][ T55] block nbd3: Possible stuck request ffff8880610ae380: control (read@2048,1024B). Runtime 30 seconds [ 390.139725][ T55] block nbd3: Possible stuck request ffff8880610ae540: control (read@3072,1024B). Runtime 30 seconds [ 390.261199][T19618] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 390.985032][T19662] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 390.995044][T19662] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 391.107992][T19662] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.115623][T19662] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.321776][T19662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.339627][T19662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.379382][T19670] netlink: 'syz.4.3878': attribute type 3 has an invalid length. [ 391.389170][T19670] netlink: 'syz.4.3878': attribute type 2 has an invalid length. [ 391.405167][T19662] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 391.445919][T19662] team1: left promiscuous mode [ 391.450875][T19662] team1: left allmulticast mode [ 391.456886][T19662] ip6erspan0: left promiscuous mode [ 391.462806][T19662] ip6erspan0: left allmulticast mode [ 391.470922][T19662] ipvlan2: left promiscuous mode [ 391.501644][ T1143] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.516003][ T1143] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.527462][ T1143] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.583040][ T1143] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.704588][T19677] bond0: option mode: unable to set because the bond device has slaves [ 391.830030][T19681] __nla_validate_parse: 17 callbacks suppressed [ 391.830050][T19681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3881'. [ 391.914485][T19686] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3883'. [ 392.225601][T19696] netlink: 'syz.1.3887': attribute type 1 has an invalid length. [ 392.301038][T19698] bond3: (slave bridge2): making interface the new active one [ 392.310681][T19698] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 392.410866][T19703] netlink: 'syz.1.3890': attribute type 1 has an invalid length. [ 392.423737][T19703] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3890'. [ 392.722811][T19721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3894'. [ 392.769093][T19721] xfrm1: entered promiscuous mode [ 392.778766][T19721] xfrm1: entered allmulticast mode [ 392.797817][T19721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3894'. [ 393.050273][T19736] bond4: entered promiscuous mode [ 393.055574][T19736] bond4: entered allmulticast mode [ 393.061177][T19736] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.239047][T19736] bond4 (unregistering): Released all slaves [ 393.341751][T19751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3901'. [ 393.351907][T19751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3901'. [ 393.461558][T19753] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.635893][T19732] netlink: 'syz.0.3896': attribute type 3 has an invalid length. [ 393.674593][T19761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.686061][T19732] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3896'. [ 393.827831][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3907'. [ 393.967533][T19780] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3911'. [ 394.098065][T19782] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 394.121571][T19789] netlink: 'syz.0.3914': attribute type 5 has an invalid length. [ 394.165092][T19791] netlink: 'syz.1.3915': attribute type 1 has an invalid length. [ 394.289325][T19796] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 394.329159][T19796] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 394.505089][T19797] team0 (unregistering): Port device team_slave_0 removed [ 394.515712][T19797] team0 (unregistering): Port device team_slave_1 removed [ 394.546747][T19791] macvlan2: entered promiscuous mode [ 394.552438][T19791] macvlan2: entered allmulticast mode [ 394.558555][T19791] bond4: entered promiscuous mode [ 394.565369][T19791] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 394.577553][T19791] bond4: left promiscuous mode [ 394.802848][T19804] netem: change failed [ 394.971485][T19818] syzkaller0: entered promiscuous mode [ 394.978073][T19818] syzkaller0: entered allmulticast mode [ 395.010718][T19818] tipc: Enabled bearer , priority 0 [ 395.093318][T19818] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 395.168056][T19825] team_slave_0: mtu greater than device maximum [ 395.198878][T19818] tipc: Resetting bearer [ 395.215626][T19817] tipc: Resetting bearer [ 395.270971][T19817] tipc: Disabling bearer [ 395.666302][T19862] netlink: 'syz.1.3937': attribute type 12 has an invalid length. [ 395.815257][T19873] gtp0: entered promiscuous mode [ 395.979268][T15469] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 396.068454][T19892] tipc: Enabled bearer , priority 0 [ 396.078342][T19892] syzkaller0: entered promiscuous mode [ 396.085198][T19892] syzkaller0: entered allmulticast mode [ 396.148606][T19892] tipc: Resetting bearer [ 396.440844][T19920] netlink: zone id is out of range [ 396.446778][T19920] netlink: zone id is out of range [ 396.453342][T19920] netlink: zone id is out of range [ 396.458626][T19920] netlink: zone id is out of range [ 396.464560][T19920] netlink: zone id is out of range [ 396.469825][T19920] netlink: zone id is out of range [ 396.476146][T19920] netlink: zone id is out of range [ 396.610730][T19926] netlink: 'syz.3.3959': attribute type 14 has an invalid length. [ 396.884263][T19891] tipc: Resetting bearer [ 396.931144][T19891] tipc: Disabling bearer [ 397.089417][T19954] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 397.099483][T19954] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 397.467461][T19974] __nla_validate_parse: 11 callbacks suppressed [ 397.467482][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3974'. [ 397.559878][T19974] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3974'. [ 399.199084][T19990] tipc: Enabling of bearer rejected, failed to enable media [ 399.344709][ T10] IPVS: starting estimator thread 0... [ 399.365486][T20009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3982'. [ 399.444418][T20015] IPVS: using max 26 ests per chain, 62400 per kthread [ 399.499316][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3985'. [ 399.517808][T20025] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3986'. [ 399.546468][T20019] net_ratelimit: 30 callbacks suppressed [ 399.546484][T20019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.563381][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3985'. [ 399.604178][T20028] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3986'. [ 399.645103][T20035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3988'. [ 399.751749][T20041] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3991'. [ 399.767850][T20041] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3991'. [ 399.858433][T20044] netlink: 'syz.1.3992': attribute type 4 has an invalid length. [ 399.896183][T20044] netlink: 'syz.1.3992': attribute type 4 has an invalid length. [ 399.967176][ T30] audit: type=1107 audit(1757209775.237:5): pid=20043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 400.390933][T20080] sctp: [Deprecated]: syz.3.4004 (pid 20080) Use of int in max_burst socket option deprecated. [ 400.390933][T20080] Use struct sctp_assoc_value instead [ 400.417362][T20070] netlink: 'syz.0.4001': attribute type 5 has an invalid length. [ 400.530086][T20085] veth0_to_bond: entered allmulticast mode [ 400.804891][T20103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.147318][T20120] netlink: 'syz.1.4019': attribute type 3 has an invalid length. [ 401.178143][T20120] netlink: 'syz.1.4019': attribute type 3 has an invalid length. [ 401.229897][T20129] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 401.309918][T20135] tipc: Enabling of bearer rejected, failed to enable media [ 401.760597][T20168] syzkaller0: entered promiscuous mode [ 401.767949][T20168] syzkaller0: entered allmulticast mode [ 402.064510][T20159] netlink: 'syz.1.4029': attribute type 11 has an invalid length. [ 402.072985][T20159] netlink: 'syz.1.4029': attribute type 11 has an invalid length. [ 402.255820][T20188] netlink: 'syz.0.4039': attribute type 1 has an invalid length. [ 402.265471][T20189] tipc: Enabled bearer , priority 0 [ 402.273234][T20188] netlink: 'syz.0.4039': attribute type 1 has an invalid length. [ 402.273254][T20188] netlink: 'syz.0.4039': attribute type 2 has an invalid length. [ 402.864355][T20191] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.872174][T20191] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.881841][T20223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.262400][ T43] tipc: Node number set to 3514921922 [ 403.388474][T20191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.411204][T20191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.648161][T20189] syzkaller0: entered promiscuous mode [ 403.658424][T20189] syzkaller0: entered allmulticast mode [ 403.696404][T20205] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 403.765243][T20211] tipc: Resetting bearer [ 403.793882][T20187] tipc: Resetting bearer [ 403.899211][T20187] tipc: Disabling bearer [ 403.915415][T20249] __nla_validate_parse: 14 callbacks suppressed [ 403.915431][T20249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4050'. [ 403.944954][ T43] hsr0 speed is unknown, defaulting to 1000 [ 403.962198][ T43] syz1: Port: 1 Link DOWN [ 404.000982][T20251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.040052][ T9503] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.068151][ T9503] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.078227][ T9503] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.097622][ T9503] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.135467][ T9503] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.142890][T20249] IPVS: stopping master sync thread 20260 ... [ 404.160208][ T9503] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.162331][T20260] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 404.187877][ T9503] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.199069][ T9503] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.218676][T20262] netlink: 'syz.2.4054': attribute type 25 has an invalid length. [ 404.228878][T20262] netlink: 'syz.2.4054': attribute type 8 has an invalid length. [ 404.302436][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4055'. [ 404.323548][T20265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4055'. [ 404.392952][T20267] block nbd8: server does not support multiple connections per device. [ 404.427340][T20267] block nbd8: shutting down sockets [ 404.495478][T20285] veth0: entered promiscuous mode [ 404.573676][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4061'. [ 404.707853][T20295] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4063'. [ 404.942992][T20306] C: renamed from lo (while UP) [ 405.080917][T20315] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4071'. [ 405.106541][T20315] validate_nla: 5 callbacks suppressed [ 405.106565][T20315] netlink: 'syz.1.4071': attribute type 1 has an invalid length. [ 405.130449][T20315] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4071'. [ 405.155991][T20319] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4072'. [ 405.167355][T20317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4073'. [ 405.184613][T20315] netlink: 'syz.1.4071': attribute type 1 has an invalid length. [ 405.346096][T20329] wg1 speed is unknown, defaulting to 1000 [ 405.354057][T20329] lo speed is unknown, defaulting to 1000 [ 405.644031][T20337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4077'. [ 405.918397][T20350] netlink: 'syz.2.4080': attribute type 1 has an invalid length. [ 405.956117][T20329] hsr0 speed is unknown, defaulting to 1000 [ 406.117571][T12728] block nbd1: Possible stuck request ffff888025510000: control (read@0,1024B). Runtime 180 seconds [ 406.130673][T12728] block nbd1: Possible stuck request ffff8880255101c0: control (read@1024,1024B). Runtime 180 seconds [ 406.142199][T12728] block nbd1: Possible stuck request ffff888025510380: control (read@2048,1024B). Runtime 180 seconds [ 406.154213][T12728] block nbd1: Possible stuck request ffff888025510540: control (read@3072,1024B). Runtime 180 seconds [ 406.513823][T20378] sctp: [Deprecated]: syz.4.4084 (pid 20378) Use of int in max_burst socket option. [ 406.513823][T20378] Use struct sctp_assoc_value instead [ 406.530605][T20377] netlink: 'syz.2.4087': attribute type 83 has an invalid length. [ 406.877375][T20389] netlink: 'syz.2.4091': attribute type 3 has an invalid length. [ 406.888706][T20389] netlink: 'syz.2.4091': attribute type 3 has an invalid length. [ 406.914440][T20398] pimreg3: entered allmulticast mode [ 406.927978][T15468] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 407.079941][T20409] openvswitch: netlink: Flow key attr not present in new flow. [ 407.860211][T20434] netlink: 'syz.3.4104': attribute type 1 has an invalid length. [ 407.879140][T20434] netlink: 'syz.3.4104': attribute type 11 has an invalid length. [ 408.004600][T20442] netlink: 'syz.3.4107': attribute type 1 has an invalid length. [ 408.033176][T20442] netlink: 'syz.3.4107': attribute type 3 has an invalid length. [ 408.450489][ T30] audit: type=1107 audit(1757209783.717:6): pid=20470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 408.767117][T20484] wg1 speed is unknown, defaulting to 1000 [ 408.945003][T20498] __nla_validate_parse: 9 callbacks suppressed [ 408.945021][T20498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4121'. [ 409.064941][T20498] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4121'. [ 409.117706][T20484] lo speed is unknown, defaulting to 1000 [ 409.266297][T20509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4124'. [ 409.293174][T20509] openvswitch: netlink: IP tunnel TTL not specified. [ 409.437196][T20520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4127'. [ 409.483070][T20519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4127'. [ 409.525710][T20524] team0: Device gtp0 is of different type [ 409.759347][T20536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'. [ 409.791098][T20536] pim6reg1: entered promiscuous mode [ 409.809733][T20536] pim6reg1: entered allmulticast mode [ 409.937967][T20484] hsr0 speed is unknown, defaulting to 1000 [ 410.157373][T20563] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 410.215326][T20488] wg1 speed is unknown, defaulting to 1000 [ 410.246589][T20488] lo speed is unknown, defaulting to 1000 [ 410.515393][T20580] pimreg3: entered allmulticast mode [ 410.852027][T20590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.895574][T20595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.906903][T20488] hsr0 speed is unknown, defaulting to 1000 [ 410.994008][T20599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4148'. [ 411.012584][T20598] validate_nla: 3 callbacks suppressed [ 411.012601][T20598] netlink: 'syz.1.4149': attribute type 1 has an invalid length. [ 411.051968][T20598] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4149'. [ 411.557900][T20631] netlink: 'syz.0.4155': attribute type 1 has an invalid length. [ 411.611252][T20631] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4155'. [ 411.812858][T20631] macvtap1: entered allmulticast mode [ 411.815164][T20632] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4155'. [ 411.826283][T20631] vlan0: entered allmulticast mode [ 411.851334][T20631] : entered allmulticast mode [ 411.868692][T20631] team0: Device macvtap1 failed to register rx_handler [ 411.885868][T20631] vlan0: left allmulticast mode [ 411.900917][T20631] : left allmulticast mode [ 412.038561][T20641] tipc: Enabled bearer , priority 0 [ 412.063272][T20641] syzkaller0: entered promiscuous mode [ 412.069220][T20641] syzkaller0: entered allmulticast mode [ 412.162710][T20641] tipc: Resetting bearer [ 412.236658][T20637] tipc: Resetting bearer [ 412.351589][T20637] tipc: Disabling bearer [ 412.470699][T20652] wg1 speed is unknown, defaulting to 1000 [ 412.574086][T20652] lo speed is unknown, defaulting to 1000 [ 412.882713][T20652] hsr0 speed is unknown, defaulting to 1000 [ 412.889958][T20667] openvswitch: netlink: Key 4 has unexpected len 8 expected 12 [ 413.018652][T20679] netlink: 'syz.0.4171': attribute type 10 has an invalid length. [ 413.096056][T20686] sit1: entered promiscuous mode [ 413.101899][T20686] sit1: entered allmulticast mode [ 413.111597][T20679] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 413.129018][T20679] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 413.384976][T20697] syz_tun (unregistering): left allmulticast mode [ 413.404811][T20697] syz_tun (unregistering): left promiscuous mode [ 413.416606][T20697] bridge0: port 2(syz_tun) entered disabled state [ 413.684102][T20714] veth1_to_bond: entered allmulticast mode [ 413.896430][T20714] bond0: (slave bond_slave_1): Releasing backup interface [ 413.952795][T20714] veth1_to_bond (unregistering): left allmulticast mode [ 413.968382][T15469] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.978390][T15469] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.995400][T15469] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.010566][T20735] __nla_validate_parse: 9 callbacks suppressed [ 414.010593][T20735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4187'. [ 414.034025][T15469] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.060933][T20735] bridge0: entered promiscuous mode [ 414.082600][T20735] macsec1: entered promiscuous mode [ 414.107793][T20735] macsec1: entered allmulticast mode [ 414.115764][T20735] bridge0: entered allmulticast mode [ 414.131467][T20735] bridge0: port 2(macsec1) entered blocking state [ 414.150649][T20744] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4189'. [ 414.159498][T20747] openvswitch: netlink: Missing key (keys=40, expected=100) [ 414.175051][T20745] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4189'. [ 414.187623][T20735] bridge0: port 2(macsec1) entered disabled state [ 414.210197][T20735] bridge0: left allmulticast mode [ 414.264432][T20735] bridge0: left promiscuous mode [ 414.330971][T20756] netlink: 'syz.0.4192': attribute type 1 has an invalid length. [ 414.361366][T20756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4192'. [ 414.598489][T20766] netlink: 'syz.1.4196': attribute type 2 has an invalid length. [ 414.615188][T20766] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4196'. [ 414.655541][T20771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4199'. [ 414.721544][T20771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4199'. [ 414.766144][T20771] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4199'. [ 414.808132][T20771] netlink: 'syz.3.4199': attribute type 5 has an invalid length. [ 415.048932][T20806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4205'. [ 415.077905][T20804] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 415.319320][T20815] tipc: Enabled bearer , priority 0 [ 415.335987][T20815] syzkaller0: entered promiscuous mode [ 415.341548][T20815] syzkaller0: entered allmulticast mode [ 415.433382][T20816] syzkaller0: mtu less than device minimum [ 415.676714][T20829] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4213'. [ 415.793812][T20835] macsec0: entered promiscuous mode [ 415.817878][T20835] macsec0: entered allmulticast mode [ 415.832901][T20835] veth1_macvtap: entered allmulticast mode [ 415.854298][T20835] bridge0: port 2(macsec0) entered blocking state [ 415.875481][T20835] bridge0: port 2(macsec0) entered disabled state [ 415.888671][T20835] bridge0: port 2(macsec0) entered blocking state [ 415.895295][T20835] bridge0: port 2(macsec0) entered forwarding state [ 416.134569][T20812] tipc: Resetting bearer [ 416.182670][ T5870] Bluetooth: hci2: command tx timeout [ 416.207734][T20812] tipc: Disabling bearer [ 416.234768][T20858] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 416.428736][T20865] tipc: Enabled bearer , priority 0 [ 416.559917][T20865] syzkaller0: entered promiscuous mode [ 416.569231][T20865] syzkaller0: entered allmulticast mode [ 416.577668][T20865] tipc: Resetting bearer [ 416.665275][T20864] tipc: Resetting bearer [ 416.673680][T20885] netlink: 'syz.3.4230': attribute type 4 has an invalid length. [ 416.808447][T20891] netlink: 'syz.4.4229': attribute type 16 has an invalid length. [ 416.835021][T20891] netlink: 'syz.4.4229': attribute type 17 has an invalid length. [ 416.871606][T20898] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 416.880094][T20898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.037550][T20906] openvswitch: netlink: Missing key (keys=40, expected=100) [ 417.429480][T20917] netlink: 'syz.3.4238': attribute type 1 has an invalid length. [ 418.569043][T20864] tipc: Disabling bearer [ 418.583113][T20874] ip6erspan0: entered promiscuous mode [ 418.679780][T20891] ip6erspan0: left promiscuous mode [ 418.688602][T20891] ip6erspan0: left allmulticast mode [ 418.699257][T20891] gtp0: left promiscuous mode [ 419.035179][T20939] ipvlan0: entered promiscuous mode [ 419.040806][T20939] ipvlan0: entered allmulticast mode [ 419.061546][T20939] : entered allmulticast mode [ 419.219553][T20957] netlink: 'syz.2.4248': attribute type 1 has an invalid length. [ 419.260774][T20957] netlink: 'syz.2.4248': attribute type 2 has an invalid length. [ 419.276926][T20964] netlink: 'syz.2.4248': attribute type 1 has an invalid length. [ 419.299029][T20964] netlink: 'syz.2.4248': attribute type 2 has an invalid length. [ 419.350526][T20957] __nla_validate_parse: 10 callbacks suppressed [ 419.350545][T20957] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4248'. [ 419.540189][T20982] netlink: 'syz.0.4257': attribute type 10 has an invalid length. [ 419.565093][T20976] tipc: Enabled bearer , priority 0 [ 419.593004][T20982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4257'. [ 419.607815][T20986] netlink: 'syz.3.4258': attribute type 30 has an invalid length. [ 419.629424][T20982] team0: Port device geneve0 added [ 419.641747][T20976] tipc: Disabling bearer [ 419.658732][T20986] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 419.676636][T20986] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 419.960566][T21006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4264'. [ 420.192579][ T55] block nbd3: Possible stuck request ffff8880610ae000: control (read@0,1024B). Runtime 60 seconds [ 420.203853][ T55] block nbd3: Possible stuck request ffff8880610ae1c0: control (read@1024,1024B). Runtime 60 seconds [ 420.215739][ T55] block nbd3: Possible stuck request ffff8880610ae380: control (read@2048,1024B). Runtime 60 seconds [ 420.226995][ T55] block nbd3: Possible stuck request ffff8880610ae540: control (read@3072,1024B). Runtime 60 seconds [ 421.029365][T21038] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4273'. [ 421.073957][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4273'. [ 421.108726][T21047] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4273'. [ 421.163828][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4277'. [ 421.173228][T21049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4277'. [ 421.182628][T21049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4277'. [ 421.201546][T21054] batadv_slave_0: entered promiscuous mode [ 421.220181][T21050] netlink: 360 bytes leftover after parsing attributes in process `syz.3.4277'. [ 421.266372][T21053] batadv_slave_0: left promiscuous mode [ 422.139421][T21110] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.156416][T21110] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.163654][T21110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.751143][T21140] validate_nla: 2 callbacks suppressed [ 422.751163][T21140] netlink: 'syz.2.4304': attribute type 21 has an invalid length. [ 422.893216][T21144] netlink: 'syz.3.4306': attribute type 1 has an invalid length. [ 422.905272][T21145] syzkaller1: left promiscuous mode [ 422.910524][T21145] syzkaller1: left allmulticast mode [ 422.919904][T21148] netlink: 'syz.3.4306': attribute type 12 has an invalid length. [ 423.221098][T21174] netlink: 'syz.4.4312': attribute type 4 has an invalid length. [ 423.436983][T21188] netlink: 'syz.1.4318': attribute type 5 has an invalid length. [ 423.750847][T21206] vlan2: entered promiscuous mode [ 423.756127][T21206] gretap0: entered promiscuous mode [ 424.389220][T21223] __nla_validate_parse: 19 callbacks suppressed [ 424.389241][T21223] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4329'. [ 424.483839][T21223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4329'. [ 424.514151][T21233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4333'. [ 424.977353][T21275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4343'. [ 425.149234][T21281] tipc: Enabled bearer , priority 0 [ 425.161256][T21283] syzkaller0: entered promiscuous mode [ 425.170758][T21283] syzkaller0: entered allmulticast mode [ 425.196321][T21280] tipc: Resetting bearer [ 425.240035][T21280] tipc: Disabling bearer [ 425.404187][T21297] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4346'. [ 425.413909][T21297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4346'. [ 425.487615][T21301] netlink: 'syz.0.4349': attribute type 62 has an invalid length. [ 425.728671][T21310] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 425.756460][T21315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4353'. [ 425.765489][T21315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4353'. [ 425.775153][T21315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4353'. [ 425.921324][T21323] netlink: 'syz.2.4356': attribute type 62 has an invalid length. [ 426.275332][T21344] netlink: 'syz.1.4363': attribute type 1 has an invalid length. [ 426.331095][T21344] netlink: 'syz.1.4363': attribute type 1 has an invalid length. [ 426.540469][T21363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4365'. [ 427.197841][T21373] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 427.509152][T21386] bond2: entered promiscuous mode [ 427.536246][T21386] bond2: entered allmulticast mode [ 427.567968][T21386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 428.373146][T21429] netlink: 'syz.4.4388': attribute type 10 has an invalid length. [ 428.391339][T21430] netlink: 'syz.3.4385': attribute type 15 has an invalid length. [ 428.429831][T15469] bridge0: port 2(macsec0) entered disabled state [ 428.462581][T21431] netlink: 'syz.4.4388': attribute type 1 has an invalid length. [ 428.470586][T21429] netlink: 'syz.4.4388': attribute type 1 has an invalid length. [ 429.445729][T21486] __nla_validate_parse: 22 callbacks suppressed [ 429.445750][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4401'. [ 429.510537][T21488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4402'. [ 429.526501][T21488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4402'. [ 429.539046][T21494] veth0: entered promiscuous mode [ 429.560434][T21493] veth0: left promiscuous mode [ 429.637832][ T5870] Bluetooth: hci2: link tx timeout [ 429.643901][ T5870] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 429.658423][ T5870] Bluetooth: hci2: link tx timeout [ 429.664224][ T5870] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 429.672324][ T5870] Bluetooth: hci2: link tx timeout [ 429.677602][ T5870] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 429.739116][T21505] netlink: 'syz.3.4406': attribute type 5 has an invalid length. [ 429.944115][T21515] netlink: 'syz.0.4409': attribute type 1 has an invalid length. [ 429.973043][T21515] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4409'. [ 430.050542][T21522] netlink: 'syz.2.4411': attribute type 2 has an invalid length. [ 430.059125][T21522] netlink: 'syz.2.4411': attribute type 8 has an invalid length. [ 430.077969][T21522] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.4411'. [ 430.111989][T21522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4411'. [ 430.186241][T21525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4411'. [ 430.849442][T21579] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4427'. [ 430.850193][T21570] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4426'. [ 430.895400][T21570] NCSI netlink: No device for ifindex 0 [ 431.129791][T21591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4431'. [ 431.139146][T21591] netlink: 'syz.3.4431': attribute type 20 has an invalid length. [ 431.157505][T21591] netlink: 'syz.3.4431': attribute type 20 has an invalid length. [ 431.539761][T21620] sctp: Trying to GSO but underlying device doesn't support it. [ 431.713726][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 432.045546][T21654] rdma_rxe: rxe_newlink: failed to add wlan1 [ 432.559788][T21677] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 432.900316][T21694] 8021q: adding VLAN 0 to HW filter on device bond4 [ 433.014899][T21696] vlan3: entered allmulticast mode [ 433.043556][T21696] bond4: entered allmulticast mode [ 433.331069][T21724] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.391995][T21727] gretap0: entered promiscuous mode [ 433.405319][T21722] tipc: Enabled bearer , priority 0 [ 433.440894][T21722] syzkaller0: entered promiscuous mode [ 433.458211][T21722] syzkaller0: entered allmulticast mode [ 433.666733][T21738] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 433.696214][T21720] tipc: Resetting bearer [ 433.724234][T21720] tipc: Disabling bearer [ 434.531288][T21796] __nla_validate_parse: 18 callbacks suppressed [ 434.531309][T21796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4488'. [ 434.879606][T21820] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4492'. [ 435.008576][T21824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4495'. [ 435.018255][T21826] validate_nla: 1 callbacks suppressed [ 435.018275][T21826] netlink: 'syz.2.4494': attribute type 1 has an invalid length. [ 435.040038][T21824] bridge_slave_1: left allmulticast mode [ 435.046276][T21824] bridge_slave_1: left promiscuous mode [ 435.074985][T21824] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.084877][T21826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4494'. [ 435.122937][T21826] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4494'. [ 435.123646][T21835] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 435.160056][T21826] netlink: 'syz.2.4494': attribute type 5 has an invalid length. [ 435.231186][T21824] bridge_slave_0: left allmulticast mode [ 435.237308][T21824] bridge_slave_0: left promiscuous mode [ 435.243836][T21824] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.495119][T21852] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4502'. [ 435.543839][T21855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4503'. [ 435.569560][T21855] netlink: 'syz.4.4503': attribute type 7 has an invalid length. [ 435.581169][T21855] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4503'. [ 435.737744][T21868] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4504'. [ 435.849668][T21879] sctp: [Deprecated]: syz.2.4506 (pid 21879) Use of int in maxseg socket option. [ 435.849668][T21879] Use struct sctp_assoc_value instead [ 435.991344][ T1143] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 436.137031][T21896] wg1 speed is unknown, defaulting to 1000 [ 436.145322][T21896] lo speed is unknown, defaulting to 1000 [ 436.194194][T12728] block nbd1: Possible stuck request ffff888025510000: control (read@0,1024B). Runtime 210 seconds [ 436.205060][T12728] block nbd1: Possible stuck request ffff8880255101c0: control (read@1024,1024B). Runtime 210 seconds [ 436.216311][T12728] block nbd1: Possible stuck request ffff888025510380: control (read@2048,1024B). Runtime 210 seconds [ 436.230242][T12728] block nbd1: Possible stuck request ffff888025510540: control (read@3072,1024B). Runtime 210 seconds [ 436.358271][T21896] hsr0 speed is unknown, defaulting to 1000 [ 436.716821][T21893] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4509'. [ 436.982937][ T5870] Bluetooth: hci0: command 0x0401 tx timeout [ 437.005025][T21918] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 437.068441][T21924] netlink: 'syz.4.4513': attribute type 1 has an invalid length. [ 437.092331][T21924] netlink: 'syz.4.4513': attribute type 4 has an invalid length. [ 437.119122][T21919] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 437.189114][T21918] tipc: Enabled bearer , priority 0 [ 437.229673][T21918] syzkaller0: entered promiscuous mode [ 437.276120][T21918] syzkaller0: entered allmulticast mode [ 437.324693][T21918] macsec0: mtu less than device minimum [ 437.367759][T21915] tipc: Resetting bearer [ 437.488461][T21915] tipc: Disabling bearer [ 437.756553][T21958] sctp: [Deprecated]: syz.3.4526 (pid 21958) Use of int in max_burst socket option. [ 437.756553][T21958] Use struct sctp_assoc_value instead [ 437.848618][T21961] bond0: entered promiscuous mode [ 437.863597][T21961] bond_slave_0: entered promiscuous mode [ 437.884180][T21961] bond_slave_1: entered promiscuous mode [ 437.905190][T21961] geneve1: entered promiscuous mode [ 437.913920][T21961] batadv0: entered promiscuous mode [ 437.927623][T21961] batadv0: left promiscuous mode [ 437.935035][T21961] bond0: left promiscuous mode [ 437.939952][T21961] bond_slave_0: left promiscuous mode [ 437.953374][T21961] bond_slave_1: left promiscuous mode [ 437.959120][T21961] geneve1: left promiscuous mode [ 437.978551][T21969] gretap1: entered promiscuous mode [ 437.984056][T21969] gretap1: entered allmulticast mode [ 438.377810][T21989] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 438.743214][T22007] netlink: 'syz.4.4541': attribute type 5 has an invalid length. [ 439.230365][T22046] bridge0: entered promiscuous mode [ 439.237342][T22046] macsec2: entered promiscuous mode [ 439.260761][T22046] macsec2: entered allmulticast mode [ 439.287514][T22046] bridge0: entered allmulticast mode [ 439.305823][T22046] bridge0: port 3(macsec2) entered blocking state [ 439.335635][T22055] netlink: 'syz.1.4552': attribute type 10 has an invalid length. [ 439.350975][T22046] bridge0: port 3(macsec2) entered disabled state [ 439.458523][T22046] bridge0: left allmulticast mode [ 439.520290][T22046] bridge0: left promiscuous mode [ 439.583977][T22055] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.591620][T22055] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.619773][T22055] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.626989][T22055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.634589][T22055] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.641776][T22055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.657888][T22055] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 439.866333][T22083] netlink: 'syz.3.4558': attribute type 16 has an invalid length. [ 439.874727][T22083] netlink: 'syz.3.4558': attribute type 17 has an invalid length. [ 439.921977][T22083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.944372][T22083] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.963867][T22083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 440.130039][T22090] netlink: 'syz.0.4562': attribute type 1 has an invalid length. [ 440.311468][T22104] tipc: Enabled bearer , priority 0 [ 440.322002][T22104] syzkaller0: entered promiscuous mode [ 440.342910][T22104] syzkaller0: entered allmulticast mode [ 440.410735][T22113] __nla_validate_parse: 19 callbacks suppressed [ 440.410757][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4568'. [ 440.440867][T22118] netlink: 'syz.3.4570': attribute type 24 has an invalid length. [ 440.762025][T22144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4574'. [ 441.061769][T22102] tipc: Resetting bearer [ 441.237925][T22167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4580'. [ 441.247030][T22167] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4580'. [ 441.256906][T22167] netlink: 'syz.2.4580': attribute type 5 has an invalid length. [ 441.353038][T12505] tipc: Node number set to 2736300596 [ 441.396333][T22175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4583'. [ 441.416073][T22177] netlink: 'syz.0.4582': attribute type 3 has an invalid length. [ 441.427700][T22102] tipc: Disabling bearer [ 441.727906][T22189] syzkaller0: entered promiscuous mode [ 441.738707][T22189] syzkaller0: entered allmulticast mode [ 441.746866][T22190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4585'. [ 441.889282][T22203] netlink: 'syz.4.4591': attribute type 21 has an invalid length. [ 442.231385][T22221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4597'. [ 442.286747][T22224] macvlan0: entered allmulticast mode [ 442.296843][T22224] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 442.350045][T22232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4598'. [ 442.371292][T22232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4598'. [ 442.805342][T22248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4605'. [ 443.001550][T22260] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 443.891303][T22318] netlink: 'syz.4.4626': attribute type 1 has an invalid length. [ 443.975403][T22327] tipc: Started in network mode [ 443.980418][T22327] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 443.990747][T22327] tipc: Enabling of bearer rejected, failed to enable media [ 444.047652][T22318] 8021q: adding VLAN 0 to HW filter on device bond6 [ 444.086406][T22318] bond5: (slave bond6): making interface the new active one [ 444.121105][T22318] bond5: (slave bond6): Enslaving as an active interface with an up link [ 444.132039][T22322] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 444.151331][T22329] bond5: entered promiscuous mode [ 444.159002][T22329] bond6: entered promiscuous mode [ 444.169911][T22329] bond5: entered allmulticast mode [ 444.178902][T22329] bond6: entered allmulticast mode [ 444.195508][T22329] 8021q: adding VLAN 0 to HW filter on device bond5 [ 444.206700][T22330] tipc: Enabled bearer , priority 0 [ 444.242751][T22336] syzkaller0: entered promiscuous mode [ 444.255987][T22336] syzkaller0: entered allmulticast mode [ 444.271125][T22341] syzkaller0: entered promiscuous mode [ 444.281079][T22341] syzkaller0: entered allmulticast mode [ 444.347307][T22324] tipc: Resetting bearer [ 444.371430][T22324] lo: entered promiscuous mode [ 444.377349][T22324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.406457][T22322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.418082][T22323] tipc: Resetting bearer [ 444.467523][T22323] tipc: Disabling bearer [ 445.635898][T22418] __nla_validate_parse: 4 callbacks suppressed [ 445.635919][T22418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4650'. [ 445.837790][T22423] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4649'. [ 445.885922][ T5948] hid-generic 0005:0B57:0002.0002: item fetching failed at offset 0/1 [ 445.913518][ T5948] hid-generic 0005:0B57:0002.0002: probe with driver hid-generic failed with error -22 [ 446.053362][T22443] Bluetooth: MGMT ver 1.23 [ 446.182958][T22448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4649'. [ 446.255058][T22451] netlink: 'syz.2.4656': attribute type 3 has an invalid length. [ 446.268850][T22451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4656'. [ 446.566173][T22419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4649'. [ 446.964028][T22472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4663'. [ 447.014094][T22470] syzkaller0: entered promiscuous mode [ 447.047818][T22470] syzkaller0: entered allmulticast mode [ 447.094617][T22473] tipc: Enabled bearer , priority 0 [ 447.122626][T22474] tipc: Enabling of bearer rejected, already enabled [ 447.152332][T22470] sch_tbf: peakrate 9 is lower than or equals to rate 2147483649 ! [ 447.233243][T22478] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4664'. [ 447.248886][ T5886] Bluetooth: hci4: command 0x0406 tx timeout [ 447.358161][T22489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4667'. [ 447.499553][T22473] sch_tbf: peakrate 9 is lower than or equals to rate 2147483649 ! [ 447.531865][T22474] tipc: Resetting bearer [ 447.611251][T22474] tipc: Resetting bearer [ 447.635587][T22498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4670'. [ 447.645155][T22498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4670'. [ 447.681443][T22474] tipc: Disabling bearer [ 447.756783][T22498] erspan0: entered promiscuous mode [ 447.798989][T22498] erspan0: left promiscuous mode [ 448.103252][ T5881] Bluetooth: hci2: command 0x0406 tx timeout [ 448.105389][ T5870] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 448.962347][T22577] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 449.041029][T22586] netlink: 'syz.2.4693': attribute type 12 has an invalid length. [ 449.051442][T22581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.134256][T22588] vlan0: entered allmulticast mode [ 449.167181][T22588] bond1: entered allmulticast mode [ 449.310732][T22577] mac80211_hwsim hwsim49 ÿ: renamed from wlan1 [ 450.272271][ T55] block nbd3: Possible stuck request ffff8880610ae000: control (read@0,1024B). Runtime 90 seconds [ 450.283122][ T55] block nbd3: Possible stuck request ffff8880610ae1c0: control (read@1024,1024B). Runtime 90 seconds [ 450.294182][ T55] block nbd3: Possible stuck request ffff8880610ae380: control (read@2048,1024B). Runtime 90 seconds [ 450.305286][ T55] block nbd3: Possible stuck request ffff8880610ae540: control (read@3072,1024B). Runtime 90 seconds [ 450.479216][T22651] sctp: [Deprecated]: syz.2.4712 (pid 22651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.479216][T22651] Use struct sctp_sack_info instead [ 450.496511][T22652] sctp: [Deprecated]: syz.2.4712 (pid 22652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.496511][T22652] Use struct sctp_sack_info instead [ 450.627073][T22660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.776638][T22671] netlink: 'syz.2.4719': attribute type 10 has an invalid length. [ 450.798374][T22671] __nla_validate_parse: 12 callbacks suppressed [ 450.798392][T22671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4719'. [ 450.878586][T22671] team0: Port device geneve0 added [ 450.896501][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.908072][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.944898][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.013321][T22686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4723'. [ 451.049698][T22680] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 451.052961][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.531775][T22720] netlink: 'syz.1.4730': attribute type 1 has an invalid length. [ 451.587935][T22728] netlink: 'syz.4.4732': attribute type 1 has an invalid length. [ 451.599118][T22728] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4732'. [ 451.611977][T22728] netlink: 'syz.4.4732': attribute type 3 has an invalid length. [ 451.628840][T22728] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4732'. [ 451.844459][T22735] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20001 [ 451.859946][T22738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4737'. [ 451.876699][T22739] tipc: Enabled bearer , priority 0 [ 451.884511][T22739] syzkaller0: entered promiscuous mode [ 451.890015][T22739] syzkaller0: entered allmulticast mode [ 451.897788][T22738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.979765][T22742] tipc: Resetting bearer [ 452.100133][T22737] tipc: Resetting bearer [ 452.128200][T22737] tipc: Disabling bearer [ 452.411714][T22758] netlink: 'syz.3.4742': attribute type 1 has an invalid length. [ 452.420403][T22758] netlink: 'syz.3.4742': attribute type 3 has an invalid length. [ 452.429368][T22758] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4742'. [ 452.439112][T22758] NCSI netlink: No device for ifindex 131080 [ 452.454844][T22758] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4742'. [ 452.471922][T22758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4742'. [ 452.484614][T22758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4742'. [ 452.615588][T22760] netlink: 'syz.3.4743': attribute type 5 has an invalid length. [ 452.664435][T22762] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4744'. [ 452.834511][T22763] tipc: Enabling of bearer rejected, failed to enable media [ 453.121923][T22776] sctp: [Deprecated]: syz.3.4746 (pid 22776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.121923][T22776] Use struct sctp_sack_info instead [ 453.616410][T22803] openvswitch: netlink: Flow actions attr not present in new flow. [ 453.849804][T22821] netlink: 'syz.1.4761': attribute type 6 has an invalid length. [ 453.858592][T22821] netlink: 'syz.1.4761': attribute type 1 has an invalid length. [ 454.290338][T22846] netlink: 'syz.1.4768': attribute type 1 has an invalid length. [ 454.322846][T22850] netlink: 'syz.2.4769': attribute type 6 has an invalid length. [ 454.342351][ T5881] Bluetooth: hci2: command 0x0406 tx timeout [ 455.018849][T22894] IPVS: set_ctl: invalid protocol: 92 172.20.20.62:20003 [ 455.055002][T22894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.339033][T22969] __nla_validate_parse: 15 callbacks suppressed [ 456.339057][T22969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4802'. [ 456.469592][T22975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4804'. [ 456.541444][T22979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4806'. [ 456.587405][T22982] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.634080][T22982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4807'. [ 457.041704][T22975] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 457.128198][T23009] bridge6: entered promiscuous mode [ 457.143002][T23009] bridge6: entered allmulticast mode [ 457.284303][T23015] pim6reg1: entered promiscuous mode [ 457.295112][T23015] pim6reg1: entered allmulticast mode [ 457.304560][T23018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4814'. [ 458.096311][T23025] openvswitch: netlink: Actions may not be safe on all matching packets [ 458.134122][T23025] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4818'. [ 458.209912][T23034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4819'. [ 458.394750][T23048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4825'. [ 458.532779][T23050] validate_nla: 1 callbacks suppressed [ 458.532798][T23050] netlink: 'syz.3.4827': attribute type 3 has an invalid length. [ 458.533937][T23053] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4828'. [ 458.538382][T23050] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4827'. [ 458.616110][T23056] netlink: 'syz.3.4827': attribute type 3 has an invalid length. [ 458.915842][T23074] wg1 speed is unknown, defaulting to 1000 [ 458.946257][T23074] lo speed is unknown, defaulting to 1000 [ 459.262507][T23095] erspan0: entered allmulticast mode [ 459.382393][ C0] ================================================================== [ 459.390523][ C0] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 459.398455][ C0] Read of size 1 at addr ffff888058196970 by task syz.2.4841/23101 [ 459.406373][ C0] [ 459.408777][ C0] CPU: 0 UID: 0 PID: 23101 Comm: syz.2.4841 Not tainted syzkaller #0 PREEMPT(full) [ 459.408811][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.408852][ C0] Call Trace: [ 459.408861][ C0] [ 459.408870][ C0] dump_stack_lvl+0x189/0x250 [ 459.408899][ C0] ? __kasan_check_byte+0x12/0x40 [ 459.408939][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.408966][ C0] ? lock_release+0x4b/0x3e0 [ 459.409001][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 459.409032][ C0] print_report+0xca/0x240 [ 459.409053][ C0] ? xfrm_state_find+0x2cf2/0x5400 [ 459.409074][ C0] kasan_report+0x118/0x150 [ 459.409107][ C0] ? xfrm_state_find+0x2cf2/0x5400 [ 459.409134][ C0] xfrm_state_find+0x2cf2/0x5400 [ 459.409155][ C0] ? __lock_acquire+0xab9/0xd20 [ 459.409196][ C0] ? unwind_next_frame+0xa5/0x2390 [ 459.409222][ C0] ? xfrm_state_find+0x1da/0x5400 [ 459.409246][ C0] ? __pfx_xfrm_state_find+0x10/0x10 [ 459.409279][ C0] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 459.409322][ C0] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 459.409354][ C0] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 459.409384][ C0] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 459.409415][ C0] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 459.409467][ C0] ? xfrm_expand_policies+0x41f/0x6a0 [ 459.409499][ C0] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 459.409532][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 459.409563][ C0] ? dst_cache_get+0x10e/0x5b0 [ 459.409595][ C0] xfrm_lookup_route+0x3c/0x1c0 [ 459.409624][ C0] tipc_udp_xmit+0x1c3/0xaa0 [ 459.409650][ C0] ? tipc_udp_xmit+0xa4/0xaa0 [ 459.409672][ C0] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 459.409697][ C0] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 459.409725][ C0] ? __asan_memcpy+0x40/0x70 [ 459.409749][ C0] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 459.409784][ C0] tipc_udp_send_msg+0x27f/0x3f0 [ 459.409812][ C0] tipc_bearer_xmit_skb+0x2b0/0x400 [ 459.409846][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 459.409878][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 459.409918][ C0] tipc_disc_timeout+0x580/0x6d0 [ 459.409961][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 459.410002][ C0] call_timer_fn+0x17e/0x5f0 [ 459.410033][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 459.410063][ C0] ? call_timer_fn+0xbe/0x5f0 [ 459.410093][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 459.410129][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 459.410158][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.410188][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 459.410220][ C0] __run_timer_base+0x61a/0x860 [ 459.410248][ C0] ? ktime_get+0x3e/0x1f0 [ 459.410279][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 459.410306][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 459.410350][ C0] run_timer_softirq+0xb7/0x180 [ 459.410379][ C0] handle_softirqs+0x283/0x870 [ 459.410403][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 459.410427][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 459.410455][ C0] __irq_exit_rcu+0xca/0x1f0 [ 459.410476][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 459.410502][ C0] irq_exit_rcu+0x9/0x30 [ 459.410520][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 459.410551][ C0] [ 459.410558][ C0] [ 459.410566][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 459.410595][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 459.410627][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 7b 21 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 459.410645][ C0] RSP: 0018:ffffc900046d7970 EFLAGS: 00000206 [ 459.410664][ C0] RAX: 506eadf35ab4c800 RBX: 0000000000000000 RCX: 506eadf35ab4c800 [ 459.410679][ C0] RDX: 0000000000000000 RSI: ffffffff8dba8050 RDI: ffffffff8be33880 [ 459.410693][ C0] RBP: ffffffff820a63f1 R08: 0000000000000000 R09: ffffffff820a63f1 [ 459.410707][ C0] R10: dffffc0000000000 R11: ffffed10050b7a79 R12: 0000000000000002 [ 459.410722][ C0] R13: ffffffff8e139f20 R14: 0000000000000000 R15: 0000000000000246 [ 459.410739][ C0] ? count_memcg_event_mm+0x21/0x260 [ 459.410767][ C0] ? count_memcg_event_mm+0x21/0x260 [ 459.410803][ C0] ? follow_page_pte+0x7ef/0x13e0 [ 459.410830][ C0] ? count_memcg_event_mm+0x21/0x260 [ 459.410857][ C0] count_memcg_event_mm+0x3d/0x260 [ 459.410882][ C0] ? count_memcg_event_mm+0x21/0x260 [ 459.410929][ C0] handle_mm_fault+0x50f/0x8e0 [ 459.410963][ C0] __get_user_pages+0x1699/0x2ce0 [ 459.411008][ C0] populate_vma_page_range+0x29f/0x3a0 [ 459.411036][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 459.411059][ C0] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 459.411092][ C0] ? down_read+0x1ad/0x2e0 [ 459.411114][ C0] __mm_populate+0x24c/0x380 [ 459.411139][ C0] ? __pfx___mm_populate+0x10/0x10 [ 459.411164][ C0] ? up_write+0x1c4/0x420 [ 459.411189][ C0] vm_mmap_pgoff+0x387/0x4d0 [ 459.411212][ C0] ? __se_sys_futex+0x36f/0x400 [ 459.411241][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 459.411267][ C0] ? rcu_is_watching+0x15/0xb0 [ 459.411289][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 459.411315][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 459.411339][ C0] do_syscall_64+0xfa/0x3b0 [ 459.411358][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.411387][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.411407][ C0] ? clear_bhb_loop+0x60/0xb0 [ 459.411430][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.411450][ C0] RIP: 0033:0x7f08bcd8ebe9 [ 459.411468][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.411485][ C0] RSP: 002b:00007f08bdc39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 459.411506][ C0] RAX: ffffffffffffffda RBX: 00007f08bcfc5fa0 RCX: 00007f08bcd8ebe9 [ 459.411521][ C0] RDX: 0000000003000004 RSI: 0000000000c00000 RDI: 0000200000001000 [ 459.411535][ C0] RBP: 00007f08bce11e19 R08: ffffffffffffffff R09: 0000000000000000 [ 459.411549][ C0] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000000 [ 459.411562][ C0] R13: 00007f08bcfc6038 R14: 00007f08bcfc5fa0 R15: 00007ffee52bfcc8 [ 459.411587][ C0] [ 459.411594][ C0] [ 460.011193][ C0] Allocated by task 19108: [ 460.015613][ C0] kasan_save_track+0x3e/0x80 [ 460.020317][ C0] __kasan_slab_alloc+0x6c/0x80 [ 460.025202][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 460.030682][ C0] xfrm_state_alloc+0x24/0x2f0 [ 460.035464][ C0] xfrm_add_sa+0x17d1/0x4070 [ 460.040162][ C0] xfrm_user_rcv_msg+0x7a0/0xab0 [ 460.045123][ C0] netlink_rcv_skb+0x205/0x470 [ 460.049916][ C0] xfrm_netlink_rcv+0x79/0x90 [ 460.054616][ C0] netlink_unicast+0x82c/0x9e0 [ 460.059402][ C0] netlink_sendmsg+0x805/0xb30 [ 460.064177][ C0] __sock_sendmsg+0x21c/0x270 [ 460.068868][ C0] ____sys_sendmsg+0x505/0x830 [ 460.073662][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 460.078346][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 460.083280][ C0] do_syscall_64+0xfa/0x3b0 [ 460.087784][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.093680][ C0] [ 460.096005][ C0] Freed by task 6115: [ 460.099993][ C0] kasan_save_track+0x3e/0x80 [ 460.104706][ C0] kasan_save_free_info+0x46/0x50 [ 460.109739][ C0] __kasan_slab_free+0x5b/0x80 [ 460.114514][ C0] kmem_cache_free+0x18f/0x400 [ 460.119287][ C0] xfrm_state_gc_task+0x52d/0x6b0 [ 460.124319][ C0] process_scheduled_works+0xae1/0x17b0 [ 460.129874][ C0] worker_thread+0x8a0/0xda0 [ 460.134472][ C0] kthread+0x70e/0x8a0 [ 460.138581][ C0] ret_from_fork+0x3fc/0x770 [ 460.143179][ C0] ret_from_fork_asm+0x1a/0x30 [ 460.147982][ C0] [ 460.150309][ C0] The buggy address belongs to the object at ffff888058196640 [ 460.150309][ C0] which belongs to the cache xfrm_state of size 928 [ 460.164278][ C0] The buggy address is located 816 bytes inside of [ 460.164278][ C0] freed 928-byte region [ffff888058196640, ffff8880581969e0) [ 460.178081][ C0] [ 460.180422][ C0] The buggy address belongs to the physical page: [ 460.186858][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58194 [ 460.195652][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 460.204174][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 460.211746][ C0] page_type: f5(slab) [ 460.215751][ C0] raw: 00fff00000000040 ffff8881446cd8c0 dead000000000122 0000000000000000 [ 460.224355][ C0] raw: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000 [ 460.232963][ C0] head: 00fff00000000040 ffff8881446cd8c0 dead000000000122 0000000000000000 [ 460.241646][ C0] head: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000 [ 460.250334][ C0] head: 00fff00000000002 ffffea0001606501 00000000ffffffff 00000000ffffffff [ 460.259026][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 460.267755][ C0] page dumped because: kasan: bad access detected [ 460.274196][ C0] page_owner tracks the page as allocated [ 460.279933][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6369, tgid 6368 (syz.2.114), ts 104046347091, free_ts 103894272116 [ 460.299149][ C0] post_alloc_hook+0x240/0x2a0 [ 460.303944][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 460.309505][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 460.315324][ C0] alloc_pages_mpol+0x232/0x4a0 [ 460.320199][ C0] allocate_slab+0x8a/0x370 [ 460.324719][ C0] ___slab_alloc+0xbeb/0x1420 [ 460.329414][ C0] kmem_cache_alloc_noprof+0x283/0x3c0 [ 460.334896][ C0] xfrm_state_alloc+0x24/0x2f0 [ 460.339674][ C0] xfrm_add_sa+0x17d1/0x4070 [ 460.344285][ C0] xfrm_user_rcv_msg+0x7a0/0xab0 [ 460.349243][ C0] netlink_rcv_skb+0x205/0x470 [ 460.354033][ C0] xfrm_netlink_rcv+0x79/0x90 [ 460.358747][ C0] netlink_unicast+0x82c/0x9e0 [ 460.363533][ C0] netlink_sendmsg+0x805/0xb30 [ 460.368327][ C0] __sock_sendmsg+0x21c/0x270 [ 460.373020][ C0] ____sys_sendmsg+0x505/0x830 [ 460.377792][ C0] page last free pid 6348 tgid 6343 stack trace: [ 460.384124][ C0] __free_frozen_pages+0xbc4/0xd30 [ 460.389252][ C0] free_large_kmalloc+0x13a/0x1f0 [ 460.394292][ C0] free_netdev+0x3e2/0x700 [ 460.398718][ C0] netdev_run_todo+0xd0c/0xea0 [ 460.403495][ C0] tun_chr_close+0x13c/0x1c0 [ 460.408093][ C0] __fput+0x449/0xa70 [ 460.412086][ C0] task_work_run+0x1d1/0x260 [ 460.416703][ C0] do_exit+0x6b5/0x2300 [ 460.420883][ C0] do_group_exit+0x21c/0x2d0 [ 460.425498][ C0] get_signal+0x1286/0x1340 [ 460.430005][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 460.435573][ C0] exit_to_user_mode_loop+0x75/0x110 [ 460.440888][ C0] do_syscall_64+0x2bd/0x3b0 [ 460.445503][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.451416][ C0] [ 460.453751][ C0] Memory state around the buggy address: [ 460.459391][ C0] ffff888058196800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 460.467455][ C0] ffff888058196880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 460.475526][ C0] >ffff888058196900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 460.483592][ C0] ^ [ 460.491310][ C0] ffff888058196980: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 460.499379][ C0] ffff888058196a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 460.507444][ C0] ================================================================== [ 460.515730][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 460.522952][ C0] CPU: 0 UID: 0 PID: 23101 Comm: syz.2.4841 Not tainted syzkaller #0 PREEMPT(full) [ 460.532359][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.542445][ C0] Call Trace: [ 460.545750][ C0] [ 460.548625][ C0] dump_stack_lvl+0x99/0x250 [ 460.553249][ C0] ? __asan_memcpy+0x40/0x70 [ 460.557878][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.563121][ C0] ? __pfx__printk+0x10/0x10 [ 460.567762][ C0] vpanic+0x281/0x750 [ 460.571776][ C0] ? __pfx_vpanic+0x10/0x10 [ 460.576319][ C0] ? irqentry_exit+0x74/0x90 [ 460.581061][ C0] panic+0xb9/0xc0 [ 460.584815][ C0] ? __pfx_panic+0x10/0x10 [ 460.589274][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 460.595207][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 460.601164][ C0] ? xfrm_state_find+0x2cf2/0x5400 [ 460.606309][ C0] check_panic_on_warn+0x89/0xb0 [ 460.611293][ C0] ? xfrm_state_find+0x2cf2/0x5400 [ 460.616469][ C0] end_report+0x78/0x160 [ 460.620762][ C0] kasan_report+0x129/0x150 [ 460.625322][ C0] ? xfrm_state_find+0x2cf2/0x5400 [ 460.630484][ C0] xfrm_state_find+0x2cf2/0x5400 [ 460.635553][ C0] ? __lock_acquire+0xab9/0xd20 [ 460.640473][ C0] ? unwind_next_frame+0xa5/0x2390 [ 460.645632][ C0] ? xfrm_state_find+0x1da/0x5400 [ 460.650703][ C0] ? __pfx_xfrm_state_find+0x10/0x10 [ 460.656049][ C0] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 460.662269][ C0] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 460.668215][ C0] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 460.674860][ C0] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 460.680823][ C0] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 460.686891][ C0] ? xfrm_expand_policies+0x41f/0x6a0 [ 460.692309][ C0] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 460.697724][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 460.703555][ C0] ? dst_cache_get+0x10e/0x5b0 [ 460.708347][ C0] xfrm_lookup_route+0x3c/0x1c0 [ 460.713229][ C0] tipc_udp_xmit+0x1c3/0xaa0 [ 460.717833][ C0] ? tipc_udp_xmit+0xa4/0xaa0 [ 460.722530][ C0] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 460.727702][ C0] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 460.732919][ C0] ? __asan_memcpy+0x40/0x70 [ 460.737522][ C0] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 460.742751][ C0] tipc_udp_send_msg+0x27f/0x3f0 [ 460.747710][ C0] tipc_bearer_xmit_skb+0x2b0/0x400 [ 460.752937][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 460.758249][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 460.764000][ C0] tipc_disc_timeout+0x580/0x6d0 [ 460.768959][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 460.774443][ C0] call_timer_fn+0x17e/0x5f0 [ 460.779076][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 460.784554][ C0] ? call_timer_fn+0xbe/0x5f0 [ 460.789259][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 460.794396][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.799630][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.804849][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 460.810325][ C0] __run_timer_base+0x61a/0x860 [ 460.815195][ C0] ? ktime_get+0x3e/0x1f0 [ 460.819547][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 460.824947][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 460.831218][ C0] run_timer_softirq+0xb7/0x180 [ 460.836090][ C0] handle_softirqs+0x283/0x870 [ 460.840869][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 460.845645][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 460.850947][ C0] __irq_exit_rcu+0xca/0x1f0 [ 460.855555][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 460.860771][ C0] irq_exit_rcu+0x9/0x30 [ 460.865035][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 460.870687][ C0] [ 460.873629][ C0] [ 460.876574][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 460.882567][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 460.887869][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 7b 21 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 460.907481][ C0] RSP: 0018:ffffc900046d7970 EFLAGS: 00000206 [ 460.913552][ C0] RAX: 506eadf35ab4c800 RBX: 0000000000000000 RCX: 506eadf35ab4c800 [ 460.921529][ C0] RDX: 0000000000000000 RSI: ffffffff8dba8050 RDI: ffffffff8be33880 [ 460.929512][ C0] RBP: ffffffff820a63f1 R08: 0000000000000000 R09: ffffffff820a63f1 [ 460.937492][ C0] R10: dffffc0000000000 R11: ffffed10050b7a79 R12: 0000000000000002 [ 460.945462][ C0] R13: ffffffff8e139f20 R14: 0000000000000000 R15: 0000000000000246 [ 460.953440][ C0] ? count_memcg_event_mm+0x21/0x260 [ 460.958741][ C0] ? count_memcg_event_mm+0x21/0x260 [ 460.964047][ C0] ? follow_page_pte+0x7ef/0x13e0 [ 460.969088][ C0] ? count_memcg_event_mm+0x21/0x260 [ 460.974385][ C0] count_memcg_event_mm+0x3d/0x260 [ 460.979516][ C0] ? count_memcg_event_mm+0x21/0x260 [ 460.984835][ C0] handle_mm_fault+0x50f/0x8e0 [ 460.989629][ C0] __get_user_pages+0x1699/0x2ce0 [ 460.994694][ C0] populate_vma_page_range+0x29f/0x3a0 [ 461.000165][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 461.006176][ C0] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 461.012090][ C0] ? down_read+0x1ad/0x2e0 [ 461.016510][ C0] __mm_populate+0x24c/0x380 [ 461.021159][ C0] ? __pfx___mm_populate+0x10/0x10 [ 461.026296][ C0] ? up_write+0x1c4/0x420 [ 461.030646][ C0] vm_mmap_pgoff+0x387/0x4d0 [ 461.035251][ C0] ? __se_sys_futex+0x36f/0x400 [ 461.040117][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 461.045238][ C0] ? rcu_is_watching+0x15/0xb0 [ 461.050008][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 461.054873][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 461.059649][ C0] do_syscall_64+0xfa/0x3b0 [ 461.064176][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.069388][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.075462][ C0] ? clear_bhb_loop+0x60/0xb0 [ 461.080157][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.086059][ C0] RIP: 0033:0x7f08bcd8ebe9 [ 461.090480][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.110091][ C0] RSP: 002b:00007f08bdc39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 461.118513][ C0] RAX: ffffffffffffffda RBX: 00007f08bcfc5fa0 RCX: 00007f08bcd8ebe9 [ 461.126497][ C0] RDX: 0000000003000004 RSI: 0000000000c00000 RDI: 0000200000001000 [ 461.134481][ C0] RBP: 00007f08bce11e19 R08: ffffffffffffffff R09: 0000000000000000 [ 461.142455][ C0] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000000 [ 461.150427][ C0] R13: 00007f08bcfc6038 R14: 00007f08bcfc5fa0 R15: 00007ffee52bfcc8 [ 461.158412][ C0] [ 461.161738][ C0] Kernel Offset: disabled [ 461.166078][ C0] Rebooting in 86400 seconds..