last executing test programs: 2.332220892s ago: executing program 1 (id=4020): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRES32=0x0, @ANYBLOB="00040000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in=@empty, 0x4d6, 0x6c}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x7, 0x8}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.87421177s ago: executing program 4 (id=4032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40004) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xb], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x21}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) 1.781234321s ago: executing program 0 (id=4035): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) 1.636040185s ago: executing program 0 (id=4036): writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x11, r0, 0x75fb3000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r2, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0xf00, 0x2c000011) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061190400000068c4dee3d983381b699c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x11, r0, 0x75fb3000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r1, 0x0, 0x3}, 0x18) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async) sendmmsg(r2, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0xf00, 0x2c000011) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061190400000068c4dee3d983381b699c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) (async) 1.63510232s ago: executing program 4 (id=4037): syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x2b, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x840000a0}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x10}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x4c}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) setsockopt$inet6_mtu(r1, 0x29, 0x4e, 0x0, 0x0) r5 = socket(0x28, 0x4, 0x91) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x2b, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x840000a0}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x10}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x4c}}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) (async) setsockopt$inet6_mtu(r1, 0x29, 0x4e, 0x0, 0x0) (async) socket(0x28, 0x4, 0x91) (async) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) (async) 1.607421611s ago: executing program 0 (id=4039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x1, 0x8, 0xfffffffc, 0x1, {{0x4d, 0x4, 0x1, 0x6, 0x134, 0x68, 0x0, 0x1e, 0x2f, 0x0, @empty, @remote, {[@cipso={0x86, 0x3b, 0x3, [{0x7, 0xa, "22d5559c32d04b1b"}, {0x5, 0xd, "ceced5e8104380630e6cef"}, {0x5, 0x12, "373f67e50a588a89042bc13f0e9335e0"}, {0x6, 0x4, "0d86"}, {0x1, 0x8, "8eab530a9173"}]}, @generic={0x88, 0x5, "9eac08"}, @generic={0xb, 0x6, "60f5c03a"}, @timestamp_prespec={0x44, 0x54, 0x9b, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x3}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xfffe0}, {@private=0xa010101, 0x7}, {@remote, 0x8}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3fc}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x8}, {@remote}]}, @generic={0x94, 0xd, "10bba778db10c33599fc13"}, @timestamp_addr={0x44, 0x4c, 0xd4, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0xb}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}, {@local, 0x3}, {@private=0xa010101, 0x7ff}, {@multicast2, 0x8001}, {@private=0xa010102, 0x254}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x10001}]}, @generic={0x86, 0x11, "7ce2342c3c31be58d46358865a33b2"}, @timestamp_addr={0x44, 0x24, 0xe4, 0x1, 0x4, [{@multicast2, 0x3}, {@loopback, 0x8}, {@multicast1, 0x2}, {@multicast2, 0x1}]}]}}}}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@multicast2, @local, r2}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socket$inet6(0xa, 0x3, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="2d32cc04000083d3b3928393d21501809148b5d1452b075caff4000000000000", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f0000001400000004"], 0x20) r8 = socket$pptp(0x18, 0x1, 0x2) accept4(r8, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) 1.558126532s ago: executing program 4 (id=4040): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x0, 0xff, 0x0, 0xfffa, 0x81}, 0x20) 1.491699814s ago: executing program 4 (id=4042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x4e25, 0x0, @mcast2}}}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000700), &(0x7f0000000740)=0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.491022903s ago: executing program 0 (id=4043): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xfffffffffffffd7e, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x128}, 0xc011) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) pipe(0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1bc, 0x19, 0x200, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x1}, {}, 0x0, 0x200}, [@tmpl={0x104, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in=@private=0xa010100, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@local, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1bc}}, 0x0) 1.411301304s ago: executing program 1 (id=4045): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'veth1_vlan\x00', &(0x7f0000000440)=@ethtool_flash={0x26, 0x8000000, './file0\x00'}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.347775639s ago: executing program 4 (id=4047): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, 0x8032, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000240)=0x5, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xd, &(0x7f0000000700)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe95b}}], &(0x7f0000000800)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040)={0x8, 0x8, 0x8, 0x2, 0x81, 0x4, 0x4659}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r4, 0x7ca8e000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r5, &(0x7f0000000440)=[{0x0}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local, 0x1, 0x7, [@multicast1, @multicast1, @empty, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010101, @loopback]}, 0x2c) 1.250640252s ago: executing program 1 (id=4050): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000001e7a7000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r3, @ANYBLOB="08001f0009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000001e7a7000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r3, @ANYBLOB="08001f0009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) 1.133452098s ago: executing program 1 (id=4052): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000180)) read(r0, &(0x7f00000003c0)=""/52, 0x34) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x9) (async) connect$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000000)=0xb, 0x4) (async, rerun: 32) connect$vsock_stream(r3, 0x0, 0x0) (rerun: 32) 1.027557669s ago: executing program 2 (id=4054): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x10011, 0x2, 0x2, 0xc, 0xc}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) 962.268234ms ago: executing program 1 (id=4055): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0xcf, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000000)={0x1, 0x0, 0x1000, 0xdd, &(0x7f0000000280)="aa69dacc195c8d481a0fa03be8df71c6c80b81014b336e049dce4c9e4bdc16b444a9b9bcb5b49f440ea7d158b79a96b748fbd2d211654ede8bac64305a81a0250a188a8caad4aa41a885a6c8d3b71dc26a4c0e5ecda5c41a119bd0618094b3b5eafaacb81b2b57e6e1b83893587b9c9c500b5c4ba0f4fe6b8586ded2019a01becf9846fc4894fac9180b0e754b1924fcd58169686cf3f900bb03ae2277e7f877bcbafeafc83f71ff469308537ca653fc48a5206b43d4be2851fadd545f0d621a5f6efc1ed6d4391dc15745bc0d07fc20fe6eacac2096edea7ede678636", 0xd3, 0x0, &(0x7f0000000380)="d8278fb104e0a13f0da115642b2cb52806812ca7faaa1ee589a06225e53481257b0e294f664797d716d01590a659129c09720a8896011dc94af2d8471c2573c6817a56b0273bd6a7f909d6d868682724404ce33e8654e6f17a4acfc7b865d4058862052eda4a2ea46ab94c112b93381115b940dde10d551cfb6e5aa048abf401b3c5aba15b0afdcb78162104aa2a33c1c316b4683671671b956ead8dd609f85a873e5326bd2664413906471c97d89c30d0ad8148f90fa33dfbfceb206a9e532964195e8390b6aa6eff721e68b0cdbcad06099a"}) (async) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000001340), 0x0, 0x0) 907.422365ms ago: executing program 3 (id=4056): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000074ffffff0000000000000000000000000000fe070000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) writev(0xffffffffffffffff, &(0x7f0000000a40), 0x0) sendmsg$nl_generic(r2, 0x0, 0x4000) recvmmsg(r2, 0x0, 0x0, 0x4022, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040), 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r10, r12, 0x25, 0x2, @void}, 0x10) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r13, r14}, 0x5) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000000095000000000000006c4f024b0ce2dcff0fb41b37e36fa4b1e90329e01732a37584f2cdffa2b773c93f23a11d5b6a4d000000000000000000000000000000d3b42afe2edc2501b08c9b01c8a675e31f354f324bffeec1f64f572a497021f273b885fa762d078f6c6a046a0b300e9f687638f241942dcf6d1d8889e61e6cbe4ce9a9776fbf19d9427836ab452f56a4ade6330c20b84a15860eb9caec0e4980ad68226d6b3704bc7515d7568172d37e071f7b6e6a94d06a9e0ae9bb386d282b4fcf52a338ab1416f5e3482fd084eb1fa7e371"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcd, &(0x7f00000002c0)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) 835.801548ms ago: executing program 1 (id=4057): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x8) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x7, 0x40, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x2, 0x3, 0x0, 0x0, "3eb9d3adfb751535"}}, 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x800c, 0x28, 0x200000b, r8}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x8001}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x3}}, @init={0x18, 0x84, 0x0, {0x3, 0x4, 0x7, 0x2f85}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x100}}], 0x98, 0x2400e044}, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000c700000000d99022ba00feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff000000"]}, 0x108) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000002089b145eb6758b8f100010323bd700002dbdf2502000000000000010c4000000000000000e5a40d8aa1f8350a1f82fd03c70070b13e6e212adc2a58009586"], 0x28}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r9, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x140a, 0x100, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000aff8d00"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110a400000000006300"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5d}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4) 787.328745ms ago: executing program 3 (id=4058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa0f9133f438ad00ff00403a00fc020000000000000000000000000000ff0200000000000060000000000011d37741c32e1d44e49bc566275c000000000000000000000000000008340000000000000000000000ffffe8efb0bab618bd5286da00"/127], 0x0) 764.976204ms ago: executing program 2 (id=4059): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f00000020c0)=""/194, 0xc2}], 0x3, 0x0, 0x40}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @none, 0xff01, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) r2 = socket$nl_generic(0x11, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x44000) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61126500000000006113770000000000bf2000000000000015000500511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f00000020c0)=""/194, 0xc2}], 0x3, 0x0, 0x40}, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @none, 0xff01, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) (async) socket$nl_generic(0x11, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x44000) (async) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) 720.036424ms ago: executing program 4 (id=4060): r0 = socket(0x10, 0x3, 0x4) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="3bbbbbbbbbbbbbbbbbbbbbbb88a8180081003a00000c000000a0020200004062954aa5fa5dc3"], &(0x7f0000000040)={0x0, 0x2, [0x221, 0x992, 0x337, 0x2cf]}) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) r2 = gettid() (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async, rerun: 64) r6 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}}, 0x0) 683.827983ms ago: executing program 2 (id=4061): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x2c}}, 0x20008080) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 674.524119ms ago: executing program 3 (id=4062): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r2, 0x1) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080), 0x8) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0x44081}, 0x0) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x125, 0x125, 0x5, [@struct={0x3, 0x6, 0x0, 0x4, 0x0, 0x4, [{0xc, 0x0, 0x6021be1a}, {0xb, 0x4, 0x101}, {0xe, 0x2, 0xfff}, {0x3, 0x1, 0x2cb}, {0xf, 0x1, 0x2}, {0x6, 0x1, 0x8}]}, @union={0x1, 0x2, 0x0, 0x5, 0x0, 0x8000, [{0xe, 0x4, 0xfa9f}, {0x9, 0x1, 0x1}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x3}, @struct={0xc, 0x3, 0x0, 0x4, 0x1, 0x10000000, [{0x1, 0x1, 0x5}, {0x5}, {0xb, 0x1, 0x7fffffff}]}, @datasec={0xc, 0x8, 0x0, 0xf, 0x1, [{0x1, 0x4, 0x4}, {0x4, 0x4, 0x7}, {0x5}, {0x1, 0x5, 0x3}, {0x2, 0x1, 0x401}, {0x1, 0x3, 0x4}, {0x3, 0x2, 0x3}, {0x2, 0x7ff, 0x7}], '/'}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f0000000080)=""/51, 0x145, 0x33, 0x1, 0x4, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES16=r4, @ANYBLOB="0000000000000000b7050000080000008500000056000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 572.18915ms ago: executing program 3 (id=4063): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x1f1441, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$6lowpan_enable(r0, 0x0, 0x2b) 522.707486ms ago: executing program 0 (id=4064): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3}, 0x6) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001900010000000000000000001c140000fe000001000000000c00120002000000", @ANYRES32=0x0, @ANYBLOB="ba57cc8a71153a6726bbe2c008ab1157fb62c6928e1d3680540a47fa03a326695b20698f84404c516e9f11886ce27dc52c471cbf"], 0x28}}, 0x0) (async) close(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r3}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 362.135114ms ago: executing program 0 (id=4065): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ppoll(&(0x7f0000000100)=[{r3, 0x2}, {r3, 0xa063}], 0x2, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r6, 0x5421, 0x110e22fff6) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, r5, 0x1, 0x3, 0x9, 0x8, "81d25dbf573ecd6e662b35fdab41f1b2088746608a28a29e1a8a15878fea7c6d63d7d07fce628b032824f14287fc072607ad484845fd589c787c81f916d6de", 0xc}, 0x60) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001fffffffffffbac1414bbaa0caaaaaaffac1e0101"], 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r9 = socket$isdn(0x22, 0x2, 0x10) close(r9) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) r10 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @remote}]}) getsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x8) bind$rose(r4, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f00000000c0)={0x80, 0x1, 0x2}) 361.389032ms ago: executing program 3 (id=4066): r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getuid() (async) r2 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x4e23, 0x2, 0x4e22, 0xc, 0x2, 0xe0, 0xa0, 0xc, r1, r2}, {0x2a, 0xf70, 0x100000001, 0x6, 0x5, 0x4, 0x10, 0x4}, {0x3, 0x3, 0x5, 0x2008000}, 0x401, 0x6e6bb7, 0x0, 0x0, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x0, 0x3, 0x0, 0x5, 0x90, 0x7, 0x1}}, 0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r5, 0x5}, 0x8) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r5, 0x5}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername(r6, &(0x7f00000006c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000740)=0x80) (async) getpeername(r6, &(0x7f00000006c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000740)=0x80) sendmsg$NFT_BATCH(r6, 0x0, 0x4000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x12}, {0x8, 0x2, 0x200}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x3}, {}, {0x2, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) recvmsg(r3, &(0x7f0000000300)={&(0x7f0000000180)=@ethernet={0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/64, 0x40}, {&(0x7f00000004c0)=""/243, 0xf3}, {&(0x7f0000000200)=""/116, 0x74}], 0x3}, 0x40000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r12) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000840)) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000940)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2, 0x999, 0x1, 0xbe, "68dbcfbe0c06b61d9cb5c833504e9149df5c825ec9aa8b044e6fe09201254f55c16d80f3519ed8814dbe1808f25dbcaf6300ebea9574373595ed8c54fcbe882e2160bfb5bbe78f1f16c5688829039a926dda40353c2c98d9200990bdc8b34005c8a8a2648d954289fb8e41459ba67277546476ba93191abe5814c1c85703f62f"}) 292.107913ms ago: executing program 2 (id=4067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x2c}}, 0x0) 245.98837ms ago: executing program 2 (id=4068): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x85629bbac3580b39}, {}, {0xe, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'bridge_slave_1\x00'}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_batadv\x00'}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x8001}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x78}, 0x1, 0x0, 0x0, 0x14}, 0x448c5) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 57.870038ms ago: executing program 2 (id=4069): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xce00}, 0x50) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 0s ago: executing program 3 (id=4070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112db000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140f6ffff0f0900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000"], 0xc8}}, 0x0) kernel console output (not intermixed with test programs): wpan0: encryption failed: -22 [ 256.054459][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2313'. [ 256.164864][T14156] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 256.175440][T14156] bond4: option packets_per_slave: allowed values 0 - 65535 [ 256.189393][T14156] bond4 (unregistering): Released all slaves [ 256.235632][T14165] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2317'. [ 256.359627][T14174] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2318'. [ 256.382299][T14174] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2318'. [ 256.543972][T14183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2322'. [ 256.556771][T14183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2322'. [ 256.580692][T14183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2322'. [ 256.587247][T14185] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.2323'. [ 256.713649][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2326'. [ 257.945028][T14191] netlink: 'syz.2.2325': attribute type 1 has an invalid length. [ 258.964652][T14284] netlink: 'syz.3.2350': attribute type 10 has an invalid length. [ 259.002022][T14284] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 259.060732][T14290] tipc: Enabled bearer , priority 0 [ 259.089041][T14290] syzkaller0: entered promiscuous mode [ 259.098915][T14290] syzkaller0: entered allmulticast mode [ 259.152832][T14290] tipc: Resetting bearer [ 259.382090][T14303] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20004 [ 259.399196][T14303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.686046][T14332] x_tables: duplicate underflow at hook 1 [ 259.818668][T14285] tipc: Resetting bearer [ 259.860215][T14285] tipc: Disabling bearer [ 260.662747][T14393] __nla_validate_parse: 9 callbacks suppressed [ 260.662764][T14393] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2388'. [ 260.855696][T14411] IPv6: sit3: Disabled Multicast RS [ 260.935976][T14416] netlink: 'syz.1.2395': attribute type 1 has an invalid length. [ 261.040171][T14421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2397'. [ 261.216250][T14440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2399'. [ 261.235985][T14437] syzkaller0: entered promiscuous mode [ 261.262882][T14437] syzkaller0: entered allmulticast mode [ 261.420859][T14458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2405'. [ 261.437288][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 261.823447][T14502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.042833][T14543] netlink: 'syz.3.2412': attribute type 21 has an invalid length. [ 262.056412][T14543] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2412'. [ 262.242488][T14579] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2417'. [ 262.303700][T14453] workqueue: Failed to create a rescuer kthread for wq "nfc29_nci_tx_wq": -EINTR [ 262.531340][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2421'. [ 262.886180][T14606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.052577][T14622] sctp: [Deprecated]: syz.1.2429 (pid 14622) Use of int in maxseg socket option. [ 263.052577][T14622] Use struct sctp_assoc_value instead [ 263.091731][T14623] bond8: option min_links: invalid value (18446744073709551614) [ 263.121869][T14623] bond8: option min_links: allowed values 0 - 2147483647 [ 263.157510][T14623] bond8 (unregistering): Released all slaves [ 263.172201][T14633] netlink: 'syz.3.2432': attribute type 1 has an invalid length. [ 263.527669][T14643] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.2433'. [ 263.663683][T14659] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 263.832830][T14670] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2440'. [ 263.921869][T14670] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 263.935245][T14679] xt_bpf: check failed: parse error [ 263.949595][T14675] netlink: zone id is out of range [ 263.960558][T14675] netlink: zone id is out of range [ 263.971652][T14675] netlink: get zone limit has 8 unknown bytes [ 263.988388][T14670] bond9 (unregistering): Released all slaves [ 264.100859][T14680] netlink: 'syz.0.2443': attribute type 10 has an invalid length. [ 264.153693][T14680] batman_adv: batadv0: Removing interface: team0 [ 264.454533][T14704] tipc: Enabled bearer , priority 0 [ 264.472162][T14704] syzkaller0: entered promiscuous mode [ 264.486344][T14704] syzkaller0: entered allmulticast mode [ 264.531484][T14713] lo: left allmulticast mode [ 264.552121][T14704] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 264.608424][T14704] tipc: Resetting bearer [ 264.637540][T14717] netlink: 'syz.4.2450': attribute type 11 has an invalid length. [ 264.659262][T14717] sctp: [Deprecated]: syz.4.2450 (pid 14717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.659262][T14717] Use struct sctp_sack_info instead [ 264.693261][T14703] tipc: Resetting bearer [ 264.725385][T14703] tipc: Disabling bearer [ 264.969900][T14742] netlink: 'syz.3.2458': attribute type 12 has an invalid length. [ 265.634911][T14788] netlink: 'syz.0.2476': attribute type 4 has an invalid length. [ 265.693074][T14791] netlink: 'syz.0.2477': attribute type 1 has an invalid length. [ 265.709970][ T5837] Bluetooth: hci1: command 0x0405 tx timeout [ 265.761451][T14791] 8021q: adding VLAN 0 to HW filter on device bond7 [ 265.771946][T14791] bond6: (slave bond7): making interface the new active one [ 265.800280][T14791] bond6: (slave bond7): Enslaving as an active interface with an up link [ 265.980405][T14808] __nla_validate_parse: 4 callbacks suppressed [ 265.980423][T14808] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2480'. [ 266.273395][T14815] can: request_module (can-proto-0) failed. [ 266.284278][T14822] netlink: 'syz.1.2485': attribute type 1 has an invalid length. [ 266.325937][T14822] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2485'. [ 266.353100][T14822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2485'. [ 266.414644][T14829] netlink: 'syz.2.2489': attribute type 13 has an invalid length. [ 267.035227][T14871] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2502'. [ 267.290911][T14884] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 267.401712][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'. [ 267.422057][T14886] syzkaller0: entered allmulticast mode [ 267.620388][T14890] netlink: 'syz.0.2508': attribute type 1 has an invalid length. [ 267.629536][T14890] netlink: 'syz.0.2508': attribute type 3 has an invalid length. [ 267.637298][T14890] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2508'. [ 267.670387][T14888] syzkaller1: entered promiscuous mode [ 267.675894][T14888] syzkaller1: entered allmulticast mode [ 267.872814][T14900] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2511'. [ 267.918440][T14903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 267.989041][T14905] lo speed is unknown, defaulting to 1000 [ 268.012058][T14905] lo speed is unknown, defaulting to 1000 [ 268.031213][T14907] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2511'. [ 268.032775][T14905] lo speed is unknown, defaulting to 1000 [ 268.166301][T14905] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 268.201983][T14918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2514'. [ 268.283520][T14905] lo speed is unknown, defaulting to 1000 [ 268.312157][T14905] lo speed is unknown, defaulting to 1000 [ 268.357046][T14905] lo speed is unknown, defaulting to 1000 [ 268.390409][T14905] lo speed is unknown, defaulting to 1000 [ 268.407817][T14905] lo speed is unknown, defaulting to 1000 [ 268.780540][T14966] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 268.806744][T14963] netlink: 'syz.4.2525': attribute type 1 has an invalid length. [ 269.105453][T14985] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 269.309515][T15000] netlink: 'syz.4.2537': attribute type 10 has an invalid length. [ 269.382228][T15000] netlink: 'syz.4.2537': attribute type 11 has an invalid length. [ 269.651931][T14022] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.674017][T14022] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.718876][T14022] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.719617][T15033] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 269.758037][T14022] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.107512][T15067] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 270.161499][T15066] bond8: option miimon: invalid value (18446744073709551585) [ 270.169083][T15066] bond8: option miimon: allowed values 0 - 2147483647 [ 270.181112][T15066] bond8 (unregistering): Released all slaves [ 270.628642][T15093] xt_cgroup: path and classid specified [ 271.123036][T15116] __nla_validate_parse: 17 callbacks suppressed [ 271.123055][T15116] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2567'. [ 271.147051][T15121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2567'. [ 271.199228][T15113] vlan1: entered promiscuous mode [ 271.208269][T15113] bridge0: entered promiscuous mode [ 271.226156][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'. [ 271.238246][T15126] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2570'. [ 271.250135][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2570'. [ 271.270347][T15126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2570'. [ 271.281363][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2570'. [ 271.434337][T15136] x_tables: duplicate underflow at hook 2 [ 271.558813][T15142] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 271.585510][T15142] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 272.367348][T15190] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 272.378367][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2588'. [ 272.387448][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2588'. [ 272.492534][T15203] netlink: 'syz.3.2591': attribute type 21 has an invalid length. [ 272.501170][T15203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2591'. [ 272.548568][ T5200] udevd[5200]: worker [6416] /devices/virtual/block/nbd0 is taking a long time [ 272.632946][T15213] netlink: 'syz.3.2594': attribute type 4 has an invalid length. [ 273.031029][T15232] syzkaller1: entered promiscuous mode [ 273.036545][T15232] syzkaller1: entered allmulticast mode [ 273.645888][T15272] delete_channel: no stack [ 273.891636][T15287] netlink: 'syz.0.2617': attribute type 1 has an invalid length. [ 273.965850][T15291] openvswitch: netlink: EtherType 0 is less than min 600 [ 274.030967][ T5829] Bluetooth: hci1: command 0x0405 tx timeout [ 275.879491][T15346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.897038][T15346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.351490][T15383] __nla_validate_parse: 7 callbacks suppressed [ 276.351509][T15383] netlink: 808 bytes leftover after parsing attributes in process `syz.4.2644'. [ 276.466786][T15383] 8021q: adding VLAN 0 to HW filter on device bond8 [ 276.574737][T15396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2649'. [ 276.658972][T15399] netlink: 'syz.4.2651': attribute type 1 has an invalid length. [ 277.305028][T15454] netlink: 'syz.3.2664': attribute type 1 has an invalid length. [ 277.655875][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2671'. [ 277.738489][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2673'. [ 277.747600][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2673'. [ 277.769430][T15487] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2675'. [ 277.786586][T15491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2674'. [ 277.810244][T15487] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 277.818961][T15487] 0ªî{X¹¦: entered allmulticast mode [ 277.824798][T15487] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 277.946940][T15500] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2678'. [ 278.034671][T15506] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2681'. [ 278.112149][T15518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2679'. [ 278.144844][T15500] syzkaller0: entered promiscuous mode [ 278.156704][T15500] syzkaller0: entered allmulticast mode [ 280.285061][T15577] lo: entered promiscuous mode [ 280.305626][T15577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.510309][ T5837] Bluetooth: hci1: command 0x0405 tx timeout [ 280.544495][T15605] netlink: 'syz.0.2709': attribute type 32 has an invalid length. [ 280.596500][T15605] bond8: option coupled_control: invalid value (52) [ 280.613064][T15605] bond8 (unregistering): Released all slaves [ 280.682636][T15613] netlink: 'syz.2.2712': attribute type 23 has an invalid length. [ 281.000638][T15637] netlink: 'syz.1.2719': attribute type 23 has an invalid length. [ 281.235255][T15651] tipc: Enabled bearer , priority 0 [ 281.244747][T15651] syzkaller0: entered promiscuous mode [ 281.255829][T15651] syzkaller0: entered allmulticast mode [ 281.295569][T15652] macvtap2: entered promiscuous mode [ 281.310054][T15652] macvtap2: entered allmulticast mode [ 281.328294][T15652] bond0: entered allmulticast mode [ 281.333725][T15652] bond_slave_0: entered allmulticast mode [ 281.355003][T15652] bond_slave_1: entered allmulticast mode [ 281.362286][T15652] bridge_slave_1: entered allmulticast mode [ 281.369172][T15652] bond0: entered promiscuous mode [ 281.374460][T15652] bond_slave_0: entered promiscuous mode [ 281.381097][T15652] bond_slave_1: entered promiscuous mode [ 281.387775][T15652] bridge_slave_1: entered promiscuous mode [ 281.415084][T15652] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 281.427540][T15652] team0: Device macvtap2 failed to register rx_handler [ 281.446242][T15652] bond0: left allmulticast mode [ 281.452470][T15652] bond_slave_0: left allmulticast mode [ 281.458871][T15652] bond_slave_1: left allmulticast mode [ 281.460904][T15668] __nla_validate_parse: 8 callbacks suppressed [ 281.460919][T15668] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2729'. [ 281.464346][T15652] bridge_slave_1: left allmulticast mode [ 281.464367][T15652] bond0: left promiscuous mode [ 281.464381][T15652] bond_slave_0: left promiscuous mode [ 281.464618][T15652] bond_slave_1: left promiscuous mode [ 281.501758][T15652] bridge_slave_1: left promiscuous mode [ 281.503267][T15670] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2723'. [ 281.541740][T15658] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 281.570439][T15666] tipc: Resetting bearer [ 281.586999][T15650] tipc: Resetting bearer [ 281.611179][T15650] tipc: Disabling bearer [ 281.644952][T15674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2731'. [ 281.703557][T15675] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2731'. [ 281.792043][T15680] tipc: Enabled bearer , priority 0 [ 281.801731][T15680] syzkaller0: entered promiscuous mode [ 281.807369][T15680] syzkaller0: entered allmulticast mode [ 281.846557][T15680] tipc: Resetting bearer [ 281.857402][T15679] tipc: Resetting bearer [ 281.880485][T15679] tipc: Disabling bearer [ 281.896162][T15687] netlink: 'syz.4.2734': attribute type 13 has an invalid length. [ 281.904341][T15687] netlink: 'syz.4.2734': attribute type 17 has an invalid length. [ 281.912586][T15689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.927758][T15687] 0ªî{X¹¦: left allmulticast mode [ 281.963366][T15690] netlink: 'syz.4.2734': attribute type 64 has an invalid length. [ 281.978637][T15690] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2734'. [ 282.078651][T15687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.108760][T15697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2738'. [ 282.360220][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2744'. [ 282.391060][T15720] vlan0: entered allmulticast mode [ 282.396226][T15720] bridge0: entered allmulticast mode [ 282.402234][T15720] bridge4: port 1(vlan0) entered blocking state [ 282.409486][T15720] bridge4: port 1(vlan0) entered disabled state [ 282.417228][T15720] vlan0: entered promiscuous mode [ 282.423037][T15720] bridge0: entered promiscuous mode [ 282.482948][T15726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2746'. [ 282.825293][T15752] vlan0 (unregistering): left promiscuous mode [ 282.833016][T15752] bridge0 (unregistering): left promiscuous mode [ 282.844414][T15752] bridge4: port 1(vlan0) entered disabled state [ 282.974008][T15761] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2758'. [ 283.012829][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2759'. [ 283.196168][T15772] netlink: 'syz.1.2761': attribute type 4 has an invalid length. [ 283.284510][T15782] lo speed is unknown, defaulting to 1000 [ 283.371104][T15794] netlink: 'syz.3.2762': attribute type 7 has an invalid length. [ 283.503970][T15790] geneve2: entered promiscuous mode [ 283.545100][T15790] geneve2: entered allmulticast mode [ 283.723165][T15814] xt_TCPMSS: Only works on TCP SYN packets [ 283.939825][T15828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.320945][T15860] 0ªî{X¹¦: entered promiscuous mode [ 284.739199][T15886] lo speed is unknown, defaulting to 1000 [ 284.804784][T15885] lo speed is unknown, defaulting to 1000 [ 286.140685][T15962] tipc: Enabled bearer , priority 0 [ 286.153560][T15962] syzkaller0: entered promiscuous mode [ 286.159702][T15962] syzkaller0: entered allmulticast mode [ 286.167642][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.179935][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.179971][T15962] tipc: Resetting bearer [ 286.199090][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.209610][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.217226][T15961] tipc: Resetting bearer [ 286.224690][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.267585][T15961] tipc: Disabling bearer [ 286.276523][T15966] netlink: 'syz.1.2812': attribute type 1 has an invalid length. [ 286.313569][T15970] tipc: Enabled bearer , priority 0 [ 286.332057][T15963] lo speed is unknown, defaulting to 1000 [ 286.403564][T15968] tipc: Resetting bearer [ 286.431744][T15967] tipc: Resetting bearer [ 286.433752][T15976] xt_hashlimit: max too large, truncated to 1048576 [ 286.456984][T15967] tipc: Disabling bearer [ 286.573044][T15982] __nla_validate_parse: 13 callbacks suppressed [ 286.573061][T15982] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2817'. [ 286.806216][T15963] chnl_net:caif_netlink_parms(): no params data found [ 286.829751][T15994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2822'. [ 286.851212][T15994] netlink: 'syz.1.2822': attribute type 7 has an invalid length. [ 286.867984][T15994] netlink: 'syz.1.2822': attribute type 8 has an invalid length. [ 286.875866][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2822'. [ 287.002805][T16005] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 287.186987][T15963] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.203411][T15963] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.218211][T15963] bridge_slave_0: entered allmulticast mode [ 287.237551][T15963] bridge_slave_0: entered promiscuous mode [ 287.247517][T15963] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.262025][T15963] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.280915][T15963] bridge_slave_1: entered allmulticast mode [ 287.294633][T15963] bridge_slave_1: entered promiscuous mode [ 287.380845][T15963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.394863][T15963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.495244][T15963] team0: Port device team_slave_0 added [ 287.515162][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2836'. [ 287.525636][T15963] team0: Port device team_slave_1 added [ 287.549881][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2836'. [ 287.590051][T16037] xt_hashlimit: max too large, truncated to 1048576 [ 287.647536][T15963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.667529][T15963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.716901][T15963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.734147][T15963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.752233][T15963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.806721][T15963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.957475][T15963] hsr_slave_0: entered promiscuous mode [ 287.986660][T15963] hsr_slave_1: entered promiscuous mode [ 288.001815][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 288.025362][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 288.180729][T16077] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2847'. [ 288.197786][T16078] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2847'. [ 288.278516][ T5829] Bluetooth: hci5: command tx timeout [ 288.329750][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2849'. [ 288.717207][T15963] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 288.830861][T16117] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ŸôCýßûÌÌULÙvy¸Ú‡v°ýÙ[£DŒ [ 288.961836][T15963] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 289.137758][T15963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 289.265945][T15963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 289.342375][T16155] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 289.647303][T16167] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 290.030873][T15963] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.079108][T15963] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.127766][T15963] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.183233][T15963] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 290.348075][ T5829] Bluetooth: hci5: command tx timeout [ 290.426161][T15963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.506118][T15963] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.559462][T14021] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.566638][T14021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.622413][T14022] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.629637][T14022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.901518][T16213] tipc: Enabled bearer , priority 0 [ 291.081486][T16223] syzkaller0: entered promiscuous mode [ 291.097374][T16223] syzkaller0: entered allmulticast mode [ 291.139963][T16211] tipc: Resetting bearer [ 291.537065][T16251] x_tables: duplicate underflow at hook 1 [ 291.627170][T16254] __nla_validate_parse: 7 callbacks suppressed [ 291.627188][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2882'. [ 292.439946][ T5829] Bluetooth: hci5: command tx timeout [ 292.725250][T16211] tipc: Disabling bearer [ 292.962263][T15963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.043948][T15963] veth0_vlan: entered promiscuous mode [ 293.063578][T15963] veth1_vlan: entered promiscuous mode [ 293.087300][T16270] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 293.132427][T15963] veth0_macvtap: entered promiscuous mode [ 293.139587][T16269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2887'. [ 293.202230][T16276] netlink: 'syz.0.2885': attribute type 9 has an invalid length. [ 293.261125][T15963] veth1_macvtap: entered promiscuous mode [ 293.318168][T15963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.343310][T16283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2888'. [ 293.383417][T15963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.417350][T16277] xt_TPROXY: Can be used only with -p tcp or -p udp [ 293.435219][T14020] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.472881][T14020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.498070][T14020] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.526262][T14020] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.824501][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2891'. [ 293.870211][T14020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.894312][T14020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.975457][T14020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.994489][T14020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.079778][T16322] x_tables: duplicate underflow at hook 1 [ 294.226813][T16329] netlink: 'syz.3.2804': attribute type 23 has an invalid length. [ 294.298941][T16329] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2804'. [ 294.518071][ T5829] Bluetooth: hci5: command tx timeout [ 294.727193][T16351] netlink: 'syz.2.2900': attribute type 10 has an invalid length. [ 294.788137][T16351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2900'. [ 294.997281][T16343] syzkaller0: entered promiscuous mode [ 295.008019][T16343] syzkaller0: entered allmulticast mode [ 295.168585][T16372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2906'. [ 295.264876][T16351] batadv0: entered promiscuous mode [ 295.275529][T16351] batadv0: entered allmulticast mode [ 295.300674][T16351] bridge0: port 2(batadv0) entered blocking state [ 295.328293][T16351] bridge0: port 2(batadv0) entered disabled state [ 295.445660][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 295.460477][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.471647][T16366] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 295.482620][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 295.501277][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.517030][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.525031][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 295.811366][ T2912] batman_adv: batadv0: IGMP Querier appeared [ 295.817597][ T2912] batman_adv: batadv0: MLD Querier appeared [ 296.840787][T16373] syzkaller0: entered promiscuous mode [ 296.847662][T16373] syzkaller0: entered allmulticast mode [ 296.856852][T16388] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 296.992335][T16391] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 297.021728][T16391] bond9 (unregistering): Released all slaves [ 297.087339][T16384] lo speed is unknown, defaulting to 1000 [ 297.163959][T16391] veth1_macvtap: left promiscuous mode [ 297.177510][T16391] macsec0: entered promiscuous mode [ 297.197427][T16391] macsec0: entered allmulticast mode [ 297.258959][T16392] veth1_macvtap: entered promiscuous mode [ 297.272031][T16392] veth1_macvtap: entered allmulticast mode [ 297.278319][T16392] macsec0: left promiscuous mode [ 297.283485][T16392] macsec0: left allmulticast mode [ 297.291214][T16392] veth1_macvtap: left allmulticast mode [ 297.525550][T16384] chnl_net:caif_netlink_parms(): no params data found [ 297.628098][ T5829] Bluetooth: hci1: command tx timeout [ 297.657715][T16384] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.665403][T16384] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.673730][T16384] bridge_slave_0: entered allmulticast mode [ 297.682630][T16384] bridge_slave_0: entered promiscuous mode [ 297.692080][T16384] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.699536][T16384] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.706895][T16384] bridge_slave_1: entered allmulticast mode [ 297.716172][T16384] bridge_slave_1: entered promiscuous mode [ 297.773664][T16384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.797256][T16384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.879569][T16442] netlink: 'syz.4.2919': attribute type 2 has an invalid length. [ 297.897012][T16384] team0: Port device team_slave_0 added [ 297.917352][T16442] : entered promiscuous mode [ 297.921534][T16444] xt_addrtype: ipv6 does not support BROADCAST matching [ 297.940970][T16384] team0: Port device team_slave_1 added [ 297.958094][T16444] netlink: 'syz.3.2920': attribute type 24 has an invalid length. [ 298.028650][T16384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.036533][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.064388][T16384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.081559][T16384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.089764][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.093878][T16457] netlink: 'syz.4.2923': attribute type 58 has an invalid length. [ 298.116807][T16384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.125631][T16458] netlink: 'syz.4.2923': attribute type 58 has an invalid length. [ 298.145709][T16458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2923'. [ 298.155238][T16457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2923'. [ 298.196734][T16384] hsr_slave_0: entered promiscuous mode [ 298.205086][T16384] hsr_slave_1: entered promiscuous mode [ 298.211848][T16384] debugfs: 'hsr0' already exists in 'hsr' [ 298.218585][T16384] Cannot create hsr debugfs directory [ 298.670618][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2931'. [ 298.685976][T16481] netlink: 'syz.2.2931': attribute type 8 has an invalid length. [ 298.786498][T16488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2933'. [ 298.965067][T16384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.000133][T16384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.078833][T16384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.112153][T16384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.212525][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2941'. [ 299.264523][T16515] bond5: Invalid ad_actor_system MAC address. [ 299.279337][T16515] bond5: option ad_actor_system: invalid value (1) [ 299.301529][T16515] bond5 (unregistering): Released all slaves [ 299.429244][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2942'. [ 299.599923][T16384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.643379][T16384] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.676907][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.684130][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.712210][ T5829] Bluetooth: hci1: command tx timeout [ 299.726580][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.733794][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.751522][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2948'. [ 299.751639][T16545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2949'. [ 299.771760][T16545] nbd: socks must be embedded in a SOCK_ITEM attr [ 299.808769][T16543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2948'. [ 299.812697][T16547] netlink: 'syz.1.2948': attribute type 21 has an invalid length. [ 299.826543][T16547] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2948'. [ 299.839430][T16384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 299.867711][T16384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.055343][T16564] syzkaller1: entered promiscuous mode [ 300.065965][T16564] syzkaller1: entered allmulticast mode [ 300.142095][T16564] gtp0: entered promiscuous mode [ 300.153734][T16564] gtp0: entered allmulticast mode [ 300.225472][T16582] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 300.349706][T16384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.410366][T16590] nbd: must specify at least one socket [ 300.501404][T16384] veth0_vlan: entered promiscuous mode [ 300.527015][T16384] veth1_vlan: entered promiscuous mode [ 300.673891][T16384] veth0_macvtap: entered promiscuous mode [ 300.701088][T16384] veth1_macvtap: entered promiscuous mode [ 300.753503][T16384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.784517][T16384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.852445][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.875910][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.929688][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.967982][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.990502][T16621] netlink: 'syz.1.2965': attribute type 10 has an invalid length. [ 301.041200][T16621] veth1_macvtap: left promiscuous mode [ 301.084972][T16628] xt_hashlimit: invalid interval [ 301.205282][ T5829] block nbd1: Receive control failed (result -32) [ 301.269228][T16636] IPVS: Unknown mcast interface: vcan0 [ 301.295799][T16454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.321463][T16454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.411304][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.435443][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.476958][T16649] netlink: 'syz.1.2976': attribute type 21 has an invalid length. [ 301.706014][T16663] netlink: 'syz.0.2898': attribute type 10 has an invalid length. [ 301.736860][T16663] veth1_macvtap: left promiscuous mode [ 301.789656][ T5829] Bluetooth: hci1: command tx timeout [ 301.830900][T16667] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 302.186327][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.198904][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.211681][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.220239][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.228016][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.291223][T16680] lo speed is unknown, defaulting to 1000 [ 302.621629][T16695] bond1: Invalid ad_actor_system MAC address. [ 302.627739][T16695] bond1: option ad_actor_system: invalid value (1) [ 302.635956][T16695] bond1 (unregistering): Released all slaves [ 302.665310][T16680] chnl_net:caif_netlink_parms(): no params data found [ 302.767100][T16705] netlink: 'syz.0.2989': attribute type 11 has an invalid length. [ 302.793019][T16705] netlink: 'syz.0.2989': attribute type 11 has an invalid length. [ 303.034648][T16717] openvswitch: netlink: Duplicate or invalid key (type 0). [ 303.056159][T16717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.079576][T16680] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.086966][T16680] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.095322][T16680] bridge_slave_0: entered allmulticast mode [ 303.111680][T16680] bridge_slave_0: entered promiscuous mode [ 303.131524][T14019] bridge0: port 2(batadv0) entered disabled state [ 303.144186][T14019] bridge_slave_0: left allmulticast mode [ 303.160819][T14019] bridge_slave_0: left promiscuous mode [ 303.170565][T16724] netlink: 'syz.4.2994': attribute type 13 has an invalid length. [ 303.181605][T14019] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.259762][T16730] __nla_validate_parse: 11 callbacks suppressed [ 303.259782][T16730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2996'. [ 303.486646][T14019] bond7 (unregistering): (slave gretap1): Releasing active interface [ 303.551767][T14019] bond6 (unregistering): (slave geneve3): Releasing active interface [ 303.868101][ T5829] Bluetooth: hci1: command tx timeout [ 304.122490][T14019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.132997][T14019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.144173][T14019] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 304.154340][T14019] bond0 (unregistering): Released all slaves [ 304.249441][T14019] bond1 (unregistering): (slave veth3): Releasing active interface [ 304.258690][T14019] bond1 (unregistering): Released all slaves [ 304.269098][ T5829] Bluetooth: hci3: command tx timeout [ 304.360825][T14019] bond2 (unregistering): (slave veth7): Releasing active interface [ 304.370380][T14019] bond2 (unregistering): (slave veth9): Releasing active interface [ 304.379127][T14019] bond2 (unregistering): Released all slaves [ 304.392998][T14019] bond3 (unregistering): Released all slaves [ 304.406902][T14019] bond4 (unregistering): Released all slaves [ 304.510549][T14019] bond5 (unregistering): Released all slaves [ 304.523930][T14019] bond6 (unregistering): Released all slaves [ 304.626626][T14019] bond7 (unregistering): Released all slaves [ 304.640830][T14019] bond8 (unregistering): Released all slaves [ 304.653999][T16680] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.661915][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.669561][T16680] bridge_slave_1: entered allmulticast mode [ 304.676747][T16680] bridge_slave_1: entered promiscuous mode [ 304.866168][T16680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.887495][T14019] tipc: Disabling bearer [ 304.899149][T16748] netlink: 1436 bytes leftover after parsing attributes in process `syz.0.2999'. [ 304.911313][T14019] tipc: Disabling bearer [ 304.944513][T14019] tipc: Left network mode [ 304.952755][T16680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.980101][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3001'. [ 305.134478][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3001'. [ 305.155351][T16769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.265144][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.313571][T16680] team0: Port device team_slave_0 added [ 305.385500][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.423557][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.448583][T16680] team0: Port device team_slave_1 added [ 305.535589][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.690737][T16795] bond1: ARP target 1.0.0.0 is already present [ 305.697262][T16795] bond1: option arp_ip_target: invalid value (1) [ 305.706403][T16795] bond1 (unregistering): Released all slaves [ 305.761656][T16680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.804416][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.871008][T16680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.949130][T16680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.956142][T16680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.023942][T16680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.057268][T14019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.120164][T16822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.297185][T14019] macvlan0 (unregistering): left allmulticast mode [ 306.349224][ T5829] Bluetooth: hci3: command tx timeout [ 306.449660][T14019] team0 (unregistering): Port device team_slave_1 removed [ 306.487755][T14019] team0 (unregistering): Port device team_slave_0 removed [ 306.952263][T16680] hsr_slave_0: entered promiscuous mode [ 306.969783][T16680] hsr_slave_1: entered promiscuous mode [ 306.976353][T16680] debugfs: 'hsr0' already exists in 'hsr' [ 306.982399][T16680] Cannot create hsr debugfs directory [ 307.353758][T16855] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3024'. [ 307.454451][T16864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3026'. [ 307.496578][T16866] IPv6: Can't replace route, no match found [ 307.506904][T16867] IPv6: Can't replace route, no match found [ 307.802767][T16884] FAULT_INJECTION: forcing a failure. [ 307.802767][T16884] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 307.824924][T16884] CPU: 1 UID: 0 PID: 16884 Comm: syz.0.3031 Not tainted syzkaller #0 PREEMPT(full) [ 307.824949][T16884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 307.824966][T16884] Call Trace: [ 307.824973][T16884] [ 307.824981][T16884] dump_stack_lvl+0x189/0x250 [ 307.825006][T16884] ? __pfx____ratelimit+0x10/0x10 [ 307.825033][T16884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.825051][T16884] ? __pfx__printk+0x10/0x10 [ 307.825082][T16884] should_fail_ex+0x414/0x560 [ 307.825112][T16884] _copy_from_user+0x2d/0xb0 [ 307.825133][T16884] __copy_msghdr+0x3c5/0x5b0 [ 307.825162][T16884] ___sys_sendmsg+0x1a5/0x2a0 [ 307.825181][T16884] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.825235][T16884] ? __fget_files+0x2a/0x420 [ 307.825254][T16884] ? __fget_files+0x3a0/0x420 [ 307.825284][T16884] __x64_sys_sendmsg+0x19b/0x260 [ 307.825305][T16884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.825331][T16884] ? __pfx_ksys_write+0x10/0x10 [ 307.825354][T16884] ? do_syscall_64+0xbe/0xfa0 [ 307.825376][T16884] do_syscall_64+0xfa/0xfa0 [ 307.825391][T16884] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.825409][T16884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.825426][T16884] ? clear_bhb_loop+0x60/0xb0 [ 307.825449][T16884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.825466][T16884] RIP: 0033:0x7fc03c58efc9 [ 307.825483][T16884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.825497][T16884] RSP: 002b:00007fc03d4ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.825533][T16884] RAX: ffffffffffffffda RBX: 00007fc03c7e5fa0 RCX: 00007fc03c58efc9 [ 307.825546][T16884] RDX: 0000000004004000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 307.825558][T16884] RBP: 00007fc03d4ca090 R08: 0000000000000000 R09: 0000000000000000 [ 307.825570][T16884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.825581][T16884] R13: 00007fc03c7e6038 R14: 00007fc03c7e5fa0 R15: 00007ffeee6c1488 [ 307.825613][T16884] [ 308.058791][T16892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3035'. [ 308.067792][T16892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3035'. [ 308.078661][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3035'. [ 308.342963][T16902] tipc: Enabled bearer , priority 0 [ 308.373781][T16914] netlink: 'syz.1.3037': attribute type 4 has an invalid length. [ 308.414356][T16914] netlink: 'syz.1.3037': attribute type 3 has an invalid length. [ 308.432560][ T5829] Bluetooth: hci3: command tx timeout [ 308.541654][T16908] syzkaller0: entered promiscuous mode [ 308.547243][T16908] syzkaller0: entered allmulticast mode [ 308.553597][T16908] tipc: Resetting bearer [ 308.574082][T16887] tipc: Resetting bearer [ 308.607220][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 308.628246][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 309.965616][T16887] tipc: Disabling bearer [ 310.164368][T16680] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 310.199227][T16680] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 310.209454][T16944] FAULT_INJECTION: forcing a failure. [ 310.209454][T16944] name failslab, interval 1, probability 0, space 0, times 1 [ 310.230028][T16680] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 310.237123][T16944] CPU: 0 UID: 0 PID: 16944 Comm: syz.1.3045 Not tainted syzkaller #0 PREEMPT(full) [ 310.237147][T16944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.237157][T16944] Call Trace: [ 310.237164][T16944] [ 310.237172][T16944] dump_stack_lvl+0x189/0x250 [ 310.237194][T16944] ? __pfx____ratelimit+0x10/0x10 [ 310.237244][T16944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.237261][T16944] ? __pfx__printk+0x10/0x10 [ 310.237283][T16944] ? __pfx___might_resched+0x10/0x10 [ 310.237305][T16944] ? fs_reclaim_acquire+0x7d/0x100 [ 310.237331][T16944] should_fail_ex+0x414/0x560 [ 310.237360][T16944] should_failslab+0xa8/0x100 [ 310.237383][T16944] kmem_cache_alloc_node_noprof+0x77/0x710 [ 310.237402][T16944] ? __alloc_skb+0x112/0x2d0 [ 310.237422][T16944] ? netlink_autobind+0xdb/0x300 [ 310.237451][T16944] __alloc_skb+0x112/0x2d0 [ 310.237478][T16944] netlink_sendmsg+0x5c6/0xb30 [ 310.237511][T16944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.237538][T16944] ? __lock_acquire+0xab9/0xd20 [ 310.237557][T16944] ? aa_sock_msg_perm+0xf1/0x1d0 [ 310.237579][T16944] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.237601][T16944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.237625][T16944] __sock_sendmsg+0x21c/0x270 [ 310.237648][T16944] ____sys_sendmsg+0x505/0x830 [ 310.237680][T16944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.237713][T16944] ? import_iovec+0x74/0xa0 [ 310.237738][T16944] ___sys_sendmsg+0x21f/0x2a0 [ 310.237756][T16944] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.237808][T16944] ? __fget_files+0x2a/0x420 [ 310.237827][T16944] ? __fget_files+0x3a0/0x420 [ 310.237858][T16944] __x64_sys_sendmsg+0x19b/0x260 [ 310.237881][T16944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.237907][T16944] ? __pfx_ksys_write+0x10/0x10 [ 310.237930][T16944] ? do_syscall_64+0xbe/0xfa0 [ 310.237950][T16944] do_syscall_64+0xfa/0xfa0 [ 310.237966][T16944] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.237983][T16944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.238001][T16944] ? clear_bhb_loop+0x60/0xb0 [ 310.238022][T16944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.238039][T16944] RIP: 0033:0x7f8d45d8efc9 [ 310.238056][T16944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.238071][T16944] RSP: 002b:00007f8d46c46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.238094][T16944] RAX: ffffffffffffffda RBX: 00007f8d45fe5fa0 RCX: 00007f8d45d8efc9 [ 310.238106][T16944] RDX: 0000000004004000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 310.238118][T16944] RBP: 00007f8d46c46090 R08: 0000000000000000 R09: 0000000000000000 [ 310.238127][T16944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.238136][T16944] R13: 00007f8d45fe6038 R14: 00007f8d45fe5fa0 R15: 00007ffcf803eeb8 [ 310.238163][T16944] [ 310.523693][T16680] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 310.532463][ T5829] Bluetooth: hci3: command tx timeout [ 310.699905][T16680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.730188][T16680] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.746095][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.753331][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.778481][T16454] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.785669][T16454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.928754][T16974] netlink: 'syz.1.3049': attribute type 1 has an invalid length. [ 311.079372][T16980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3050'. [ 311.260534][T16990] x_tables: duplicate underflow at hook 2 [ 311.347237][T16680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.358200][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 311.381816][T16995] netlink: 'syz.4.3055': attribute type 21 has an invalid length. [ 311.407172][T16995] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.516831][T16680] veth0_vlan: entered promiscuous mode [ 311.555958][T16680] veth1_vlan: entered promiscuous mode [ 311.585177][T17002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3057'. [ 311.646738][T16680] veth0_macvtap: entered promiscuous mode [ 311.672590][T16680] veth1_macvtap: entered promiscuous mode [ 311.703268][T16680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.762100][T16680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.815788][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.900797][T17021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3062'. [ 311.959236][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.988977][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.026778][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.276575][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.346480][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.504006][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.538138][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.839758][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3067'. [ 313.526887][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'. [ 313.661889][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.671308][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.680155][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.690239][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.700414][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.747111][T17073] lo speed is unknown, defaulting to 1000 [ 313.811390][T17076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3078'. [ 313.842439][T17076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.895992][T17076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.943260][T17089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3081'. [ 313.959218][T17090] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 313.976451][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 314.000810][T17081] netlink: 'syz.4.3079': attribute type 2 has an invalid length. [ 314.010724][T17081] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3079'. [ 314.097547][T17073] chnl_net:caif_netlink_parms(): no params data found [ 314.205462][T17073] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.212836][T17073] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.221289][T17073] bridge_slave_0: entered allmulticast mode [ 314.229713][T17073] bridge_slave_0: entered promiscuous mode [ 314.237566][T17073] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.245322][T17073] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.253140][T17073] bridge_slave_1: entered allmulticast mode [ 314.260568][T17073] bridge_slave_1: entered promiscuous mode [ 314.291615][T17073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.304574][T17073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.355982][T17073] team0: Port device team_slave_0 added [ 314.365962][T17073] team0: Port device team_slave_1 added [ 314.415107][T17073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.425299][T17073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.452556][T17073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.465704][T17073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.473010][T17073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.499732][T17073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.548532][T17073] hsr_slave_0: entered promiscuous mode [ 314.554950][T17073] hsr_slave_1: entered promiscuous mode [ 314.562026][T17073] debugfs: 'hsr0' already exists in 'hsr' [ 314.567757][T17073] Cannot create hsr debugfs directory [ 314.751613][T17073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.762949][T17073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.773380][T17073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 314.797551][T17112] macvtap1: entered promiscuous mode [ 314.803172][T17112] vlan0: entered promiscuous mode [ 314.809461][T17112] macvtap1: entered allmulticast mode [ 314.814949][T17112] vlan0: entered allmulticast mode [ 314.820210][T17112] veth0_vlan: entered allmulticast mode [ 314.840394][T17113] macvtap2: entered promiscuous mode [ 314.845813][T17113] macvtap2: entered allmulticast mode [ 314.877221][T17073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.889352][T17073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.900217][T17073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 314.946023][T17115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3086'. [ 314.990690][T17114] delete_channel: no stack [ 315.046447][T17073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.068495][T17073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.081738][T17073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 315.154131][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 315.209636][T17073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.249557][T17073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.281862][T17073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 315.384801][T17131] can: request_module (can-proto-4) failed. [ 315.489194][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3092'. [ 315.517275][T17143] netlink: 'syz.2.3094': attribute type 21 has an invalid length. [ 315.539568][T17145] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3095'. [ 315.584385][T17143] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 315.598871][T17143] bond1 (unregistering): Released all slaves [ 315.685358][T17073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 315.713500][T17073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 315.743516][T17073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 315.783316][T17073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 315.800693][ T5837] Bluetooth: hci0: command tx timeout [ 315.853717][T17162] openvswitch: netlink: IP tunnel dst address not specified [ 316.006847][T17073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.099331][T17073] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.099419][T17181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.129817][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.137019][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.156170][T17183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.191577][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.198789][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.549216][T17202] netlink: 'syz.0.3107': attribute type 2 has an invalid length. [ 316.557186][T17205] netlink: 'syz.0.3107': attribute type 2 has an invalid length. [ 316.572648][T17073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.582433][T17202] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3107'. [ 316.611829][T17205] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3107'. [ 316.619388][T17073] veth0_vlan: entered promiscuous mode [ 316.635543][T17073] veth1_vlan: entered promiscuous mode [ 316.784021][T17073] veth0_macvtap: entered promiscuous mode [ 316.840412][T17209] lo speed is unknown, defaulting to 1000 [ 316.916751][T17073] veth1_macvtap: entered promiscuous mode [ 316.997425][T17073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.066567][T17073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.102214][T17239] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3116'. [ 317.152059][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.192468][T16454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.205463][T16454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.231209][T16454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.250745][T16454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.272658][T17242] xt_TPROXY: Can be used only with -p tcp or -p udp [ 317.395444][T17247] Bluetooth: MGMT ver 1.23 [ 317.419852][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.449587][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.502234][T17252] netlink: 'syz.2.3122': attribute type 1 has an invalid length. [ 317.512852][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.524458][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.570950][T17254] veth0: entered promiscuous mode [ 317.596719][T17253] veth0: left promiscuous mode [ 317.868219][ T5837] Bluetooth: hci0: command tx timeout [ 317.914723][T17271] netlink: 'syz.0.3129': attribute type 1 has an invalid length. [ 318.063773][T17277] bridge_slave_1: left allmulticast mode [ 318.072074][T17277] bridge_slave_1: left promiscuous mode [ 318.077953][T17277] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.120900][T17277] bridge_slave_0: left allmulticast mode [ 318.143204][T17277] bridge_slave_0: left promiscuous mode [ 318.149907][T17277] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.290201][T17291] veth1_macvtap: left promiscuous mode [ 318.296156][T17291] macsec0: entered promiscuous mode [ 318.318824][T17291] macsec0: entered allmulticast mode [ 318.347386][T17294] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 318.517829][T17300] veth1_macvtap: entered promiscuous mode [ 318.530477][T17300] veth1_macvtap: entered allmulticast mode [ 318.536770][T17300] macsec0: left promiscuous mode [ 318.543114][T17300] macsec0: left allmulticast mode [ 318.551185][T17300] veth1_macvtap: left allmulticast mode [ 318.946388][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.961835][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.970834][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.980302][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.991046][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.152006][T17327] tipc: Started in network mode [ 319.156928][T17327] tipc: Node identity 62cd88886f35, cluster identity 4711 [ 319.173068][T17327] tipc: Enabled bearer , priority 0 [ 319.180974][T17331] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002 [ 319.190312][T17328] tipc: Enabling of bearer rejected, already enabled [ 319.232897][T17316] lo speed is unknown, defaulting to 1000 [ 319.247981][T17327] syzkaller0: entered promiscuous mode [ 319.256829][T17327] syzkaller0: entered allmulticast mode [ 319.362592][T17333] bond0: (slave rose0): Error: Device can not be enslaved while up [ 319.385455][T17328] tipc: Resetting bearer [ 319.407202][T17323] tipc: Resetting bearer [ 319.435075][T17323] tipc: Disabling bearer [ 319.455020][T17339] netlink: 'syz.2.3152': attribute type 1 has an invalid length. [ 319.463481][T17339] __nla_validate_parse: 6 callbacks suppressed [ 319.463498][T17339] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3152'. [ 319.561281][T17337] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3151'. [ 319.683457][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3156'. [ 319.712095][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3156'. [ 319.784128][T17355] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3157'. [ 319.829798][T17316] chnl_net:caif_netlink_parms(): no params data found [ 319.949880][ T5837] Bluetooth: hci0: command tx timeout [ 320.131287][T17316] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.147246][T17316] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.160195][T17316] bridge_slave_0: entered allmulticast mode [ 320.200414][T17316] bridge_slave_0: entered promiscuous mode [ 320.212324][T17365] netlink: 'syz.1.3160': attribute type 29 has an invalid length. [ 320.220942][T17374] netlink: 'syz.1.3160': attribute type 29 has an invalid length. [ 320.229656][T17316] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.237200][T17316] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.258636][T17386] ieee802154 phy0 wpan0: encryption failed: -126 [ 320.280124][T17316] bridge_slave_1: entered allmulticast mode [ 320.289076][T17316] bridge_slave_1: entered promiscuous mode [ 320.336938][T17393] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3167'. [ 320.389640][T17397] netlink: 'syz.2.3168': attribute type 10 has an invalid length. [ 320.401114][T17316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.427150][T17397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.439409][T17397] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 320.451326][T17316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.512612][T17405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3168'. [ 320.604053][T17316] team0: Port device team_slave_0 added [ 320.620899][T17316] team0: Port device team_slave_1 added [ 320.680838][T17316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.687831][T17316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.714163][T17316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.729616][T17316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.736695][T17316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.772087][T17316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.809669][T17418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3175'. [ 320.886565][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3178'. [ 320.902512][T17422] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3177'. [ 320.910327][T17316] hsr_slave_0: entered promiscuous mode [ 320.920485][T17316] hsr_slave_1: entered promiscuous mode [ 320.927108][T17316] debugfs: 'hsr0' already exists in 'hsr' [ 320.933234][T17316] Cannot create hsr debugfs directory [ 321.068929][ T5837] Bluetooth: hci4: command tx timeout [ 321.384972][T17316] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.398201][T17451] netlink: 'syz.2.3185': attribute type 1 has an invalid length. [ 321.407949][T17316] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.684909][T17316] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.721562][T17316] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.753480][T17467] netlink: 'syz.0.3192': attribute type 24 has an invalid length. [ 321.809915][T17467] Bluetooth: hci0: unsupported parameter 255 [ 321.816050][T17467] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 321.841682][T17316] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.853130][T17316] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.916129][T17316] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.927130][T17316] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.947312][T17475] netlink: 'syz.0.3195': attribute type 1 has an invalid length. [ 321.959600][T17477] ip6erspan0: entered promiscuous mode [ 321.965369][T17477] ip6erspan0: entered allmulticast mode [ 322.031615][ T5837] Bluetooth: hci0: command tx timeout [ 322.161128][T17485] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 322.179467][T17316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 322.190986][T17316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 322.210749][T17316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 322.221965][T17316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 322.311193][T17496] netlink: 'syz.3.3201': attribute type 1 has an invalid length. [ 322.433922][T17500] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 322.448494][T17500] bond1 (unregistering): Released all slaves [ 322.514192][T17502] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 322.534402][T17502] bond1 (unregistering): Released all slaves [ 322.624481][T17316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.681599][T17316] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.707057][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.714292][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.767619][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.774844][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.066986][T17531] delete_channel: no stack [ 323.151413][ T5837] Bluetooth: hci4: command tx timeout [ 323.221611][T17524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.234475][T17524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.245370][T17524] bond0 (unregistering): Released all slaves [ 323.500687][T17316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.520412][T17554] netlink: 'syz.0.3217': attribute type 9 has an invalid length. [ 323.696219][T17566] bond0: (slave rose0): Error: Device can not be enslaved while up [ 323.704507][T17567] bond0: (slave rose0): Error: Device can not be enslaved while up [ 323.997629][T17316] veth0_vlan: entered promiscuous mode [ 324.030887][T17316] veth1_vlan: entered promiscuous mode [ 324.120696][T17316] veth0_macvtap: entered promiscuous mode [ 324.137828][T17316] veth1_macvtap: entered promiscuous mode [ 324.175335][T17316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.221402][T17316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.240614][T14021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.251812][T14021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.300578][T14021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.317231][T14021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.456567][T17608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.488127][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.506551][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.592837][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.618307][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.789909][T17631] netlink: 'syz.1.3236': attribute type 12 has an invalid length. [ 325.116740][T17657] netlink: 'syz.2.3241': attribute type 10 has an invalid length. [ 325.158751][T17657] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.180618][T17657] bridge_slave_1: left allmulticast mode [ 325.186867][T17657] bridge_slave_1: left promiscuous mode [ 325.193526][T17657] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.207740][T17657] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 325.228738][ T5837] Bluetooth: hci4: command tx timeout [ 325.871760][T17712] netlink: 'syz.0.3255': attribute type 11 has an invalid length. [ 325.994782][ T9] IPVS: starting estimator thread 0... [ 325.996006][T17719] IPVS: ip_vs_add_dest(): server weight less than zero [ 326.081717][T17719] __nla_validate_parse: 75 callbacks suppressed [ 326.081735][T17719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 326.100220][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3258'. [ 326.119624][T17722] IPVS: using max 32 ests per chain, 76800 per kthread [ 326.150857][T17719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3256'. [ 326.297673][T17742] Bluetooth: MGMT ver 1.23 [ 326.327406][T17740] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3261'. [ 326.347743][T17741] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3261'. [ 326.761982][T17762] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3268'. [ 326.825292][T17780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3273'. [ 326.897377][T17788] syzkaller1: entered promiscuous mode [ 326.907428][T17788] syzkaller1: entered allmulticast mode [ 327.121784][T17800] netlink: 'syz.0.3279': attribute type 1 has an invalid length. [ 327.197155][T17803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3281'. [ 327.311704][ T5837] Bluetooth: hci4: command tx timeout [ 327.496712][T17819] tipc: Enabled bearer , priority 0 [ 327.506475][T17819] syzkaller0: entered promiscuous mode [ 327.543749][T17819] syzkaller0: entered allmulticast mode [ 327.583091][T17819] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 327.671154][T17827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.721000][T17819] tipc: Resetting bearer [ 328.104702][T17854] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3295'. [ 328.129014][T17853] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 328.133351][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3295'. [ 328.177736][T17853] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 328.252222][T17816] tipc: Resetting bearer [ 328.294687][T17816] tipc: Disabling bearer [ 328.431916][T17874] 8021q: VLANs not supported on ip6_vti0 [ 329.077701][T17925] xt_cgroup: invalid path, errno=-2 [ 329.399532][T17953] netlink: 'syz.4.3319': attribute type 1 has an invalid length. [ 329.425115][T17953] netlink: 'syz.4.3319': attribute type 2 has an invalid length. [ 329.444156][T17957] xt_hashlimit: invalid interval [ 329.451177][T17893] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 329.458921][T17953] netlink: 'syz.4.3319': attribute type 1 has an invalid length. [ 330.114924][T18002] netlink: 'syz.0.3334': attribute type 3 has an invalid length. [ 330.126200][T18002] netlink: 'syz.0.3334': attribute type 3 has an invalid length. [ 330.134559][T17991] lo speed is unknown, defaulting to 1000 [ 330.203731][T17995] lo speed is unknown, defaulting to 1000 [ 330.260517][T18008] TCP: TCP_TX_DELAY enabled [ 330.301881][T18013] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.443339][T18008] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 330.748193][ T9] IPVS: starting estimator thread 0... [ 330.868113][T18043] IPVS: using max 31 ests per chain, 74400 per kthread [ 331.182964][T18068] geneve2: entered promiscuous mode [ 331.200863][T18068] geneve2: entered allmulticast mode [ 331.242536][T14021] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.253086][T18073] netlink: 'syz.0.3356': attribute type 7 has an invalid length. [ 331.266100][T14021] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.280924][T18070] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 331.294797][T18070] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 331.318918][T14021] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.330616][T14021] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 331.408672][T18068] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.415015][T18080] __nla_validate_parse: 32 callbacks suppressed [ 331.415034][T18080] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3361'. [ 331.423465][T18068] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.454622][T18068] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 331.596276][T18084] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3360'. [ 331.663767][T18068] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.683017][T18068] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.694495][T18068] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 331.817783][T18068] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.830245][T18068] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.841959][T18068] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 331.946987][T18068] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.962628][T18068] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.976115][T18068] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 332.003845][T18111] sctp: [Deprecated]: syz.2.3369 (pid 18111) Use of int in maxseg socket option. [ 332.003845][T18111] Use struct sctp_assoc_value instead [ 332.051295][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3370'. [ 332.227154][T18126] netlink: 'syz.4.3373': attribute type 29 has an invalid length. [ 332.261046][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3373'. [ 332.277391][T18126] netlink: 'syz.4.3373': attribute type 29 has an invalid length. [ 332.288611][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3373'. [ 332.299441][ T50] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.302639][T18126] netlink: 'syz.4.3373': attribute type 11 has an invalid length. [ 332.307651][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 332.316100][T18126] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3373'. [ 332.335103][ T50] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 332.374709][ T50] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.393662][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 332.409941][ T50] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 332.483324][ T50] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.510864][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 332.534662][ T50] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 332.559558][ T50] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.567782][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 332.579057][ T50] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 332.798386][T18157] geneve1: mtu less than device minimum [ 332.864617][T18166] x_tables: duplicate underflow at hook 4 [ 332.874143][T18165] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 332.889150][T18165] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 332.891160][T18168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3387'. [ 333.006151][T18171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.203348][T18185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3392'. [ 333.288452][T18191] x_tables: duplicate underflow at hook 2 [ 333.475667][T18196] netlink: 'syz.4.3396': attribute type 10 has an invalid length. [ 333.483131][T18203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3399'. [ 333.494811][T18196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.508271][T18203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3399'. [ 333.541973][T18196] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 333.634934][T18206] chnl_net:caif_netlink_parms(): no params data found [ 333.867279][T18225] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 334.020596][T18236] bond1: Unable to set up delay as MII monitoring is disabled [ 334.036159][T18236] bond1 (unregistering): Released all slaves [ 334.072293][T18241] netlink: 'syz.0.3411': attribute type 3 has an invalid length. [ 334.127489][T18235] netlink: 'syz.1.3410': attribute type 10 has an invalid length. [ 334.263335][T18258] netlink: 'syz.3.3412': attribute type 1 has an invalid length. [ 334.623974][T18274] netlink: 'syz.1.3418': attribute type 39 has an invalid length. [ 335.185541][T18298] lo speed is unknown, defaulting to 1000 [ 335.268697][T18294] validate_nla: 1 callbacks suppressed [ 335.268713][T18294] netlink: 'syz.2.3422': attribute type 16 has an invalid length. [ 335.306888][T18309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.320963][T18294] netlink: 'syz.2.3422': attribute type 17 has an invalid length. [ 335.485955][T18294] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.493204][T18294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.562243][T18294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.713348][T18330] Bluetooth: MGMT ver 1.23 [ 335.719151][T18330] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 335.723282][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.759555][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.789418][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.817312][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.885261][T18337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.913238][T18337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.170409][T18337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.178914][T18337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.356450][ T50] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.367797][ T50] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.438045][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 336.520839][T18360] __nla_validate_parse: 9 callbacks suppressed [ 336.520856][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3442'. [ 336.530104][T18357] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3440'. [ 336.585680][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3440'. [ 336.599791][T18360] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 336.699809][T18357] bond1: option xmit_hash_policy: invalid value (64) [ 336.709100][T18357] bond1 (unregistering): Released all slaves [ 336.767992][T18374] netem: incorrect gi model size [ 336.775979][T18374] netem: change failed [ 336.782739][T18376] netlink: 'syz.1.3445': attribute type 4 has an invalid length. [ 336.825070][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3444'. [ 336.996070][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3450'. [ 337.028750][ T2912] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.038082][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3450'. [ 337.047196][ T2912] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.060043][T18397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'. [ 337.060645][ T2912] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.081180][ T2912] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.131925][T18398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.223500][T18408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3453'. [ 337.332199][T18418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3456'. [ 337.350109][T18418] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 337.363204][T18418] gretap1: entered promiscuous mode [ 337.370537][T18418] gretap1: entered allmulticast mode [ 337.399945][T18422] bond0: (slave batadv0): Releasing backup interface [ 337.436715][T18422] gre1: entered promiscuous mode [ 337.451549][T18422] gre1: entered allmulticast mode [ 337.711921][T18442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3464'. [ 337.814470][T18445] ip6t_srh: unknown srh invflags 4000 [ 337.990525][T18455] netlink: 'syz.4.3470': attribute type 1 has an invalid length. [ 338.145634][T18464] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 338.165240][T18464] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 338.177558][T18464] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 338.629989][T18495] netlink: 'syz.4.3484': attribute type 3 has an invalid length. [ 338.683894][T18497] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.709610][T18497] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.877683][T18497] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.898305][T18497] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.970928][T18511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 339.151400][T18497] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.185824][T18497] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.536331][ T60] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.568077][ T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.617130][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.628580][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.707497][ T60] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.742894][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.789134][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.800987][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.816376][T18556] netlink: 'syz.1.3499': attribute type 23 has an invalid length. [ 339.971988][T18563] tipc: Started in network mode [ 339.976892][T18563] tipc: Node identity , cluster identity 4711 [ 340.005138][T18563] tipc: Failed to obtain node identity [ 340.012988][T18563] tipc: Enabling of bearer rejected, failed to enable media [ 340.673060][T18610] syzkaller1: entered promiscuous mode [ 340.697993][T18610] syzkaller1: entered allmulticast mode [ 340.782946][T18627] ipt_REJECT: TCP_RESET invalid for non-tcp [ 341.895215][T18709] __nla_validate_parse: 16 callbacks suppressed [ 341.895232][T18709] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3543'. [ 341.913123][T18709] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3543'. [ 341.992800][T18718] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3542'. [ 342.021974][T18720] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 342.330646][T18738] veth1_macvtap: left promiscuous mode [ 342.674908][T18769] nbd: must specify a device to reconfigure [ 342.721585][T18769] netlink: 'syz.3.3561': attribute type 2 has an invalid length. [ 342.981917][T18784] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20003 [ 343.021745][T18790] tipc: Invalid UDP bearer configuration [ 343.021797][T18790] tipc: Enabling of bearer rejected, failed to enable media [ 343.444342][T18816] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 343.460314][T18816] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 343.470430][T18816] gretap1: entered promiscuous mode [ 343.475915][T18816] gretap1: entered allmulticast mode [ 343.487454][T18820] ipt_REJECT: ECHOREPLY no longer supported. [ 343.623503][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3584'. [ 343.896475][T18830] team1: entered promiscuous mode [ 343.901698][T18830] team1: entered allmulticast mode [ 344.316784][T18868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3595'. [ 344.500145][T18891] netlink: 'syz.0.3601': attribute type 1 has an invalid length. [ 344.562003][T18891] bond1: (slave bridge5): making interface the new active one [ 344.570421][T18891] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 344.643873][T18897] tipc: Started in network mode [ 344.654135][T18897] tipc: Node identity d617e93f9efd, cluster identity 4711 [ 344.666728][T18897] tipc: Enabled bearer , priority 0 [ 344.688629][T18896] syzkaller0: entered promiscuous mode [ 344.694144][T18896] syzkaller0: entered allmulticast mode [ 344.710236][ T50] syzkaller0: tun_net_xmit 70 [ 344.749166][T18897] tipc: Resetting bearer [ 344.755814][T18897] syzkaller0: tun_net_xmit 90 [ 344.760349][T18904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3604'. [ 344.761018][T18897] syzkaller0: tun_net_xmit 90 [ 344.845508][T18904] 8021q: adding VLAN 0 to HW filter on device bond18 [ 344.854746][T18895] tipc: Resetting bearer [ 344.883001][T18915] sctp: [Deprecated]: syz.0.3608 (pid 18915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.883001][T18915] Use struct sctp_sack_info instead [ 344.906614][T18895] tipc: Disabling bearer [ 344.907333][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3608'. [ 344.924970][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3608'. [ 344.954088][T18914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3608'. [ 344.999804][T18919] netlink: 'syz.4.3609': attribute type 10 has an invalid length. [ 345.029151][T18919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3609'. [ 345.039145][T18919] batadv0: entered promiscuous mode [ 345.062056][T18919] batadv0: entered allmulticast mode [ 345.079427][T18919] bond0: (slave batadv0): Releasing backup interface [ 345.162661][T18919] bridge0: port 3(batadv0) entered blocking state [ 345.302511][T18919] bridge0: port 3(batadv0) entered disabled state [ 345.898215][T14021] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 345.907470][T14021] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 346.013816][T18982] netlink: 'syz.4.3621': attribute type 29 has an invalid length. [ 346.030878][T18982] netlink: 'syz.4.3621': attribute type 29 has an invalid length. [ 346.051123][T18982] netlink: 'syz.4.3621': attribute type 29 has an invalid length. [ 346.084209][T18982] netlink: 'syz.4.3621': attribute type 29 has an invalid length. [ 346.651031][T19033] netlink: 'syz.1.3637': attribute type 23 has an invalid length. [ 346.665231][T19034] syzkaller0: entered promiscuous mode [ 346.671694][T19034] syzkaller0: entered allmulticast mode [ 346.696102][T19035] lo speed is unknown, defaulting to 1000 [ 347.431052][T19075] netlink: 'syz.3.3645': attribute type 1 has an invalid length. [ 347.445730][T19075] netlink: 'syz.3.3645': attribute type 2 has an invalid length. [ 348.420473][T19133] __nla_validate_parse: 7 callbacks suppressed [ 348.420491][T19133] netlink: 30 bytes leftover after parsing attributes in process `syz.1.3652'. [ 348.782953][T19157] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3657'. [ 349.037657][T19171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3659'. [ 349.046736][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3659'. [ 349.149485][T19177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.280325][T19192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3666'. [ 349.288821][T19193] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3667'. [ 349.301537][T19193] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3667'. [ 349.346514][T19201] xt_ecn: cannot match TCP bits for non-tcp packets [ 349.542523][T19210] x_tables: duplicate underflow at hook 1 [ 350.106853][T19260] Unknown options in mask b7f2 [ 350.199941][T19263] validate_nla: 4 callbacks suppressed [ 350.199961][T19263] netlink: 'syz.3.3690': attribute type 1 has an invalid length. [ 350.217061][T19264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3689'. [ 350.229022][T19264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3689'. [ 350.307159][T19271] bond19: (slave ip6gretap1): making interface the new active one [ 350.319340][T19271] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 350.327764][T19271] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 350.336316][T19271] bond19: (slave ip6gretap1): Enslaving as an active interface with an up link [ 351.304131][T19285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3694'. [ 352.898444][T19375] bridge_slave_0: default FDB implementation only supports local addresses [ 353.469927][T19413] __nla_validate_parse: 11 callbacks suppressed [ 353.469946][T19413] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.3738'. [ 353.542964][T19414] netlink: 'syz.4.3738': attribute type 10 has an invalid length. [ 353.546681][T19413] netlink: 'syz.4.3738': attribute type 10 has an invalid length. [ 353.571208][T19414] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.578988][T19414] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.621186][T19414] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.628452][T19414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.633069][T19421] openvswitch: netlink: Flow actions attr not present in new flow. [ 353.635968][T19414] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.650803][T19414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.672566][T19414] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 353.682026][T19413] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.689322][T19413] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.826196][T19427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3743'. [ 353.830640][T19428] tipc: Started in network mode [ 353.840332][T19428] tipc: Node identity ea16d1ae78eb, cluster identity 4711 [ 353.850707][T19428] tipc: Enabled bearer , priority 0 [ 353.858891][T19428] syzkaller0: entered promiscuous mode [ 353.864602][T19428] syzkaller0: entered allmulticast mode [ 353.877525][T19428] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 353.925380][T19428] tipc: Resetting bearer [ 353.949901][T19426] tipc: Resetting bearer [ 354.032006][T19426] tipc: Disabling bearer [ 354.056701][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'. [ 354.084329][T19440] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 354.179150][T19442] netlink: 'syz.2.3749': attribute type 6 has an invalid length. [ 354.300112][T19455] netlink: 'syz.2.3754': attribute type 16 has an invalid length. [ 354.327224][T19455] netlink: 'syz.2.3754': attribute type 17 has an invalid length. [ 354.371976][T19453] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.542537][T19473] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3757'. [ 354.552104][T19455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.599625][T19446] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3751'. [ 354.781887][T19486] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 354.816147][T19483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3759'. [ 354.873526][T19483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3759'. [ 354.913067][T19498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3763'. [ 354.934119][T19498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3763'. [ 355.141622][T19508] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 355.514104][T19532] netlink: 'syz.3.3771': attribute type 10 has an invalid length. [ 356.143494][T19582] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 356.235841][T19587] !€ÿ: renamed from bond_slave_0 (while UP) [ 356.275616][T19591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3791'. [ 356.345265][T19598] netlink: del zone limit has 8 unknown bytes [ 356.371798][T19599] xt_hashlimit: invalid rate [ 356.389941][T19601] nft_compat: unsupported protocol 0 [ 356.396395][T19601] netlink: 'syz.0.3794': attribute type 10 has an invalid length. [ 356.417983][T19601] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.425709][T19601] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.442344][T19601] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.449683][T19601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.457193][T19601] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.464412][T19601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.476056][T19601] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 356.676320][T19619] netlink: 'syz.1.3799': attribute type 1 has an invalid length. [ 356.723132][T19619] bond2 (unregistering): Released all slaves [ 356.765393][T19534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.772231][T19627] ip6tnl1: entered promiscuous mode [ 356.780665][T19627] ip6tnl1: entered allmulticast mode [ 356.885803][T19632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.194926][T19650] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 357.330106][T19660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.509979][T19677] sctp: [Deprecated]: syz.3.3815 (pid 19677) Use of int in max_burst socket option deprecated. [ 357.509979][T19677] Use struct sctp_assoc_value instead [ 358.021695][T19719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.027507][T19746] veth3: entered allmulticast mode [ 359.082663][T19754] Cannot find add_set index 65532 as target [ 359.101142][T19757] __nla_validate_parse: 11 callbacks suppressed [ 359.101163][T19757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3840'. [ 359.130618][T19759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3841'. [ 359.140901][T19757] netlink: 'syz.0.3840': attribute type 7 has an invalid length. [ 359.316131][T19769] netlink: 'syz.1.3844': attribute type 1 has an invalid length. [ 359.328552][T19765] netlink: 'syz.1.3844': attribute type 1 has an invalid length. [ 359.601304][T19787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3846'. [ 359.642667][T19794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.647319][T19792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3848'. [ 359.685732][T19799] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20000 [ 359.893707][T19812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3853'. [ 359.943560][T19806] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3852'. [ 360.063514][T19822] netlink: 'syz.3.3855': attribute type 12 has an invalid length. [ 360.170256][T19828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3858'. [ 360.393818][T19837] netlink: 'syz.4.3860': attribute type 2 has an invalid length. [ 360.403018][T19837] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3860'. [ 360.848288][T18688] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 361.041458][T19860] mac80211_hwsim hwsim40 ÿ: renamed from wlan1 (while UP) [ 361.054010][T19862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3868'. [ 361.221732][T19872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3871'. [ 362.006261][T19894] netlink: 'syz.4.3878': attribute type 29 has an invalid length. [ 362.025607][T19894] netlink: 'syz.4.3878': attribute type 29 has an invalid length. [ 362.067299][T19894] unsupported nla_type 58 [ 362.611431][T19913] can: request_module (can-proto-0) failed. [ 363.030997][T19941] tipc: Enabled bearer , priority 0 [ 363.122809][T19949] syzkaller0: entered promiscuous mode [ 363.140582][T19949] syzkaller0: entered allmulticast mode [ 363.253975][T19947] 8021q: adding VLAN 0 to HW filter on device bond4 [ 363.265636][T19955] tipc: Resetting bearer [ 363.304585][T19955] syzkaller0: tun_net_xmit 90 [ 363.309396][T19955] syzkaller0: tun_net_xmit 90 [ 363.339805][T19956] bond4: entered allmulticast mode [ 363.348115][T19964] xt_CONNSECMARK: invalid mode: 0 [ 363.356172][T19966] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 363.375114][T19939] tipc: Resetting bearer [ 363.439659][T19939] tipc: Disabling bearer [ 363.460043][T19962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.479282][T19964] tipc: Enabling of bearer rejected, failed to enable media [ 363.509200][T19972] syzkaller0: entered promiscuous mode [ 363.514710][T19972] syzkaller0: entered allmulticast mode [ 363.578511][T19981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.625630][T19984] netlink: 'syz.0.3905': attribute type 24 has an invalid length. [ 363.684037][ T7059] IPVS: starting estimator thread 0... [ 363.783642][T19992] netlink: 'syz.0.3908': attribute type 8 has an invalid length. [ 363.848219][T19987] IPVS: using max 30 ests per chain, 72000 per kthread [ 363.856144][T19997] netlink: 'syz.3.3907': attribute type 1 has an invalid length. [ 363.991773][T20005] bridge0: port 2(batadv1) entered blocking state [ 363.999054][T20005] bridge0: port 2(batadv1) entered disabled state [ 364.005658][T20005] batadv1: entered allmulticast mode [ 364.035253][T20005] batadv1: entered promiscuous mode [ 364.173142][T20025] __nla_validate_parse: 9 callbacks suppressed [ 364.173161][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3917'. [ 364.191955][T20025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3917'. [ 364.235833][T20031] netlink: 'syz.1.3918': attribute type 1 has an invalid length. [ 364.305691][T20035] netlink: 'syz.2.3919': attribute type 10 has an invalid length. [ 364.322668][T20031] 8021q: adding VLAN 0 to HW filter on device bond5 [ 364.328786][T20035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3919'. [ 364.348890][T20039] netlink: 'syz.0.3921': attribute type 21 has an invalid length. [ 364.378491][T20039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3921'. [ 364.388352][T20041] netlink: 'syz.3.3917': attribute type 2 has an invalid length. [ 364.410640][T20039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3921'. [ 364.489352][T14021] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 364.500487][T14021] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 364.594893][T20049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3922'. [ 364.639489][T20049] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3922'. [ 364.762795][T20059] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 364.773993][T20060] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3927'. [ 365.156892][T20053] warn_alloc: 1 callbacks suppressed [ 365.156911][T20053] syz.3.3925: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 365.219598][T20075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3932'. [ 365.239287][T20075] syzkaller0: entered promiscuous mode [ 365.242857][T20053] CPU: 0 UID: 0 PID: 20053 Comm: syz.3.3925 Not tainted syzkaller #0 PREEMPT(full) [ 365.242882][T20053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 365.242893][T20053] Call Trace: [ 365.242900][T20053] [ 365.242908][T20053] dump_stack_lvl+0x189/0x250 [ 365.242938][T20053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.242955][T20053] ? __pfx__printk+0x10/0x10 [ 365.242973][T20053] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 365.242992][T20053] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 365.243012][T20053] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 365.243033][T20053] warn_alloc+0x214/0x310 [ 365.243059][T20053] ? __pfx_warn_alloc+0x10/0x10 [ 365.243087][T20053] ? __get_vm_area_node+0x28f/0x300 [ 365.243106][T20053] ? nf_tables_newset+0x1330/0x2540 [ 365.243128][T20053] __vmalloc_node_range_noprof+0x690/0x12d0 [ 365.243176][T20053] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 365.243194][T20053] ? nf_tables_newset+0x1330/0x2540 [ 365.243215][T20053] ? rcu_is_watching+0x15/0xb0 [ 365.243239][T20053] ? nf_tables_newset+0x1330/0x2540 [ 365.243257][T20053] __kvmalloc_node_noprof+0x674/0x910 [ 365.243278][T20053] ? nf_tables_newset+0x1330/0x2540 [ 365.243299][T20053] ? nft_set_lookup+0x128/0x150 [ 365.243318][T20053] ? nft_hash_privsize+0x1f/0xf0 [ 365.243345][T20053] nf_tables_newset+0x1330/0x2540 [ 365.243375][T20053] ? __pfx_nf_tables_newset+0x10/0x10 [ 365.243412][T20053] ? __nla_parse+0x40/0x60 [ 365.243437][T20053] nfnetlink_rcv+0x11d9/0x2590 [ 365.243492][T20053] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 365.243529][T20053] ? ref_tracker_free+0x63a/0x7d0 [ 365.243575][T20053] ? __netlink_deliver_tap+0x807/0x850 [ 365.243598][T20053] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.243644][T20053] netlink_unicast+0x82f/0x9e0 [ 365.243673][T20053] ? __pfx_netlink_unicast+0x10/0x10 [ 365.243696][T20053] ? netlink_sendmsg+0x642/0xb30 [ 365.243717][T20053] ? skb_put+0x11b/0x210 [ 365.243745][T20053] netlink_sendmsg+0x805/0xb30 [ 365.243776][T20053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.243803][T20053] ? aa_sock_msg_perm+0xf1/0x1d0 [ 365.243825][T20053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.243847][T20053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.243870][T20053] __sock_sendmsg+0x21c/0x270 [ 365.243895][T20053] ____sys_sendmsg+0x505/0x830 [ 365.243926][T20053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.243959][T20053] ? import_iovec+0x74/0xa0 [ 365.243985][T20053] ___sys_sendmsg+0x21f/0x2a0 [ 365.244004][T20053] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.244056][T20053] ? __fget_files+0x2a/0x420 [ 365.244075][T20053] ? __fget_files+0x3a0/0x420 [ 365.244106][T20053] __x64_sys_sendmsg+0x19b/0x260 [ 365.244125][T20053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.244158][T20053] ? do_syscall_64+0xbe/0xfa0 [ 365.244179][T20053] do_syscall_64+0xfa/0xfa0 [ 365.244194][T20053] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.244212][T20053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.244228][T20053] ? clear_bhb_loop+0x60/0xb0 [ 365.244249][T20053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.244266][T20053] RIP: 0033:0x7fab4eb8efc9 [ 365.244283][T20053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.244298][T20053] RSP: 002b:00007fab4fa31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.244318][T20053] RAX: ffffffffffffffda RBX: 00007fab4ede5fa0 RCX: 00007fab4eb8efc9 [ 365.244330][T20053] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 365.244341][T20053] RBP: 00007fab4ec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 365.244352][T20053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.244362][T20053] R13: 00007fab4ede6038 R14: 00007fab4ede5fa0 R15: 00007fffc212bc48 [ 365.244392][T20053] [ 365.244399][T20053] Mem-Info: [ 365.244792][T20075] syzkaller0: entered allmulticast mode [ 365.261735][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3935'. [ 365.288206][T20053] active_anon:4994 inactive_anon:0 isolated_anon:0 [ 365.288206][T20053] active_file:3141 inactive_file:40001 isolated_file:0 [ 365.288206][T20053] unevictable:768 dirty:84 writeback:0 [ 365.288206][T20053] slab_reclaimable:12368 slab_unreclaimable:183308 [ 365.288206][T20053] mapped:29348 shmem:1380 pagetables:1085 [ 365.288206][T20053] sec_pagetables:0 bounce:0 [ 365.288206][T20053] kernel_misc_reclaimable:0 [ 365.288206][T20053] free:1221088 free_pcp:33345 free_cma:0 [ 365.288263][T20053] Node 0 active_anon:19976kB inactive_anon:0kB active_file:12564kB inactive_file:159808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117392kB dirty:336kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15988kB pagetables:4188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 365.288309][T20053] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 365.288351][T20053] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.288412][T20053] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 365.288453][T20053] Node 0 DMA32 free:968284kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19976kB inactive_anon:0kB active_file:12564kB inactive_file:159808kB unevictable:1536kB writepending:336kB zspages:0kB present:3129332kB managed:2561620kB mlocked:0kB bounce:0kB free_pcp:120928kB local_pcp:15248kB free_cma:0kB [ 365.300941][T20079] netlink: 'syz.0.3935': attribute type 14 has an invalid length. [ 365.355491][T20053] lowmem_reserve[]: 0 0 1 1 1 [ 365.844017][T20053] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.876213][T20053] lowmem_reserve[]: 0 0 0 0 0 [ 365.881538][T20053] Node 1 Normal free:3900708kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12452kB local_pcp:6688kB free_cma:0kB [ 365.914817][T20053] lowmem_reserve[]: 0 0 0 0 0 [ 365.919809][T20053] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 365.934610][T20053] Node 0 DMA32: 1868*4kB (UM) 1357*8kB (UME) 511*16kB (UME) 515*32kB (UME) 98*64kB (UME) 35*128kB (UME) 29*256kB (UME) 14*512kB (UM) 7*1024kB (UE) 8*2048kB (UM) 216*4096kB (UM) = 976616kB [ 365.975017][T20053] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 365.987475][T20053] Node 1 Normal: 205*4kB (UME) 56*8kB (UME) 43*16kB (UME) 184*32kB (UME) 48*64kB (UME) 11*128kB (UME) 3*256kB (UM) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (UM) = 3900708kB [ 366.041016][T20053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.061373][T20053] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 366.079035][T20053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.089218][T20053] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.099696][T20053] 44499 total pagecache pages [ 366.104431][T20053] 0 pages in swap cache [ 366.120374][T20053] Free swap = 124996kB [ 366.127522][T20053] Total swap = 124996kB [ 366.143759][T20053] 2097051 pages RAM [ 366.158320][T20053] 0 pages HighMem/MovableOnly [ 366.163138][T20053] 424556 pages reserved [ 366.178847][T20053] 0 pages cma reserved [ 366.552821][T20124] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 366.569669][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 366.723909][ T5200] udevd[5200]: worker [6416] /devices/virtual/block/nbd0 timeout; kill it [ 366.743145][ T5200] udevd[5200]: seq 14968 '/devices/virtual/block/nbd0' killed [ 367.018072][T20094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.037774][T20094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.166546][T20094] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 367.394581][T14021] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.404017][T14021] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.424353][T14021] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.548601][T14021] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.584857][T20159] xt_l2tp: invalid flags combination: 0 [ 367.614552][T20162] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 367.880732][T20176] vlan2: entered allmulticast mode [ 367.886627][T20182] validate_nla: 1 callbacks suppressed [ 367.886644][T20182] netlink: 'syz.0.3963': attribute type 6 has an invalid length. [ 367.934643][T20186] netlink: 'syz.0.3963': attribute type 6 has an invalid length. [ 368.052917][T20182] netlink: 'syz.0.3963': attribute type 6 has an invalid length. [ 368.201562][T20203] netlink: 'syz.2.3968': attribute type 21 has an invalid length. [ 368.808452][T20241] syzkaller1: entered promiscuous mode [ 368.823677][T20241] syzkaller1: entered allmulticast mode [ 369.095172][T20257] x_tables: duplicate underflow at hook 1 [ 369.250401][T20265] lo: entered allmulticast mode [ 369.255772][T20265] tunl0: entered allmulticast mode [ 369.262260][T20265] gre0: entered allmulticast mode [ 369.267616][T20265] gretap0: entered allmulticast mode [ 369.293270][T20265] erspan0: entered allmulticast mode [ 369.314348][T20265] ip_vti0: entered allmulticast mode [ 369.325090][T20275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.338623][T20265] ip6_vti0: entered allmulticast mode [ 369.371362][T20265] sit0: entered allmulticast mode [ 369.382531][T20265] ip6tnl0: entered allmulticast mode [ 369.397835][T20265] ip6gre0: entered allmulticast mode [ 369.403956][T20265] syz_tun: entered allmulticast mode [ 369.411301][T20265] ip6gretap0: entered allmulticast mode [ 369.417216][T20265] bridge0: entered allmulticast mode [ 369.428778][T20265] vcan0: entered allmulticast mode [ 369.434758][T20283] __nla_validate_parse: 12 callbacks suppressed [ 369.434775][T20283] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3989'. [ 369.453221][T20265] bond0: entered allmulticast mode [ 369.458564][T20265] bond_slave_0: entered allmulticast mode [ 369.464441][T20265] bond_slave_1: entered allmulticast mode [ 369.478125][T20265] team0: entered allmulticast mode [ 369.483671][T20265] team_slave_0: entered allmulticast mode [ 369.498313][T20265] team_slave_1: entered allmulticast mode [ 369.504600][T20265] dummy0: entered allmulticast mode [ 369.516430][T20265] nlmon0: entered allmulticast mode [ 369.522549][T20265] caif0: entered allmulticast mode [ 369.534160][T20289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3989'. [ 369.540267][T20265] vxcan0: entered allmulticast mode [ 369.549238][T20265] vxcan1: entered allmulticast mode [ 369.554560][T20265] veth0: entered allmulticast mode [ 369.562186][T20265] veth1: entered allmulticast mode [ 369.567469][T20265] wg0: entered allmulticast mode [ 369.573318][T20265] wg1: entered allmulticast mode [ 369.578485][T20265] wg2: entered allmulticast mode [ 369.584139][T20265] veth0_to_bridge: entered allmulticast mode [ 369.591046][T20265] veth1_to_bridge: entered allmulticast mode [ 369.597294][T20265] veth0_to_bond: entered allmulticast mode [ 369.603947][T20265] veth1_to_bond: entered allmulticast mode [ 369.610259][T20265] veth0_to_team: entered allmulticast mode [ 369.617232][T20265] veth1_to_team: entered allmulticast mode [ 369.623447][T20265] veth0_to_batadv: entered allmulticast mode [ 369.632442][T20265] batadv_slave_0: entered allmulticast mode [ 369.638754][T20265] veth1_to_batadv: entered allmulticast mode [ 369.645577][T20265] batadv_slave_1: entered allmulticast mode [ 369.651770][T20265] xfrm0: entered allmulticast mode [ 369.657011][T20265] veth0_to_hsr: entered allmulticast mode [ 369.663524][T20265] hsr_slave_0: entered allmulticast mode [ 369.669418][T20265] veth1_to_hsr: entered allmulticast mode [ 369.675297][T20265] hsr_slave_1: entered allmulticast mode [ 369.681187][T20265] hsr0: entered allmulticast mode [ 369.686346][T20265] veth1_vlan: entered allmulticast mode [ 369.692608][T20265] veth0_vlan: entered allmulticast mode [ 369.698412][T20265] vlan0: entered allmulticast mode [ 369.703720][T20265] vlan1: entered allmulticast mode [ 369.712645][T20265] macvlan0: entered allmulticast mode [ 369.720301][T20265] macvlan1: entered allmulticast mode [ 369.725855][T20265] ipvlan0: entered allmulticast mode [ 369.731640][T20265] ipvlan1: entered allmulticast mode [ 369.737065][T20265] veth1_macvtap: entered allmulticast mode [ 369.743204][T20265] veth0_macvtap: entered allmulticast mode [ 369.749617][T20265] macvtap0: entered allmulticast mode [ 369.755166][T20265] macsec0: entered allmulticast mode [ 369.760737][T20265] geneve0: entered allmulticast mode [ 369.766207][T20265] geneve1: entered allmulticast mode [ 369.771734][T20265] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 369.779726][T20265] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 369.787260][T20265] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 369.795601][T20265] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 369.803200][T20265] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 369.811075][T20265] mac80211_hwsim hwsim40 ÿ: entered allmulticast mode [ 369.819331][T20265] syztnl0: entered allmulticast mode [ 369.825726][T20265] bridge1: entered allmulticast mode [ 369.831341][T20265] bond1: entered allmulticast mode [ 369.836605][T20265] bridge2: entered allmulticast mode [ 369.842906][T20265] gre1: entered allmulticast mode [ 369.848533][T20265] mac80211_hwsim hwsim44 wlan2: entered allmulticast mode [ 369.855999][T20265] macvtap0.0: entered allmulticast mode [ 369.862293][T20269] lo: entered allmulticast mode [ 369.900459][T20291] bridge_slave_0: entered promiscuous mode [ 369.918221][T20292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 369.945352][T20292] bridge_slave_0: left promiscuous mode [ 369.984061][T20298] netlink: 640 bytes leftover after parsing attributes in process `syz.0.3999'. [ 370.003130][T20298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3999'. [ 370.059912][T20302] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4000'. [ 370.110622][T20302] netlink: 'syz.4.4000': attribute type 10 has an invalid length. [ 370.121293][T20302] dummy0: left allmulticast mode [ 370.149221][T20302] dummy0: entered allmulticast mode [ 370.155876][T20302] team0: Port device dummy0 added [ 370.163939][T20311] netlink: 'syz.4.4000': attribute type 10 has an invalid length. [ 370.168974][T20306] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 370.199297][T20311] dummy0: left allmulticast mode [ 370.206908][T20311] team0: Port device dummy0 removed [ 370.217446][T20311] dummy0: entered allmulticast mode [ 370.242758][T20311] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 370.297488][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4002'. [ 370.298869][T20309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4002'. [ 370.310900][T20310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4002'. [ 370.338274][T20310] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4002'. [ 370.347559][T20310] netlink: 'syz.0.4002': attribute type 5 has an invalid length. [ 370.400906][T20317] tipc: Enabled bearer , priority 0 [ 370.408573][T20317] syzkaller0: entered promiscuous mode [ 370.414278][T20317] syzkaller0: entered allmulticast mode [ 370.450166][T20317] tipc: Resetting bearer [ 370.622116][T20316] tipc: Resetting bearer [ 370.667481][T20316] tipc: Disabling bearer [ 371.015113][T20362] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 371.027670][T20362] bond1 (unregistering): Released all slaves [ 371.082760][T20367] tipc: Started in network mode [ 371.087683][T20367] tipc: Node identity 8272e00c2bce, cluster identity 4711 [ 371.107435][T20367] tipc: Enabled bearer , priority 0 [ 371.137490][T20367] syzkaller0: entered promiscuous mode [ 371.143367][T20367] syzkaller0: entered allmulticast mode [ 371.169082][T20367] tipc: Resetting bearer [ 371.183446][T20366] tipc: Resetting bearer [ 371.230185][T20366] tipc: Disabling bearer [ 371.300967][T20375] openvswitch: netlink: Flow key attr not present in new flow. [ 371.539107][T20395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.553240][T20400] veth3: entered promiscuous mode [ 371.563719][T20403] netlink: 'syz.3.4030': attribute type 11 has an invalid length. [ 371.782818][T20420] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 372.117271][T20446] netlink: 'syz.3.4044': attribute type 21 has an invalid length. [ 372.140953][T20446] netlink: 'syz.3.4044': attribute type 4 has an invalid length. [ 372.258940][T20458] : renamed from bridge_slave_0 (while UP) [ 372.510805][T20475] bond1 (unregistering): Released all slaves [ 373.207265][T20522] validate_nla: 3 callbacks suppressed [ 373.207284][T20522] netlink: 'syz.2.4067': attribute type 1 has an invalid length. [ 373.328664][T20518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.346105][T20529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.481946][ T31] INFO: task kworker/1:1H:56 blocked for more than 143 seconds. [ 373.515408][ T31] Not tainted syzkaller #0 [ 373.521005][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.530968][ T31] task:kworker/1:1H state:D stack:26120 pid:56 tgid:56 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 373.546416][ T31] Workqueue: kblockd blk_mq_requeue_work [ 373.564975][ T31] Call Trace: [ 373.571282][ T31] [ 373.576522][ T31] __schedule+0x1798/0x4cc0 [ 373.588885][ T31] ? do_raw_spin_lock+0x121/0x290 [ 373.596269][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 373.603266][T20541] delete_channel: no stack [ 373.611199][ T31] ? __pfx___schedule+0x10/0x10 [ 373.616394][ T31] ? schedule+0x91/0x360 [ 373.621120][ T31] schedule+0x165/0x360 [ 373.625548][ T31] schedule_timeout+0x12b/0x270 [ 373.631407][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 373.636990][ T31] ? __pfx_process_timeout+0x10/0x10 [ 373.642678][ T31] ? prepare_to_wait_event+0x437/0x480 [ 373.648690][ T31] nbd_queue_rq+0x662/0xf10 [ 373.653514][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 373.660130][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 373.666374][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 373.672213][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 373.677275][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 373.684076][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 373.689982][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 373.696340][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 373.703284][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 373.710497][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 373.716530][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 373.722179][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 373.727320][ T31] blk_mq_run_hw_queues+0x33e/0x430 [ 373.732607][ T31] ? __pfx_blk_mq_run_hw_queues+0x10/0x10 [ 373.738953][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.744196][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.749514][ T31] blk_mq_requeue_work+0x717/0x760 [ 373.754644][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 373.760427][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.765648][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 373.773005][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 373.778898][ T31] process_scheduled_works+0xae1/0x17b0 [ 373.784484][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 373.790999][ T31] worker_thread+0x8a0/0xda0 [ 373.795694][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.802809][ T31] ? __kthread_parkme+0x7b/0x200 [ 373.807763][ T31] kthread+0x711/0x8a0 [ 373.812780][ T31] ? __pfx_worker_thread+0x10/0x10 [ 373.818153][ T31] ? __pfx_kthread+0x10/0x10 [ 373.822846][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.828916][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.834118][ T31] ? __pfx_kthread+0x10/0x10 [ 373.838851][ T31] ret_from_fork+0x4bc/0x870 [ 373.843461][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 373.848735][ T31] ? __switch_to_asm+0x39/0x70 [ 373.853551][ T31] ? __switch_to_asm+0x33/0x70 [ 373.859271][ T31] ? __pfx_kthread+0x10/0x10 [ 373.863880][ T31] ret_from_fork_asm+0x1a/0x30 [ 373.869103][ T31] [ 373.872458][ T31] [ 373.872458][ T31] Showing all locks held in the system: [ 373.888718][ T31] 1 lock held by pool_workqueue_/3: [ 373.893981][ T31] #0: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 373.905512][ T31] 1 lock held by rcu_tasks_trace/29: [ 373.910895][ T31] #0: ffffffff8e13e010 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0 [ 373.923397][ T31] 1 lock held by khungtaskd/31: [ 373.928352][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 373.938339][ T31] 4 locks held by kworker/1:1H/56: [ 373.943444][ T31] #0: ffff8880202a9d48 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.955907][ T31] #1: ffffc9000131fba0 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.969025][ T31] #2: ffff888024b7e790 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 373.979411][ T31] #3: ffff888024d776b8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 373.988539][ T31] 2 locks held by getty/5591: [ 373.993225][ T31] #0: ffff88814d9550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 374.003272][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 374.014322][ T31] 1 lock held by udevd/6416: [ 374.019881][ T31] #0: ffff888143b72358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 374.030849][ T31] 4 locks held by kworker/u8:10/14019: [ 374.036310][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.047974][ T31] #1: ffffc90002ea7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.058722][ T31] #2: ffffffff8f4d2eb0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 374.068611][ T31] #3: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x721/0xea0 [ 374.078449][ T31] 3 locks held by kworker/u8:13/14022: [ 374.083928][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.096174][ T31] #1: ffffc900023efba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.108974][ T31] #2: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 374.119693][ T31] 2 locks held by syz.4.4060/20489: [ 374.125050][ T31] #0: ffff88805ab6c148 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 374.136009][ T31] #1: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bc/0xa10 [ 374.145227][ T31] 1 lock held by syz.0.4065/20515: [ 374.150698][ T31] #0: ffff888056acc148 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 374.161486][ T31] 3 locks held by syz.3.4070/20534: [ 374.166677][ T31] #0: ffff888056acb008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 374.177207][ T31] #1: ffffffff8f543e50 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 374.189071][ T31] #2: ffff88805a2998d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 374.199726][ T31] 6 locks held by syz.2.4069/20538: [ 374.204931][ T31] #0: ffffffff8f5459d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.213162][ T31] #1: ffff88805a4be0e8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x240/0x3a0 [ 374.224561][ T31] #2: ffff88805a4b9250 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x24f/0x3a0 [ 374.236216][ T31] #3: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xe5/0x670 [ 374.245187][ T31] #4: ffff88806b29cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x564/0x2390 [ 374.258183][ T31] #5: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 374.269190][ T31] 1 lock held by syz.1.4071/20540: [ 374.274312][ T31] #0: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 374.284319][ T31] 1 lock held by syz.1.4071/20543: [ 374.289860][ T31] #0: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 374.299501][ T31] 1 lock held by syz.1.4071/20544: [ 374.304616][ T31] #0: ffffffff8f4dfd48 (rtnl_mutex){+.+.}-{4:4}, at: tc_new_tfilter+0x4b5/0x15b0 [ 374.314353][ T31] [ 374.363420][ T31] ============================================= [ 374.363420][ T31] [ 374.378304][ T31] NMI backtrace for cpu 0 [ 374.378329][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 374.378347][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.378357][ T31] Call Trace: [ 374.378363][ T31] [ 374.378370][ T31] dump_stack_lvl+0x189/0x250 [ 374.378395][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.378410][ T31] ? __pfx__printk+0x10/0x10 [ 374.378436][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 374.378459][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 374.378482][ T31] ? __pfx__printk+0x10/0x10 [ 374.378502][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 374.378527][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 374.378551][ T31] watchdog+0xf60/0xfa0 [ 374.378578][ T31] ? watchdog+0x1e2/0xfa0 [ 374.378605][ T31] kthread+0x711/0x8a0 [ 374.378626][ T31] ? __pfx_watchdog+0x10/0x10 [ 374.378646][ T31] ? __pfx_kthread+0x10/0x10 [ 374.378665][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.378689][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.378715][ T31] ? __pfx_kthread+0x10/0x10 [ 374.378733][ T31] ret_from_fork+0x4bc/0x870 [ 374.378759][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 374.378788][ T31] ? __switch_to_asm+0x39/0x70 [ 374.378807][ T31] ? __switch_to_asm+0x33/0x70 [ 374.378824][ T31] ? __pfx_kthread+0x10/0x10 [ 374.378842][ T31] ret_from_fork_asm+0x1a/0x30 [ 374.378878][ T31] [ 374.378886][ T31] Sending NMI from CPU 0 to CPUs 1: [ 374.530134][ C1] NMI backtrace for cpu 1 [ 374.530152][ C1] CPU: 1 UID: 0 PID: 5815 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 374.530170][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.530190][ C1] RIP: 0010:timerqueue_add+0xba/0x200 [ 374.530215][ C1] Code: 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 5b ec dd f6 4d 8b 3f b3 01 48 8d 7d 18 48 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 05 e8 3f ec dd f6 4c 8b 65 18 4c 89 ff 4c 89 e6 e8 70 3e 78 f6 [ 374.530229][ C1] RSP: 0018:ffffc90003fc7b00 EFLAGS: 00000046 [ 374.530244][ C1] RAX: 1ffff920036b4fab RBX: 1ffff110170e4f01 RCX: ffff888076338000 [ 374.530257][ C1] RDX: 0000000000000000 RSI: 0000005767f48d0a RDI: ffffc9001b5a7d58 [ 374.530267][ C1] RBP: ffffc9001b5a7d40 R08: ffffffff8f9e1477 R09: 1ffffffff1f3c28e [ 374.530279][ C1] R10: dffffc0000000000 R11: fffffbfff1f3c28f R12: ffffc9001b5a7d40 [ 374.530291][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 00000057318a77dd [ 374.530303][ C1] FS: 000055558fbb9500(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 374.530316][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.530327][ C1] CR2: 00007fc03c7b4198 CR3: 0000000074320000 CR4: 00000000003526f0 [ 374.530342][ C1] Call Trace: [ 374.530349][ C1] [ 374.530361][ C1] hrtimer_start_range_ns+0xcea/0x1080 [ 374.530390][ C1] do_nanosleep+0x18c/0x610 [ 374.530413][ C1] ? do_nanosleep+0x7f/0x610 [ 374.530432][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 374.530453][ C1] ? __hrtimer_setup+0x187/0x210 [ 374.530471][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 374.530494][ C1] hrtimer_nanosleep+0x169/0x360 [ 374.530516][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 374.530537][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 374.530559][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 374.530583][ C1] __se_sys_clock_nanosleep+0x339/0x390 [ 374.530604][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 374.530626][ C1] ? do_syscall_64+0xbe/0xfa0 [ 374.530656][ C1] do_syscall_64+0xfa/0xfa0 [ 374.530672][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.530687][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.530703][ C1] ? clear_bhb_loop+0x60/0xb0 [ 374.530720][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.530736][ C1] RIP: 0033:0x7f8d57bc1843 [ 374.530748][ C1] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6d 1f 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 374.530761][ C1] RSP: 002b:00007ffc55f679d8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 374.530777][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8d57bc1843 [ 374.530788][ C1] RDX: 00007ffc55f679f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 374.530799][ C1] RBP: 0000000000000000 R08: 7fffffffffffffff R09: 3fffffffffffffff [ 374.530809][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc55f67e40 [ 374.530820][ C1] R13: 0000000000000004 R14: 00007ffc55f67a2c R15: 00007ffc55f67ac0 [ 374.530840][ C1] [ 374.531587][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 374.831433][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 374.840533][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.850589][ T31] Call Trace: [ 374.853861][ T31] [ 374.856782][ T31] dump_stack_lvl+0x99/0x250 [ 374.861362][ T31] ? __asan_memcpy+0x40/0x70 [ 374.865949][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.871133][ T31] ? __pfx__printk+0x10/0x10 [ 374.875717][ T31] vpanic+0x237/0x6d0 [ 374.879691][ T31] ? __pfx_vpanic+0x10/0x10 [ 374.884182][ T31] ? preempt_schedule_common+0x83/0xd0 [ 374.889633][ T31] panic+0xb9/0xc0 [ 374.893352][ T31] ? __pfx_panic+0x10/0x10 [ 374.897759][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 374.903143][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 374.909309][ T31] watchdog+0xf9f/0xfa0 [ 374.913473][ T31] ? watchdog+0x1e2/0xfa0 [ 374.917901][ T31] kthread+0x711/0x8a0 [ 374.921966][ T31] ? __pfx_watchdog+0x10/0x10 [ 374.926631][ T31] ? __pfx_kthread+0x10/0x10 [ 374.931221][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.936441][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.941651][ T31] ? __pfx_kthread+0x10/0x10 [ 374.946260][ T31] ret_from_fork+0x4bc/0x870 [ 374.950852][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 374.955962][ T31] ? __switch_to_asm+0x39/0x70 [ 374.960714][ T31] ? __switch_to_asm+0x33/0x70 [ 374.965498][ T31] ? __pfx_kthread+0x10/0x10 [ 374.970077][ T31] ret_from_fork_asm+0x1a/0x30 [ 374.974844][ T31] [ 374.978303][ T31] Kernel Offset: disabled [ 374.982622][ T31] Rebooting in 86400 seconds..