last executing test programs: 4.722688588s ago: executing program 0 (id=2769): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'dvmrp1\x00', 'veth0_to_hsr\x00', {}, {}, 0x18, 0x0, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socket$inet6(0xa, 0x5, 0x7) (async) r2 = socket$inet6(0xa, 0x5, 0x7) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xffffffff, @local, 0x80000001}, {0xa, 0x4e22, 0x5a29, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x0, {[0x2, 0x9, 0x3, 0x337, 0x3, 0x3, 0x2, 0x2]}}, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00000000001050500000000000000000a000005050000000000000014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c000280050001000000000006000340000000003c00bb8fc2885cbc7d3c22b501800c000280050002c3db0300000000002c00018014000300ff020000000000000000000000000001e2a35c9ad77ef59c00000000000000000000000108000740000000000642f0e30c2220d6cf73e47d13ac3a000680"], 0xa0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00000000001050500000000000000000a000005050000000000000014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c000280050001000000000006000340000000003c00bb8fc2885cbc7d3c22b501800c000280050002c3db0300000000002c00018014000300ff020000000000000000000000000001e2a35c9ad77ef59c00000000000000000000000108000740000000000642f0e30c2220d6cf73e47d13ac3a000680"], 0xa0}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000080)={r7, 0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000080)={r7, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x7, 0x25, 0xd, 0xfffffffffffff801, 0x4, 0xfffffffffffffffa, 0x4, 0x10000, 0x3, 0x3, 0x2, 0x4, 0x9, 0x26]}, &(0x7f0000000180)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000080)={r7, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x7, 0x25, 0xd, 0xfffffffffffff801, 0x4, 0xfffffffffffffffa, 0x4, 0x10000, 0x3, 0x3, 0x2, 0x4, 0x9, 0x26]}, &(0x7f0000000180)=0x100) 4.444967627s ago: executing program 0 (id=2773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000a40)="3f1119f0559bb4de5cd7fdb3139dc3cef72c20269d6acb5b7f335d28178d60a6f6a3d5f70e760ac91e326326504996181f493d503bd109932ed36499d156e3790e57a2103957468214c2af1a413e0dcd179a28f64a4ac2ed63a6e1cd6914190d67d9934e38c9661d2517feefaaaf56245f4a514efe804286c3a459b73630dd850af42ceea46765839e35d116f1a09c9f1b2973b363c94bcea83156b125fc38be8ca2a7fba42cf90573c9bf034e67e37f2a67927932a15c5f34d8420fe2f0f93c739d051b6ae67c76c49f2408c0ee4162b396526f750eabf52febeb4ea529bf9c2fba57664f2a6544a9c9b47337541b41f70ef729f62bcd1fa5b1fc2f6dcf37e4cd06af2c30f8c72d8c73106ca67ad53278a45710794ccfab9ef664f66a3e2d20c7ec3d0d967fa42581f533e1465eb71d13a5fd3549be131896c35ec77dde5789252ade19b4448dc5a48af4e3de0275b44404021376ad406d9a09050d19a6978c406b217e274c2f906937fef3c3b162e0cb99d5299914a317aba8eb80f808be8f6e2796a70c00995c55d722ec05f3f84d6b97a21823f6ffa65e25d4504f349928471d73d75ded5830571c4a3a93b88fd33716ba2e4788eeb20c20bf5e3b7bf6fe217bc6f7a1a4776ba8c4f19437cb4309d8549b4eab5b940381cabb48813f41fe4777b1ea32f21812955c06a4f96884cd1c80ef6a4400a008c03545a9328b3ea95a764406fda4af6d8a04d14ff31eddb7b38c62726025d4a63dc4c1e1eea031956b888c6c7c0ee915aaa6647a512dde54ce5b84a0e76381013f705bae0324581db63371cbc37bd1d1799c492d2da5868f360ec0eb58dd10467a82fe9d9f20edb5c65ef458af2a8c9d4597bc19aadc748eb86192bfe8f2a8aec4c760158124575984a091e39fa4ddc24a0ece3cc98e21ded8ab78d1781594c72fba71f342e86c06a50da7db6f6a7913680e40168f5c02b1c27013bd221fdabcd639eab44eadc6f7accb64f2f8aea513c90a106a0e92a0554973c9c578e32a3a10027b27c414514efd044240b510de323953e1ade91ddf5d27bb2a15b37ec0c043eb0d2ba13226116fc47c94963e0613d280399410150b6910edef77a85a04e345cc14b340ec5a5154b9a8cc59dd9b994662cc81d03002e42bbef7027a2803180095f50aa310c90d0e26c2d4cb4ca72acaf3e492031e664f2cae5c68f6909a768375cbb6fd648a5396e53af0e41f0b9dba8aeea518745365591d6e6da47fd52a93a98e2658d8fd3c7bf66e283f8c182aa4f7a9a77438426afe81d6daa2b3bc7385a8d54c1b20184609b7c52d1606db3952249d4ff6b89db10ba7211d88b0d8131d6e1b59bc26e9421ce3ee3b0a51b044f3d52cae65b08e919182f4fe079bc551bcb58a0872cd210f7cdf1ad6c61140801232ee801abd62bce59f1d6636b5b63c580ea330e18245277b9a9288030cae18dc8d25a1e331055d2729f2c31c84f0123491de740f07142de4d7e4911b1fc6aca837604b7f84f632a5f0075327ede11d6301ab4dc1122e4a5cdda82af5933a9974063aef7228dee68dfd9106d46b5568600f9c171e41c8c1c570b45a0da5fd247b54c4bfd5da1c3edff8589b15b9c549617b6cdc454909bfede68aea7b8d9480d1f723df54362ccc970097558cc08d579b00a6adcccc56f89e704c995573853510ced602f1a1b04e55c9a21d0b274d55bb51c23c70e36d630fff00d148154d1dabd988c63531b4a1a4aea2d72db300750c54ebadd2bd091232236594a2e45d105f8bf1539794abfabaf4b193eb5bd9703a8426306987c307ca8c7b8dd1b0c81f4a9824328de33407978f58b4a8dec88551c742744fa928b2288c1ceb71c298b91c44fbed07b05c5ea1ae9c5c74465ad6ae245e2460d0d2f437e830bd63051f1a7045ae956ba170560587f35ca8b6537e848232dc22983a4daa09922744db7f27e899a3ad2d2aaad8aeb5e75db5118942f08f0805ac2f2b71f787c5b179b1520cab2efc3d0c482e357de5e905137fa69516c701c7f01d433af259d462a234eb584a7f93aacb331c82a7fbd84229f0ea08abdc85d4667cf5473490b9873d16c407e0aaf6dab0c348c7817d6da4511e3fe1c73900e09e336d309812d7e26445dda46cb6fc60e51428089308fd08485e58e3b935d70d74afdbb4b18021c89ac7942b95d7d31de90638cfafeca9033ea9c3e58e66f1e158762650eb86ca63065923bc5a7d75a824dd3bb9341d8a23873713556ea64d6eba28bfd93dbc84636eb5c66c099ca579e1c28db794554e66721a42772914769018b0c8ebf1980ff76856ce300caa24160d27f662779dcdafac34edb4b9c70eb3b441588eb09346037c7bbd327950db8789a362d061ffdaec9f5acfb60d577cbe4f3b938a13260fdf984d181b9c51b674f0ce04d1388460a9cef89c4b68e796b1ec94f4e1f35c56e5e82715655c709c5aae83bad5408d2bcf40025f26824d873c23ba8236ae0c68e932e59e11d8eb195416caff05302f6763a2f29d78a51363c82c3b0dc779e0a1537bcd9469b18f37c8ae24fe317d549e2cefe71c507c57144401576a47ceafbdf1198bc66fbf172c27130d18cbff8d5df81606ce3011452b48652eef6ddc9ab22d08e54773e060fae50366237aceee4f70be472500f030cd0e01a5ca58440fe21f163b3a8d0f4e4603744cb8607b4a4cb8d531dc20f74e1e73c035da1eee94883e7145ee0af8b5b41564109ff93c4df0bb49d6526b56d8753b585b979ab891bc3ef2be753ffbbcece75fc09298110683b795eccc9d9ece2dd90c2a1caedbcbaca5844d2085e50b94c3dc966ca397dbb90bf7726a05f56475488adaf4b25c053ea581920f0a547f8a948552ef001b97117b68d87ab5d8dab30a725a05f15e05910a978e4ae8f838bd2ffb49beb5c25222ca4466d63f4537649e45a46c32c137dbdb43b4eefdfa7232c4084a1eebc53c530f0f586c8ea9bff7cb5a803db1ddd66fc13ef4ab3be60da5115c8e378376daa2fa8c61c800a8b76d6e95df1bd4fbefb6e9375373bad8c44db6153a747944ed1320c9da20c8f400309e7a9b9da3e646ae5311f8ed369d6cf64350fbef0f3c79b81075859a5db146236f3e23eaddb5c1b05e700f435c08fb5257fee5132bef07f82f5835369e53714d049828ac833021fdeb0e641cd848c2e43a00028d944ba87a58da7201d94cf3bf490534251d36ddde3687b4a4e456d0ecfeebecab55b137f2ddff50491c62d03edacf18dc03272b77aac981f317068f4ea3d8762b3e76bfae5f0233dab3cf8eeaa9c3f02bb11119380bf259cb32afe1911221ff79acbfec071bdea2da714a82af557f8a80cdf82d2585f4ae6a4579c2140e9559866ee0453912b4dc6d504e49d6d24c6a56b063172e1ec820ca7990e0801c9393109928991ca6d154a3ef12ec084f0d8082432802df2cac904ae0df202843ac93669c31433fc559df28fe7cc8b45c714069cca9eea6c0f5bdf87abeab2b27d6619eb8cc05316ea69510348cd50a53fcc83e573ad2270f6a92c246ec9a75c250508827ce7dd9d31dea8414266635a570db217b29d4e6ec9ec87cfa8f0109235aa52e626a2698270cda20fabccc0b445a838664e66e76e49c759044d94eb89d9b62b1ee0aaae30c97951f92e533685bcef5240609226433ad22b8bfbf6452c6403093c28cca242f7d5c5fc097252a1bed16b1d6b1fe9189adedad2ef0d51634a76e8b9c6409a98e5e6f6343202ccc86699b4be573724fd0a1ffc466880c79d21b0a1f190286e272849e6010b0f47fc5c0ffc6d1d103745f5abf519e6244b110992c6c477f7c11ef85191ef3a0d7eb82c4ea444473a1057eb9041a0f0c22da11eba9c4dfa74ce93221bdbda1322c1ac106f13699a882ef68c11950e8f8da8c208e714182454df2f0e98b5bb7471c39f05dedf36f6e7cd0eacc0a2122811daa86a05fea5df4e1e45c7139262e41b27147474482e4231a850937503628f60f230a2a6eaf756bde9dce19d213e4b6265250c647e6e10f0896f271b36d6754ca6d695e5b8a70ae837b3ea5affc05b37ead58fb664dcaa06a00ace32140b59183231608986b630ea4dc91d9f60a0fff2eb0e64d8472b2c8dcb47210528669d26fd0a5fd94d9c1a421d252047cb293f572b63cc247bc30323a91d4cc50d110f24207a0c53aac86bed81e530234309c20119a309b1af96475a502069eef5e97b6b4e681dc4a582589acb4b95a27556958e2f5267c415927f6d56bb152ec374e81b248ae54168a5e32c528c0bc650863d5012999a010b46a85257a9f80336b3bd76f5fe583c48a25b2ad412acaf4099eeb35791cc60a2c944c9aa2d9196ab4e5da6dda47a9e5fc4eea54892b9e4884c3fd006320d268c5e94793ed0861dc18007f2ce8a3a14f6fb45fe9dbb3ddf6c794ce896fde447fd7b345956f190722aa8b06bca207fd2ac8b7f139920d86031cfc819cc77e9a8efc51d2848879066a3be35db8cc4b48fe737c5dabe84b082fe46c9d3bca9e9b229be2e308558074bd3b71f74739f66c550948fb566a0f302b1168351c5ef4b676105d845061cc40af6321713646429e27b65e6e1e33607601327fc4833b4f1d272fcc98d97d55b91e8ddd75d1b411319c5a5caed948ef4fb3fce743007809ad1ae85b62a72583800d036ba88612c3c60c5734e79714ffb89f270b13c3f124cfc808fdc6b82cfb2ee40315c0c54764c58ae9d3e035cdc397d70be611f42ee038df7fa5d1d9bd4a44ef317d9d8920f19114eb0a373a83d793bd93601db81c469195bedd3130d4a7befe1848b17910103e2fddcc942af2e1522d51eb3e7703e94b800eecd17642ca5ebc2c120ca5a6f2ec490468307053a24c1a4ff20ab00993922ee08384f39d5aff759738360aa529fa26934a655e47fa2f71c2eff0a59f345db920a9b3fc034e3170e1a2eb5933668d22da1e0261e13bc34abf6250211d93c711da7f3a229143b2fd6b05ee942938e4f6e9d3ee6a2b82d16bb283502b0e7758eecd8c9740ae154020c3ee2a4aa13d4359a0a63481fa27b7b1aa247c42b6aeddbf71cdd9e99db2ee1736ddc0f945cd6e28ee91aa7a728623844d5cf8b6ecc4a61fb2e0a94be720b0ce268c995aa383f7c33db16afa9a79b04d53067ec723c101467f702fb1da040bfef96bcf7d9da00a1bba718b725a9e9cc79d037e2b95d61a6ac32a6736040c4b07132b5918beacce48cff8415aa2e012e27f29136fc5795ab1334bfb1e78b57e651ace1ef353aae201e3406c60a67a50c70a66c2a6e9e9a8d1d9d8dfd5784e1dd9fdc8ab92ac9d5e257111e2450989524d6d633fb3d7cdf48974ada28adae8a6ff2e1d1a1d6c65913a8d372a236e9973976a0841b932c45a7fd9ccdc43eaa03f0ddcaaca89227acd6136c8e3014fde405189f90b883f58b454b725f6964d3ad71ad31b5bc28455d5941ddfec0d4a14b42196fb60fb4863f59df4866b28cf2ba5b162c32eadc71e60007b61baf23b36d3acb6698d1163509edf1fa0598f7d1b87b4b8fb8c908ae9ce597b660744b093a3320a0c2fc0a16d6913188129b76e8982a0dd5dc9c68f5a61043ea35f34fa9be456ed242088f9f78c4deda1d2fea5e6d0435f1db33360578d45bc6a867ff60b7212c538863b3ae540a0df1470400864796810bbdfd2b62719869d6e03d2b6cb7c6ec53b40af7bf81e6d124387241067467e607a08e6a5c316f8f2a41df62c2603f6f238cd24b0fe9472bd122ac87d6e0f0acfa013e6e22ceaeec93f2b233d1a1201fccd4f6abe7f34ed0be9", 0x1000}, {&(0x7f0000001a40)="814f21f475523eeecc7a8f73b986d8d21185967d233c78564c66af1358027e50fd122027858f89342c59de70e2f096aaa1965734b2ee3c24200c2d8d13a168077b57979be0b42e4ea7aa3f85532153b735cc31d8353d433e68a83f275450a5f79faada10ca05748e0f9557a4c3fb9c3e910dd0fdd614b58a367913e4e7ef4654ab6a0ae3867ec30bf1bac9ff589b6d785634234adee5d6f5629d0db6ec1c6184010a6c7d94b524dc4400fb126b87cadea42c166c8fe674a9d192dcb004a508de02d28f991f54ff5c4a40ed66539e2905224ac6a773e9ce5f00754944eec295abab8b1ec4102c21ce920078b22972d143cd351a719247fcd08bfec4c7a914a3715bf40fcaa85ffc081da5a5feee2fce70a2cebd853329290ce356ee3c164461c07810b3b39840a9dde886f4e63e7b7118c4947c28683fc14e8fac33aa4c25db37eaaf7302fe3c11b7f18243f57114f14647cde091a669f38703fc61647ce96e8e8e4fa04d33f8c29814fcc61f13619bbaacc141d570c64ed783ac8ade10ebcbc7e4426f932b83dbd4ea37f5749ed92a7d285720737098e214a9d0d96959e81988000aec1ed76e6fbfc3bc1873be31cdf427341478ac5556914557197c3c23f55361450a74365576cf0ad5d0801038a0a4c259c0b3baa74ef6e8982e8f38524310d666a9e45ba74a25ed4531b4cb6db8a01ebd50564b4c66060f33df8c226a7a35bd3645d55064fe23e9129b33ca7ccb6feec9b94a0b57daf4268ab8e985123f36b6202e378d19cfed23dc4993590c7187c36e02ec81bcf1a8725a43061106f9df27cf641d3c4f21ee387d7672d67063f549ecac405169fa91ebde8d2cba5764729669c156e3e557c002926f1beb54bc7f1424cdc38aac4e0efec30f1f2191b298cccce8c765f9fa7b31611d6ccfa7966c5e3b76228268a8fce018c4081606e1a6d5bff300289fe789bee8562d8bac9f4e5532e3225c1aadd86803e36dc464296d9f0244df7e21e366279dfcdc77d86187603142e088ece0ad491eb9b86f578d4b0ecd3c47327db23fb1b298872aa5cb9a44f9b087c9319cadc2fafc1ed12cf1baaa8a3be40b6f28ab060a464a14ec491f62d4a3d4bcc50ecfb6c6c2a0d8d35ace417e63d99f0ab4243514f00b87af1862807dc8a2215b79cf626d203756eeb71c12e1331319a28b83a8ea0d6d78e24ac6144140f664381fadecfd4420877ae2bee958b7549f4d71173791dd7b5c89c8074153eef57f0df23a17f0ce855f4c153490c7d86504338a3694f3aa4d9b92a9772c48f5510626478a28650c6a92aade811cd23e755e931f9a7e230e351d084d2874b6509a6a1b26ea86204dd216f93b2d9ef57f171a1eb2c2d42f23f6cf5f1ed52ee1d8b5a5cdf96712b27b0dc843a045cad0c46e6464c0cbe43e9258919ad4b5a32e41addf14915c108a1cf16f442dcba4311887f639f16069db6eba4f9f2019efbf02e73962016e032087826d0a40aa646c48d92a339418a58646d3d978771d2701321d80ed009cbd64a3295ecbbfeec92a6123496b8066159422eca50f8fd6da63387e607fa99ab788772fd7f31808fd5a17905b635c09bf88300f9c53e9d088a3a3c2ac7a4298a2ef7a628e9cbf7f27708b7c0e4efb151760842791d0d4d8a393b45921f5dbfc91d8f9bb549472d146906531a0281580079ed7e3daf69f286dc8138fdf59250b790b50c88d827ae392360c347fc1dc287df53b3927d3794f516bb90ac3682db185e44f458882f8eba217a83daea0482bc9301f4ab45eaffe8141f246d60c60a0e3a947a95f7241a975962f694dc79e4f4566b8a79d0e9283fe885374a1a4115a634c48321e780cc01c349f81091dc8290c00fcfe5acf91a0dba74dd1c50be0dd365f3eb62a66c485eb6448649b332db14e55ebcecf296504e879b22a54e518436111b2f31896ca3a60154743ee882bb0a5fdd38b1c20127adca02fd456693212cf822809e2f7212a4fec7c42cc609f77ac93fb0112a7fe40fcef12acd8881d5d823797da1649ede6bad7a6cdfbad7984e79e45729e9f5b86138687ca69c0d5027e4cbe5f5dbdb58880241db3dd51715c9d5687ac515689bc37812b8b4271fcf3194b7b9b863c080a1729d1be3d4d9fc1a43031ead731f925349768ae64f62a7090d69bb1f592e0ccd1c0b751daf6a6dfc4f1df64b1ac9bb55fc630998574b224709239cfa0d93b31787d9f6e935466e58a874317923d4e3ba1f4e9454e0284dbdb880dc441fa155b70a015b13685d6c41cc9b7d051ff1b67b32c1228782c8f3d3c6b465a12fdf50a360001a9634645821ecfcb029239b0b9f963fd81a6eff72fd02c7f41955cca77e7257a5907ea82d798165601815915482c8109fd30ccfd5cdc50bc59ccd195c76b5d125b1859ef33f2a4243ceaa51fc74af256064da548310d5ece1c65b6a758e02a17e22dc6c9958aae5b5bb2478e3d2b24e6c92d20ea134b17b9164911d5b02dc2fe3ada3d8713539e730d6c5a15ac9dcb83f2b4194a30999dec867e4a023fb69ac809d77977320f67b975a794ba4d94e44f96aaff011feb14ba6ce72c902eec6cfab05b619d2f1aabcc60a21a298d9c328863d6c005ecc9d9cccb998b28f052493297e5962e4e0bfad3c123f1f9979c63e7ebbe9726ba6d6373164392a891fee3955fef167cd4a4f412e469a580f3928a74a34d75a0a9ce6702ea7b9ff9cced99e4069e6e19042fcd2bda1127fda61e34f63f65e8c8b836d7cc806846de00ac75e5a5305e7e4bb1c81e8c8332d67d411d886741309d5044a5983cd3b4e080dc9136448f7855ed2fe0e9eb3c783183f910ff6d4b60d99918b3b73e52d372dd29a867b32acd9897a74619cbbd4752d2a03f6fd7c2f79b0a4beb7989565941cf8344997ea02d9e31cfdf0f8a26d9d016c63d6432caac7cf57ecdc717335c1d3b72b1982de81b5b9e7672c10cc371e8c7b017f83c215855b77a9547529daa2440b76df0c5b17582aa1cfbc3a4fd93b05c88bbf8968e1007be24a6acc85403bdcb5753b4c1e16476eaac4cc824c3df4808572e7c1ad3a13bec67dec3b3bda4d6f97132f808f8b45a2b30127e9527cada9ac1d6de33092349f48c3d926dd526836e4733e62dc53cace482eea71d7f84ad922cbe9d5dd2bf9bbab6f8223189793c0c7e43c7ecad87b3bb2010a82a76846edae3da13dc3387a8261aaf227f4807ef18a873690658ce3872af6eb53998671b9e5e33a5977f272974e764a0e69c530fbd2fb39b8730b12b8dae6f28632f76218bc2d94be624e85fab8f9dfb7540cd32b141dd2092f9944207a4da29795ec19a485f587bc64dd22fa7b62f890b1e9822158aae51d27aa96ba955eda2b3acb256c20c3a60a4dffba61c48098242ee00d266f651c4cf1005421626dd1c535d0f5152b0a7ea5ec0e38461ff66b9af50530d347551dfd87c71d05598333f65cde632732bf995cec8fda02405fcdd18204fba2ce4f36ec3ca377155ef60feb55fcfbe20d12e1fa4c5ebf61a48f505eab02815ab75c11e8c744e9440aec9dc8cd7096cce96f3e614614e31812223fa23ca70505b73c8e0b24a4d8bd7f3458933a745ae0d4d9fb3cfef21866f497cef1d7f7668c81343d8d5f5fd73db3c06f0241873d151dbb81addb8cd016f3247acfc180ff6fe1df81ddb5f79d58e8c798938ed71512bc1404b6cf2d22d5aba5c187b4cd09ec4f1c60ca593e569d6eecffa4752706ac255f98514ca15b3b795ce77f90dee81d906a5b901d27d2c75fb5793a81cbe1698a35b848e7c8dfac0e4edf54fb07a4ac30448d4d27a1c81fad4c1727d20391bbd4c6d8e0030d1284bebdf86dc0ff227e9e11cbf46444aa8bd1fc9a0daabd0ac43e8dc8afcd3d1f695fc9b2853b91d9a167486f001083bd6a267101ac8caf8316cdaf2dcf22eaf3bfb1e727c9a30ad02de008efbdec9bb7a6293a1b821eda40b113251fbead59441181485b25e5a2ab3f54033cd780b9c05095df1996ea22d099487b0a1ab9591b82ad35f37799d547f4f94a2a4c8646b89227fda71238086e9dad830d5516207a0ef3daef9d13fdc8afa9f2b47a43a2b44ddc97095b0e3676efcf7965e8bcdbd5a513a8eb5979a622e9a75f181b6c5f5a26127bd32a6702e7944b3518bdde93128bc13f6cdd4764e705776c3ee7d22be949e9a0d6653114bc3aa1c800e22a5a9c337295ecc9015424ea66b9e3f08aa9c7a7d388e93328e65b4332442c09e42eb66f0c6a20b8eda7e37a394acac9a0216e81d7319ef85620a6f4abd5ee4b1e48d9dd60921c06a1cd72da6beb9ca5863fe05d42f5dd74a8163212ed8965dc3dc69e07f5e71bad971a8d1ef05a015c52247ea3078133b112d184a852460d7926402b64eff62dc4a97b7d97f56a53d16f929d167f3b0eb0f830a2315427bb7051796edac457afe3c93d1e25ca3b9e2209eeede9335c7e2a016edead79a52fa36c5c19a8d59b88e15274c308240d06b5489409896572ab3ce0a6bb309528fce3984c764d5a8d3b94ab5672c973cd12cea57bfbfb4369c2eba46c8793197c230e04f50194efab389b323af0fb4702825a2080e7fb10724a51f018005a49ff1b2091e5d53104cb087a021103fbbd8dd43921b6e606148594b274df016dbfe193b2827fcd6cd0a6869a000acce749292315fcd668772987c9ee1a3379479134dbafb2a8b49f0b4b539e73da84c034a97dda20e84270048ff4c65aa1decb9cc8f9de89719dce7cca167f42ec82ebe0b1461e0ce3ba51e5e192ba642c824b37133976bc63525f0d9704a1cbc86e824a43e5980c191f8814dfd9bece09fe314ad9fa3b8b4e007f318e8253ccbcae32b0b68cb06d2cbcaf87ef327304331e0b733e27b01e5426a6cf68fa4502289bb48acf65833a40de9e4b01af73ad19e4104c712238ff1f7affd632f6d6e97d0c3195cdf676a0c942de2bf90646d1b92ac074bceb4f35f6260b940bdbb3f822f1b7a9520a777fec1bf7acd7e56f7ce9a54f20c63bb2dc4432b7358152ec276bd488d9fed965ee7bc9b71db71bb7aebc357eaf4a1b4d608919eb1d0640db424f2dd001853566497a508827e47e8c84cf2db71450b351f8d7474eda2538e26e3e1c08066792a9fff80365000bb27c9ff9e12ec1df0c6456e6b12ae3f1e84477d706fe36d3c8bfa6acb0a544eb1bacb7fdeb4c0ba010136eaa11057f207d70d94b18fe8b5c265c6ff9f11800754f953551650088be2fa3008891ac95b5a3dbee81cb0375c70f8752ab7a95e1ce19e275a469ffec364fc6fc991ba2f5eaf578b0bb3fbe5bdaa32c17ed08be4c445d0845c82a85d6b57152d2ba622879b4da68cb94b14ecd7b6223d33f7f9b7e4f38bc5ab35396e0a635a2b3f6397684e87c90c5ffa3291c3394d13ec84f8611086d0748aefefe050cfcee6af000b96256524df2afa78c7131a43bde58742a5d576840e3529967df2ca5c74c1ebb5553206e709d88cadb34f899d518deed6bc47ed7bdc17fabcbf9aa1a2529cd54d41b9695b2776ce12a57e4f4f94acf6deaa2adeff287e12ea83302738b686b3bcbe098898f874cce1ff5797a410bb11a158563e6d812a816b5c7852abfcdfdc86dd216e49281b84d45b1dedc3c86cada778e3860080870dd0226af4dcbeab4fa882ce67fe5bae436a433c1de5bd00c113072dfa9b372aeec7a9846162e7a285c4a4ccea819b4e3fadb3c5375de7f9f59ea07ac27de9bd9a0248ce53b808809e64ef478844ae4f667ee5656396fe392948488345c29aaba0fef9a3e6c83f0b9b815b907df568444e094b", 0x1000}], 0x2, &(0x7f0000000200)=[@ip_retopts={{0x94, 0x0, 0x7, {[@cipso={0x86, 0x1d, 0x3, [{0x1, 0x7, "0da21f4541"}, {0x1, 0x10, "a42b9e9a415b35816683d388feb6"}]}, @cipso={0x86, 0x2c, 0x3, [{0x5, 0xe, "75aff19960885bad3000890e"}, {0x6, 0xb, "ebcdb9064633255825"}, {0x5, 0xd, "1a5c1302d6878ccf5c8e36"}]}, @generic={0x1e, 0x3, "02"}, @cipso={0x86, 0x2c, 0x3, [{0x7, 0xa, "c72e70f24ce33231"}, {0x0, 0x5, "67ce7e"}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0x11, "0730e9bad77d6be9276286b305cbf8"}, {0x1, 0x2}]}, @lsrr={0x83, 0x7, 0xb3, [@private=0xa010100]}, @generic={0x44, 0x4, "e6b0"}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x8c, 0x3, 0xa, [{@private=0xa010100, 0x3b}]}, @cipso={0x86, 0x11, 0x3, [{0x7, 0xb, "647f17cd168c8a86c2"}]}, @noop, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x3, 0x15}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}}}], 0xf0}, 0x804) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x3, 0x33) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000001c0)) (async) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="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", 0x1000}], 0x2, &(0x7f0000000200)=[@ip_retopts={{0x94, 0x0, 0x7, {[@cipso={0x86, 0x1d, 0x3, [{0x1, 0x7, "0da21f4541"}, {0x1, 0x10, "a42b9e9a415b35816683d388feb6"}]}, @cipso={0x86, 0x2c, 0x3, [{0x5, 0xe, "75aff19960885bad3000890e"}, {0x6, 0xb, "ebcdb9064633255825"}, {0x5, 0xd, "1a5c1302d6878ccf5c8e36"}]}, @generic={0x1e, 0x3, "02"}, @cipso={0x86, 0x2c, 0x3, [{0x7, 0xa, "c72e70f24ce33231"}, {0x0, 0x5, "67ce7e"}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0x11, "0730e9bad77d6be9276286b305cbf8"}, {0x1, 0x2}]}, @lsrr={0x83, 0x7, 0xb3, [@private=0xa010100]}, @generic={0x44, 0x4, "e6b0"}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x8c, 0x3, 0xa, [{@private=0xa010100, 0x3b}]}, @cipso={0x86, 0x11, 0x3, [{0x7, 0xb, "647f17cd168c8a86c2"}]}, @noop, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x3, 0x15}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @dev={0xac, 0x14, 0x14, 0x1a}}}}], 0xf0}, 0x804) (async) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x4) (async) 4.123659105s ago: executing program 0 (id=2776): r0 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000180)=0x40) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 3.783922431s ago: executing program 0 (id=2782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x402400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xc, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3.307838185s ago: executing program 0 (id=2786): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e24, 0xfc, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfffffffa, @mcast1, 0x7}, @in6={0xa, 0x4e20, 0x7f, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7ff}, @in6={0xa, 0x4e20, 0x0, @private0, 0x1}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x8001, @mcast2, 0x7}, @in6={0xa, 0x4e24, 0x7, @loopback, 0x1000}], 0xc8) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="096db5437ee91a6ad6f2de0bbaa7643e9181db4a5de2bc18f0716cafb645a04b3f015656b975ea921f42a285", @ANYRES8=r0, @ANYRES16=r0], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004840) 2.93124445s ago: executing program 0 (id=2790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000ed000000000000fdffff7f8510000006000000950000000000000018230000", @ANYRES32=r2, @ANYBLOB="000018000000000000000000000000000000950000000000000095000000000000000000000000002b271edd2939c9f7297093ee871fe991b21c1e28a2bf891b9cafb6ac436f1dd78d79d250f96c1c39546822713b2b0c01d520e4448d25cfdf7c54670f2783d34bf85bc6edd930831868917945643a148c3d5df10b0000d3f95c88f86aa6248149c900c9befa90253aefbfaa1491fadd5640f5d561a3615a109aff5aec36e755bec7ded5825879ae91fb82556452fd5db88724"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000003, 0x2010, r3, 0x1000) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xf6}], 0x1, &(0x7f00000001c0)}, 0x8840) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) (async) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x3a, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r9, 0x0, 0x0, 0xfffffeffffff3fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x3fc, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) (async) sendmsg$inet6(r9, &(0x7f00000008c0)={&(0x7f0000000200)={0xa, 0x4e24, 0x337, @mcast1, 0x81}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0d5193790964d07f1ac482f3a86b6110450a23d45b03e0eb172016e3723f2d03e25d0000000057db00000000430900000000000000000000fa000000"], 0x18}, 0x20008009) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001000000000008000200ac1e00010c00028005170100000000002400038014000180080001000000000d08000200ac1414000c00028005000100000000676600018014000180080001000000000008000200ac1e00010c0002800500010001000000"], 0x80}}, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) (async) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x5367258ca934487a, 0x6071, 0x0, 0xe6}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c00018008000140c0ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) 2.025092682s ago: executing program 3 (id=2799): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x2}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x40}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x77}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4008001) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="f1a2610faca2", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0x8}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0x8}}}}}, 0x0) 2.017521766s ago: executing program 3 (id=2803): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="73619454b396dea70e00", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000300016802c00018028000100ffff"], 0x68}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="73619454b396dea70e00", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000300016802c00018028000100ffff"], 0x68}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) 1.735834789s ago: executing program 3 (id=2808): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000ff030000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r6, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000080)=0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x522, 0x4) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r3}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r10 = accept$inet6(r4, &(0x7f0000000540)={0xa, 0x0, 0x0, @local}, &(0x7f0000000580)=0x1c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @mcast2, 0x3}, 0x1c) sendto$inet6(r7, &(0x7f0000000140)="9f", 0x1, 0x4040000, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[], 0x80}}], 0x1, 0x4000080) recvfrom(r7, &(0x7f0000000200)=""/62, 0x3e, 0x99bcb88de02507d2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x3c, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0x10}, {0xffff, 0xffff}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x91}, {0x8, 0xb, 0x7}]}, 0x3c}}, 0x40) 1.555482349s ago: executing program 3 (id=2813): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000040)="9f0910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000240)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x240008c0) getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000100), &(0x7f0000000280)=0x4) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080)={r4, r5+10000000}, &(0x7f00000000c0)={[0x2]}, 0x8) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@newnexthop={0x58, 0x68, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0x8}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev={0xfe, 0x80, '\x00', 0x1b}}, @NHA_GROUP={0xc, 0x2, [{0x1, 0xbe}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 1.232716094s ago: executing program 4 (id=2820): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x1ff) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 875.737171ms ago: executing program 4 (id=2822): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000100000022bf000010010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x1001, 0x16}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r3}, 0x20) accept(r0, &(0x7f0000000080)=@can, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000002c0)=0xe2, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) listen(r0, 0x5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000100000022bf000010010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x1001, 0x16}, 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r3}, 0x20) (async) accept(r0, &(0x7f0000000080)=@can, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000002c0)=0xe2, 0x4) (async) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) 875.245976ms ago: executing program 4 (id=2824): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x0) recvfrom$rxrpc(r0, &(0x7f0000000040), 0x0, 0x10042, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) 874.782884ms ago: executing program 2 (id=2825): socketpair(0x27, 0x4, 0x3, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$netrom(r0, &(0x7f0000001280)={{0x3, @rose}, [@remote, @bcast, @remote, @netrom, @rose, @default, @null, @null]}, &(0x7f0000001300)=0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000001240)={&(0x7f00000010c0)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000001200)={&(0x7f0000001100)="b0389ce88db87e081d635d799c0c8d64bb528718c42932f0c5b49299196532b4b3e7b999626f316e57569c5057e1d045483aafc5f9430f28e36ebcdd5f802bc74e8af1f85f6e7d3edb32672345c0a9f034d31988946106a4b11f8babdd40d222563d4ee70a112b20ac7456716ea4522b0b8a1ec915d88f2f3310284a056d5a94fd726e02b1c6089f85c7b1c1132c7ac20025bb77ffbc74da0e3bd31515ca284493d6300a2dbf90cd97c4cceaec2953d97119c3e7ca268b1cf99f06492e7afb84c3771180c4ecf2a8a3fe1475753590241dffca3ecf520f8b6a329d80d92c931ddbd7e97ff1368a38fb828e940cb2ac6e1205", 0xf2}, 0x1, 0x0, 0x0, 0x4040001}, 0x44) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r4, 0x13, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="87f1ee1930b7"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040885}, 0x50) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x4e23, @empty}}) r6 = socket$netlink(0x10, 0x3, 0xe) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x44, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFACCT_BYTES={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 802.764852ms ago: executing program 4 (id=2827): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13, @ANYRES64], 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x100) close(0x3) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 727.766839ms ago: executing program 1 (id=2828): sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x65b0, @mcast1, 0x6}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x2, @empty}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0xe853}], 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10, 0x50}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "fee89af6fc0b071fc313761d26898562"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="47a304cb8914"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000580)={0x0, 0x1, 0x8, r6, 0xf}, 0xc) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0xfc6589c7e8af5d43}]}, 0x2c}}, 0x4000881) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', r6, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x8, 0x3, 0x2, 0x5, 0x40000, r7, 0xdcb2, '\x00', r8, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000840)={r7, &(0x7f0000000800)="dc74dcb55a113fe9d54561"}, 0x20) connect$inet6(r5, &(0x7f0000000880)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x59}, 0x1c) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000900), r1) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000940)={@initdev, 0x0}, &(0x7f0000000980)=0x14) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r9, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20010050) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), r1) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r12, 0x100, 0x70bd27, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000055}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000cc0)={@can={0x1d, r6}, {&(0x7f0000000c40)}, &(0x7f0000000c80), 0x3}, 0xa0) r13 = accept$phonet_pipe(r11, &(0x7f0000000d80), &(0x7f0000000dc0)=0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000e00)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000e40)={0x0, 0x0}, &(0x7f0000000e80)=0xc) setsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000ec0)={r14, r15, 0xee00}, 0xc) 702.884658ms ago: executing program 2 (id=2829): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x44}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002c9100deeadcdf25180000000c00060001000000010000001000065830800c000180080001000501"], 0x30}}, 0x4040084) 682.43337ms ago: executing program 1 (id=2830): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) (async, rerun: 64) r4 = socket$inet6(0xa, 0x5, 0x0) (rerun: 64) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, @in={0x2, 0x0, @multicast2}], 0x2c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001480)={0x0, 0x1c, &(0x7f00000012c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000014c0)=0x10) (async, rerun: 32) sendto$inet(r1, 0x0, 0x0, 0x20048800, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) (async, rerun: 32) close(r0) 563.764437ms ago: executing program 3 (id=2831): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000740)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001740)={{r4, 0xcb7d, 0x9, 0x100000000, 0x8000000000000000, 0x1, 0x5, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, 0x2000000000000, 0x1000}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="27e52093fb2d39aec502ed7766b9fd15af69ffc53104f08ed6fc455f9a0917bbefdee1384ce8301320c01e0a6567739675173bee491b060483e7402d51c89e1fa08cdb1ce88bcce84b96ba781d457389863c2cb3242d930e7e290888bbf18db440d6c2bcedebcd0d9983066a5e90b750371ad0a724a702a54b0bca6136fe92559f8ec8c51cacf98d17c1f17f086c1cbbd18b8d5978b957b4877b311152beda76a946a23f7f5b49673d"], 0x20}}, 0x0) 562.960484ms ago: executing program 4 (id=2832): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000006001800000000009500002000000000"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) 471.471255ms ago: executing program 2 (id=2833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffc64}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4850) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980600000000002000128008000100677265001400028008000700ac1414"], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r3, &(0x7f00000001c0)="11eb0300fc0baf745836da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x4, 0x6, @multicast}, 0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002300fbffffffffffffff"], 0x40}}, 0x80) 460.868542ms ago: executing program 1 (id=2834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xfffffffffffffdbc}, 0x1, 0x0, 0x0, 0x20008855}, 0x8090) 359.874663ms ago: executing program 4 (id=2835): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2003, 0x880b, 0x8}}}}}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) read(r2, &(0x7f0000000300)=""/93, 0x5d) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000018, &(0x7f0000000040)=0xb, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x6) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000140), 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'veth1_to_hsr\x00', &(0x7f0000000c40)=@ethtool_drvinfo={0x3, "ccf4cc6389c8f4f091db180d056b1ebab2d735eef751772b59715f969132265a", "3235b116d15b876fda658219e4809ea20d47df6d290d5f60af726abb63962ef6", "d7b8785b9dad70e9861bc038c45be26a7095f158ad05cc369dcacfe3e30a9d31", "edc8433d067d4e31cc4dbcd138973f193e13be2476c3d330fc5ff58daf0cff24", "69ea5e1862d003b9f46eb4e8869d62997b0d78063702b16eb1af1a557c306546", "152bd8a53ebd875b0819531e", 0x6, 0xffffff5a, 0x1, 0xffff6bef, 0x40}}) sendmmsg$inet6(r5, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe000000007110100000000000e5000200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 354.636324ms ago: executing program 3 (id=2836): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r4, 0x0, 0x200ffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r6, 0x0, 0x80000001}, 0x18) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x28}, 0xc0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200601, 0x0) close(r10) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0x1, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x5}}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="f1ff00004ec6"}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)=ANY=[], 0x40}}, 0x0) 341.110499ms ago: executing program 1 (id=2837): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) 257.150008ms ago: executing program 2 (id=2838): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f, 0x10}, 0x20) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r0, 0x0, r0}, 0x10) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xfffb, 0x1}, 0x6) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) 166.098196ms ago: executing program 1 (id=2839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c8014000100a463ede3"], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 123.14721ms ago: executing program 2 (id=2840): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0xfffffffa, 0x6, 0xf8, 0x9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000040000000000000000ffffffffffffff7f000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)) (async) close(0xffffffffffffffff) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600c7000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x1000) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104f5ffffffffffffff00000000807d91866e478f610db6cd27aa1a4303c998a3097fc8fadb7bcbe2cd0fffc507d16fc2b52d96a2c34028e2239b9cfcc275254d2562ea2cb6314ca51f18c2356eb93f8461a04fb7ffa60f1e22c31d8bdb21cf052bb4", @ANYRES32=r6, @ANYBLOB="0000000000000000240012800900010069706970000000001400028005000900000000000800140000000000"], 0x44}}, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) connect$pppl2tp(r8, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast2}, 0x2, 0x4, 0x3}}, 0x2e) (async) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) 63.285864ms ago: executing program 1 (id=2841): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0xe, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) (async) write(r1, &(0x7f0000000080)="0b000300010001", 0x7) r2 = socket(0x1e, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) (async) bind$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 0s ago: executing program 2 (id=2842): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000140)=""/2, 0x2, 0x0, &(0x7f0000000180)=""/169, 0xa9}}, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000007140100000000000000000008000100010000000900020073797a310000000008004400", @ANYRES32=r2, @ANYBLOB='\b\x00D\x00', @ANYRES32=r2, @ANYBLOB="0900020073797a310000000005005400010000000500540500000000"], 0x50}}, 0x0) kernel console output (not intermixed with test programs): 52.388434][ T8563] bond3: (slave bridge3): making interface the new active one [ 152.397655][ T8563] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 152.432223][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 152.650382][ T8601] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.733'. [ 152.771395][ T10] IPVS: starting estimator thread 0... [ 152.876022][ T8617] IPVS: using max 25 ests per chain, 60000 per kthread [ 153.377002][ T8636] tipc: New replicast peer: 255.255.255.255 [ 153.416288][ T8636] tipc: Enabled bearer , priority 10 [ 154.137550][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.749'. [ 154.262473][ T8681] xt_limit: Overflow, try lower: 604147548/4200216962 [ 154.274004][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 154.290690][ T8683] tipc: Enabled bearer , priority 0 [ 154.320999][ T8683] syzkaller0: entered promiscuous mode [ 154.349902][ T8683] syzkaller0: entered allmulticast mode [ 154.444545][ T8683] tipc: Resetting bearer [ 154.503611][ T10] tipc: Node number set to 1877271725 [ 154.512985][ T8682] tipc: Resetting bearer [ 154.605339][ T8682] tipc: Disabling bearer [ 154.796831][ T57] block nbd1: Possible stuck request ffff888024bb5080: control (read@0,1024B). Runtime 30 seconds [ 154.808669][ T57] block nbd1: Possible stuck request ffff888024bb5240: control (read@1024,1024B). Runtime 30 seconds [ 154.821221][ T57] block nbd1: Possible stuck request ffff888024bb5400: control (read@2048,1024B). Runtime 30 seconds [ 154.835507][ T57] block nbd1: Possible stuck request ffff888024bb55c0: control (read@3072,1024B). Runtime 30 seconds [ 155.027511][ T8727] netlink: 'syz.0.761': attribute type 1 has an invalid length. [ 155.087621][ T8730] netlink: 36 bytes leftover after parsing attributes in process `syz.0.761'. [ 155.187677][ T8727] bond4: entered promiscuous mode [ 155.195379][ T8727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.091593][ T8769] block nbd2: Unsupported socket: should be TCP or UNIX. [ 156.422569][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.774'. [ 156.445377][ T8782] netlink: 'syz.3.774': attribute type 1 has an invalid length. [ 156.470629][ T8782] netlink: 'syz.3.774': attribute type 1 has an invalid length. [ 156.507868][ T8782] netlink: 'syz.3.774': attribute type 2 has an invalid length. [ 156.543769][ T8782] netlink: 68 bytes leftover after parsing attributes in process `syz.3.774'. [ 157.085294][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.779'. [ 157.297629][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 157.337288][ T8826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.782'. [ 158.859219][ T8850] tipc: New replicast peer: 255.255.255.255 [ 158.877789][ T8850] tipc: Enabled bearer , priority 10 [ 159.132309][ T8863] netlink: 'syz.1.792': attribute type 2 has an invalid length. [ 159.192919][ T8862] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.213001][ T8862] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.338549][ T5946] wg1 speed is unknown, defaulting to 1000 [ 159.338597][ T8867] netlink: 52 bytes leftover after parsing attributes in process `syz.2.794'. [ 159.359277][ T8874] netlink: 'syz.4.793': attribute type 1 has an invalid length. [ 159.473850][ T8879] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 159.488435][ T8879] netlink: 244 bytes leftover after parsing attributes in process `syz.0.797'. [ 159.680334][ T8888] netlink: 206160 bytes leftover after parsing attributes in process `syz.4.800'. [ 160.094263][ T8905] netlink: 'syz.2.803': attribute type 12 has an invalid length. [ 160.125959][ T8905] netlink: 'syz.2.803': attribute type 29 has an invalid length. [ 160.178622][ T8905] netlink: 148 bytes leftover after parsing attributes in process `syz.2.803'. [ 160.190746][ T8905] netlink: 51 bytes leftover after parsing attributes in process `syz.2.803'. [ 160.200505][ T8900] IPVS: Unknown mcast interface: netpci0 [ 160.917005][ T8948] netlink: 'syz.3.815': attribute type 2 has an invalid length. [ 161.267258][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'. [ 161.299974][ T8967] netlink: 'syz.2.821': attribute type 12 has an invalid length. [ 161.329546][ T8967] netlink: 'syz.2.821': attribute type 29 has an invalid length. [ 161.349076][ T8967] netlink: 148 bytes leftover after parsing attributes in process `syz.2.821'. [ 161.359196][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 161.363496][ T8967] netlink: 59 bytes leftover after parsing attributes in process `syz.2.821'. [ 161.368733][ T8971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.824'. [ 161.401391][ T8971] af_packet: tpacket_rcv: packet too big, clamped from 1628 to 712. macoff=96 [ 161.504594][ T8978] netlink: 'syz.1.825': attribute type 27 has an invalid length. [ 161.762543][ T8990] netlink: 'syz.4.828': attribute type 5 has an invalid length. [ 162.090257][ T9019] netlink: 'syz.3.833': attribute type 21 has an invalid length. [ 162.471431][ T9024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.510840][ T9041] vlan0: entered allmulticast mode [ 162.517044][ T9041] : entered allmulticast mode [ 162.522397][ T9041] hsr_slave_0: entered allmulticast mode [ 162.551496][ T9041] hsr_slave_1: entered allmulticast mode [ 162.623904][ T9043] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 163.294878][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.867617][ T9109] netlink: 'syz.4.861': attribute type 30 has an invalid length. [ 164.186479][ T9130] netlink: 'syz.2.867': attribute type 4 has an invalid length. [ 165.029578][ T9173] netlink: 'syz.1.877': attribute type 1 has an invalid length. [ 165.071071][ T9173] __nla_validate_parse: 11 callbacks suppressed [ 165.071091][ T9173] netlink: 48 bytes leftover after parsing attributes in process `syz.1.877'. [ 165.110911][ T9181] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 165.132343][ T9181] netlink: 'syz.0.880': attribute type 2 has an invalid length. [ 165.708610][ T9217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.890'. [ 166.079277][ T9240] netlink: 44 bytes leftover after parsing attributes in process `syz.2.898'. [ 166.294286][ T9246] bond2: ARP target 1.0.0.0 is already present [ 166.318603][ T9246] bond2: option arp_ip_target: invalid value (1) [ 166.341873][ T9249] netlink: 32 bytes leftover after parsing attributes in process `syz.2.901'. [ 166.357455][ T9246] bond2 (unregistering): Released all slaves [ 166.559804][ T9262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.904'. [ 166.586878][ T9249] netlink: 80 bytes leftover after parsing attributes in process `syz.2.901'. [ 166.678324][ T9267] netlink: 'syz.4.906': attribute type 11 has an invalid length. [ 166.705786][ T9267] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.906'. [ 166.735170][ T9277] x_tables: duplicate underflow at hook 2 [ 166.805346][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 166.828582][ T9282] veth1_to_bond: entered allmulticast mode [ 166.836049][ T9282] veth1_to_bond: left allmulticast mode [ 166.957133][ T1078] block nbd0: Possible stuck request ffff888024b47000: control (read@0,1024B). Runtime 60 seconds [ 166.972910][ T1078] block nbd0: Possible stuck request ffff888024b471c0: control (read@1024,1024B). Runtime 60 seconds [ 166.985063][ T1078] block nbd0: Possible stuck request ffff888024b47380: control (read@2048,1024B). Runtime 60 seconds [ 166.996394][ T1078] block nbd0: Possible stuck request ffff888024b47540: control (read@3072,1024B). Runtime 60 seconds [ 167.071589][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.915'. [ 167.106771][ T9301] netlink: 'syz.4.914': attribute type 8 has an invalid length. [ 167.299623][ T9310] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 167.314135][ T9310] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 167.397305][ T9296] macvlan2: entered promiscuous mode [ 167.420393][ T9296] macvlan2: entered allmulticast mode [ 167.461621][ T9296] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 167.699345][ T9333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.757137][ T9333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.153911][ T9365] netlink: 'syz.1.935': attribute type 23 has an invalid length. [ 168.161735][ T9365] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.215409][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'. [ 168.241325][ T9365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.249023][ T9365] IPv6: NLM_F_CREATE should be set when creating new route [ 168.930989][ T9407] syzkaller0: entered promiscuous mode [ 168.936942][ T9407] syzkaller0: entered allmulticast mode [ 170.624129][ T9450] __nla_validate_parse: 5 callbacks suppressed [ 170.624148][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'. [ 170.873784][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.960'. [ 171.807219][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 171.846892][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.974'. [ 171.861162][ T9510] netlink: 60 bytes leftover after parsing attributes in process `syz.3.975'. [ 171.894299][ T9510] netlink: 60 bytes leftover after parsing attributes in process `syz.3.975'. [ 171.945124][ T9516] tipc: Enabled bearer , priority 0 [ 171.983726][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 172.006669][ T9513] syzkaller0: entered promiscuous mode [ 172.012195][ T9513] syzkaller0: entered allmulticast mode [ 172.140922][ T9513] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 172.192007][ T9511] tipc: Resetting bearer [ 172.228896][ T9511] tipc: Disabling bearer [ 172.492803][ T9541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.756960][ T9553] wg1 speed is unknown, defaulting to 1000 [ 173.256282][ T9576] netlink: 'syz.1.992': attribute type 2 has an invalid length. [ 173.277618][ T9576] 9: entered promiscuous mode [ 173.286457][ T9576] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 173.297854][ T9576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.859684][ T9602] xt_hashlimit: size too large, truncated to 1048576 [ 173.902729][ T9600] netlink: 64 bytes leftover after parsing attributes in process `syz.4.997'. [ 173.928419][ T9602] syz.0.998: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 174.022330][ T9602] CPU: 0 UID: 0 PID: 9602 Comm: syz.0.998 Not tainted syzkaller #0 PREEMPT(full) [ 174.022359][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.022370][ T9602] Call Trace: [ 174.022378][ T9602] [ 174.022387][ T9602] dump_stack_lvl+0x189/0x250 [ 174.022424][ T9602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.022451][ T9602] ? __pfx__printk+0x10/0x10 [ 174.022472][ T9602] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.022499][ T9602] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.022527][ T9602] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 174.022557][ T9602] warn_alloc+0x214/0x310 [ 174.022594][ T9602] ? __pfx_warn_alloc+0x10/0x10 [ 174.022634][ T9602] ? __get_vm_area_node+0x28f/0x300 [ 174.022663][ T9602] ? htable_create+0x101/0x7a0 [ 174.022693][ T9602] __vmalloc_node_range_noprof+0x690/0x12d0 [ 174.022751][ T9602] ? alloc_pages_mpol+0x3cd/0x4a0 [ 174.022774][ T9602] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.022823][ T9602] ? rcu_is_watching+0x15/0xb0 [ 174.022846][ T9602] ? htable_create+0x101/0x7a0 [ 174.022871][ T9602] __kvmalloc_node_noprof+0x674/0x910 [ 174.022901][ T9602] ? htable_create+0x101/0x7a0 [ 174.022930][ T9602] ? hashlimit_pernet+0x23/0x240 [ 174.022955][ T9602] ? hashlimit_pernet+0x23/0x240 [ 174.022976][ T9602] ? hashlimit_pernet+0x23/0x240 [ 174.023009][ T9602] htable_create+0x101/0x7a0 [ 174.023043][ T9602] hashlimit_mt_check_common+0x719/0xa10 [ 174.023085][ T9602] xt_check_match+0x3d1/0xab0 [ 174.023113][ T9602] ? __pfx_xt_check_match+0x10/0x10 [ 174.023139][ T9602] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 174.023176][ T9602] ? xt_find_match+0x1f7/0x250 [ 174.023204][ T9602] translate_table+0x1553/0x2040 [ 174.023256][ T9602] ? __pfx_translate_table+0x10/0x10 [ 174.023285][ T9602] ? __might_fault+0xb0/0x130 [ 174.023329][ T9602] ? _copy_from_user+0x94/0xb0 [ 174.023360][ T9602] do_ip6t_set_ctl+0x970/0xce0 [ 174.023391][ T9602] ? rcu_is_watching+0x15/0xb0 [ 174.023413][ T9602] ? trace_contention_end+0x39/0x120 [ 174.023435][ T9602] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 174.023488][ T9602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 174.023522][ T9602] ? file_init_path+0x3b/0x590 [ 174.023548][ T9602] ? __lock_acquire+0xab9/0xd20 [ 174.023569][ T9602] nf_setsockopt+0x26f/0x290 [ 174.023599][ T9602] rawv6_setsockopt+0x23b/0x5b0 [ 174.023624][ T9602] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 174.023643][ T9602] ? aa_sock_opt_perm+0xff/0x1b0 [ 174.023672][ T9602] ? sock_common_setsockopt+0x36/0xc0 [ 174.023697][ T9602] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 174.023724][ T9602] do_sock_setsockopt+0x17c/0x1b0 [ 174.023751][ T9602] __x64_sys_setsockopt+0x13f/0x1b0 [ 174.023778][ T9602] do_syscall_64+0xfa/0xfa0 [ 174.023803][ T9602] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.023829][ T9602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.023848][ T9602] ? clear_bhb_loop+0x60/0xb0 [ 174.023872][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.023890][ T9602] RIP: 0033:0x7fc36d58f6c9 [ 174.023907][ T9602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.023930][ T9602] RSP: 002b:00007fc36e346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.023951][ T9602] RAX: ffffffffffffffda RBX: 00007fc36d7e5fa0 RCX: 00007fc36d58f6c9 [ 174.023964][ T9602] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 174.023975][ T9602] RBP: 00007fc36d611f91 R08: 0000000000000588 R09: 0000000000000000 [ 174.023985][ T9602] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 174.023995][ T9602] R13: 00007fc36d7e6038 R14: 00007fc36d7e5fa0 R15: 00007ffdee645d78 [ 174.024029][ T9602] [ 174.397638][ T5830] Bluetooth: hci1: command tx timeout [ 174.423267][ T9602] Mem-Info: [ 174.429066][ T9602] active_anon:6390 inactive_anon:0 isolated_anon:0 [ 174.429066][ T9602] active_file:2441 inactive_file:39911 isolated_file:0 [ 174.429066][ T9602] unevictable:768 dirty:86 writeback:0 [ 174.429066][ T9602] slab_reclaimable:10991 slab_unreclaimable:112144 [ 174.429066][ T9602] mapped:29228 shmem:1369 pagetables:1290 [ 174.429066][ T9602] sec_pagetables:0 bounce:0 [ 174.429066][ T9602] kernel_misc_reclaimable:0 [ 174.429066][ T9602] free:1315631 free_pcp:15934 free_cma:0 [ 174.655299][ T9621] netlink: 'syz.4.1001': attribute type 11 has an invalid length. [ 174.657748][ T9602] Node 0 active_anon:25760kB inactive_anon:0kB active_file:9764kB inactive_file:159448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117012kB dirty:344kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12768kB pagetables:5016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.698700][ T9602] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.731793][ T9602] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.744990][ T9621] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1001'. [ 174.762068][ T9602] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 174.777214][ T9602] Node 0 DMA32 free:1361528kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25960kB inactive_anon:0kB active_file:9764kB inactive_file:159448kB unevictable:1536kB writepending:344kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:41440kB local_pcp:21440kB free_cma:0kB [ 174.934803][ T9602] lowmem_reserve[]: 0 0 0 0 0 [ 174.939622][ T9602] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.007970][ T9640] bridge_slave_0: left allmulticast mode [ 175.023779][ T9602] lowmem_reserve[]: 0 0 0 0 0 [ 175.039432][ T9602] Node 1 Normal free:3885480kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21696kB local_pcp:7808kB free_cma:0kB [ 175.098362][ T9640] bridge_slave_0: left promiscuous mode [ 175.105389][ T9602] lowmem_reserve[]: 0 0 0 0 0 [ 175.110396][ T9602] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.127084][ T9602] Node 0 DMA32: 327*4kB (ME) 535*8kB (UME) 247*16kB (UM) 136*32kB (UM) 37*64kB (UM) 24*128kB (UME) 3*256kB (ME) 0*512kB 13*1024kB (UME) 5*2048kB (UME) 322*4096kB (M) = 1362564kB [ 175.144634][ T9640] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.150240][ T9602] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 175.165813][ T9602] Node 1 Normal: 214*4kB (UME) 54*8kB (UME) 42*16kB (UME) 88*32kB (UME) 34*64kB (UME) 9*128kB (UME) 2*256kB (M) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3885480kB [ 175.187859][ T9645] SET target dimension over the limit! [ 175.198212][ T9645] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 175.214945][ T9640] bridge_slave_1: left allmulticast mode [ 175.220646][ T9640] bridge_slave_1: left promiscuous mode [ 175.227749][ T9602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.249480][ T9640] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.251890][ T9602] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.271792][ T9602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.286885][ T9602] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.297481][ T9602] 43717 total pagecache pages [ 175.302323][ T9602] 0 pages in swap cache [ 175.303648][ T9640] bond0: (slave bond_slave_0): Releasing backup interface [ 175.307428][ T9602] Free swap = 124996kB [ 175.318650][ T9602] Total swap = 124996kB [ 175.322931][ T9602] 2097051 pages RAM [ 175.350100][ T9602] 0 pages HighMem/MovableOnly [ 175.359994][ T9640] bond0: (slave bond_slave_1): Releasing backup interface [ 175.362502][ T9602] 424119 pages reserved [ 175.390290][ T9602] 0 pages cma reserved [ 175.412989][ T9640] team0: Port device team_slave_0 removed [ 175.453870][ T9640] team0: Port device team_slave_1 removed [ 175.475663][ T9640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.503752][ T9640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.528228][ T9640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.554685][ T9640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.589231][ T9640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.644182][ T9657] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1007'. [ 175.944447][ T9677] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1013'. [ 175.981829][ T9677] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 175.988249][ T9676] tipc: Enabled bearer , priority 0 [ 176.023313][ T9677] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1013'. [ 176.077479][ T9685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1016'. [ 176.115134][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1016'. [ 176.117971][ T9676] syzkaller0: entered promiscuous mode [ 176.129914][ T9676] syzkaller0: entered allmulticast mode [ 176.130149][ T9685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1016'. [ 176.136396][ T9676] tipc: Resetting bearer [ 176.202974][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1016'. [ 176.225710][ T9685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1016'. [ 176.236450][ T9685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1016'. [ 176.247649][ T9672] tipc: Resetting bearer [ 176.257299][ T9685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1016'. [ 176.284146][ T9694] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 176.509054][ T9701] raw_sendmsg: syz.0.1022 forgot to set AF_INET. Fix it! [ 177.607746][ T9672] tipc: Disabling bearer [ 177.840723][ T9722] netlink: 'syz.1.1029': attribute type 4 has an invalid length. [ 178.179545][ T9734] gtp0: entered promiscuous mode [ 178.186293][ T9739] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 178.212113][ T9734] gtp0: entered allmulticast mode [ 178.403734][ T9749] wg1: entered promiscuous mode [ 178.419717][ T9749] wg1: entered allmulticast mode [ 178.474385][ C1] bridge0: port 3(dummy0) entered learning state [ 178.732102][ T9770] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 179.061941][ T9787] netlink: 'syz.1.1050': attribute type 11 has an invalid length. [ 179.070371][ T9787] netlink: 'syz.1.1050': attribute type 11 has an invalid length. [ 180.558671][ T9848] netlink: 'syz.2.1065': attribute type 33 has an invalid length. [ 180.688337][ T9855] bridge0: port 3(batadv0) entered blocking state [ 180.732465][ T9855] bridge0: port 3(batadv0) entered disabled state [ 180.795645][ T9855] batadv0: entered allmulticast mode [ 180.904601][ T9855] batadv0: entered promiscuous mode [ 181.173480][ T9073] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 181.183270][ T9073] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 181.388403][ T9902] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 181.591910][ T9915] openvswitch: netlink: Key type 31 is not supported [ 181.661374][ T10] IPVS: starting estimator thread 0... [ 181.720538][ T9929] __nla_validate_parse: 43 callbacks suppressed [ 181.720558][ T9929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1078'. [ 181.760121][ T9923] IPVS: using max 26 ests per chain, 62400 per kthread [ 181.820233][ T9928] bond2: entered allmulticast mode [ 181.832963][ T9928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.840972][ T9928] bridge0: port 4(bond2) entered blocking state [ 181.848158][ T9928] bridge0: port 4(bond2) entered disabled state [ 181.857722][ T9928] bond2: entered promiscuous mode [ 181.863651][ T9928] bridge0: port 4(bond2) entered blocking state [ 181.870076][ T9928] bridge0: port 4(bond2) entered forwarding state [ 181.881883][ T9887] bridge0: port 4(bond2) entered disabled state [ 182.408898][ T9934] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 182.638353][ T9961] ipt_ECN: cannot use operation on non-tcp rule [ 182.667545][ T9962] x_tables: duplicate underflow at hook 1 [ 182.782329][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1092'. [ 182.842569][ T9970] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 182.921260][ T9972] netlink: 'syz.0.1095': attribute type 4 has an invalid length. [ 182.937763][ T9972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1095'. [ 183.175467][ T9984] netlink: 'syz.4.1100': attribute type 6 has an invalid length. [ 183.190007][ T9984] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1100'. [ 183.205756][ T9984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.430866][ T9991] syzkaller0: entered promiscuous mode [ 183.437766][ T9991] syzkaller0: entered allmulticast mode [ 183.588758][ T9998] tipc: Enabling of bearer rejected, failed to enable media [ 183.692577][T10003] tipc: Enabled bearer , priority 0 [ 183.717688][T10003] syzkaller0: entered promiscuous mode [ 183.731929][T10003] syzkaller0: entered allmulticast mode [ 183.789253][T10003] tipc: Resetting bearer [ 183.808591][T10002] tipc: Resetting bearer [ 183.858262][T10002] tipc: Disabling bearer [ 184.108835][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1111'. [ 184.181897][T10026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1113'. [ 184.217846][T10027] netlink: 'syz.0.1115': attribute type 11 has an invalid length. [ 184.279940][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 184.546100][T10030] team0 (unregistering): Port device team_slave_0 removed [ 184.571069][T10030] team0 (unregistering): Port device team_slave_1 removed [ 184.605676][T10041] tipc: New replicast peer: 255.255.255.255 [ 184.612679][T10041] tipc: Enabled bearer , priority 10 [ 184.646084][T10046] netlink: 'syz.4.1120': attribute type 10 has an invalid length. [ 184.877708][ T57] block nbd1: Possible stuck request ffff888024bb5080: control (read@0,1024B). Runtime 60 seconds [ 184.889678][ T57] block nbd1: Possible stuck request ffff888024bb5240: control (read@1024,1024B). Runtime 60 seconds [ 184.901557][ T57] block nbd1: Possible stuck request ffff888024bb5400: control (read@2048,1024B). Runtime 60 seconds [ 184.913237][ T57] block nbd1: Possible stuck request ffff888024bb55c0: control (read@3072,1024B). Runtime 60 seconds [ 185.004059][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 185.224357][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'. [ 185.436001][T10081] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1133'. [ 185.496825][T10085] bond7: entered promiscuous mode [ 185.502047][T10085] bond7: entered allmulticast mode [ 185.507894][T10085] 8021q: adding VLAN 0 to HW filter on device bond7 [ 185.537310][T10089] tipc: Enabling of bearer rejected, failed to enable media [ 185.679354][T10093] veth7: entered promiscuous mode [ 185.723771][ T10] tipc: Node number set to 3775868782 [ 186.181253][T10127] tun0: tun_chr_ioctl cmd 1074025675 [ 186.203646][T10127] tun0: persist disabled [ 186.269220][T10136] openvswitch: netlink: Flow actions attr not present in new flow. [ 186.466157][T10150] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 186.607388][T10155] netlink: 'syz.1.1154': attribute type 1 has an invalid length. [ 187.381769][T10206] __nla_validate_parse: 5 callbacks suppressed [ 187.381790][T10206] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1163'. [ 187.447961][T10203] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1161'. [ 187.720249][T10218] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.732085][T10224] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1168'. [ 187.755672][T10220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.795412][T10229] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 187.818679][T10229] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 187.822877][T10227] syzkaller1: entered promiscuous mode [ 187.845878][T10229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.857363][T10227] syzkaller1: entered allmulticast mode [ 187.979621][T10235] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 188.013231][T10235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.290686][T10248] syzkaller1: entered promiscuous mode [ 188.297626][T10248] syzkaller1: entered allmulticast mode [ 188.413353][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 188.426073][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1177'. [ 188.465146][T10256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1177'. [ 188.820734][T10277] netlink: 'syz.4.1185': attribute type 1 has an invalid length. [ 188.921869][T10277] bond8: (slave geneve2): making interface the new active one [ 188.942692][T10277] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 188.952139][ T9073] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 188.995688][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 189.017220][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 189.032916][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 189.081807][T10293] team_slave_0: entered promiscuous mode [ 189.087771][T10293] team_slave_1: entered promiscuous mode [ 189.095120][T10293] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 189.102396][T10293] team0: Device macvtap1 is already an upper device of the team interface [ 189.112386][T10293] team_slave_0: left promiscuous mode [ 189.117904][T10293] team_slave_1: left promiscuous mode [ 189.193324][T10296] netlink: 'syz.2.1189': attribute type 12 has an invalid length. [ 189.358825][T10302] xt_TCPMSS: Only works on TCP SYN packets [ 189.455655][T10309] pim6reg: entered allmulticast mode [ 189.612961][T10316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.738795][T10322] netlink: 'syz.2.1197': attribute type 9 has an invalid length. [ 189.746921][T10322] netlink: 212396 bytes leftover after parsing attributes in process `syz.2.1197'. [ 189.759315][T10322] netlink: 'syz.2.1197': attribute type 9 has an invalid length. [ 189.769786][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'. [ 189.777022][T10326] netlink: 'syz.1.1199': attribute type 1 has an invalid length. [ 189.786777][T10322] netlink: 212396 bytes leftover after parsing attributes in process `syz.2.1197'. [ 189.806513][T10321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1198'. [ 189.865929][T10332] netlink: 'syz.1.1200': attribute type 29 has an invalid length. [ 189.894543][T10332] netlink: 'syz.1.1200': attribute type 29 has an invalid length. [ 189.915524][T10332] netlink: 'syz.1.1200': attribute type 29 has an invalid length. [ 190.139412][T10348] syzkaller0: entered promiscuous mode [ 190.148871][T10348] syzkaller0: entered allmulticast mode [ 190.354155][T10355] syzkaller0: entered promiscuous mode [ 190.360307][T10355] syzkaller0: entered allmulticast mode [ 190.652641][T10369] netlink: 'syz.3.1210': attribute type 10 has an invalid length. [ 191.771092][T10361] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 194.480256][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.488142][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.938806][ T5200] udevd[5200]: worker [6968] /devices/virtual/block/nbd1 is taking a long time [ 194.948003][ T5200] udevd[5200]: worker [5828] /devices/virtual/block/nbd0 is taking a long time [ 197.043946][ T1078] block nbd0: Possible stuck request ffff888024b47000: control (read@0,1024B). Runtime 90 seconds [ 197.055300][ T1078] block nbd0: Possible stuck request ffff888024b471c0: control (read@1024,1024B). Runtime 90 seconds [ 197.066584][ T1078] block nbd0: Possible stuck request ffff888024b47380: control (read@2048,1024B). Runtime 90 seconds [ 197.077528][ T1078] block nbd0: Possible stuck request ffff888024b47540: control (read@3072,1024B). Runtime 90 seconds [ 199.285715][ T5830] Bluetooth: hci3: link tx timeout [ 199.290866][ T5830] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 201.353485][ T5830] Bluetooth: hci3: command 0x0405 tx timeout [ 208.554506][ C1] bridge0: port 3(dummy0) entered forwarding state [ 208.561073][ C1] bridge0: topology change detected, propagating [ 211.917725][T10481] Bluetooth: hci4: command 0x0406 tx timeout [ 211.918287][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 211.924834][T10481] Bluetooth: hci1: command 0x0406 tx timeout [ 214.961891][ T57] block nbd1: Possible stuck request ffff888024bb5080: control (read@0,1024B). Runtime 90 seconds [ 214.968955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.974888][ T57] block nbd1: Possible stuck request ffff888024bb5240: control (read@1024,1024B). Runtime 90 seconds [ 214.992795][ T57] block nbd1: Possible stuck request ffff888024bb5400: control (read@2048,1024B). Runtime 90 seconds [ 215.004023][ T57] block nbd1: Possible stuck request ffff888024bb55c0: control (read@3072,1024B). Runtime 90 seconds [ 227.113801][ T57] block nbd0: Possible stuck request ffff888024b47000: control (read@0,1024B). Runtime 120 seconds [ 227.124849][ T57] block nbd0: Possible stuck request ffff888024b471c0: control (read@1024,1024B). Runtime 120 seconds [ 227.135987][ T57] block nbd0: Possible stuck request ffff888024b47380: control (read@2048,1024B). Runtime 120 seconds [ 227.147043][ T57] block nbd0: Possible stuck request ffff888024b47540: control (read@3072,1024B). Runtime 120 seconds [ 245.033921][ T57] block nbd1: Possible stuck request ffff888024bb5080: control (read@0,1024B). Runtime 120 seconds [ 245.045280][ T57] block nbd1: Possible stuck request ffff888024bb5240: control (read@1024,1024B). Runtime 120 seconds [ 245.056339][ T57] block nbd1: Possible stuck request ffff888024bb5400: control (read@2048,1024B). Runtime 120 seconds [ 245.067404][ T57] block nbd1: Possible stuck request ffff888024bb55c0: control (read@3072,1024B). Runtime 120 seconds [ 255.918622][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.925149][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.194502][ T1078] block nbd0: Possible stuck request ffff888024b47000: control (read@0,1024B). Runtime 150 seconds [ 257.205508][ T1078] block nbd0: Possible stuck request ffff888024b471c0: control (read@1024,1024B). Runtime 150 seconds [ 257.216656][ T1078] block nbd0: Possible stuck request ffff888024b47380: control (read@2048,1024B). Runtime 150 seconds [ 257.227839][ T1078] block nbd0: Possible stuck request ffff888024b47540: control (read@3072,1024B). Runtime 150 seconds [ 261.066282][T10499] netlink: 'syz.1.1212': attribute type 10 has an invalid length. [ 261.084327][T10502] tipc: New replicast peer: 255.255.255.255 [ 261.093912][T10502] tipc: Enabled bearer , priority 10 [ 261.100900][T10499] bridge0: port 1(team0) entered blocking state [ 261.109306][T10499] bridge0: port 1(team0) entered disabled state [ 261.118477][T10499] team0: entered allmulticast mode [ 261.127566][T10499] team0: entered promiscuous mode [ 261.171746][T10498] tipc: Enabling of bearer rejected, already enabled [ 261.697935][T10525] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 261.875826][T10531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1223'. [ 262.117541][T10548] syzkaller0: entered promiscuous mode [ 262.123276][T10548] syzkaller0: entered allmulticast mode [ 262.130788][T10549] netlink: 'syz.2.1227': attribute type 2 has an invalid length. [ 262.131693][T10548] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1228'. [ 262.158670][T10546] netlink: 'syz.2.1227': attribute type 2 has an invalid length. [ 262.272019][T10559] syz_tun: entered allmulticast mode [ 262.273430][T10556] netlink: 'syz.1.1230': attribute type 1 has an invalid length. [ 262.554937][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'. [ 262.585257][T10573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1232'. [ 262.598836][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'. [ 262.642600][T10552] syz_tun: left allmulticast mode [ 262.870236][T10591] bridge_slave_0: invalid flags given to default FDB implementation [ 262.921580][T10595] syzkaller0: entered promiscuous mode [ 262.938550][T10595] syzkaller0: entered allmulticast mode [ 263.046708][T10608] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1242'. [ 263.180305][T10606] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 263.809773][T10644] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1249'. [ 264.171525][T10662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1255'. [ 264.397381][T10662] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 264.743444][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 264.763724][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1262'. [ 264.779771][T10693] xt_policy: too many policy elements [ 265.129653][T10714] veth0: entered promiscuous mode [ 265.152941][T10711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.173675][T10711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.193009][T10711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.200711][T10711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.698553][T10734] netlink: 'syz.0.1274': attribute type 32 has an invalid length. [ 266.158885][ T9877] nci: nci_ntf_packet: unknown ntf opcode 0x25 [ 266.499652][T10781] netlink: 'syz.0.1287': attribute type 39 has an invalid length. [ 266.669634][T10793] veth0: entered promiscuous mode [ 266.820378][T10803] netlink: 'syz.1.1295': attribute type 1 has an invalid length. [ 266.855991][T10803] bond4: (slave gretap1): making interface the new active one [ 266.860947][T10783] netlink: 'syz.2.1288': attribute type 1 has an invalid length. [ 266.864873][T10803] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 267.033485][ T36] wlan1: Trigger new scan to find an IBSS to join [ 267.034124][T10808] __nla_validate_parse: 8 callbacks suppressed [ 267.034141][T10808] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1298'. [ 267.061788][T10808] netlink: 'syz.3.1298': attribute type 1 has an invalid length. [ 267.100802][T10808] bond3: entered promiscuous mode [ 267.106525][T10808] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.159650][T10812] bond3: (slave bridge1): making interface the new active one [ 267.219111][T10812] bridge1: entered promiscuous mode [ 267.249404][T10812] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 267.320110][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 267.376076][T10820] team0: Refused to change device type [ 267.509895][T10784] veth0: left promiscuous mode [ 269.293452][T10868] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1309'. [ 269.478704][T10880] tipc: Enabled bearer , priority 0 [ 269.492993][T10880] syzkaller0: entered promiscuous mode [ 269.501470][T10880] syzkaller0: entered allmulticast mode [ 269.571694][T10883] block nbd2: Unsupported socket: should be TCP or UNIX. [ 269.583310][T10880] tipc: Resetting bearer [ 269.640486][T10879] tipc: Resetting bearer [ 269.715434][T10879] tipc: Disabling bearer [ 269.754827][T10899] netlink: 'syz.4.1320': attribute type 7 has an invalid length. [ 269.794314][T10899] netlink: 'syz.4.1320': attribute type 7 has an invalid length. [ 269.802176][ T9073] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.824150][ T9073] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.832944][ T9073] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.861162][ T9073] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.895307][T10903] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1321'. [ 270.048181][T10909] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 270.075292][ T9885] wlan1: Trigger new scan to find an IBSS to join [ 270.185888][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1325'. [ 272.073283][ T5833] Bluetooth: hci0: command tx timeout [ 273.033302][ T9885] wlan1: Trigger new scan to find an IBSS to join [ 273.943489][ T36] wlan1: Creating new IBSS network, BSSID 36:a1:5f:4b:55:47 [ 275.113963][ T57] block nbd1: Possible stuck request ffff888024bb5080: control (read@0,1024B). Runtime 150 seconds [ 275.124926][ T57] block nbd1: Possible stuck request ffff888024bb5240: control (read@1024,1024B). Runtime 150 seconds [ 275.136372][ T57] block nbd1: Possible stuck request ffff888024bb5400: control (read@2048,1024B). Runtime 150 seconds [ 275.147465][ T57] block nbd1: Possible stuck request ffff888024bb55c0: control (read@3072,1024B). Runtime 150 seconds [ 287.274594][ T1078] block nbd0: Possible stuck request ffff888024b47000: control (read@0,1024B). Runtime 180 seconds [ 287.285626][ T1078] block nbd0: Possible stuck request ffff888024b471c0: control (read@1024,1024B). Runtime 180 seconds [ 287.296852][ T1078] block nbd0: Possible stuck request ffff888024b47380: control (read@2048,1024B). Runtime 180 seconds [ 287.307908][ T1078] block nbd0: Possible stuck request ffff888024b47540: control (read@3072,1024B). Runtime 180 seconds [ 288.652810][ T5200] udevd[5200]: worker [5828] /devices/virtual/block/nbd0 timeout; kill it [ 288.663485][ T5200] udevd[5200]: seq 11502 '/devices/virtual/block/nbd0' killed [ 303.953935][ T9073] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 305.194698][ T57] block nbd1: Possible stuck request ffff888024bb5080: control (read@0,1024B). Runtime 180 seconds [ 305.205650][ T57] block nbd1: Possible stuck request ffff888024bb5240: control (read@1024,1024B). Runtime 180 seconds [ 305.216802][ T57] block nbd1: Possible stuck request ffff888024bb5400: control (read@2048,1024B). Runtime 180 seconds [ 305.228098][ T57] block nbd1: Possible stuck request ffff888024bb55c0: control (read@3072,1024B). Runtime 180 seconds [ 306.722356][ T5200] udevd[5200]: worker [6968] /devices/virtual/block/nbd1 timeout; kill it [ 306.733455][ T5200] udevd[5200]: seq 12214 '/devices/virtual/block/nbd1' killed [ 317.356849][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.363570][ T1078] block nbd0: Possible stuck request ffff888024b47000: control (read@0,1024B). Runtime 210 seconds [ 317.374975][ T1078] block nbd0: Possible stuck request ffff888024b471c0: control (read@1024,1024B). Runtime 210 seconds [ 317.386243][ T1078] block nbd0: Possible stuck request ffff888024b47380: control (read@2048,1024B). Runtime 210 seconds [ 317.397557][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.401050][ T1078] block nbd0: Possible stuck request ffff888024b47540: control (read@3072,1024B). Runtime 210 seconds [ 330.433360][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 331.995084][T10987] openvswitch: netlink: Actions may not be safe on all matching packets [ 332.262319][T11000] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1348'. [ 332.539606][T11020] sch_fq: defrate 0 ignored. [ 332.766874][T11035] netlink: 'syz.1.1359': attribute type 11 has an invalid length. [ 332.803153][T11035] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1359'. [ 332.837484][T11041] SET target dimension over the limit! [ 332.848723][T11039] netlink: 'syz.3.1361': attribute type 3 has an invalid length. [ 333.042008][T11042] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 333.103537][T11050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1364'. [ 333.118564][T11042] bond4: option packets_per_slave: allowed values 0 - 65535 [ 333.217666][T11042] bond4 (unregistering): Released all slaves [ 333.331192][T11062] netlink: 'syz.1.1368': attribute type 12 has an invalid length. [ 333.469965][T11062] bond5: option primary_reselect: invalid value (255) [ 333.470341][T11070] netlink: 'syz.2.1370': attribute type 2 has an invalid length. [ 333.485422][T11070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1370'. [ 333.491561][T11062] bond5 (unregistering): Released all slaves [ 333.533937][T11073] netlink: 'syz.0.1372': attribute type 3 has an invalid length. [ 333.891738][T11081] tipc: Enabling of bearer rejected, media not registered [ 334.123730][T11089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.500288][T11097] netlink: 'syz.3.1378': attribute type 12 has an invalid length. [ 334.525012][T11098] netlink: 'syz.3.1378': attribute type 12 has an invalid length. [ 334.632718][T11108] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1381'. [ 334.726481][T11110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1382'. [ 334.825833][T11117] netlink: 'syz.4.1383': attribute type 4 has an invalid length. [ 334.880886][ T9885] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 334.965746][T11109] delete_channel: no stack [ 335.016078][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1387'. [ 335.125939][T11127] netlink: 'syz.3.1387': attribute type 6 has an invalid length. [ 335.267380][T11135] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1392'. [ 335.279131][ T57] block nbd1: Possible stuck request ffff888024bb5080: control (read@0,1024B). Runtime 210 seconds [ 335.280879][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1392'. [ 335.292968][ T57] block nbd1: Possible stuck request ffff888024bb5240: control (read@1024,1024B). Runtime 210 seconds [ 335.311050][ T57] block nbd1: Possible stuck request ffff888024bb5400: control (read@2048,1024B). Runtime 210 seconds [ 335.323687][ T57] block nbd1: Possible stuck request ffff888024bb55c0: control (read@3072,1024B). Runtime 210 seconds [ 335.997938][T11192] __nla_validate_parse: 1 callbacks suppressed [ 335.997959][T11192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1407'. [ 336.182553][T11201] netlink: 'syz.0.1409': attribute type 23 has an invalid length. [ 336.761075][T11229] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1420'. [ 336.915399][T11236] geneve2: entered promiscuous mode [ 337.103615][T11242] veth0_to_bridge: entered promiscuous mode [ 337.132359][T11244] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1425'. [ 337.297267][T11241] veth0_to_bridge: left promiscuous mode [ 337.369621][T11254] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1430'. [ 337.428838][T11259] syzkaller1: entered promiscuous mode [ 337.449094][T11259] syzkaller1: entered allmulticast mode [ 337.484328][T11259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1429'. [ 337.596745][T11263] bond7: option miimon: invalid value (18446744073709551585) [ 337.613763][T11263] bond7: option miimon: allowed values 0 - 2147483647 [ 337.638460][T11263] bond7 (unregistering): Released all slaves [ 337.696752][T11259] bridge_slave_1: left allmulticast mode [ 337.705391][T11259] bridge_slave_1: left promiscuous mode [ 337.732187][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.762777][T11259] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 337.833950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.161375][T11294] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1437'. [ 338.181125][T11295] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1437'. [ 338.483314][T11306] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 338.498481][T11306] bond7 (unregistering): Released all slaves [ 338.733888][T11321] tipc: Enabled bearer , priority 0 [ 338.753834][T11318] tipc: Enabling of bearer rejected, already enabled [ 338.779153][T11327] openvswitch: netlink: IP tunnel dst address not specified [ 338.889209][T11318] tipc: Disabling bearer [ 338.938322][T11335] veth0_to_team: entered promiscuous mode [ 339.113890][T11349] netlink: 'syz.3.1453': attribute type 25 has an invalid length. [ 339.142168][T11351] netlink: 'syz.3.1453': attribute type 25 has an invalid length. [ 339.182475][T11350] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1454'. [ 339.308623][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 339.320809][T11362] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1457'. [ 339.789221][T11390] siw: device registration error -23 [ 340.094859][T11410] netlink: 'syz.1.1467': attribute type 21 has an invalid length. [ 340.144319][T11399] syzkaller0: entered promiscuous mode [ 340.191749][T11399] syzkaller0: entered allmulticast mode [ 340.355957][T11423] netlink: 'syz.0.1474': attribute type 11 has an invalid length. [ 340.383748][T11423] netlink: 'syz.0.1474': attribute type 11 has an invalid length. [ 341.764375][T11430] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 342.036836][T11440] syzkaller0: entered promiscuous mode [ 342.052778][T11448] netlink: 'syz.1.1483': attribute type 1 has an invalid length. [ 342.077063][T11440] syzkaller0: entered allmulticast mode [ 342.086250][T11451] __nla_validate_parse: 5 callbacks suppressed [ 342.086269][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 342.358081][T11466] netlink: 'syz.1.1488': attribute type 1 has an invalid length. [ 342.376217][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1488'. [ 342.538618][ T9885] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 343.795207][T11496] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1495'. [ 343.823323][T11496] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1495'. [ 344.084239][T11512] rdma_op ffff8880503579f0 conn xmit_rdma 0000000000000000 [ 344.104057][T11514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1501'. [ 344.450383][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 344.769528][T11537] bridge: RTM_NEWNEIGH with invalid ether address [ 345.189032][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1514'. [ 345.205390][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1514'. [ 345.217747][T11564] netlink: 'syz.1.1515': attribute type 3 has an invalid length. [ 345.339156][T11569] xt_cluster: node mask cannot exceed total number of nodes [ 345.445798][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1517'. [ 345.455419][T11572] tc_dump_action: action bad kind [ 345.588569][T11578] sock: sock_timestamping_bind_phc: sock not bind to device [ 345.896449][T11585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1522'. [ 345.918171][T11592] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 345.947087][T11593] netlink: 'syz.3.1520': attribute type 21 has an invalid length. [ 346.446440][T11612] netlink: 'syz.4.1528': attribute type 10 has an invalid length. [ 346.584381][T11612] team0: Port device geneve0 added [ 346.635169][T11631] openvswitch: netlink: Flow actions attr not present in new flow. [ 346.657248][T11635] openvswitch: netlink: Flow actions attr not present in new flow. [ 347.087612][T11657] netlink: 'syz.3.1538': attribute type 4 has an invalid length. [ 347.189485][T11664] __nla_validate_parse: 10 callbacks suppressed [ 347.189506][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 347.260470][T11668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1542'. [ 347.304506][T11664] bond7: ARP target 1.0.0.0 is already present [ 347.310971][T11664] bond7: option arp_ip_target: invalid value (1) [ 347.321367][T11664] bond7 (unregistering): Released all slaves [ 347.357807][T11671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.439762][ T1078] block nbd0: Possible stuck request ffff888024b47000: control (read@0,1024B). Runtime 240 seconds [ 347.450857][ T1078] block nbd0: Possible stuck request ffff888024b471c0: control (read@1024,1024B). Runtime 240 seconds [ 347.462148][ T1078] block nbd0: Possible stuck request ffff888024b47380: control (read@2048,1024B). Runtime 240 seconds [ 347.478225][ T1078] block nbd0: Possible stuck request ffff888024b47540: control (read@3072,1024B). Runtime 240 seconds [ 347.591133][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1547'. [ 347.638758][T11682] netlink: 'syz.3.1545': attribute type 12 has an invalid length. [ 347.667461][T11682] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 347.676217][T11682] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1545'. [ 347.686439][T11682] netlink: 'syz.3.1545': attribute type 2 has an invalid length. [ 347.695784][T11682] netlink: 'syz.3.1545': attribute type 3 has an invalid length. [ 347.703989][T11682] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1545'. [ 347.760663][T11681] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.815379][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1550'. [ 347.864923][T11681] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.031070][T11681] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.172812][T11681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.360075][ T9885] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.400899][ T9885] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.427316][ T9885] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.460902][ T9885] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.685916][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'. [ 348.708177][T11718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.709629][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1556'. [ 348.725064][T11718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.734535][T11718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.742316][T11718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.819378][T11721] 8021q: adding VLAN 0 to HW filter on device bond9 [ 348.876133][T11727] 8021q: adding VLAN 0 to HW filter on device bond9 [ 348.902381][T11727] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 348.976304][T11727] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 349.164766][T11736] bond5: entered promiscuous mode [ 349.169873][T11736] bond5: entered allmulticast mode [ 349.176320][T11736] 8021q: adding VLAN 0 to HW filter on device bond5 [ 349.366277][T11749] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1567'. [ 349.425432][T11754] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 349.425975][ T5905] IPVS: starting estimator thread 0... [ 349.490114][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'. [ 349.544744][T11758] IPVS: using max 23 ests per chain, 55200 per kthread [ 349.613773][T11762] IPVS: length: 8 != 1152 [ 349.757303][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 349.820270][T11772] sctp: [Deprecated]: syz.0.1575 (pid 11772) Use of int in maxseg socket option. [ 349.820270][T11772] Use struct sctp_assoc_value instead [ 349.921341][T11779] netlink: 'syz.2.1574': attribute type 8 has an invalid length. [ 349.987355][T11781] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 350.004206][T11781] tipc: Enabled bearer , priority 0 [ 350.012080][T11781] syzkaller0: entered promiscuous mode [ 350.018284][T11781] syzkaller0: entered allmulticast mode [ 350.027668][T11786] netlink: 'syz.0.1578': attribute type 2 has an invalid length. [ 350.038882][T11785] netlink: 'syz.0.1578': attribute type 11 has an invalid length. [ 350.067290][T11780] tipc: Resetting bearer [ 350.110652][T11780] tipc: Disabling bearer [ 350.350357][T11796] netlink: 'syz.0.1582': attribute type 1 has an invalid length. [ 350.437017][T11795] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 350.469937][T11795] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 350.560131][T11799] macvlan2: entered promiscuous mode [ 350.578550][T11799] macvlan2: entered allmulticast mode [ 350.597745][T11799] bond6: (slave macvlan2): Error -98 calling set_mac_address [ 350.887427][T11814] netlink: 'syz.1.1590': attribute type 21 has an invalid length. [ 351.188234][T11832] xt_hashlimit: overflow, rate too high: 0 [ 351.760785][T11866] netlink: 'syz.0.1603': attribute type 1 has an invalid length. [ 351.786710][T11866] netlink: 'syz.0.1603': attribute type 7 has an invalid length. [ 351.796783][T11866] netlink: 'syz.0.1603': attribute type 8 has an invalid length. [ 351.817606][T11866] NCSI netlink: No device for ifindex 65584 [ 351.853822][T11869] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 352.075583][T11891] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 353.103205][T11965] __nla_validate_parse: 9 callbacks suppressed [ 353.103225][T11965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1623'. [ 353.145584][T11969] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1624'. [ 353.302200][T11974] netlink: 'syz.2.1625': attribute type 23 has an invalid length. [ 353.524508][T11993] bond2: option mode: unable to set because the bond device has slaves [ 353.618380][T12002] netlink: 'syz.4.1632': attribute type 4 has an invalid length. [ 353.647834][T11999] netlink: 'syz.4.1632': attribute type 4 has an invalid length. [ 353.702750][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1633'. [ 354.059664][T12026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.151936][T12032] x_tables: duplicate underflow at hook 1 [ 354.369210][T12034] netlink: 'syz.1.1640': attribute type 10 has an invalid length. [ 354.736023][T12058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 354.995444][T12065] netlink: 'syz.2.1651': attribute type 1 has an invalid length. [ 355.008254][T12065] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1651'. [ 355.038953][T12070] syzkaller0: entered promiscuous mode [ 355.053656][T12070] syzkaller0: entered allmulticast mode [ 355.081704][T12070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1653'. [ 355.092046][T12072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1653'. [ 355.129277][T12073] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1652'. [ 355.138848][T12074] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1654'. [ 355.520803][T12094] ieee802154 phy0 wpan0: encryption failed: -22 [ 355.711257][T12092] lo: entered allmulticast mode [ 355.717833][T12092] lo: left allmulticast mode [ 356.076718][T12118] syzkaller1: entered promiscuous mode [ 356.082352][T12118] syzkaller1: entered allmulticast mode [ 356.090164][T12116] netlink: 'syz.2.1670': attribute type 3 has an invalid length. [ 356.181978][T12130] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1672'. [ 356.356442][T12138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.360906][T12136] tipc: Enabling of bearer rejected, failed to enable media [ 356.632685][T12151] openvswitch: netlink: Unknown key attributes 2 [ 357.021311][T12176] netlink: 'syz.2.1685': attribute type 7 has an invalid length. [ 357.042608][T12176] netlink: 'syz.2.1685': attribute type 8 has an invalid length. [ 357.061529][T12176] gretap0: entered promiscuous mode [ 357.077743][T12176] batadv_slave_1: entered promiscuous mode [ 357.127722][T12176] gretap0: left promiscuous mode [ 357.145084][T12176] batadv_slave_1: left promiscuous mode [ 357.160460][T12189] openvswitch: netlink: Message has 1 unknown bytes. [ 357.182371][T12189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.584872][T12207] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 357.654394][T12211] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 357.667988][T12211] netlink: 'syz.0.1697': attribute type 10 has an invalid length. [ 357.720120][T12211] team0: Device veth1_macvtap failed to register rx_handler [ 357.809871][T12220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.149438][T12235] __nla_validate_parse: 37 callbacks suppressed [ 358.149458][T12235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1705'. [ 358.179961][T12237] tipc: Enabled bearer , priority 0 [ 358.199025][T12238] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1704'. [ 358.252611][T12238] tipc: Disabling bearer [ 358.279753][T12244] syzkaller0: entered promiscuous mode [ 358.285653][T12244] syzkaller0: entered allmulticast mode [ 358.389848][T12252] sctp: [Deprecated]: syz.3.1709 (pid 12252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.389848][T12252] Use struct sctp_sack_info instead [ 358.519499][T12258] netlink: 'syz.1.1711': attribute type 2 has an invalid length. [ 358.548254][T12258] 9: entered promiscuous mode [ 358.824436][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'. [ 358.845357][T12278] netlink: 4224 bytes leftover after parsing attributes in process `syz.1.1717'. [ 360.252126][T12274] tipc: Enabled bearer , priority 0 [ 360.427587][T12274] tipc: Disabling bearer [ 360.679890][T12315] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001 [ 360.960256][T12334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.027678][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1736'. [ 361.044538][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1736'. [ 361.054740][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1736'. [ 361.064783][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1736'. [ 361.074328][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1736'. [ 361.074526][T12341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.084700][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1736'. [ 361.582481][T12373] netlink: 'syz.3.1744': attribute type 1 has an invalid length. [ 361.595721][T12373] netlink: 'syz.3.1744': attribute type 3 has an invalid length. [ 361.767999][T12379] macsec2: entered promiscuous mode [ 361.780013][T12379] macsec2: entered allmulticast mode [ 361.787283][T12379] bridge0: entered allmulticast mode [ 361.794830][T12379] bridge0: port 5(macsec2) entered blocking state [ 361.801855][T12379] bridge0: port 5(macsec2) entered disabled state [ 361.832995][T12379] bridge0: left allmulticast mode [ 361.884767][T12384] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 361.930630][T12384] netlink: 'syz.1.1748': attribute type 4 has an invalid length. [ 362.372707][T12407] netlink: 'syz.0.1753': attribute type 1 has an invalid length. [ 362.462816][T12411] syzkaller0: entered promiscuous mode [ 362.468581][T12411] syzkaller0: entered allmulticast mode [ 362.975082][T12428] team0: left allmulticast mode [ 362.980303][T12428] team0: left promiscuous mode [ 362.988514][T12428] bridge0: port 1(team0) entered disabled state [ 363.521283][T12462] netlink: 'syz.0.1770': attribute type 1 has an invalid length. [ 363.531407][T12462] __nla_validate_parse: 69 callbacks suppressed [ 363.531429][T12462] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1770'. [ 363.534038][T12464] netlink: 'syz.1.1771': attribute type 15 has an invalid length. [ 363.863480][T12483] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 364.113791][T12494] syzkaller0: entered promiscuous mode [ 364.119329][T12494] syzkaller0: entered allmulticast mode [ 364.143675][T12494] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 364.218315][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 364.393967][T12510] Driver unsupported XDP return value 0 on prog (id 377) dev N/A, expect packet loss! [ 364.538969][T12524] netlink: 'syz.0.1790': attribute type 1 has an invalid length. [ 364.828652][T12522] netlink: 'syz.1.1789': attribute type 13 has an invalid length. [ 365.174974][T12547] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1792'. [ 365.355477][ T57] block nbd1: Possible stuck request ffff888024bb5080: control (read@0,1024B). Runtime 240 seconds [ 365.366845][ T57] block nbd1: Possible stuck request ffff888024bb5240: control (read@1024,1024B). Runtime 240 seconds [ 365.378097][ T57] block nbd1: Possible stuck request ffff888024bb5400: control (read@2048,1024B). Runtime 240 seconds [ 365.378427][T12561] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 365.389498][ T57] block nbd1: Possible stuck request ffff888024bb55c0: control (read@3072,1024B). Runtime 240 seconds [ 365.468997][T12564] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1795'. [ 365.527088][T12564] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1795'. [ 365.804324][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 365.904550][ T3445] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 365.986254][T12595] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.074981][ T9877] wlan1: Trigger new scan to find an IBSS to join [ 366.340632][T12607] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 366.356171][T12607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1812'. [ 366.361325][T12612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.385496][T12607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1812'. [ 366.398252][T12613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1811'. [ 366.547232][T12623] netlink: 'syz.1.1817': attribute type 2 has an invalid length. [ 366.655523][T12621] ip6gre2: entered allmulticast mode [ 366.728992][T12631] netlink: 'syz.3.1819': attribute type 1 has an invalid length. [ 366.796070][T12631] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.818721][T12640] bond4: (slave ip6gretap1): making interface the new active one [ 366.828903][T12640] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 366.841496][T12636] bond0: Caught tx_queue_len zero misconfig [ 366.914930][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'. [ 367.326435][T12662] tipc: Enabled bearer , priority 0 [ 367.380669][T12662] syzkaller0: entered promiscuous mode [ 367.386866][T12662] syzkaller0: entered allmulticast mode [ 367.418656][T12662] tipc: Resetting bearer [ 367.446381][T12661] tipc: Resetting bearer [ 367.465988][T12661] tipc: Disabling bearer [ 367.585011][T12680] syzkaller0: entered promiscuous mode [ 367.621845][T12680] syzkaller0: entered allmulticast mode [ 367.840186][T12698] netlink: 'syz.3.1842': attribute type 4 has an invalid length. [ 367.944227][T12705] netlink: 'syz.0.1844': attribute type 8 has an invalid length. [ 368.143441][T12714] netlink: 'syz.4.1847': attribute type 1 has an invalid length. [ 368.285640][T12722] netlink: 'syz.4.1850': attribute type 1 has an invalid length. [ 368.331924][T12722] netlink: 'syz.4.1850': attribute type 10 has an invalid length. [ 368.349754][T12722] bridge0: port 2(team0) entered blocking state [ 368.382981][T12722] bridge0: port 2(team0) entered disabled state [ 368.392799][T12722] team0: entered allmulticast mode [ 368.399038][T12722] team_slave_0: entered allmulticast mode [ 368.413425][T12722] team_slave_1: entered allmulticast mode [ 368.423482][T12722] geneve0: entered allmulticast mode [ 368.494517][T12722] team0: entered promiscuous mode [ 368.515124][T12722] team_slave_0: entered promiscuous mode [ 368.531056][T12722] team_slave_1: entered promiscuous mode [ 368.539205][T12722] geneve0: entered promiscuous mode [ 368.547918][T12722] bridge0: port 2(team0) entered blocking state [ 368.554548][T12722] bridge0: port 2(team0) entered forwarding state [ 368.568977][T12735] __nla_validate_parse: 7 callbacks suppressed [ 368.568996][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1852'. [ 368.591059][T12727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.691938][T12740] x_tables: duplicate underflow at hook 1 [ 368.704008][T12740] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 368.845430][T12743] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1857'. [ 369.025932][T12756] netlink: 'syz.4.1857': attribute type 12 has an invalid length. [ 369.034004][ T13] wlan1: Trigger new scan to find an IBSS to join [ 369.064730][T12756] netlink: 'syz.4.1857': attribute type 29 has an invalid length. [ 369.112888][T12756] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1857'. [ 369.151543][T12756] netlink: 'syz.4.1857': attribute type 2 has an invalid length. [ 369.188630][T12756] netlink: 23 bytes leftover after parsing attributes in process `syz.4.1857'. [ 369.215387][T12767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.430745][T12769] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1864'. [ 369.880037][T12789] netlink: 'syz.3.1872': attribute type 5 has an invalid length. [ 369.882656][T12794] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1873'. [ 369.919711][T12795] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1871'. [ 369.967976][T12799] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1875'. [ 370.106670][T12797] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1874'. [ 370.149471][T12797] ipt_REJECT: TCP_RESET invalid for non-tcp [ 370.210484][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'. [ 370.506361][T12828] sctp: [Deprecated]: syz.0.1884 (pid 12828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.506361][T12828] Use struct sctp_sack_info instead [ 371.008929][T12861] x_tables: duplicate underflow at hook 3 [ 371.241937][T12871] macsec1: entered promiscuous mode [ 371.247567][T12871] macsec1: entered allmulticast mode [ 371.254300][T12871] bond7: (slave macsec1): Error -34 calling dev_set_mtu [ 371.293729][T12875] tipc: Enabled bearer , priority 0 [ 371.302306][T12882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.351734][T12882] TC_ACT_REPEAT abuse ? [ 371.400286][T12887] syzkaller0: entered promiscuous mode [ 371.406242][T12887] syzkaller0: entered allmulticast mode [ 371.444768][T12887] tipc: Resetting bearer [ 371.518139][T12892] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.033666][T12873] tipc: Resetting bearer [ 372.077692][ T9887] wlan1: Creating new IBSS network, BSSID 86:ab:4a:52:1a:f9 [ 372.106139][T12921] xt_TPROXY: Can be used only with -p tcp or -p udp [ 372.107377][T12873] tipc: Disabling bearer [ 372.164755][T12926] validate_nla: 1 callbacks suppressed [ 372.164776][T12926] netlink: 'syz.3.1914': attribute type 58 has an invalid length. [ 372.180837][T12928] netlink: 'syz.2.1912': attribute type 4 has an invalid length. [ 372.196365][T12927] netlink: 'syz.0.1915': attribute type 24 has an invalid length. [ 372.349975][T12936] netlink: 'syz.4.1916': attribute type 3 has an invalid length. [ 372.431467][T12940] lo: Caught tx_queue_len zero misconfig [ 372.791785][T12963] netlink: 'syz.0.1924': attribute type 10 has an invalid length. [ 372.958488][T12967] syzkaller0: entered promiscuous mode [ 372.976781][T12967] syzkaller0: entered allmulticast mode [ 373.398511][T12989] 8021q: VLANs not supported on gre0 [ 373.562364][T12995] bond0: (slave bond_slave_1): Releasing backup interface [ 373.615203][T13003] x_tables: duplicate underflow at hook 3 [ 373.756462][T12995] __nla_validate_parse: 13 callbacks suppressed [ 373.756484][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 373.783726][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 373.791556][T13014] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1944'. [ 373.806709][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 373.824038][T13014] block nbd0: reconnected socket [ 373.837254][ T5833] block nbd0: Receive control failed (result -32) [ 373.878778][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 373.892667][T13019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'. [ 373.969397][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 373.979027][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 373.995647][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 374.012870][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 374.098316][T13031] netlink: 'syz.4.1947': attribute type 10 has an invalid length. [ 374.107668][T13029] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 374.144729][T13025] can: request_module (can-proto-0) failed. [ 374.161950][T13034] netlink: 'syz.4.1947': attribute type 10 has an invalid length. [ 374.164429][T13030] tap0: tun_chr_ioctl cmd 1074025676 [ 374.175507][T13030] tap0: owner set to 0 [ 374.208172][T13037] netlink: 'syz.0.1951': attribute type 5 has an invalid length. [ 374.225671][T13031] dummy0: entered promiscuous mode [ 374.231066][T13031] dummy0: entered allmulticast mode [ 374.239189][T13031] team0: Port device dummy0 added [ 374.240480][T13037] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 374.246716][T13034] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 374.262845][T13034] dummy0: left promiscuous mode [ 374.268468][T13034] dummy0: left allmulticast mode [ 374.279509][T13034] team0: Failed to send options change via netlink (err -105) [ 374.287588][T13034] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 374.299888][T13034] team0: Port device dummy0 removed [ 374.312812][T13034] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 374.691721][T13061] syzkaller0: entered promiscuous mode [ 374.697962][T13061] syzkaller0: entered allmulticast mode [ 374.781216][T13061] pim6reg: entered allmulticast mode [ 374.798795][T13061] pim6reg: left allmulticast mode [ 375.034476][ T9877] wlan1: Trigger new scan to find an IBSS to join [ 375.121485][T13089] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 375.220657][T13097] netlink: 'syz.0.1969': attribute type 10 has an invalid length. [ 375.545816][T13113] Bluetooth: MGMT ver 1.23 [ 375.998041][T13130] netlink: 'syz.2.1982': attribute type 4 has an invalid length. [ 376.024475][T13130] tipc: Enabling of bearer rejected, failed to enable media [ 376.511061][T13148] wg1 speed is unknown, defaulting to 1000 [ 376.552837][T13156] tipc: Enabling of bearer rejected, failed to enable media [ 377.408089][T13192] geneve2: entered promiscuous mode [ 377.514669][ T1078] block nbd0: Possible stuck request ffff888024b47000: control (read@0,1024B). Runtime 270 seconds [ 377.527231][ T1078] block nbd0: Possible stuck request ffff888024b471c0: control (read@1024,1024B). Runtime 270 seconds [ 377.546462][ T1078] block nbd0: Possible stuck request ffff888024b47380: control (read@2048,1024B). Runtime 270 seconds [ 377.562489][ T25] block nbd0: Dead connection, failed to find a fallback [ 377.582976][ T1078] block nbd0: Possible stuck request ffff888024b47540: control (read@3072,1024B). Runtime 270 seconds [ 377.594843][ T25] block nbd0: shutting down sockets [ 377.600491][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.611961][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 377.620725][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.630916][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 377.639634][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.649433][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 377.658384][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.670391][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 377.689884][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.720897][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 377.729757][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.744709][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read [ 377.752661][ T5828] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.762788][ T5828] Buffer I/O error on dev nbd0, logical block 2, async page read [ 377.771337][ T5828] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.781076][ T5828] Buffer I/O error on dev nbd0, logical block 3, async page read [ 377.790959][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.801452][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 377.815742][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.874273][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read [ 377.910861][ T5828] ldm_validate_partition_table(): Disk read failed. [ 377.957669][ T5828] Dev nbd0: unable to read RDB block 0 [ 377.997784][ T5828] nbd0: unable to read partition table [ 378.070431][ T5200] udevd[5200]: worker [5828] terminated by signal 9 (Killed) [ 378.083986][ T9887] wlan1: Trigger new scan to find an IBSS to join [ 378.100382][ T5200] udevd[5200]: worker [5828] failed while handling '/devices/virtual/block/nbd0' [ 378.808467][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.130510][T13247] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 379.133640][T13304] validate_nla: 1 callbacks suppressed [ 379.133657][T13304] netlink: 'syz.2.2028': attribute type 1 has an invalid length. [ 379.181908][T13304] 8021q: adding VLAN 0 to HW filter on device bond5 [ 379.260178][T13306] bond5: (slave veth11): Enslaving as an active interface with a down link [ 379.308491][T13304] veth13: entered promiscuous mode [ 379.331548][T13304] bond5: (slave veth13): Enslaving as an active interface with a down link [ 379.353313][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 379.419319][T13325] __nla_validate_parse: 76 callbacks suppressed [ 379.419344][T13325] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2031'. [ 379.525467][T13304] vlan1: entered allmulticast mode [ 379.530770][T13304] bond5: entered allmulticast mode [ 379.538301][T13304] bond5: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 380.393767][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 381.043206][ T9877] wlan1: Trigger new scan to find an IBSS to join [ 381.194435][T13359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.403677][T13360] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 381.435964][T13374] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 381.558326][T13374] bond9: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 381.596037][T13379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2046'. [ 381.608828][T13374] bond9 (unregistering): Released all slaves [ 381.716591][T13379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'. [ 381.755731][T13384] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2048'. [ 381.790100][T13381] bond10: invalid ARP target 0.0.0.0 specified for addition [ 381.807218][T13381] bond10: option arp_ip_target: invalid value (0) [ 381.849446][T13381] bond10 (unregistering): Released all slaves [ 381.994406][ T36] wlan1: Creating new IBSS network, BSSID be:52:3b:84:d5:2c [ 382.182129][T13409] netlink: 'syz.1.2053': attribute type 10 has an invalid length. [ 382.536872][T13423] netlink: 'syz.3.2057': attribute type 3 has an invalid length. [ 383.006792][T13450] pim6reg: entered allmulticast mode [ 383.012386][T13451] pim6reg: left allmulticast mode [ 383.234855][T13460] netlink: 'syz.4.2068': attribute type 1 has an invalid length. [ 383.262396][T13460] 8021q: adding VLAN 0 to HW filter on device bond10 [ 383.282737][T13460] bond10: (slave geneve3): making interface the new active one [ 383.292383][T13460] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 383.479408][T13469] vetè0_virt_wifi: renamed from dummy0 (while UP) [ 383.599862][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2074'. [ 383.610246][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2074'. [ 383.765238][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2077'. [ 383.935130][T13497] veth1_macvtap: left promiscuous mode [ 383.940663][T13497] macsec0: entered promiscuous mode [ 383.965330][T13497] macsec0: entered allmulticast mode [ 383.987436][T13501] netlink: 'syz.0.2081': attribute type 83 has an invalid length. [ 384.074808][T13506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2083'. [ 384.114005][T13506] macsec0: entered promiscuous mode [ 384.119283][T13506] macsec0: entered allmulticast mode [ 384.126212][T13506] bond7: (slave macsec0): Error -34 calling dev_set_mtu [ 384.326727][T13519] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2086'. [ 384.337524][T13519] openvswitch: netlink: Missing key (keys=40, expected=100) [ 384.404798][T13522] netlink: 'syz.1.2087': attribute type 9 has an invalid length. [ 384.414445][T13522] netlink: 'syz.1.2087': attribute type 6 has an invalid length. [ 384.454399][T13522] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 384.480997][T13526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2089'. [ 384.516318][T13524] bond8: option miimon: invalid value (18446744073709551585) [ 384.524486][T13524] bond8: option miimon: allowed values 0 - 2147483647 [ 384.548312][T13524] bond8 (unregistering): Released all slaves [ 384.578401][T13531] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2090'. [ 384.659658][T13538] sock: sock_set_timeout: `syz.1.2092' (pid 13538) tries to set negative timeout [ 384.686482][T13538] netlink: 'syz.1.2092': attribute type 2 has an invalid length. [ 384.825233][T13542] netlink: 'syz.2.2094': attribute type 12 has an invalid length. [ 384.859742][T13545] nftables ruleset with unbound set [ 384.862192][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2094'. [ 384.879680][T13548] netlink: 'syz.2.2094': attribute type 7 has an invalid length. [ 384.888457][T13548] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2094'. [ 384.911446][T13546] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2093'. [ 384.922733][T13545] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2093'. [ 385.152649][T13564] xt_hashlimit: size too large, truncated to 1048576 [ 385.375886][T13572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.550802][T13587] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2106'. [ 385.607714][T13587] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 386.028038][T13617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2112'. [ 386.245106][T13621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.252443][T13621] IPv6: NLM_F_CREATE should be set when creating new route [ 386.475475][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2119'. [ 386.558721][T13642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2121'. [ 386.649657][T13651] netlink: 'syz.2.2118': attribute type 21 has an invalid length. [ 386.820683][T13659] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 386.834595][T13662] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 386.853529][T13659] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) ! [ 387.821943][T13700] bridge6: entered promiscuous mode [ 387.828041][T13700] bridge6: entered allmulticast mode [ 387.931032][T13707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.974080][T13707] tunl0: entered promiscuous mode [ 387.979470][T13707] netlink: 'syz.2.2140': attribute type 3 has an invalid length. [ 388.012509][T13714] netlink: 'syz.0.2142': attribute type 29 has an invalid length. [ 388.025680][T13714] netlink: 'syz.0.2142': attribute type 29 has an invalid length. [ 388.118972][T13717] wg1 speed is unknown, defaulting to 1000 [ 388.642854][T13737] bond9: (slave bond_slave_1): Device is not bonding slave [ 388.668414][T13737] bond9: option active_slave: invalid value (bond_slave_1) [ 388.681478][T13737] bond9 (unregistering): Released all slaves [ 388.723942][T13750] netlink: 'syz.0.2153': attribute type 11 has an invalid length. [ 388.731860][T13748] tipc: Enabled bearer , priority 0 [ 388.743170][T13747] netlink: 'syz.3.2152': attribute type 2 has an invalid length. [ 388.824642][T13745] syzkaller0: entered promiscuous mode [ 388.830179][T13745] syzkaller0: entered allmulticast mode [ 388.925647][T13745] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 388.979288][T13745] tipc: Resetting bearer [ 389.012684][T13744] tipc: Resetting bearer [ 389.093865][T13744] tipc: Disabling bearer [ 389.285387][T13780] syz.1.2160 uses old SIOCAX25GETINFO [ 389.358688][T13785] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 389.481754][T13792] validate_nla: 1 callbacks suppressed [ 389.481776][T13792] netlink: 'syz.4.2163': attribute type 33 has an invalid length. [ 389.496751][T13792] __nla_validate_parse: 13 callbacks suppressed [ 389.496770][T13792] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2163'. [ 389.507494][T13797] netlink: 'syz.0.2164': attribute type 4 has an invalid length. [ 389.518134][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2163'. [ 389.530800][T13797] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2164'. [ 389.557852][T13792] bond0: (slave dummy0): Releasing backup interface [ 389.581627][T13797] `: renamed from bond0 (while UP) [ 389.591096][T13798] xt_TPROXY: Can be used only with -p tcp or -p udp [ 389.777577][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 389.869317][ T13] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 390.118920][T13828] netlink: 'syz.1.2175': attribute type 3 has an invalid length. [ 390.341627][T13840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2180'. [ 390.357855][T13834] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2177'. [ 390.463966][T13845] netlink: 'syz.1.2180': attribute type 21 has an invalid length. [ 390.471866][T13845] IPv6: NLM_F_CREATE should be specified when creating new route [ 390.482211][T13845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.489527][T13845] IPv6: NLM_F_CREATE should be set when creating new route [ 390.496840][T13845] IPv6: NLM_F_CREATE should be set when creating new route [ 390.504125][T13845] IPv6: NLM_F_CREATE should be set when creating new route [ 390.733743][T13844] sctp: [Deprecated]: syz.2.2181 (pid 13844) Use of int in max_burst socket option deprecated. [ 390.733743][T13844] Use struct sctp_assoc_value instead [ 390.864987][T13854] netlink: 'syz.4.2183': attribute type 21 has an invalid length. [ 390.969486][T13854] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 391.016483][T13854] bond11 (unregistering): Released all slaves [ 391.084119][ T9877] nci: nci_rx_work: unknown MT 0x1 [ 391.162497][T13872] batadv1: entered allmulticast mode [ 391.246364][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2188'. [ 391.301010][T13880] xfrm1: entered promiscuous mode [ 391.327229][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2188'. [ 391.341102][T13880] xfrm1: entered allmulticast mode [ 391.568957][T13900] syzkaller0: entered promiscuous mode [ 391.585980][T13900] syzkaller0: entered allmulticast mode [ 392.047114][T13914] bridge_slave_0: left allmulticast mode [ 392.063843][T13914] bridge_slave_0: left promiscuous mode [ 392.073715][T13914] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.409056][T13949] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2201'. [ 392.424858][T13949] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2201'. [ 392.558816][T13958] netlink: 'syz.1.2203': attribute type 10 has an invalid length. [ 393.125349][T13991] gtp1: entered promiscuous mode [ 393.138822][T13991] gtp1: entered allmulticast mode [ 393.321551][T13998] team0: Caught tx_queue_len zero misconfig [ 393.437781][T14006] veth7: entered allmulticast mode [ 394.495878][T14071] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20002 [ 394.683692][T14075] __nla_validate_parse: 8 callbacks suppressed [ 394.683714][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'. [ 394.770867][T14079] netlink: 'syz.4.2241': attribute type 4 has an invalid length. [ 394.922558][T14086] tipc: Enabled bearer , priority 0 [ 394.933637][T14093] syzkaller0: entered promiscuous mode [ 394.939164][T14093] syzkaller0: entered allmulticast mode [ 394.959306][T14079] tipc: Resetting bearer [ 395.066033][T14077] tipc: Resetting bearer [ 395.136709][T14106] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 395.160087][T14077] tipc: Disabling bearer [ 395.352486][T14118] ksmbd: Unknown IPC event: 11, ignore. [ 395.380283][T14100] netlink: 81 bytes leftover after parsing attributes in process `syz.1.2246'. [ 395.396740][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2250'. [ 395.435324][ T57] block nbd1: Possible stuck request ffff888024bb5080: control (read@0,1024B). Runtime 270 seconds [ 395.446579][ T57] block nbd1: Possible stuck request ffff888024bb5240: control (read@1024,1024B). Runtime 270 seconds [ 395.457919][ T57] block nbd1: Possible stuck request ffff888024bb5400: control (read@2048,1024B). Runtime 270 seconds [ 395.469353][ T57] block nbd1: Possible stuck request ffff888024bb55c0: control (read@3072,1024B). Runtime 270 seconds [ 395.586022][T14120] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 395.614840][T14124] vlan3: entered allmulticast mode [ 395.625957][T14124] bridge_slave_0: entered allmulticast mode [ 395.689043][T14133] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20000 [ 395.699401][T14133] x_tables: duplicate underflow at hook 3 [ 395.915314][T14145] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2258'. [ 396.032286][T14147] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 396.090995][T14147] 8021q: adding VLAN 0 to HW filter on device bond5 [ 396.129452][T14157] 8021q: adding VLAN 0 to HW filter on device bond5 [ 396.146771][T14157] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 396.162343][T14157] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 396.302182][T14147] veth9: entered promiscuous mode [ 396.332587][T14147] bond5: (slave veth9): Enslaving as an active interface with a down link [ 396.345956][T14165] tipc: Enabled bearer , priority 0 [ 396.354093][T14152] syzkaller0: entered promiscuous mode [ 396.359593][T14152] syzkaller0: entered allmulticast mode [ 396.368884][T14157] netlink: 'syz.3.2259': attribute type 25 has an invalid length. [ 396.384416][T14162] netlink: 'syz.0.2264': attribute type 2 has an invalid length. [ 396.468970][T14166] vlan3: entered allmulticast mode [ 396.476883][T14166] bond5: entered allmulticast mode [ 396.479063][T14193] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2267'. [ 396.620342][T14152] tipc: Resetting bearer [ 396.704606][T14196] netlink: 'syz.4.2268': attribute type 1 has an invalid length. [ 396.716749][T14196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.753582][T14199] : entered promiscuous mode [ 396.936030][T14149] tipc: Resetting bearer [ 396.969809][T14149] tipc: Disabling bearer [ 397.009177][T14208] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2272'. [ 397.359971][T14230] vlan3: entered promiscuous mode [ 397.373811][T14230] vlan3: entered allmulticast mode [ 397.389373][T14230] hsr_slave_1: entered allmulticast mode [ 397.452305][T14236] netlink: 'syz.2.2279': attribute type 2 has an invalid length. [ 397.461540][T14236] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2279'. [ 397.516031][T14230] wg1 speed is unknown, defaulting to 1000 [ 397.538283][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2280'. [ 397.637494][T14248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2283'. [ 397.692903][T14243] bond0: option lp_interval: invalid value (0) [ 397.712891][T14243] bond0: option lp_interval: allowed values 1 - 2147483647 [ 397.728939][T14243] bond0 (unregistering): Released all slaves [ 397.770735][T14249] 8021q: VLANs not supported on ip6gre0 [ 397.818285][T14253] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2284'. [ 398.296125][T14288] tipc: Can't bind to reserved service type 2 [ 398.378572][T14289] tipc: Cannot configure node identity twice [ 398.712940][T14319] netlink: 'syz.1.2300': attribute type 32 has an invalid length. [ 398.861831][T14331] netlink: 'syz.4.2303': attribute type 2 has an invalid length. [ 398.904398][T14330] syzkaller0: entered promiscuous mode [ 398.922646][T14330] syzkaller0: entered allmulticast mode [ 399.385875][T14363] netlink: 'syz.0.2311': attribute type 1 has an invalid length. [ 399.539933][T14369] veth9: entered promiscuous mode [ 399.654717][T14363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.708760][T14374] vlan3: entered allmulticast mode [ 399.714407][T14374] bond0: entered allmulticast mode [ 400.021345][T14388] __nla_validate_parse: 7 callbacks suppressed [ 400.021364][T14388] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2317'. [ 400.139513][T14404] tipc: Enabled bearer , priority 0 [ 400.147204][T14400] tipc: Enabling of bearer rejected, already enabled [ 400.157845][T14404] syzkaller0: entered promiscuous mode [ 400.180182][T14404] syzkaller0: entered allmulticast mode [ 400.252748][T14404] tipc: Resetting bearer [ 400.267984][T14396] tipc: Resetting bearer [ 400.277564][T14408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2323'. [ 400.326699][T14396] tipc: Disabling bearer [ 400.465438][T14431] netlink: 'syz.4.2328': attribute type 1 has an invalid length. [ 400.646920][T14435] bond11: (slave gretap3): making interface the new active one [ 400.658401][T14435] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 400.667953][T14441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.900058][T14445] syzkaller0: entered promiscuous mode [ 400.923421][T14445] syzkaller0: entered allmulticast mode [ 400.950239][T14450] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2333'. [ 401.051247][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2335'. [ 401.072060][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2335'. [ 401.321336][T14471] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2339'. [ 401.338786][T14479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.442380][T14486] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2343'. [ 401.493617][T14486] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2343'. [ 401.519747][T14486] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2343'. [ 401.559674][T14495] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2346'. [ 401.560500][T14486] netlink: 'syz.3.2343': attribute type 5 has an invalid length. [ 401.592308][T14491] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 401.797953][T14504] syzkaller1: entered promiscuous mode [ 401.833280][T14504] syzkaller1: entered allmulticast mode [ 402.296101][T14525] veth11: entered promiscuous mode [ 402.336471][T14534] vlan3: entered allmulticast mode [ 402.393310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.369944][T14591] syzkaller0: entered promiscuous mode [ 403.393585][T14591] syzkaller0: entered allmulticast mode [ 403.443218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.147092][T14627] netlink: 'syz.2.2384': attribute type 83 has an invalid length. [ 404.211581][T14632] netlink: 'syz.0.2385': attribute type 32 has an invalid length. [ 404.314439][T14632] bond8: Setting coupled_control to off (0) [ 404.356772][T14643] netlink: 'syz.4.2388': attribute type 21 has an invalid length. [ 404.468956][T14647] syzkaller0: entered promiscuous mode [ 404.511015][T14647] syzkaller0: entered allmulticast mode [ 404.740324][T14664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.926008][T14631] syzkaller1: entered promiscuous mode [ 404.946880][T14631] syzkaller1: entered allmulticast mode [ 405.064908][ T13] syzkaller0: tun_net_xmit 76 [ 405.070274][ T13] syzkaller0: tun_net_xmit 48 [ 405.070380][T14678] syzkaller0: create flow: hash 2666519690 index 2 [ 405.093692][ T10] syzkaller0: tun_net_xmit 76 [ 405.132066][T14678] syzkaller0: delete flow: hash 2666519690 index 2 [ 405.165465][ T10] syzkaller0: tun_net_xmit 76 [ 405.487497][T14690] __nla_validate_parse: 14 callbacks suppressed [ 405.487520][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2402'. [ 405.642535][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2405'. [ 405.698492][T14700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2406'. [ 405.709305][T14700] siw: device registration error -23 [ 406.136139][T14715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2411'. [ 407.432267][T14723] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20003 [ 407.524227][T14724] can: request_module (can-proto-0) failed. [ 407.866396][T14750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2420'. [ 407.879795][T14748] syzkaller0: entered promiscuous mode [ 407.885857][T14748] syzkaller0: entered allmulticast mode [ 408.029289][T14754] dummy0: Caught tx_queue_len zero misconfig [ 408.398884][T14776] netlink: 'syz.4.2431': attribute type 13 has an invalid length. [ 408.417614][T14776] netlink: 'syz.4.2431': attribute type 58 has an invalid length. [ 408.432682][T14776] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2431'. [ 408.450147][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2431'. [ 408.586233][T14791] netlink: 'syz.1.2435': attribute type 1 has an invalid length. [ 408.642589][T14791] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2435'. [ 408.990254][T14824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2441'. [ 409.048857][T14823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2443'. [ 409.084348][T14832] netlink: 'syz.2.2444': attribute type 1 has an invalid length. [ 409.264080][T14832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 409.417686][T14843] wg1 speed is unknown, defaulting to 1000 [ 409.747402][T14865] netlink: 'syz.3.2453': attribute type 21 has an invalid length. [ 409.777800][T14865] netlink: 'syz.3.2453': attribute type 21 has an invalid length. [ 409.814816][T14874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.977471][T14881] macvtap1: entered promiscuous mode [ 410.006314][T14881] vlan0: entered promiscuous mode [ 410.011871][T14881] macvtap1: entered allmulticast mode [ 410.044962][T14881] vlan0: entered allmulticast mode [ 410.054297][T14881] veth0_vlan: entered allmulticast mode [ 410.121597][T14885] macvtap2: entered promiscuous mode [ 410.146212][T14885] macvtap2: entered allmulticast mode [ 410.377029][T14902] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.494190][T14912] __nla_validate_parse: 7 callbacks suppressed [ 410.494210][T14912] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2465'. [ 410.565865][T14921] x_tables: duplicate underflow at hook 2 [ 410.826492][T14923] can: request_module (can-proto-0) failed. [ 410.839026][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2474'. [ 410.869227][T14936] chnl_net:caif_netlink_parms(): no params data found [ 410.991211][T14940] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 411.316957][T14957] syzkaller0: entered promiscuous mode [ 411.322671][T14957] syzkaller0: entered allmulticast mode [ 411.335191][T14957] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 411.348310][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2482'. [ 411.416265][T14965] tipc: Enabled bearer , priority 0 [ 411.424627][T14965] syzkaller0: entered promiscuous mode [ 411.430359][T14965] syzkaller0: entered allmulticast mode [ 411.471284][T14965] tipc: Resetting bearer [ 411.480994][T14964] tipc: Resetting bearer [ 411.515089][T14964] tipc: Disabling bearer [ 411.751855][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 411.769844][T14986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2490'. [ 411.785331][T14983] tipc: Enabled bearer , priority 0 [ 411.804307][T14983] syzkaller0: entered promiscuous mode [ 411.812477][T14983] syzkaller0: entered allmulticast mode [ 411.825238][T14989] netlink: 'syz.0.2491': attribute type 1 has an invalid length. [ 411.834124][T14991] xt_hashlimit: size too large, truncated to 1048576 [ 411.855489][T14989] netlink: 'syz.0.2491': attribute type 3 has an invalid length. [ 411.867621][T14989] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2491'. [ 411.939435][T14992] tipc: Resetting bearer [ 411.951584][T14989] NCSI netlink: No device for ifindex 813332851 [ 412.013421][T14982] tipc: Resetting bearer [ 412.164604][T14982] tipc: Disabling bearer [ 412.236686][T15015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2495'. [ 412.475711][T15028] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2498'. [ 412.572391][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2500'. [ 412.672873][T15028] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2498'. [ 412.797247][T15041] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 413.000325][T15045] delete_channel: no stack [ 413.028202][T15055] netlink: 'syz.3.2505': attribute type 1 has an invalid length. [ 413.176503][T15062] bond6: (slave ip6gretap2): making interface the new active one [ 413.201445][T15062] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 413.224965][T15062] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 413.245004][T15062] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 413.766175][T15090] bridge3: entered promiscuous mode [ 413.772039][T15090] bridge3: entered allmulticast mode [ 414.020320][T15105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.277860][ T9885] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.286599][ T9885] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.321281][ T9885] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.339911][ T9885] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.987874][T15149] netlink: 'syz.4.2531': attribute type 8 has an invalid length. [ 415.809635][T15199] xt_CT: No such helper "pptp" [ 416.136215][T15219] __nla_validate_parse: 75 callbacks suppressed [ 416.136239][T15219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2552'. [ 416.221466][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2553'. [ 416.236590][T15224] sctp: [Deprecated]: syz.1.2554 (pid 15224) Use of int in max_burst socket option. [ 416.236590][T15224] Use struct sctp_assoc_value instead [ 416.256831][T15224] nbd: must specify an index to disconnect [ 416.331723][T15231] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2557'. [ 416.359989][T15231] netlink: 'syz.1.2557': attribute type 8 has an invalid length. [ 416.452553][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2558'. [ 416.472393][T15238] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2558'. [ 416.493520][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2560'. [ 416.621054][ T30] audit: type=1800 audit(1762735377.017:4): pid=15249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2563" name="memory.events" dev="tmpfs" ino=2517 res=0 errno=0 [ 416.672732][ T30] audit: type=1804 audit(1762735377.017:5): pid=15249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2563" name="/newroot/492/memory.events" dev="tmpfs" ino=2517 res=1 errno=0 [ 416.804427][T15257] xt_TCPMSS: Only works on TCP SYN packets [ 416.811637][T15257] netlink: 'syz.2.2566': attribute type 16 has an invalid length. [ 416.822194][T15257] netlink: 'syz.2.2566': attribute type 3 has an invalid length. [ 416.855883][T15257] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2566'. [ 416.877425][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'. [ 416.905910][T15254] syzkaller0: entered promiscuous mode [ 416.911446][T15254] syzkaller0: entered allmulticast mode [ 417.030965][T15268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2569'. [ 418.788044][T15286] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2572'. [ 418.888242][T15286] netlink: 'syz.2.2572': attribute type 1 has an invalid length. [ 420.438856][T15384] netlink: 'syz.3.2602': attribute type 1 has an invalid length. [ 420.582738][T15387] bond7: (slave bridge8): making interface the new active one [ 420.592480][T15387] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 421.697118][T15436] __nla_validate_parse: 10 callbacks suppressed [ 421.697140][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2615'. [ 421.714126][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2615'. [ 422.819296][T15415] syzkaller0: entered allmulticast mode [ 423.131238][T15458] delete_channel: no stack [ 424.824561][T15449] bond0: (slave bridge0): Releasing backup interface [ 424.832410][T15449] bridge0: port 2(team0) entered disabled state [ 424.839022][T15449] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.860279][T15449] team0: left allmulticast mode [ 424.865695][T15449] team_slave_0: left allmulticast mode [ 424.871197][T15449] team_slave_1: left allmulticast mode [ 424.882190][T15449] geneve0: left allmulticast mode [ 424.889618][T15449] team0: left promiscuous mode [ 424.895183][T15449] team_slave_0: left promiscuous mode [ 424.900880][T15449] team_slave_1: left promiscuous mode [ 424.914807][T15449] geneve0: left promiscuous mode [ 424.920289][T15449] bridge0: port 2(team0) entered disabled state [ 424.949056][T15449] bridge_slave_0: left allmulticast mode [ 424.955151][T15449] bridge_slave_0: left promiscuous mode [ 424.961002][T15449] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.969647][T15480] netlink: 'syz.3.2624': attribute type 6 has an invalid length. [ 424.981408][T15449] bond0: (slave bridge_slave_1): Releasing backup interface [ 424.992450][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 425.001750][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2623'. [ 425.002633][T15449] bond0: (slave bond_slave_0): Releasing backup interface [ 425.027295][T15449] bond0: (slave bond_slave_1): Releasing backup interface [ 425.050096][T15449] team0: Port device team_slave_0 removed [ 425.063965][T15449] team0: Port device team_slave_1 removed [ 425.071484][T15449] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 425.199241][T15485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.304977][T15492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2627'. [ 425.329742][T15492] syzkaller0: entered promiscuous mode [ 425.353759][T15492] syzkaller0: entered allmulticast mode [ 425.361376][T15494] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 425.367051][T15498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2629'. [ 425.401385][T15498] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2629'. [ 425.416880][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2628'. [ 425.429108][T15500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2631'. [ 425.441054][T15494] 8021q: VLANs not supported on ipvlan1 [ 425.496556][T15502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2629'. [ 425.520946][ T57] block nbd1: Possible stuck request ffff888024bb5080: control (read@0,1024B). Runtime 300 seconds [ 425.532027][ T57] block nbd1: Possible stuck request ffff888024bb5240: control (read@1024,1024B). Runtime 300 seconds [ 425.544116][ T57] block nbd1: Possible stuck request ffff888024bb5400: control (read@2048,1024B). Runtime 300 seconds [ 425.558067][ T57] block nbd1: Possible stuck request ffff888024bb55c0: control (read@3072,1024B). Runtime 300 seconds [ 425.775611][T15516] netlink: 'syz.1.2635': attribute type 33 has an invalid length. [ 425.819465][T15516] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 425.839577][T15516] bond9 (unregistering): Released all slaves [ 426.057374][T15534] SET target dimension over the limit! [ 426.292528][T15545] team_slave_0: entered promiscuous mode [ 426.298359][T15545] team_slave_1: entered promiscuous mode [ 426.305884][T15545] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 426.314969][T15545] team0: Device macvtap1 is already an upper device of the team interface [ 426.338223][T15545] team_slave_0: left promiscuous mode [ 426.343951][T15545] team_slave_1: left promiscuous mode [ 426.545516][T15554] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig [ 426.687445][T15559] sock: sock_timestamping_bind_phc: sock not bind to device [ 426.761392][T15568] __nla_validate_parse: 3 callbacks suppressed [ 426.761412][T15568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2650'. [ 426.812911][T15574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2653'. [ 426.813630][T15559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.850969][T15559] bond0: (slave rose0): Enslaving as an active interface with an up link [ 426.947355][T15582] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2655'. [ 426.970223][T15580] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 427.012326][T15580] bond9 (unregistering): Released all slaves [ 427.150947][T15594] netlink: 'syz.3.2658': attribute type 1 has an invalid length. [ 427.332214][T15601] tipc: Enabled bearer , priority 0 [ 427.340128][T15601] syzkaller0: entered promiscuous mode [ 427.347686][T15601] syzkaller0: entered allmulticast mode [ 427.356839][T15601] tipc: Resetting bearer [ 427.410289][T15601] tipc: Resetting bearer [ 427.416740][T15607] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2663'. [ 427.429872][T15600] tipc: Resetting bearer [ 427.502716][T15600] tipc: Disabling bearer [ 427.544688][T15610] lo speed is unknown, defaulting to 1000 [ 427.561143][T15610] lo speed is unknown, defaulting to 1000 [ 427.567038][T15616] netlink: 'syz.2.2666': attribute type 13 has an invalid length. [ 427.577651][T15616] veth0_macvtap: left promiscuous mode [ 427.596836][T15616] macvtap0: entered allmulticast mode [ 427.634565][T15616] macvtap0: refused to change device tx_queue_len [ 427.653547][T15610] lo speed is unknown, defaulting to 1000 [ 427.665436][T15621] netlink: 'syz.2.2666': attribute type 13 has an invalid length. [ 427.867709][T15631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2668'. [ 427.923434][T15619] syzkaller0: entered promiscuous mode [ 427.948607][T15619] syzkaller0: entered allmulticast mode [ 427.965512][T15610] infiniband sz1: set down [ 427.970405][T15610] infiniband sz1: added lo [ 428.032529][T15610] RDS/IB: sz1: added [ 428.037590][T15610] smc: adding ib device sz1 with port count 1 [ 428.042206][T15621] macvtap0: refused to change device tx_queue_len [ 428.044227][T15610] smc: ib device sz1 port 1 has no pnetid [ 428.199943][ T5905] lo speed is unknown, defaulting to 1000 [ 428.209483][T14177] lo speed is unknown, defaulting to 1000 [ 428.263883][T15610] lo speed is unknown, defaulting to 1000 [ 428.690189][T15647] netlink: 'syz.4.2673': attribute type 10 has an invalid length. [ 430.330424][T15671] tipc: New replicast peer: 255.255.255.255 [ 430.336753][T15671] tipc: Enabled bearer , priority 10 [ 430.356406][T15610] lo speed is unknown, defaulting to 1000 [ 430.583895][T15701] x_tables: duplicate underflow at hook 3 [ 430.613994][T15697] bond12: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 430.628906][T15697] bond12 (unregistering): Released all slaves [ 430.868321][T15710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2687'. [ 430.886008][T15610] lo speed is unknown, defaulting to 1000 [ 430.967709][T15715] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 431.065372][T15719] vlan1: entered promiscuous mode [ 431.090895][T15719] bridge0: entered promiscuous mode [ 431.449067][T15610] lo speed is unknown, defaulting to 1000 [ 431.453356][ T5885] tipc: Node number set to 2128867455 [ 431.509546][T15739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2693'. [ 431.533794][T15739] netlink: 'syz.2.2693': attribute type 7 has an invalid length. [ 431.541581][T15739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2693'. [ 431.931185][T15755] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2697'. [ 431.954907][T15762] 8021q: VLANs not supported on gre0 [ 432.109172][T15769] tipc: Enabling of bearer rejected, media not registered [ 432.131096][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'. [ 432.190907][T15610] lo speed is unknown, defaulting to 1000 [ 432.280950][T15774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.338033][T15774] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2703'. [ 432.390465][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2703'. [ 432.441686][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2706'. [ 432.486519][T15781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2703'. [ 432.681955][T15787] netlink: 'syz.4.2707': attribute type 10 has an invalid length. [ 432.723278][T15787] bridge0: port 1(team0) entered blocking state [ 432.731214][T15787] bridge0: port 1(team0) entered disabled state [ 432.748290][T15787] team0: entered allmulticast mode [ 432.758349][T15787] geneve0: entered allmulticast mode [ 432.766908][T15787] team0: entered promiscuous mode [ 432.774353][T15787] geneve0: entered promiscuous mode [ 433.024563][T15792] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2709'. [ 433.053442][T15799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.075079][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2713'. [ 433.086488][T15799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.090389][T15795] netlink: 'syz.2.2711': attribute type 29 has an invalid length. [ 433.122582][T15801] netlink: 'syz.3.2710': attribute type 9 has an invalid length. [ 433.130572][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2710'. [ 433.371572][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2715'. [ 433.427126][T15814] netlink: 'syz.4.2715': attribute type 20 has an invalid length. [ 433.465000][T15814] netlink: 'syz.4.2715': attribute type 20 has an invalid length. [ 433.611702][T15830] xt_CONNSECMARK: invalid mode: 0 [ 433.655070][T15833] xt_CONNSECMARK: invalid mode: 0 [ 434.336991][T15895] netlink: 'syz.3.2733': attribute type 1 has an invalid length. [ 434.375277][T15895] 8021q: adding VLAN 0 to HW filter on device bond8 [ 434.396159][T15895] bond8: (slave geneve4): making interface the new active one [ 434.405519][T15895] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 434.432187][T15894] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 434.470068][T15894] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 434.524392][T15908] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 434.525345][T15909] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 434.548741][T15908] ip6gre0: Master is either lo or non-ether device [ 434.621083][ T9885] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.638915][ T9885] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.664271][ T9885] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.717409][ T9885] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.887805][T15926] veth0: entered promiscuous mode [ 435.111029][T15924] veth0: left promiscuous mode [ 436.147254][T15984] bridge10: entered promiscuous mode [ 436.154571][T15984] bridge10: entered allmulticast mode [ 436.187888][T15984] team0: Port device bridge10 added [ 436.243780][T15984] netlink: 'syz.3.2753': attribute type 1 has an invalid length. [ 436.256614][T15991] vlan3: entered allmulticast mode [ 436.532880][T16004] netlink: 'syz.4.2759': attribute type 1 has an invalid length. [ 436.670570][T16016] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 436.729222][T16020] wg1 speed is unknown, defaulting to 1000 [ 436.738708][T16016] netlink: 'syz.4.2765': attribute type 13 has an invalid length. [ 436.760052][T16016] gretap0: refused to change device tx_queue_len [ 436.783884][T16016] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 436.823899][T16020] lo speed is unknown, defaulting to 1000 [ 436.976534][T16033] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 437.196411][T16048] tipc: Enabled bearer , priority 10 [ 437.616718][T16064] __nla_validate_parse: 15 callbacks suppressed [ 437.616740][T16064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2776'. [ 437.707853][T16071] 8021q: VLANs not supported on ip6tnl0 [ 437.990554][T16087] netlink: 'syz.2.2783': attribute type 1 has an invalid length. [ 438.004652][T16091] netlink: 'syz.2.2783': attribute type 1 has an invalid length. [ 438.015646][T16087] sctp: [Deprecated]: syz.2.2783 (pid 16087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.015646][T16087] Use struct sctp_sack_info instead [ 438.032438][T16091] sctp: [Deprecated]: syz.2.2783 (pid 16091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.032438][T16091] Use struct sctp_sack_info instead [ 438.176026][T16088] tipc: Enabling of bearer rejected, failed to enable media [ 438.206640][T16097] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2784'. [ 438.316200][ T10] tipc: Node number set to 910299488 [ 438.420101][T16107] netlink: 'syz.3.2785': attribute type 5 has an invalid length. [ 438.756494][T16111] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2789'. [ 439.183428][T16138] netlink: 'syz.4.2797': attribute type 10 has an invalid length. [ 439.204157][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 439.419107][T16156] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2802'. [ 439.455303][T16156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2802'. [ 439.466708][T16158] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2802'. [ 439.477931][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2802'. [ 439.946346][T16187] netlink: zone id is out of range [ 439.957337][T16187] netlink: set zone limit has 4 unknown bytes [ 440.199320][T16210] netlink: 'syz.3.2813': attribute type 5 has an invalid length. [ 440.207674][T16210] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2813'. [ 440.240870][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.254366][T16212] vcan0: tx address claim with dlc 0 [ 440.608386][T16237] bond9: Unable to set up delay as MII monitoring is disabled [ 440.620437][T16237] bond9 (unregistering): Released all slaves [ 440.974745][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2829'. [ 441.336359][T16275] tipc: Enabled bearer , priority 0 [ 441.344188][T16275] syzkaller0: entered promiscuous mode [ 441.349893][T16275] syzkaller0: entered allmulticast mode [ 441.379193][T16275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 441.419609][T16275] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 441.454265][T16275] tipc: Resetting bearer [ 441.466065][T16273] tipc: Resetting bearer [ 441.508699][T16273] tipc: Disabling bearer [ 441.640276][T16300] netlink: 'syz.3.2843': attribute type 11 has an invalid length. [ 441.663479][T16300] netlink: 'syz.3.2843': attribute type 11 has an invalid length. [ 441.805598][T16306] bond7 (unregistering): Released all slaves [ 442.058116][T16327] xt_ecn: cannot match TCP bits for non-tcp packets [ 442.158855][ T3445] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 452.394385][ T31] INFO: task udevd:6968 blocked for more than 143 seconds. [ 452.401693][ T31] Not tainted syzkaller #0 [ 452.406787][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.415971][ T31] task:udevd state:D stack:22536 pid:6968 tgid:6968 ppid:5200 task_flags:0x400140 flags:0x00080003 [ 452.428071][ T31] Call Trace: [ 452.431380][ T31] [ 452.434846][ T31] __schedule+0x1798/0x4cc0 [ 452.439406][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 452.444782][ T31] ? schedule+0x91/0x360 [ 452.449431][ T31] schedule+0x165/0x360 [ 452.453827][ T31] io_schedule+0x80/0xd0 [ 452.458116][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 452.463546][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 452.513165][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 452.518826][ T31] ? __filemap_get_folio+0x6c0/0xaf0 [ 452.583046][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 452.588423][ T31] do_read_cache_folio+0x1aa/0x590 [ 452.643365][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 452.648896][ T31] read_part_sector+0xb6/0x2b0 [ 452.674198][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 452.679660][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 452.706419][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 452.712513][ T31] bdev_disk_changed+0x75f/0x14b0 [ 452.718611][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 452.733379][ T31] ? wait_on_inode+0xc0/0x230 [ 452.738204][ T31] blkdev_get_whole+0x380/0x510 [ 452.747132][ T31] bdev_open+0x31e/0xd30 [ 452.751499][ T31] blkdev_open+0x457/0x600 [ 452.756515][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 452.761488][ T31] do_dentry_open+0x953/0x13f0 [ 452.766757][ T31] vfs_open+0x3b/0x340 [ 452.770859][ T31] ? path_openat+0x2ecd/0x3830 [ 452.776728][ T31] path_openat+0x2ee5/0x3830 [ 452.781580][ T31] ? __pfx_path_openat+0x10/0x10 [ 452.787797][ T31] do_filp_open+0x1fa/0x410 [ 452.792341][ T31] ? __lock_acquire+0xab9/0xd20 [ 452.800073][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 452.806069][ T31] ? _raw_spin_unlock+0x28/0x50 [ 452.810967][ T31] ? alloc_fd+0x64c/0x6c0 [ 452.815907][ T31] do_sys_openat2+0x121/0x1c0 [ 452.820631][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 452.826322][ T31] __x64_sys_openat+0x138/0x170 [ 452.831224][ T31] do_syscall_64+0xfa/0xfa0 [ 452.839060][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.847006][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 452.853528][ T31] ? clear_bhb_loop+0x60/0xb0 [ 452.858244][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.865187][ T31] RIP: 0033:0x7fce9c0a7407 [ 452.869637][ T31] RSP: 002b:00007ffc192b18f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 452.893834][ T31] RAX: ffffffffffffffda RBX: 00007fce9c878880 RCX: 00007fce9c0a7407 [ 452.901875][ T31] RDX: 00000000000a0800 RSI: 000055ae1e982210 RDI: ffffffffffffff9c [ 452.923062][ T31] RBP: 000055ae1e95e910 R08: 0000000000000000 R09: 0000000000000000 [ 452.931100][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ae1e97ef60 [ 452.963285][ T31] R13: 000055ae1e96c190 R14: 0000000000000000 R15: 000055ae1e97ef60 [ 452.971363][ T31] [ 452.983182][ T31] [ 452.983182][ T31] Showing all locks held in the system: [ 453.033254][ T31] 2 locks held by kworker/0:1/10: [ 453.038355][ T31] 1 lock held by khungtaskd/31: [ 453.070564][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 453.126228][ T31] 2 locks held by getty/5594: [ 453.130989][ T31] #0: ffff88814e01c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 453.161037][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 453.171677][ T31] 2 locks held by syz-executor/5827: [ 453.177436][ T31] #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 453.187258][ T31] #1: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 453.198641][ T31] 4 locks held by syz-executor/5831: [ 453.204871][ T31] #0: ffff88807befcdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 453.215684][ T31] #1: ffff88807befc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 453.225753][ T31] #2: ffffffff8f435a28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 453.236219][ T31] #3: ffff888026b02b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 453.246401][ T31] 1 lock held by syz-executor/5832: [ 453.252069][ T31] 1 lock held by syz-executor/5836: [ 453.263457][ T31] 1 lock held by syz-executor/5838: [ 453.268730][ T31] 1 lock held by udevd/6968: [ 453.283408][ T31] #0: ffff888143770358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 453.292734][ T31] 2 locks held by kworker/1:11/14171: [ 453.313397][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.343048][ T31] #1: ffffc9000b217ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.363630][ T31] [ 453.366015][ T31] ============================================= [ 453.366015][ T31] [ 453.394183][ T31] NMI backtrace for cpu 1 [ 453.394207][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 453.394228][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 453.394239][ T31] Call Trace: [ 453.394247][ T31] [ 453.394255][ T31] dump_stack_lvl+0x189/0x250 [ 453.394290][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.394314][ T31] ? __pfx__printk+0x10/0x10 [ 453.394348][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 453.394374][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 453.394398][ T31] ? __pfx__printk+0x10/0x10 [ 453.394423][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 453.394455][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 453.394489][ T31] watchdog+0xf60/0xfa0 [ 453.394515][ T31] ? watchdog+0x1e2/0xfa0 [ 453.394541][ T31] kthread+0x711/0x8a0 [ 453.394570][ T31] ? __pfx_watchdog+0x10/0x10 [ 453.394588][ T31] ? __pfx_kthread+0x10/0x10 [ 453.394615][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.394639][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.394663][ T31] ? __pfx_kthread+0x10/0x10 [ 453.394689][ T31] ret_from_fork+0x4bc/0x870 [ 453.394712][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 453.394739][ T31] ? __switch_to_asm+0x39/0x70 [ 453.394755][ T31] ? __switch_to_asm+0x33/0x70 [ 453.394769][ T31] ? __pfx_kthread+0x10/0x10 [ 453.394794][ T31] ret_from_fork_asm+0x1a/0x30 [ 453.394829][ T31] [ 453.394837][ T31] Sending NMI from CPU 1 to CPUs 0: [ 453.548513][ C0] NMI backtrace for cpu 0 [ 453.548535][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 453.548552][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 453.548563][ C0] Workqueue: events drain_vmap_area_work [ 453.548585][ C0] RIP: 0010:lock_release+0x182/0x3e0 [ 453.548604][ C0] Code: 54 24 14 72 25 89 c1 81 e1 00 00 e0 ff 25 ff ff 1f 00 01 c8 05 00 00 e0 ff 81 c1 00 00 e0 ff 89 45 20 85 c9 0f 85 ec 00 00 00 <45> 89 af 28 0b 00 00 48 8b 45 00 49 89 87 20 0b 00 00 41 39 d5 0f [ 453.548617][ C0] RSP: 0018:ffffc900000f7270 EFLAGS: 00000083 [ 453.548630][ C0] RAX: 0000000000020007 RBX: 0000000000000202 RCX: de94a7e22a9c4400 [ 453.548642][ C0] RDX: 0000000000000003 RSI: ffffffff8df3d660 RDI: ffff88801c6ca9e8 [ 453.548652][ C0] RBP: ffff88801c6ca9e8 R08: ffffc900000f7407 R09: 0000000000000000 [ 453.548663][ C0] R10: ffffc900000f73f8 R11: fffff5200001ee81 R12: 0000000000000003 [ 453.548673][ C0] R13: 0000000000000003 R14: ffffffff8df3d660 R15: ffff88801c6c9e40 [ 453.548683][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 453.548696][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.548707][ C0] CR2: 0000555943ec1000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 453.548722][ C0] Call Trace: [ 453.548729][ C0] [ 453.548736][ C0] ? unwind_next_frame+0xa5/0x2390 [ 453.548756][ C0] ? unwind_next_frame+0xa5/0x2390 [ 453.548772][ C0] unwind_next_frame+0x19a9/0x2390 [ 453.548791][ C0] ? unwind_next_frame+0xa5/0x2390 [ 453.548807][ C0] ? kasan_release_vmalloc+0xa2/0xd0 [ 453.548828][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 453.548848][ C0] arch_stack_walk+0x11c/0x150 [ 453.548868][ C0] ? purge_vmap_node+0x214/0x8f0 [ 453.548883][ C0] stack_trace_save+0x9c/0xe0 [ 453.548901][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 453.548922][ C0] save_stack+0xf5/0x1f0 [ 453.548943][ C0] ? __pfx_save_stack+0x10/0x10 [ 453.548960][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 453.548980][ C0] ? kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 453.548998][ C0] ? __apply_to_page_range+0xb66/0x13d0 [ 453.549014][ C0] ? kasan_release_vmalloc+0xa2/0xd0 [ 453.549036][ C0] ? page_ext_put+0x97/0xc0 [ 453.549057][ C0] __reset_page_owner+0x71/0x1f0 [ 453.549077][ C0] __free_frozen_pages+0xbc4/0xd30 [ 453.549100][ C0] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 453.549119][ C0] __apply_to_page_range+0xb66/0x13d0 [ 453.549140][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 453.549161][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 453.549181][ C0] kasan_release_vmalloc+0xa2/0xd0 [ 453.549199][ C0] purge_vmap_node+0x214/0x8f0 [ 453.549219][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 453.549234][ C0] ? flush_tlb_kernel_range+0x37c/0x470 [ 453.549256][ C0] __purge_vmap_area_lazy+0x7a4/0xb40 [ 453.549272][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 453.549289][ C0] drain_vmap_area_work+0x27/0x40 [ 453.549303][ C0] process_scheduled_works+0xae1/0x17b0 [ 453.549328][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 453.549349][ C0] worker_thread+0x8a0/0xda0 [ 453.549373][ C0] kthread+0x711/0x8a0 [ 453.549392][ C0] ? __pfx_worker_thread+0x10/0x10 [ 453.549407][ C0] ? __pfx_kthread+0x10/0x10 [ 453.549425][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.549444][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.549474][ C0] ? __pfx_kthread+0x10/0x10 [ 453.549499][ C0] ret_from_fork+0x4bc/0x870 [ 453.549515][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 453.549532][ C0] ? __switch_to_asm+0x39/0x70 [ 453.549546][ C0] ? __switch_to_asm+0x33/0x70 [ 453.549557][ C0] ? __pfx_kthread+0x10/0x10 [ 453.549575][ C0] ret_from_fork_asm+0x1a/0x30 [ 453.549595][ C0] [ 455.598624][ T57] block nbd1: Possible stuck request ffff888024bb5080: control (read@0,1024B). Runtime 330 seconds [ 455.610490][ T57] block nbd1: Possible stuck request ffff888024bb5240: control (read@1024,1024B). Runtime 330 seconds [ 455.622197][ T57] block nbd1: Possible stuck request ffff888024bb5400: control (read@2048,1024B). Runtime 330 seconds [ 455.633305][ T57] block nbd1: Possible stuck request ffff888024bb55c0: control (read@3072,1024B). Runtime 330 seconds