last executing test programs: 17.925295641s ago: executing program 2 (id=6039): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000140)="482b11195f5b3ae9", 0x0, 0x0, 0x0, 0xe}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="21000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfd}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x50) 17.824290439s ago: executing program 2 (id=6041): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001080)) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) r5 = socket$inet6(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r5, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r6 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_type(r1, &(0x7f0000000040), 0x9) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close(0x3) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r1, 0x1f4d2000) 17.544056855s ago: executing program 2 (id=6043): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3, 0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0xe0}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@mcast2, @mcast2}) socket$nl_route(0x10, 0x3, 0x0) 17.415460521s ago: executing program 2 (id=6046): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020603000000000000000000050000000c00078008000640000000060900020073797a32000000000500040000000000050033dc088966c3ec8001000600000011000300686173683a6e65742c6e657400000000"], 0x58}}, 0x80) 17.131286988s ago: executing program 2 (id=6051): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x9a3fd8fc68b0c687) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000002780)={&(0x7f0000000300)=@nl=@unspec, 0x80, &(0x7f0000002680)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/128, 0x80}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/65, 0x41}, {&(0x7f0000002480)=""/32, 0x20}, {&(0x7f00000024c0)=""/126, 0x7e}, {&(0x7f0000002540)=""/189, 0xbd}, {&(0x7f0000002600)=""/112, 0x70}], 0x8, &(0x7f0000002700)=""/127, 0x7f}, 0x40000000) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000027c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003940)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f00000040c0)=[{&(0x7f0000002800)={0x27, r3, 0xffffffffffffffff, 0x2, 0x3, 0x7, "31a26f936a66be45e393040162c74aaff1c8d431f9a3f2b26f85e8ec5298efdf4c50528193af61d80fa20ebf605d197bb8885d3ec2e38ec9d1d91d159a524c", 0x13}, 0x60, &(0x7f00000028c0)=[{&(0x7f0000002880)="8e443a", 0x3}], 0x1, &(0x7f0000002900)={0x1010, 0x102, 0x6, "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"}, 0x1010, 0x20000800}, {&(0x7f0000003980)={0x27, r4, 0x1, 0x3, 0x80, 0x9, "732e2bf9ffc20074b7872ce182bd980317df1063b0b5a5dfb93b496795adbd81c9add0bb42066e23b03c2dc7335b25c13d6c0a16f5aa7c43f8aa228f5ab3f3", 0x13}, 0x60, &(0x7f0000003f80)=[{&(0x7f0000003a00)="b3d89d984e2310bb9b4b58d0034fa9b715ee76e34892eae3c3cdd17a57ebcb62ad7fdb409e6e9ec9f3475b5f15571121e008fef9d81164dbbcd41585c051d384cd0a355a17b3a9ff8c45419ee204b627390cca86ee16fd57b2fedeff95b2abe4ef5b111414423da99a1421a82730a4961790f8510e3bd5ab045238c157ea09d0cb8712b1cdb535284a34", 0x8a}, {&(0x7f0000003ac0)="095237576827f6a19b08df5be1ab23b12621d4399956efda5c2807fbbcb5dced90c33280554b825a342c5c9b553e64925f7a23b3e6b882", 0x37}, {&(0x7f0000003b00)="f1eb5c787d5a4123492febe68874fed684ef27175b41c58166d9a2c294b48f8601e15d98e1dec4ed7c7e394a954ab616f3e093c124bc031c", 0x38}, {&(0x7f0000003b40)="c94b9cdc3fe7adb5606aa54664ae5711db25a4b705faf9b18810c8548c53f1f826e897fe7285bc3a00dbd4b49068f0b201de5e409b9e4839633d2971643983db45a06410636e00f06d5de4f72470bdcf36637c79a5984a88d54ad906dd3f2c90cb55025e9308d90a6ca218ffb37e5ca4cd94e15f8be847e17fbe6c8775cd53f077585b4f68e0a2a34e8579830abdaa62ccdcd6ff5390a51b0c", 0x99}, {&(0x7f0000003c00)="18871e6855190cf11042485868ba6b81d2315809b00498b5e941e1b94b6aa5472777072a4fff276deb78d214dbd6e0a6fc30fb913bd74e6a90c37c3f3bed2d06ab3680f1127aed5551ec7000cfcfc022babab4bddcc4cd64eee1e92eb2bb302cbfa145e425898ce79bba5b9a2616ec29abd42cd0c7f5449b9f405c643c8d4c2803fdb16ef0ec89556daad9b2edd1775e0249d5baa5f6a3d905e0a96c772da20710b6292d1e0bf453ea17e240e386cd832557ef3604f14ab610488d29ff04070281d7485a6885868c3440e3a258d99a82", 0xd0}, {&(0x7f0000003d00)="a37413e8ed4257d6aa84c38de46161fd38e46b0280287e2fa24195157da956d552ea506ac02a24b5b8280ed74d", 0x2d}, {&(0x7f0000003d40)="dfbce38f7fffdfd5e6baeea6dcf75194e9ee442f0a49c2402758fe6d1765c18d6a1ec546d65f84550362739a49dd3e08007b5d3bfc19f0cb0bd632c0e976c8b80e42098d8493dbf7783b73f6803e029ea8e7b415f634adce1c2380f5e2f6f3530badb721f56bea9d9f0aa04cf35f3ff6916780beb843360f99feb976664c5fbae55393607d8d8b9dd4e197ce6f7133e898f765ea5fd95cd2f00e2f97f9c4dbec984e5a8629dbe63d414e56f290848fef74c369c20a47cbaaa3649f89e9a682f0b881a1cd899ebd", 0xc7}, {&(0x7f0000003e40)="a54b6cb1d9e924800d3c8c862df26bb2212d26d6afeb538b0c115a73fe92d68559781e4d5213fe1642ac9e1e70b793e06a0779b62c311af34e60cd2e2b1522150d05fbbdc4a7fe43385d35174967ab3193f5831b24e25f3ff1a2c31222cdacc970fd2095c2655afe0024d1bfa765d5c1cefb1016312f7f58d7aca3dcbc93199050b6caa6202a85ea1808e01539f7031961430e", 0x93}, {&(0x7f0000003f00)="f3c1f4a526387d0537d78f01c8144ffd040f456c0a374da4e909b0e7736b676945918eeda931154beb6fde5f729748f0f5bda1fef14009cad8c20f9d7aa6f124fa12e5ba3c4c4a5ca1bfce5151b37999c95d1cbe740bc514f0fd7e83b131c97315fe50505dc5a265d1ba", 0x6a}], 0x9, &(0x7f0000004040)={0x50, 0x101, 0xb39, "7be0cd4f696348da100962a9375fdfdf3d2a802f70ac69904a2ee5173b1c6b0904286088d47680320a0b9697b500b19b19adee2cd1a563360b"}, 0x50, 0x20000000}], 0x2, 0x0) r5 = accept4(r0, &(0x7f0000004140)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000041c0)=0x80, 0x80800) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004240), 0xffffffffffffffff) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000004280)={@private2, 0x0}, &(0x7f00000042c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000004300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004340)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000004380)=0x0, &(0x7f00000043c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000004400)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000004480)={'syztnl0\x00', &(0x7f0000004440)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x7, 0x8, {{0x7, 0x4, 0x2, 0x3, 0x1c, 0x64, 0x0, 0x2, 0x2f, 0x0, @remote, @loopback, {[@generic={0x83, 0x8, "77683090c603"}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000004600)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000045c0)={&(0x7f00000044c0)={0xd8, r6, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x400b1}, 0x24000004) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000004640), 0x410800, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r12, 0x2, &(0x7f0000004680)=0x1ff) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000046c0)={0x2d, 0x2b7, 0x2}) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004740)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r5, 0x5, 0x4, 0x4}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000047c0)=@generic={&(0x7f0000004700)='./file0\x00', r13}, 0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000004800)={0x0, 0x400}, &(0x7f0000004840)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000004880)={r14, @in6={{0xa, 0x4e20, 0x2, @private2, 0x6afe6159}}}, 0x84) read$rfkill(r12, &(0x7f0000004940), 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000004980)={r14, 0x9}, 0x8) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000049c0)=0x1, 0x4) bind$nfc_llcp(r2, &(0x7f0000004a00)={0x27, r3, 0xffffffffffffffff, 0x1, 0xbc, 0x2, "cab4fa3601e821d0ece3cdc56ca96bdf42eca620e6d3a40dea32f9a4aac599110a666ea69c7fbeafbd2bbe8f1e1b6bcd20a7c51ceee03ff96f531d6e19c745", 0xe}, 0x60) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)={&(0x7f0000004a80)={0xa, 0x4e20, 0x20000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000004c00)=[{&(0x7f0000004ac0)="944de50819a6ec7b11ceb82c40ad4e319a15f58b4076af6330168d13dccacc1049fe1b407afef32f7ea27cb932b27e3bc6447c6035c636593df9824de7ad3e3b24ceb204f263f3141b2b17adc3b36d7d6a13e8483a6b046b946113bc3cbb169ffe2b6b30048d4a020f56edb4801bbb", 0x6f}, {&(0x7f0000004b40)="f962097bc513842b0e38dcdf48c6db33514471fc62295b4e2e507c73b1d678b84274f80274eca8a692f8f1311c133b83287326b44f84155510232bf2f1433141adecd67993a92f4ba79f58027161880ff47ff6cff10cd7299d6f696ea9326d7bef3b96ee0f1d72b3023902668c3210f8ed912f0dd06dc840d2420a49b89fc56592e6825a85fe3d90ac9f2841f8631d9f13e6ee094e930d8135e8a4ebe516c4fc4e5f15c5bc330db11e055109351125c0be8dc6e9", 0xb4}], 0x2, &(0x7f0000004c40)=[@rthdr={{0x48, 0x29, 0x39, {0x84, 0x6, 0x1, 0xfa, 0x0, [@empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2f}]}}}], 0x48}, 0xea4a95287af9691) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 16.242135388s ago: executing program 2 (id=6067): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000200)=0x10, 0x80000) getsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000300), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="96", 0x1}}, 0xaf) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r1, 0x3, {0x1, 0xff, 0x2}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffee}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4001}, 0xc4) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) accept4$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000200)=0x10, 0x80000) (async) getsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000300), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="96", 0x1}}, 0xaf) (async) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r1, 0x3, {0x1, 0xff, 0x2}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffee}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4001}, 0xc4) (async) 1.806467874s ago: executing program 0 (id=6268): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltaction={0x18, 0x31, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000063016600000012009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4}, 0x90) 1.663550517s ago: executing program 0 (id=6274): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) unshare(0x2000400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYBLOB="80400100000400000c002bb6cfe48008", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x20048085) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x19) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}]}, 0x28}}, 0x0) r14 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r14, 0x114, 0xa, &(0x7f0000000180)=ANY=[], 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}}, 0x4000010) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) 1.607011641s ago: executing program 3 (id=6276): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x3, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000080)=@tcp, 0x1}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xab, 0x8e}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x2a, 0x4, 0x0) 1.429748972s ago: executing program 3 (id=6280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) socket$netlink(0x10, 0x3, 0x0) 1.428588816s ago: executing program 0 (id=6281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x40000c1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007a20000f8ffffffb703000008000000b7040000020000a81a2115f5130085000000910000009500029e7e43fe9401aeedb548fcea0fc9599185cf87e4afe8885962d545e6100badabe5f1e51ed295c41488a4bb8fc2c2315dd28bb71ac8a0e676cde6fcdf4906a22c73ab7cfac5ca7bfcedda1b20ebbccbaf447454849047938354b80b734c3fe2992bf4a84a26b39c0e4aa6b917b4bc18edd02195afbaf256622b81000402db905779bc605075a1b9dfb3a7b487d3bd6cb25977"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r3 = openat$cgroup(r2, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r0, 0x4, 0x0, 0x7fffffff, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)}, 0x40) r4 = openat$cgroup_type(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000140), 0x9) 1.420140779s ago: executing program 4 (id=6283): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x29}}, 0x48}}, 0x80) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004150500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 1.307973832s ago: executing program 0 (id=6284): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b000000000050a3e59979f11a542210534b3cb6375f24568ee0fb04bfe9c0ccf2d22d564bfd84692cafb0420d4b7eec0880f935b519bb2031dec858"], 0x30}}, 0x0) (async) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x80, 0x2}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x108}}, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1d, &(0x7f0000000080)=@ringbuf={{}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9, 0x2, 0x4, 0x2, 0xfffffffffffffff0}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x9, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x4, 0x2, 0x9}, {0x0, 0x4, 0x4, 0xa}, {0x4, 0x4, 0x1, 0x4}, {0x5, 0x5, 0x9, 0xb}, {0x5, 0x2, 0x8}, {0x4, 0x3, 0x5, 0x5}, {0x2, 0x4, 0x0, 0x2}, {0x3, 0x1, 0x6, 0xc}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=r4, 0x4) 1.251037077s ago: executing program 0 (id=6286): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x80}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0xe}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x1000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES16=r0], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2ab2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600007842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x1404, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "97", "deb4a8"}}}}}, 0x0) 1.192328992s ago: executing program 32 (id=6067): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000200)=0x10, 0x80000) getsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000300), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="96", 0x1}}, 0xaf) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r1, 0x3, {0x1, 0xff, 0x2}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffee}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4001}, 0xc4) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) accept4$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000200)=0x10, 0x80000) (async) getsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000300), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="96", 0x1}}, 0xaf) (async) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r1, 0x3, {0x1, 0xff, 0x2}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffee}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4001}, 0xc4) (async) 1.188001811s ago: executing program 4 (id=6288): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x70, 0x3}]}, {0x0, [0x0, 0x2e, 0x0]}}, &(0x7f0000000080)=""/41, 0x2d, 0x29, 0x0, 0x8}, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x8, 0x100000000, 0x7, 0x100000000, 0x0, 0x5}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xb860f000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r3}, 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@allocspi={0x120, 0x16, 0x1, 0x0, 0x0, {{{@in6=@remote, @in6=@mcast2, 0xe21, 0x0, 0x4e23, 0x0, 0x0, 0xa0, 0x0, 0x87}, {@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x4d6, 0x6c}, @in6=@mcast2, {0x10000, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}, {0x0, 0x6, 0xfff, 0xffffffffffffffff}, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x1032}, [@address_filter={0x28, 0x1a, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x1e, 0x3, 0x3}}]}, 0x120}}, 0x0) 1.119648186s ago: executing program 3 (id=6289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x40) pread64(r7, &(0x7f0000001840)=""/4096, 0x1003, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x6}]}, 0x10) r9 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x3, 0x2, 0xb06, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0x24, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0x46, &(0x7f0000000180)={&(0x7f0000000440)={0x30, r11, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3a58, 0x4b}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 1.068405355s ago: executing program 4 (id=6291): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYBLOB="3baa7d57c5e2dc1040"], 0xfc}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffeb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x9c13}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x4, 0xff}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0xb3c8, 0x0, 0x8001}}]}}}]}, 0x6c}}, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='tasks\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r7 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r7, r6, 0x0, 0x5, &(0x7f0000000140)='&#\'*\x00'}, 0x30) write$cgroup_pid(r4, &(0x7f0000000540)=r7, 0x12) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3d22}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4bb, 0x0, 0x0, 0x0, 0x1000}, @ldst={0x2, 0x2, 0x2, 0x6, 0x5, 0xfffffffffffffffc, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x541f0bce57417316, 0xb, 0xb, 0x50, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0xd44, 0x82, &(0x7f0000000240)=""/130, 0x41000, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xc, 0x1000, 0x2}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x4, 0x3, 0x7, 0x6}, {0x1, 0x2, 0x4}], 0x10, 0x3}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.time_recursive\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=@newchain={0x530, 0x64, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x1}, {0x0, 0x10}, {0x10, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x5}}, @filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xfff3}}, @TCA_BPF_FD={0x8, 0x6, r9}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_FD={0x8, 0x6, r10}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x48, 0xa}}, @filter_kind_options=@f_u32={{0x8}, {0x464, 0x2, [@TCA_U32_POLICE={0x50, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2825, 0x5, 0x12, 0x4, 0x5f7, {0x2, 0x0, 0xff, 0x7f, 0x0, 0xde}, {0x2, 0x1, 0xbef, 0xa, 0x9, 0x7}, 0x0, 0xfff, 0xfffffffb}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x8, 0x9}}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0x8, 0x5, 0x3, 0xae, 0x9, 0xfffffffd, 0x8, 0x7, 0x0, 0x1, 0x3ff, 0x6, 0x5, 0x80000000, 0xea45, 0x4, 0x5, 0x8, 0x12000, 0x3, 0x2, 0xa329, 0x7, 0x1, 0xbc, 0x2, 0x8, 0xd, 0x7, 0x8, 0x9, 0x8, 0x2, 0x3, 0xd6d1, 0xc, 0x1, 0xa29, 0x3, 0x8, 0x2, 0x4, 0x0, 0xf, 0x5, 0x8, 0x0, 0x6, 0x0, 0x1, 0x8, 0x6b, 0x3ff, 0x6, 0x71d, 0x5, 0x1, 0x67dd1abf, 0x3, 0x0, 0x5, 0x1, 0x200, 0x8, 0xf697, 0x3, 0x2, 0xa8, 0xb6, 0x0, 0x4, 0x80000001, 0x1000, 0x7, 0x7fff, 0x8, 0x4, 0x9, 0x7, 0x32f1, 0xfffffbff, 0x8, 0x3, 0x6, 0x9, 0x8000, 0xffff0001, 0x5, 0x4, 0xbc, 0x3, 0x1, 0x10, 0x5, 0x5, 0x4, 0x40, 0xffffff79, 0x7, 0x76cb, 0x2, 0x81, 0x9, 0x5, 0x80000001, 0x0, 0x800, 0x1, 0x1, 0x5, 0x59, 0x0, 0x6, 0x7d, 0x2, 0xf, 0x49, 0x8000, 0x400, 0x6, 0x6, 0xf8, 0x8, 0xfffffffd, 0x7, 0x400, 0x2, 0x400, 0xc000000, 0x586e, 0x266fb649, 0xdb0, 0x3ff, 0x33e, 0x7, 0x10001, 0x4, 0x6, 0x80000000, 0x4, 0x375fd0a6, 0xffff7fff, 0x807, 0x6, 0xc, 0x3ff, 0x9, 0x2, 0xfffffffa, 0x6, 0x3, 0x40004, 0xd55, 0x7fffffff, 0x401, 0x400, 0x1, 0x2, 0x2, 0x0, 0x1, 0x4, 0x2, 0x6, 0x0, 0xed06, 0x89, 0x8, 0x0, 0x101, 0x7ff, 0xa951, 0x8000, 0x1, 0x8, 0x8, 0x1, 0x40, 0x59, 0xff, 0xb, 0x3, 0x8, 0xc, 0x3, 0x5, 0xfffffff3, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0xad2, 0x4, 0x0, 0x6, 0x6dbc0eff, 0x1000, 0x9, 0x2, 0x5, 0x80000000, 0x16e, 0x7, 0x5, 0xf, 0x5, 0x2, 0x80000000, 0x58bf, 0xf, 0x1, 0x3, 0x7, 0x1, 0xd34, 0x5, 0x6, 0x0, 0xfffffff7, 0x3, 0x0, 0x11, 0x4, 0x4, 0x4, 0x4, 0x5, 0x2, 0xdcb8c837, 0x5, 0x354, 0x9, 0x5, 0x6, 0x5, 0x9, 0x3, 0x7, 0x81, 0x9, 0x1, 0xfffff000, 0xc000000, 0x53, 0xffff0001, 0x8, 0xffffffff, 0x1, 0x4, 0x800, 0x9, 0x4]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}, @filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff6, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xffff}}]}}]}, 0x530}, 0x1, 0x0, 0x0, 0x801}, 0x8008101) socket$unix(0x1, 0x5, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="88d8ce92d5ad3dd44a5bb374edbeca0340d4e4a988e635195bd364", 0x1b}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c090) 1.015946211s ago: executing program 0 (id=6292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffffff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 928.743536ms ago: executing program 4 (id=6293): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000180), &(0x7f0000000340), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_getroute={0xf8, 0x1a, 0x20, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x34, 0x7f, 0xff, 0x0, 0xff, 0x2, 0x1900}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0xe}, @RTA_EXPIRES={0x8, 0x17, 0x3}, @RTA_METRICS={0xba, 0x8, 0x0, 0x1, "cf20606cce675ac9bd82c54df38faa5a6cf0ecd27d744d321de6e909d8a6902dcdecd951590974e8e88b6ed39d46a1394cfd835b976aaa8294bfa7250bcbd77536873daebf21f8a20a7f817432cd6223a7f420d99977157dd3bbaefa8a2982bdfe722803656566e327372adc8b267d74e1ee6e0d9d814c905eee3a1681472412073f2287fe8c5c78a0e471224fe49e33216d10e2046cf7a19d5086ae204f8c00580c6d1a7bcf752a025dcc3515d405746879d14b0cc5"}, @RTA_MARK={0x8, 0x10, 0x4}, @RTA_OIF={0x8, 0x4, r2}]}, 0xf8}}, 0x40000) (async) sendmsg$nl_route(r1, 0x0, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x50}}, 0x0) 855.868872ms ago: executing program 4 (id=6294): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) (async, rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xbd}, &(0x7f0000000040)=0x8) 726.423052ms ago: executing program 4 (id=6296): r0 = socket(0x2a, 0x2, 0x9) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x5, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000005e7c64be0479214447c5a2838a510604aff2e090156783c27081e8db06bb5683c8a66f991822942d25e70c4f8354fa54faf9db7e88d0e861e1f4f0a2962a87d243702aee87f4354ca625bbc5d8a6f49d23d01f46439c3751784e29a771268c2db4c6adabbf3f884588750ac624db5b09ead9a4fe58ab161515c392d627f34167ce9170ca461b7480461cd7b247633ca680b8b8525fabbf3ad1f811f9257817399477462e9b591b1fc87a99f6faf0d633a495c43a0cf861fd76e4d615f527cc607eb1857ef8c57cbf7ae2622cea3a2d999a6fe56e0f514c367d03f09fa84aa75a06000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf250900000005000700140000000800010003000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40081) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f00000003c0)={0x3, @bcast}) r4 = socket$netlink(0x10, 0x3, 0x2e) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=@newqdisc={0x118, 0x24, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0x0, 0xa}, {0xffe0, 0x4}}, [@TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc1, 0x9, 0x800, 0x5, 0x0, 0x0, 0x5, 0x7}}, {0x12, 0x2, [0x1, 0x59, 0x1, 0x7, 0x3, 0x40, 0x82b]}}, {{0x1c, 0x1, {0x9, 0x7, 0x2, 0x8001, 0x2, 0x8, 0xe, 0x7}}, {0x12, 0x2, [0x9, 0x3, 0x9, 0x5, 0x5, 0x5, 0x9]}}, {{0x1c, 0x1, {0xf7, 0xd, 0xbd, 0x4, 0x2, 0x59, 0x9, 0x3}}, {0xa, 0x2, [0x8, 0x3, 0x100]}}, {{0x1c, 0x1, {0x6d, 0x4, 0x0, 0x8, 0x2, 0x7f, 0x7, 0x6}}, {0x10, 0x2, [0x2, 0x6, 0xea, 0x4, 0x5, 0xab7]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80000000, 0x6, 0x6, 0xffffd811, 0xc954, 0x4d6, 0x65, 0x6, 0x949}}}}, @TCA_RATE={0x6, 0x5, {0x5, 0xf7}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) r5 = socket(0x2a, 0x2, 0x8) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000400)=0x80) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7fff, 0x20, 0x7ff, 0x32}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r6, 0x5, 0xffffff89}, 0xc) getsockname$packet(r5, 0x0, &(0x7f00000006c0)) sendmmsg(r4, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r9, @ANYRESDEC=r4, @ANYRESOCT=r4], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 506.457912ms ago: executing program 1 (id=6297): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="fc") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)="d7") (async) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000003500)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010101}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44004) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2042, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2042, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000180)=r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x34}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0xff, @remote, @local, {[@routing={0x6, 0x0, 0x2, 0x8}]}}}}}, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) (async) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="6af181fc91ba042f021a7ab4ea0500000022ded63f0f149695a3ab30", 0x1c}, {&(0x7f0000000140)="c3", 0x1}], 0x2}}], 0x1, 0x0) (async) sendmmsg$unix(r9, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="6af181fc91ba042f021a7ab4ea0500000022ded63f0f149695a3ab30", 0x1c}, {&(0x7f0000000140)="c3", 0x1}], 0x2}}], 0x1, 0x0) shutdown(r5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061103400000022e6ded6bff2b73300009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 340.024843ms ago: executing program 1 (id=6298): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r4, 0x0, 0x0, 0x0) 316.218846ms ago: executing program 1 (id=6299): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001d00)={0x0, 0x5, 0x20}, &(0x7f0000001d40)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001d00)={0x0, 0x5, 0x20}, &(0x7f0000001d40)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001d80)={r1, @in6={{0xa, 0x4e20, 0xfffffff7, @mcast1, 0x1}}}, &(0x7f0000001e40)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001d80)={r1, @in6={{0xa, 0x4e20, 0xfffffff7, @mcast1, 0x1}}}, &(0x7f0000001e40)=0x84) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c80)={&(0x7f0000001ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x5, [@union={0xc, 0x5, 0x0, 0x5, 0x0, 0x8, [{0xb, 0x1, 0xda4da5fe}, {0x6, 0x0, 0x8}, {0x6, 0x5, 0xa}, {0x1, 0x0, 0xe}, {0x6, 0x2, 0x9}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @fwd={0xe}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x64, 0x0, 0x2d}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}, @fwd={0x10}]}, {0x0, [0x0, 0x30, 0x30]}}, &(0x7f0000001b80)=""/235, 0xa9, 0xeb, 0x0, 0x0, 0x10000}, 0x28) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000480)={r5}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001cc0)={r5, 0xff, 0x8}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2b, 0x1, 0x1) (async) r7 = socket(0x2b, 0x1, 0x1) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, 0x0, &(0x7f0000000040)=0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f00000005c0)="06ff03076844268cb89e14f008000ee0ffff00febabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 254.482511ms ago: executing program 1 (id=6300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x50, 0x6, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001a40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004e101}, 0x0) close(r2) accept4$tipc(r2, &(0x7f0000000140)=@name, &(0x7f0000000480)=0x10, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0xc0189436, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x10, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "79607e0c66808c689480f6d4d88c9934"}]}, {0x47, 0x6, "de38578965427b687b81e4c5854e02be205cac5d02d831b3f2828f83792d3f383e7acb3e79256fe4252f16d20903402ce8855f3a139d0cfd4111495861d9f18280dd05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x65, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000000002fe00"], 0x1c}}, 0x4) 168.042544ms ago: executing program 3 (id=6301): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf250ad800800c0002", @ANYBLOB="7970406cb2278e45e80dc3263293e63c5cdb99ffde93afd1a41623b8979a9caee2d465ce72de4aaae6e1df6cba1e66db4c7cfdba5c7838f2d0dc5871a76d7340bb07942e7c2b2c0dac5a41f4e9a96529e0dee62c2f05859419f3fb406ea367a661268d32f241db515613e72b645f8d241423046427ac7ad44530ca35fad2d6cbc5340d373b9f0243d854a7789272b4f24b8e60df61261599e867315add6c772c9ecb3d9ccfdeadcb95526b4f859af4"], 0x114}], 0x1}, 0x0) 129.285517ms ago: executing program 1 (id=6302): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000080", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43}}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff000000000000000000630100000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000180)="a762284afcd514ed8d623645cea9892d54b739d43e83e0418f1e08868a4b211ece58a54549b0cf3863298e63a1060e0000000000000b04a600ebd943", &(0x7f0000000040)=""/73}, 0x20) 85.004223ms ago: executing program 3 (id=6303): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109f000001000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 3.716783ms ago: executing program 1 (id=6304): r0 = socket$netlink(0x10, 0x3, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="d49679bfefaddca12ae1e2c9479fe82f00b807004d67b6d022b3b3298ebc1a614b852b7d0c8dcf6037579369c0e3f83d330e94ad2e1c1a217cffd2cf05d5800506cb875a726e050673362e20b47148cb3e7d4eecf017c4ddb1982cae2c5cc75438e38bc61a4581fd83e7c57f126964b7891a12b347030effd244bd6d0ef4b980fc324bf71dbc68a20c2f235bba45727cc4a4b4acf73245c4af231cf582b5aa6bd89f", 0xa2}, {&(0x7f0000000340)="6e195c4e3d2f145f262e352137a7dcc14df97297e93324df813ffb0b858121bdf38e8d45175f73e7434d3b872e72e9567de5ad4527bf74de1ebf7fe73eddf89b03af48fbd6c3eeade3c1cb86", 0x4c}, {&(0x7f0000000800)="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", 0x1000}], 0x3, 0x0, 0x0, 0x4000}], 0x1, 0x800) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) r2 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0x4, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) socket$netlink(0x10, 0x3, 0x4) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="d49679bfefaddca12ae1e2c9479fe82f00b807004d67b6d022b3b3298ebc1a614b852b7d0c8dcf6037579369c0e3f83d330e94ad2e1c1a217cffd2cf05d5800506cb875a726e050673362e20b47148cb3e7d4eecf017c4ddb1982cae2c5cc75438e38bc61a4581fd83e7c57f126964b7891a12b347030effd244bd6d0ef4b980fc324bf71dbc68a20c2f235bba45727cc4a4b4acf73245c4af231cf582b5aa6bd89f", 0xa2}, {&(0x7f0000000340)="6e195c4e3d2f145f262e352137a7dcc14df97297e93324df813ffb0b858121bdf38e8d45175f73e7434d3b872e72e9567de5ad4527bf74de1ebf7fe73eddf89b03af48fbd6c3eeade3c1cb86", 0x4c}, {&(0x7f0000000800)="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", 0x1000}], 0x3, 0x0, 0x0, 0x4000}], 0x1, 0x800) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) (async) socket$inet(0x2b, 0x801, 0x0) (async) connect$inet(r2, 0x0, 0x0) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0x4, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) 0s ago: executing program 3 (id=6305): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr, @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl2\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x0, 0x10, 0x3, 0x1, {{0x22, 0x4, 0x1, 0x2, 0x88, 0x64, 0x0, 0xfa, 0x29, 0x0, @multicast1, @empty, {[@end, @timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1, 0x5}, {@empty, 0x4}, {@local, 0xeac0}, {@empty, 0x2}, {@multicast2, 0x75}]}, @timestamp_prespec={0x44, 0x3c, 0xa0, 0x3, 0x5, [{@multicast2, 0x69bf}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}, {@multicast2, 0xa}, {@empty, 0xdc}, {@multicast1, 0xab9}, {@empty, 0x101}, {@rand_addr=0x64010101, 0x7ff}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x5, 0xa, 0x5, 0x68, @mcast1, @private2, 0x7800, 0x7800, 0xe955, 0x40000000}}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="10000180"], 0x28}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x4000, 0x1, 0x1, 0x0, {{0x18, 0x4, 0x1, 0x3f, 0x60, 0x66, 0x0, 0x95, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4c, 0x2c, 0x1, 0xd, [{@loopback, 0x5}, {@loopback, 0x7ff}, {@multicast2, 0x7fff}, {@local, 0x64}, {@empty, 0xffff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x1}, {@loopback, 0x3}, {@local, 0x5}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x7f17, 0x10, 0x3, 0x10001, {{0x28, 0x4, 0x3, 0x3, 0xa0, 0x67, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x5d, 0x1, 0x7, [{@local, 0x1000}]}, @timestamp={0x44, 0x28, 0x47, 0x0, 0x7, [0x6, 0xfff, 0x7, 0x5, 0x10e1, 0x1, 0x7, 0x1, 0x7]}, @ra={0x94, 0x4}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp={0x44, 0x28, 0xcd, 0x0, 0x1, [0x9ea4, 0x5, 0xe8, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x9]}, @ssrr={0x89, 0x1b, 0xfa, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}]}]}}}}}) (async) r15 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r15, &(0x7f00000000c0)="00008828", 0x4, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r16, 0x1, 0xfb, 0x6, @local}, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000000), 0xc, &(0x7f0000000e00)={&(0x7f0000000940)={0x48c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3b68}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x27}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r16}}}]}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x80}, 0x8040) (async) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r18, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r18, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x8, 0x0, 0xe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): /O error on dev nbd3, logical block 3, async page read [ 316.651630][ T5850] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.662849][ T5850] Buffer I/O error on dev nbd3, logical block 0, async page read [ 316.667028][T20852] bond5: entered promiscuous mode [ 316.671190][ T5850] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.671223][ T5850] Buffer I/O error on dev nbd3, logical block 1, async page read [ 316.672980][ T5850] ldm_validate_partition_table(): Disk read failed. [ 316.703472][ T5850] Dev nbd3: unable to read RDB block 0 [ 316.704532][T20852] bond5: entered allmulticast mode [ 316.710393][ T5850] nbd3: unable to read partition table [ 316.742498][ T5850] ldm_validate_partition_table(): Disk read failed. [ 316.744620][T20852] 8021q: adding VLAN 0 to HW filter on device bond5 [ 316.750811][ T5850] Dev nbd3: unable to read RDB block 0 [ 316.766264][ T5850] nbd3: unable to read partition table [ 316.868327][T20860] __nla_validate_parse: 41 callbacks suppressed [ 316.868353][T20860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4386'. [ 317.049070][T20879] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4389'. [ 317.109902][ T5850] udevd[5850]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 317.169930][T20888] syzkaller0: entered promiscuous mode [ 317.177616][T20888] syzkaller0: entered allmulticast mode [ 317.192744][ T7223] tipc: Node number set to 2886997162 [ 317.231917][T20890] hsr0 speed is unknown, defaulting to 1000 [ 317.238854][T20890] lo speed is unknown, defaulting to 1000 [ 317.694147][T20879] netlink: 'syz.2.4389': attribute type 1 has an invalid length. [ 317.706534][T20886] netlink: 'syz.1.4386': attribute type 1 has an invalid length. [ 317.708183][T20882] delete_channel: no stack [ 317.714468][T20886] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4386'. [ 317.751034][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4386'. [ 317.830732][T20897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4393'. [ 317.868651][T20902] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 318.237782][T20934] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4406'. [ 318.318527][T20934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4406'. [ 318.321286][T20933] can: request_module (can-proto-0) failed. [ 318.382408][T20948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.427182][T20950] netlink: 'syz.1.4409': attribute type 8 has an invalid length. [ 318.633218][T20969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4414'. [ 319.226529][T21028] netlink: 'syz.3.4428': attribute type 7 has an invalid length. [ 319.242564][T21028] netlink: 'syz.3.4428': attribute type 8 has an invalid length. [ 319.257729][T21029] netlink: 'syz.3.4428': attribute type 7 has an invalid length. [ 319.265814][T21029] netlink: 'syz.3.4428': attribute type 8 has an invalid length. [ 319.274654][T21028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4428'. [ 319.317692][T21037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.325181][T21037] IPv6: NLM_F_CREATE should be set when creating new route [ 319.526922][T21053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4435'. [ 319.750293][T21086] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 319.844401][T21067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.886344][T21098] netlink: 'syz.1.4447': attribute type 1 has an invalid length. [ 319.924134][T21097] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 320.079085][T21122] sctp: [Deprecated]: syz.2.4451 (pid 21122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.079085][T21122] Use struct sctp_sack_info instead [ 320.361922][T21154] netlink: 'syz.4.4463': attribute type 1 has an invalid length. [ 320.454915][T21163] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 320.878660][T21193] netlink: 'syz.3.4478': attribute type 10 has an invalid length. [ 320.888723][T21193] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 320.902562][T21193] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 321.064153][T21211] openvswitch: netlink: EtherType 257 is less than min 600 [ 321.074207][T21211] netlink: 'syz.4.4482': attribute type 10 has an invalid length. [ 321.104522][T21211] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 321.142718][ T6900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.169850][ T6900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.327321][T21233] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 321.409493][T21237] netlink: 'syz.0.4494': attribute type 1 has an invalid length. [ 321.422940][T21237] netlink: 'syz.0.4494': attribute type 11 has an invalid length. [ 321.449667][T21237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.471625][T21237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.000060][T21286] syzkaller0: entered promiscuous mode [ 322.005746][T21286] syzkaller0: entered allmulticast mode [ 322.121780][T21288] gretap1: entered promiscuous mode [ 322.145616][T21279] __nla_validate_parse: 59 callbacks suppressed [ 322.145635][T21279] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4504'. [ 322.187387][T21296] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4508'. [ 322.251540][T21302] erspan0: entered promiscuous mode [ 322.256912][T21302] erspan0: entered allmulticast mode [ 322.456876][T21325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4515'. [ 322.469645][T21325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4515'. [ 322.515362][T21328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4516'. [ 322.634877][T21331] vlan2: entered promiscuous mode [ 322.640253][T21331] vlan2: entered allmulticast mode [ 322.647376][T21331] hsr_slave_1: entered allmulticast mode [ 322.735180][T21336] bpq0: left allmulticast mode [ 322.741512][T21338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4520'. [ 322.992599][T21350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.025496][T21357] geneve0: entered allmulticast mode [ 323.078082][T21359] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 323.176758][T21370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4526'. [ 323.281994][T21379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4529'. [ 323.390151][T21388] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4531'. [ 323.419885][T21391] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 323.455000][T21391] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 323.522847][T21400] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 323.608114][T21409] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4539'. [ 323.645899][ T55] block nbd0: Possible stuck request ffff888024fb7000: control (read@0,1024B). Runtime 210 seconds [ 323.657358][ T55] block nbd0: Possible stuck request ffff888024fb71c0: control (read@1024,1024B). Runtime 210 seconds [ 323.668971][ T55] block nbd0: Possible stuck request ffff888024fb7380: control (read@2048,1024B). Runtime 210 seconds [ 323.680732][ T55] block nbd0: Possible stuck request ffff888024fb7540: control (read@3072,1024B). Runtime 210 seconds [ 323.739042][T21419] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 323.749611][T21419] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 324.109967][ T5184] Bluetooth: hci3: link tx timeout [ 324.115505][ T5184] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 324.209017][T21459] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 324.355696][T21471] tipc: Enabled bearer , priority 10 [ 324.378947][T21473] mac80211_hwsim hwsim27 ÿ: renamed from wlan1 [ 325.080147][T21539] validate_nla: 4 callbacks suppressed [ 325.080168][T21539] netlink: 'syz.0.4576': attribute type 8 has an invalid length. [ 325.126108][T21544] netlink: 'syz.2.4579': attribute type 2 has an invalid length. [ 325.136768][T21547] netlink: 'syz.2.4579': attribute type 2 has an invalid length. [ 325.208149][T21553] sctp: [Deprecated]: syz.2.4582 (pid 21553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.208149][T21553] Use struct sctp_sack_info instead [ 325.471218][ T24] tipc: Node number set to 1919187078 [ 325.515082][T21584] netlink: 'syz.2.4587': attribute type 10 has an invalid length. [ 325.555523][T21584] mac80211_hwsim hwsim35 wlan1: left allmulticast mode [ 326.029051][T21636] bridge0: port 1(veth0_to_bridge) entered blocking state [ 326.037184][T21636] bridge0: port 1(veth0_to_bridge) entered disabled state [ 326.049743][T21636] veth0_to_bridge: entered allmulticast mode [ 326.057215][T21636] veth0_to_bridge: entered promiscuous mode [ 326.077315][T21636] bridge0: port 1(veth0_to_bridge) entered blocking state [ 326.084585][T21636] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 326.201408][ T5867] Bluetooth: hci3: command 0x0405 tx timeout [ 326.280732][ T5184] Bluetooth: hci0: command tx timeout [ 326.769085][T21692] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 326.786328][T21692] netlink: 'syz.3.4617': attribute type 1 has an invalid length. [ 326.987643][T21723] netlink: 'syz.1.4627': attribute type 8 has an invalid length. [ 327.027492][T21726] vlan4: entered allmulticast mode [ 327.038563][T21726] bond0: entered allmulticast mode [ 327.085364][T21726] team0: entered allmulticast mode [ 327.094104][T21726] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 327.172734][ T9] IPVS: starting estimator thread 0... [ 327.271288][T21740] IPVS: using max 39 ests per chain, 93600 per kthread [ 327.307717][T21754] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 327.705067][T21786] netlink: 'syz.0.4645': attribute type 5 has an invalid length. [ 328.146950][T21803] __nla_validate_parse: 11 callbacks suppressed [ 328.146975][T21803] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4648'. [ 328.165123][T21806] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 328.205099][T21806] team0: Port device batadv1 added [ 328.235920][T21803] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4648'. [ 328.645285][T21822] netlink: 'syz.2.4657': attribute type 4 has an invalid length. [ 328.678704][T21824] netlink: 'syz.4.4656': attribute type 7 has an invalid length. [ 328.701750][T21824] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4656'. [ 328.869324][T21833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4659'. [ 328.909582][T21838] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4661'. [ 328.935849][T21833] dummy0: entered promiscuous mode [ 328.947331][T21833] batadv_slave_0: entered promiscuous mode [ 328.967777][T21833] debugfs: 'hsr1' already exists in 'hsr' [ 328.975015][T21833] Cannot create hsr debugfs directory [ 329.084925][T21856] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4666'. [ 329.127712][T21843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4663'. [ 329.197972][T21861] bond0: option mode: unable to set because the bond device has slaves [ 329.533192][T21895] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4679'. [ 329.599996][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880525fa400: rx timeout, send abort [ 329.608356][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061d6bc00: rx timeout, send abort [ 329.616988][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880525fa400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 329.631379][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061d6bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 329.718041][T21912] netlink: 'syz.1.4683': attribute type 10 has an invalid length. [ 329.900297][T21929] openvswitch: netlink: Multiple metadata blocks provided [ 330.015098][T21937] team0: Device ipvlan1 failed to register rx_handler [ 330.615320][T21973] openvswitch: netlink: Key type 10512 is out of range max 32 [ 330.636987][T21973] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4703'. [ 330.658869][T21975] IPVS: ip_vs_add_dest(): server weight less than zero [ 330.682192][ T55] block nbd2: Possible stuck request ffff888025447000: control (read@0,1024B). Runtime 120 seconds [ 330.696708][ T55] block nbd2: Possible stuck request ffff8880254471c0: control (read@1024,1024B). Runtime 120 seconds [ 330.707892][ T55] block nbd2: Possible stuck request ffff888025447380: control (read@2048,1024B). Runtime 120 seconds [ 330.722357][ T55] block nbd2: Possible stuck request ffff888025447540: control (read@3072,1024B). Runtime 120 seconds [ 330.847401][T21983] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 331.192844][T22012] validate_nla: 1 callbacks suppressed [ 331.192867][T22012] netlink: 'syz.2.4711': attribute type 4 has an invalid length. [ 331.239154][T22012] netlink: 'syz.2.4711': attribute type 4 has an invalid length. [ 331.293609][T22019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4715'. [ 331.362827][T22021] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 331.388086][T22021] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 331.782428][T22028] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 331.961586][ T123] block nbd4: Possible stuck request ffff888025535080: control (read@0,1024B). Runtime 30 seconds [ 331.973650][ T123] block nbd4: Possible stuck request ffff888025535240: control (read@1024,1024B). Runtime 30 seconds [ 331.984746][ T123] block nbd4: Possible stuck request ffff888025535400: control (read@2048,1024B). Runtime 30 seconds [ 331.995855][ T123] block nbd4: Possible stuck request ffff8880255355c0: control (read@3072,1024B). Runtime 30 seconds [ 332.087644][T22034] netlink: 'syz.3.4722': attribute type 1 has an invalid length. [ 332.408685][T22072] netlink: 'syz.4.4735': attribute type 1 has an invalid length. [ 332.449765][T22077] team0: Device wireguard0 is of different type [ 332.589681][T22097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.816966][T22111] netlink: 'syz.3.4746': attribute type 1 has an invalid length. [ 333.283106][T22156] __nla_validate_parse: 11 callbacks suppressed [ 333.283128][T22156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4761'. [ 333.311714][T22151] hsr0 speed is unknown, defaulting to 1000 [ 333.329223][T22151] lo speed is unknown, defaulting to 1000 [ 333.352516][T22157] tipc: Resetting bearer [ 333.360018][T22157] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 333.901513][T22197] netlink: 'syz.0.4773': attribute type 1 has an invalid length. [ 333.918177][T22203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4774'. [ 333.977203][T22197] netlink: 'syz.0.4773': attribute type 1 has an invalid length. [ 334.075504][T22212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4775'. [ 334.146155][T22212] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 334.383901][T22231] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4783'. [ 334.396310][T22230] : entered promiscuous mode [ 334.485002][T22240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4787'. [ 334.499032][T22240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4787'. [ 334.541767][T22238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4787'. [ 334.553760][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4787'. [ 334.660347][T22256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.724268][T22259] wg1: entered promiscuous mode [ 334.799033][T22269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4795'. [ 334.853474][T22271] sctp: [Deprecated]: syz.4.4793 (pid 22271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.853474][T22271] Use struct sctp_sack_info instead [ 334.897376][T22274] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4795'. [ 334.918418][T22273] netlink: 'syz.0.4796': attribute type 21 has an invalid length. [ 335.089596][T22284] nbd: must specify a size in bytes for the device [ 335.417292][T22304] bridge4: entered promiscuous mode [ 335.422812][T22304] bridge4: entered allmulticast mode [ 335.663671][T22321] lo speed is unknown, defaulting to 1000 [ 335.686213][T22321] lo speed is unknown, defaulting to 1000 [ 335.703522][T22321] lo speed is unknown, defaulting to 1000 [ 335.726528][T22321] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 335.788367][T22321] lo speed is unknown, defaulting to 1000 [ 335.844287][T22321] lo speed is unknown, defaulting to 1000 [ 335.857801][T22321] lo speed is unknown, defaulting to 1000 [ 335.860183][T22332] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 335.908728][T22321] lo speed is unknown, defaulting to 1000 [ 335.909606][T22330] netlink: 'syz.0.4817': attribute type 1 has an invalid length. [ 335.927531][T22321] lo speed is unknown, defaulting to 1000 [ 335.949049][T22321] lo speed is unknown, defaulting to 1000 [ 335.975445][T22321] lo speed is unknown, defaulting to 1000 [ 335.995303][T22321] lo speed is unknown, defaulting to 1000 [ 336.032082][T22321] lo speed is unknown, defaulting to 1000 [ 336.341512][T22378] netlink: 'syz.0.4831': attribute type 29 has an invalid length. [ 336.365206][T22378] netlink: 'syz.0.4831': attribute type 29 has an invalid length. [ 336.374966][T22385] netlink: 'syz.2.4833': attribute type 1 has an invalid length. [ 336.492645][T22386] gretap3: entered promiscuous mode [ 336.666374][T22407] netlink: 'syz.0.4839': attribute type 1 has an invalid length. [ 336.666374][T22409] netlink: 'syz.0.4839': attribute type 1 has an invalid length. [ 336.736796][T22407] 8021q: adding VLAN 0 to HW filter on device bond7 [ 336.755930][T22407] bond6: (slave bond7): making interface the new active one [ 336.768281][T22407] bond6: (slave bond7): Enslaving as an active interface with an up link [ 336.789195][T22421] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 336.789868][T22409] bond6: entered promiscuous mode [ 336.805638][T22409] bond7: entered promiscuous mode [ 336.815689][T22409] bond6: entered allmulticast mode [ 336.821702][T22409] bond7: entered allmulticast mode [ 336.828866][T22409] 8021q: adding VLAN 0 to HW filter on device bond6 [ 336.875099][T22423] lo: entered promiscuous mode [ 336.890190][T22423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.900434][T22425] IPVS: set_ctl: invalid protocol: 44 172.20.20.68:20001 [ 336.914575][T11669] lo speed is unknown, defaulting to 1000 [ 336.920400][T11669] syz2: Port: 1 Link DOWN [ 337.059883][T22438] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 337.347062][T22466] tipc: Enabling of bearer rejected, failed to enable media [ 337.404043][T22470] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 337.603150][ T6900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.614076][ T6900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.639450][T22488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.673080][T22494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.742771][T22501] netlink: 'syz.4.4863': attribute type 1 has an invalid length. [ 337.781516][T22501] 8021q: adding VLAN 0 to HW filter on device bond10 [ 337.896046][T22515] siw: device registration error -23 [ 338.116479][T22531] 8021q: VLANs not supported on ipvlan1 [ 338.347136][T22554] __nla_validate_parse: 12 callbacks suppressed [ 338.347158][T22554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4883'. [ 338.487729][T22565] netlink: 'syz.1.4889': attribute type 2 has an invalid length. [ 338.573477][T22571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4892'. [ 338.583395][T22568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4890'. [ 338.641008][T22578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4894'. [ 338.654453][T22579] ip6tnl2: entered promiscuous mode [ 338.659899][T22579] ip6tnl2: entered allmulticast mode [ 338.707628][T22578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4894'. [ 338.915525][T22604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4900'. [ 338.955665][T22610] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 338.974377][T22610] netlink: 'syz.4.4902': attribute type 1 has an invalid length. [ 338.995306][T22604] 8021q: adding VLAN 0 to HW filter on device bond8 [ 339.279527][T22640] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 339.580559][T22678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4923'. [ 339.768613][T22689] ªªªªªª: renamed from vlan0 [ 339.783757][T22692] tipc: New replicast peer: 255.255.255.255 [ 339.792867][T22692] tipc: Enabled bearer , priority 10 [ 339.812914][T22692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.834833][T22697] team0: Mode changed to "loadbalance" [ 339.845257][T22702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.014664][T22710] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 340.208552][T22732] netlink: 'syz.3.4937': attribute type 11 has an invalid length. [ 340.213909][T22734] netlink: 'syz.1.4939': attribute type 1 has an invalid length. [ 340.224998][T22734] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4939'. [ 340.256702][T22732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4937'. [ 340.308069][T22743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4941'. [ 340.314322][T22739] bond6 (unregistering): Released all slaves [ 340.384935][T22751] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 340.392409][T22751] dvmrp1: linktype set to 65534 [ 340.836454][T22784] team0: No ports can be present during mode change [ 340.887799][T22792] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 340.901097][ T5937] tipc: Node number set to 17094147 [ 340.985976][T22791] tipc: Enabled bearer , priority 12 [ 341.035039][T22801] openvswitch: netlink: Tunnel attr 12 has unexpected len 1 expected 16 [ 341.070087][T22807] batman_adv: batadv0: Removing interface: ÿ [ 341.116073][T22807] bond3: (slave bond4): Releasing backup interface [ 341.123465][T22807] bond3: (slave bond4): the permanent HWaddr of slave - da:30:de:b9:28:73 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 341.155374][T22807] bond3: (slave gretap1): making interface the new active one [ 341.168872][T22807] bond3: (slave gretap1): Releasing backup interface [ 341.249187][T22807] syz.1.4959 (22807) used greatest stack depth: 17576 bytes left [ 341.490173][T22846] hsr0 speed is unknown, defaulting to 1000 [ 341.521144][T22848] validate_nla: 5 callbacks suppressed [ 341.521163][T22848] netlink: 'syz.2.4971': attribute type 1 has an invalid length. [ 341.531457][T22846] lo speed is unknown, defaulting to 1000 [ 341.571646][T22848] macvlan0: entered promiscuous mode [ 341.577343][T22848] macvlan0: entered allmulticast mode [ 341.584401][T22848] bond3: entered promiscuous mode [ 341.590000][T22848] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 341.635110][T22848] bond3: left promiscuous mode [ 341.913171][T22875] syzkaller0: entered promiscuous mode [ 341.918902][T22875] syzkaller0: entered allmulticast mode [ 341.928780][T22846] lo speed is unknown, defaulting to 1000 [ 342.249829][T22897] netlink: 'syz.1.4986': attribute type 1 has an invalid length. [ 342.343330][T22902] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 342.408890][T22897] veth5: entered promiscuous mode [ 342.418579][T22897] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 342.762381][T22927] netlink: 'syz.2.4993': attribute type 1 has an invalid length. [ 342.800741][T22927] 8021q: adding VLAN 0 to HW filter on device bond4 [ 342.815868][T22927] vlan1: entered promiscuous mode [ 342.823521][T22927] bond4: entered promiscuous mode [ 342.829086][T22927] vlan1: entered allmulticast mode [ 342.834408][T22927] bond4: entered allmulticast mode [ 342.853571][T22927] bond4: (slave gretap5): making interface the new active one [ 342.870586][T22927] gretap5: entered promiscuous mode [ 342.881121][T22927] gretap5: entered allmulticast mode [ 342.887574][T22927] bond4: (slave gretap5): Enslaving as an active interface with an up link [ 343.286470][T22982] tipc: Enabling of bearer rejected, media not registered [ 343.426462][T22988] __nla_validate_parse: 13 callbacks suppressed [ 343.426483][T22988] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5015'. [ 343.431029][T22994] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 343.448468][T22988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5015'. [ 343.473925][T22988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5015'. [ 343.565520][T23002] netlink: 'syz.1.5020': attribute type 3 has an invalid length. [ 343.679917][T23016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5024'. [ 343.770299][T23025] veth1_to_bond: entered allmulticast mode [ 343.808445][T23025] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5027'. [ 343.858386][T23025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5027'. [ 343.902871][T23025] veth1_to_bond (unregistering): left allmulticast mode [ 343.968280][T23041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5032'. [ 343.976582][T23033] netlink: 'syz.1.5031': attribute type 1 has an invalid length. [ 344.058938][T23033] veth7: entered promiscuous mode [ 344.109816][T23049] sctp: [Deprecated]: syz.0.5034 (pid 23049) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.109816][T23049] Use struct sctp_sack_info instead [ 344.265667][T23066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5038'. [ 344.283057][T23066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5038'. [ 344.325474][T23070] lo: left promiscuous mode [ 344.397116][T23076] openvswitch: netlink: Unknown key attributes 2 [ 344.478528][T23080] netlink: 'syz.2.5044': attribute type 1 has an invalid length. [ 344.488568][T23080] netlink: 'syz.2.5044': attribute type 2 has an invalid length. [ 344.496645][T23080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5044'. [ 345.169500][T23141] netlink: 'syz.2.5063': attribute type 10 has an invalid length. [ 345.183961][T23144] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 345.198054][T23141] netlink: 'syz.2.5063': attribute type 10 has an invalid length. [ 345.228633][T23141] netlink: 'syz.2.5063': attribute type 10 has an invalid length. [ 345.284284][T23152] bond7: entered promiscuous mode [ 345.294644][T23152] bond7: entered allmulticast mode [ 345.300274][T23152] 8021q: adding VLAN 0 to HW filter on device bond7 [ 345.577708][T23169] sit0: entered promiscuous mode [ 345.751149][T23180] block nbd3: Unsupported socket: shutdown callout must be supported. [ 345.894147][T23191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.019232][T23197] 8021q: adding VLAN 0 to HW filter on device bond6 [ 346.028094][T23197] bond5: (slave bond6): making interface the new active one [ 346.036018][T23197] bond5: (slave bond6): Enslaving as an active interface with an up link [ 346.053646][T23197] 8021q: adding VLAN 0 to HW filter on device bond5 [ 346.233843][T23216] team0: Port device geneve0 added [ 346.261605][T23221] team0 (unregistering): Port device hsr_slave_0 removed [ 346.344572][T23221] veth1_to_bond: entered allmulticast mode [ 346.370776][T23220] veth1_to_bond: left allmulticast mode [ 346.408932][T23233] tipc: Enabled bearer , priority 0 [ 346.446170][T23233] tipc: Resetting bearer [ 346.493869][T23231] tipc: Disabling bearer [ 346.672358][T23258] validate_nla: 35 callbacks suppressed [ 346.672381][T23258] netlink: 'syz.4.5100': attribute type 13 has an invalid length. [ 346.694196][T23258] netlink: 'syz.4.5100': attribute type 58 has an invalid length. [ 346.699781][T23260] nbd: must specify an index to disconnect [ 346.717340][T23262] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 346.726926][T23260] netlink: 'syz.1.5101': attribute type 1 has an invalid length. [ 346.805215][T23265] netlink: zone id is out of range [ 346.826460][T23265] netlink: zone id is out of range [ 346.837835][T23265] netlink: zone id is out of range [ 346.851044][T23265] netlink: zone id is out of range [ 346.857723][T23265] netlink: zone id is out of range [ 346.870990][T23265] netlink: zone id is out of range [ 346.891027][T23277] bond11: entered promiscuous mode [ 346.896471][T23277] bond11: entered allmulticast mode [ 346.903587][T23277] 8021q: adding VLAN 0 to HW filter on device bond11 [ 346.953780][T23283] veth7: entered allmulticast mode [ 347.215853][T23308] netlink: 'syz.4.5115': attribute type 1 has an invalid length. [ 347.252977][T23308] netlink: 'syz.4.5115': attribute type 2 has an invalid length. [ 347.376548][T23318] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 347.398247][T23318] bond8: (slave vcan1): Error -95 calling set_mac_address [ 347.444478][T23332] netlink: 'syz.4.5122': attribute type 1 has an invalid length. [ 347.706228][T23362] netlink: 'syz.1.5131': attribute type 11 has an invalid length. [ 347.724321][T23360] veth9: entered allmulticast mode [ 347.732540][T23352] tipc: Resetting bearer [ 347.824876][T23369] tc_dump_action: action bad kind [ 348.019076][T23389] netlink: 'syz.1.5141': attribute type 29 has an invalid length. [ 348.033601][T23389] netlink: 'syz.1.5141': attribute type 29 has an invalid length. [ 348.249180][T23404] tipc: Resetting bearer [ 348.565249][T23437] __nla_validate_parse: 61 callbacks suppressed [ 348.565273][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5155'. [ 348.691503][T23451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5158'. [ 348.853042][T23467] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5163'. [ 348.900110][T23469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5164'. [ 349.129265][T23483] sch_fq: defrate 0 ignored. [ 349.271300][T23494] tipc: Enabled bearer , priority 10 [ 349.317179][T23504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5173'. [ 349.319109][T23501] sit0: left promiscuous mode [ 349.374306][T23501] net_ratelimit: 5 callbacks suppressed [ 349.374318][T23501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.430649][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 349.441914][T23512] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 349.940036][T23555] netlink: 'syz.4.5191': attribute type 2 has an invalid length. [ 349.992151][ T6879] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 350.131013][T23576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5197'. [ 350.238286][T23586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5200'. [ 350.285708][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 350.354083][T23592] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.363214][T23592] bond0: (slave team0): Enslaving as an active interface with an up link [ 350.373265][T23594] netlink: 404 bytes leftover after parsing attributes in process `syz.4.5203'. [ 350.383000][T23594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5203'. [ 350.392914][T23594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5203'. [ 350.525018][T23608] bridge0: port 1(vlan0) entered blocking state [ 350.534931][T23608] bridge0: port 1(vlan0) entered disabled state [ 350.541637][T23608] vlan0: entered allmulticast mode [ 350.546962][T23608] bridge0: entered allmulticast mode [ 350.555412][T23608] vlan0: left allmulticast mode [ 350.563692][T23608] bridge0: left allmulticast mode [ 351.001278][ T6897] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 351.016582][ T6897] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 351.721523][ T5937] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 352.413529][T23769] validate_nla: 72 callbacks suppressed [ 352.413551][T23769] netlink: 'syz.3.5256': attribute type 10 has an invalid length. [ 352.447708][T23769] mac80211_hwsim hwsim33 wlan1: left allmulticast mode [ 352.463120][T23769] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 352.475180][T23769] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 352.913763][T23773] netlink: 'syz.4.5259': attribute type 2 has an invalid length. [ 352.942956][T23773] nbd: must specify a device to reconfigure [ 353.678046][T23814] netlink: 'syz.4.5270': attribute type 1 has an invalid length. [ 353.724818][ T55] block nbd0: Possible stuck request ffff888024fb7000: control (read@0,1024B). Runtime 240 seconds [ 353.736260][ T55] block nbd0: Possible stuck request ffff888024fb71c0: control (read@1024,1024B). Runtime 240 seconds [ 353.747738][ T55] block nbd0: Possible stuck request ffff888024fb7380: control (read@2048,1024B). Runtime 240 seconds [ 353.748302][T23814] 8021q: adding VLAN 0 to HW filter on device bond12 [ 353.759145][ T55] block nbd0: Possible stuck request ffff888024fb7540: control (read@3072,1024B). Runtime 240 seconds [ 354.067663][T23840] 8021q: adding VLAN 0 to HW filter on device bond13 [ 354.093965][T23840] team0: Port device bond13 added [ 354.171665][T23849] netlink: 'syz.1.5281': attribute type 1 has an invalid length. [ 354.194154][T23854] __nla_validate_parse: 14 callbacks suppressed [ 354.194177][T23854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5284'. [ 354.206173][T23849] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5281'. [ 354.270062][T23858] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5283'. [ 354.277845][T23860] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5282'. [ 354.393685][T23860] vlan5: entered allmulticast mode [ 354.425085][T23860] gretap0: entered allmulticast mode [ 354.473992][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057959800: rx timeout, send abort [ 354.482504][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805795b000: rx timeout, send abort [ 354.491288][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057959800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 354.505762][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805795b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 354.587157][T23876] xt_HMARK: proto mask must be zero with L3 mode [ 354.606836][T23881] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 354.807901][T23898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5295'. [ 354.840651][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 355.007522][T23911] netlink: 'syz.2.5300': attribute type 1 has an invalid length. [ 355.080352][T23911] 8021q: adding VLAN 0 to HW filter on device bond7 [ 355.162087][T23911] 8021q: adding VLAN 0 to HW filter on device bond7 [ 355.169419][T23911] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 355.187875][T23911] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 355.197646][T23919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5302'. [ 355.233796][T23919] netlink: 47 bytes leftover after parsing attributes in process `syz.4.5302'. [ 355.282929][T23924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5300'. [ 355.327080][T23922] veth3: entered promiscuous mode [ 355.348457][T23922] bond7: (slave veth3): Enslaving as an active interface with a down link [ 355.446101][T23931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5305'. [ 355.704991][T23948] netlink: 'syz.0.5313': attribute type 21 has an invalid length. [ 355.713200][T23948] netlink: 'syz.0.5313': attribute type 6 has an invalid length. [ 355.721117][T23948] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5313'. [ 356.006587][T23985] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 356.158232][T23998] netlink: 'syz.0.5324': attribute type 7 has an invalid length. [ 356.325459][T24014] tipc: Enabled bearer , priority 0 [ 356.343818][T24014] syzkaller0: entered promiscuous mode [ 356.349405][T24014] syzkaller0: entered allmulticast mode [ 356.389816][T24013] netlink: 'syz.2.5328': attribute type 4 has an invalid length. [ 356.422333][T24012] tipc: Resetting bearer [ 356.461116][T24012] tipc: Disabling bearer [ 356.773190][T24056] netlink: 'syz.1.5341': attribute type 9 has an invalid length. [ 356.805716][T24055] hsr0 speed is unknown, defaulting to 1000 [ 356.845582][T24055] lo speed is unknown, defaulting to 1000 [ 357.371676][T24055] lo speed is unknown, defaulting to 1000 [ 357.867723][T24140] tipc: Enabling of bearer rejected, failed to enable media [ 357.921796][T24142] validate_nla: 1 callbacks suppressed [ 357.921818][T24142] netlink: 'syz.0.5369': attribute type 4 has an invalid length. [ 357.946612][T24147] netlink: 'syz.4.5370': attribute type 26 has an invalid length. [ 357.976811][T24147] netlink: 'syz.4.5370': attribute type 26 has an invalid length. [ 358.017186][T24152] netlink: 'syz.4.5370': attribute type 26 has an invalid length. [ 358.053047][T24152] netlink: 'syz.4.5370': attribute type 26 has an invalid length. [ 358.127419][T24159] netlink: 'syz.2.5373': attribute type 1 has an invalid length. [ 358.147822][T24159] netlink: 'syz.2.5373': attribute type 3 has an invalid length. [ 358.237353][T24168] sctp: [Deprecated]: syz.3.5374 (pid 24168) Use of int in max_burst socket option deprecated. [ 358.237353][T24168] Use struct sctp_assoc_value instead [ 358.270176][T24168] netlink: 'syz.3.5374': attribute type 4 has an invalid length. [ 358.282057][T24168] wlan1: mtu less than device minimum [ 358.457194][T24184] team_slave_0: mtu greater than device maximum [ 358.618193][T24200] netlink: 'syz.2.5388': attribute type 1 has an invalid length. [ 359.477432][T24280] __nla_validate_parse: 34 callbacks suppressed [ 359.477455][T24280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5412'. [ 359.548222][T24284] syzkaller1: entered promiscuous mode [ 359.554208][T24284] syzkaller1: entered allmulticast mode [ 359.597341][T24284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5414'. [ 359.631677][T24293] netlink: 'syz.0.5417': attribute type 7 has an invalid length. [ 360.240187][T24336] IPVS: length: 162 != 24 [ 360.248179][T24336] sctp: [Deprecated]: syz.2.5430 (pid 24336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.248179][T24336] Use struct sctp_sack_info instead [ 360.436064][T24352] openvswitch: netlink: Missing key (keys=40, expected=80) [ 360.503246][T24362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5436'. [ 360.555161][T24362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5436'. [ 360.575267][T24362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5436'. [ 360.766495][ T55] block nbd2: Possible stuck request ffff888025447000: control (read@0,1024B). Runtime 150 seconds [ 360.777999][ T55] block nbd2: Possible stuck request ffff8880254471c0: control (read@1024,1024B). Runtime 150 seconds [ 360.789512][ T55] block nbd2: Possible stuck request ffff888025447380: control (read@2048,1024B). Runtime 150 seconds [ 360.801225][ T55] block nbd2: Possible stuck request ffff888025447540: control (read@3072,1024B). Runtime 150 seconds [ 360.858204][T24396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5449'. [ 360.911478][T24401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5451'. [ 360.923814][T24401] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 361.035126][T24412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.058031][T24414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5455'. [ 361.136263][T24420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5454'. [ 361.265747][T24430] syz.2.5457 (24430) used obsolete PPPIOCDETACH ioctl [ 361.496990][T24448] 8021q: adding VLAN 0 to HW filter on device bond8 [ 361.555179][T24456] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5467'. [ 362.047380][ T123] block nbd4: Possible stuck request ffff888025535080: control (read@0,1024B). Runtime 60 seconds [ 362.059904][ T123] block nbd4: Possible stuck request ffff888025535240: control (read@1024,1024B). Runtime 60 seconds [ 362.071011][ T123] block nbd4: Possible stuck request ffff888025535400: control (read@2048,1024B). Runtime 60 seconds [ 362.082684][ T123] block nbd4: Possible stuck request ffff8880255355c0: control (read@3072,1024B). Runtime 60 seconds [ 362.267728][T24510] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 362.513385][ T7244] lo speed is unknown, defaulting to 1000 [ 362.533180][ T7244] syz2: Port: 1 Link ACTIVE [ 362.568599][T24542] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 362.575090][T24542] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 362.680546][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.168792][T24593] validate_nla: 9 callbacks suppressed [ 363.168814][T24593] netlink: 'syz.1.5506': attribute type 10 has an invalid length. [ 363.205726][T24593] netlink: 'syz.1.5506': attribute type 10 has an invalid length. [ 363.294559][T24603] netlink: 'syz.4.5510': attribute type 2 has an invalid length. [ 363.385601][T24593] 8021q: adding VLAN 0 to HW filter on device bond9 [ 363.416219][T24617] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 363.458354][T24617] bond9: (slave macvlan2): Enslaving as a backup interface with a down link [ 363.647398][T24642] netlink: 'syz.0.5520': attribute type 6 has an invalid length. [ 363.828937][T24662] gretap0: entered promiscuous mode [ 363.847405][T24662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.874676][T24662] 0ªî{X¹¦: renamed from gretap0 [ 363.912704][T24662] 0ªî{X¹¦: left promiscuous mode [ 363.933712][T24662] 0ªî{X¹¦: entered allmulticast mode [ 363.943427][T24662] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 364.318416][T24712] netlink: 'syz.3.5540': attribute type 12 has an invalid length. [ 364.327364][T24704] unsupported nlmsg_type 40 [ 364.334083][T24704] netlink: 'syz.2.5539': attribute type 1 has an invalid length. [ 364.345794][T24712] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 364.615213][T24735] netlink: 'syz.0.5549': attribute type 10 has an invalid length. [ 364.804804][T24755] netlink: 'syz.2.5555': attribute type 11 has an invalid length. [ 364.814098][T24755] __nla_validate_parse: 51 callbacks suppressed [ 364.814114][T24755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5555'. [ 366.429018][ T5233] udevd[5233]: worker [5848] /devices/virtual/block/nbd4 is taking a long time [ 375.640619][ T5870] Bluetooth: hci4: command 0x0406 tx timeout [ 377.400607][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 380.761126][ T5870] Bluetooth: hci5: command 0x0406 tx timeout [ 383.806176][ T55] block nbd0: Possible stuck request ffff888024fb7000: control (read@0,1024B). Runtime 270 seconds [ 383.817350][ T55] block nbd0: Possible stuck request ffff888024fb71c0: control (read@1024,1024B). Runtime 270 seconds [ 383.828838][ T55] block nbd0: Possible stuck request ffff888024fb7380: control (read@2048,1024B). Runtime 270 seconds [ 383.840083][ T55] block nbd0: Possible stuck request ffff888024fb7540: control (read@3072,1024B). Runtime 270 seconds [ 384.886526][T24765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5558'. [ 384.999304][T24773] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5563'. [ 385.017580][T24776] netlink: 'syz.3.5564': attribute type 1 has an invalid length. [ 385.017996][T24773] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5563'. [ 385.030360][T24776] netlink: 'syz.3.5564': attribute type 1 has an invalid length. [ 385.048699][T24776] netlink: 'syz.3.5564': attribute type 1 has an invalid length. [ 385.060766][T24776] netlink: 'syz.3.5564': attribute type 1 has an invalid length. [ 385.125985][T24785] IPv6: NLM_F_CREATE should be specified when creating new route [ 385.358476][T24802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5574'. [ 385.381305][T24802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5574'. [ 385.414305][T24808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5576'. [ 385.434096][T24802] veth9: entered allmulticast mode [ 385.887197][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 385.950729][T24863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5592'. [ 386.139277][T24879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5598'. [ 386.149144][T24879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5598'. [ 386.307788][T24884] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5599'. [ 386.317213][T24884] netlink: 'syz.0.5599': attribute type 6 has an invalid length. [ 386.325106][T24884] netlink: 'syz.0.5599': attribute type 5 has an invalid length. [ 386.437977][T24894] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 386.719357][T24913] netlink: 'syz.4.5609': attribute type 1 has an invalid length. [ 386.794613][T24920] netlink: 'syz.2.5610': attribute type 29 has an invalid length. [ 386.808344][T24920] netlink: 'syz.2.5610': attribute type 29 has an invalid length. [ 387.465131][T24980] netlink: 'syz.4.5631': attribute type 29 has an invalid length. [ 388.165508][T25046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.219789][T25053] ÿÿÿÿÿÿ: renamed from syz_tun (while UP) [ 388.325697][T25059] nbd: illegal input index -8454144 [ 388.567655][T25084] FAULT_INJECTION: forcing a failure. [ 388.567655][T25084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.581125][T25084] CPU: 1 UID: 0 PID: 25084 Comm: syz.2.5666 Not tainted syzkaller #0 PREEMPT(full) [ 388.581154][T25084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.581167][T25084] Call Trace: [ 388.581174][T25084] [ 388.581184][T25084] dump_stack_lvl+0x189/0x250 [ 388.581215][T25084] ? __pfx____ratelimit+0x10/0x10 [ 388.581241][T25084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.581262][T25084] ? __pfx__printk+0x10/0x10 [ 388.581286][T25084] ? __might_fault+0xb0/0x130 [ 388.581314][T25084] ? rcu_is_watching+0x15/0xb0 [ 388.581335][T25084] should_fail_ex+0x414/0x560 [ 388.581361][T25084] _copy_from_user+0x2d/0xb0 [ 388.581385][T25084] ___sys_sendmsg+0x158/0x2a0 [ 388.581407][T25084] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.581441][T25084] ? __fget_files+0x2a/0x420 [ 388.581467][T25084] ? __fget_files+0x3a0/0x420 [ 388.581498][T25084] __x64_sys_sendmsg+0x19b/0x260 [ 388.581518][T25084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.581540][T25084] ? __pfx_ksys_write+0x10/0x10 [ 388.581562][T25084] ? rcu_is_watching+0x15/0xb0 [ 388.581581][T25084] ? rcu_is_watching+0x15/0xb0 [ 388.581593][T25084] do_syscall_64+0xfa/0x3b0 [ 388.581630][T25084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.581641][T25084] ? clear_bhb_loop+0x60/0xb0 [ 388.581654][T25084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.581665][T25084] RIP: 0033:0x7f5c7198ebe9 [ 388.581677][T25084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.581688][T25084] RSP: 002b:00007f5c727c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.581703][T25084] RAX: ffffffffffffffda RBX: 00007f5c71bb5fa0 RCX: 00007f5c7198ebe9 [ 388.581712][T25084] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 388.581720][T25084] RBP: 00007f5c727c9090 R08: 0000000000000000 R09: 0000000000000000 [ 388.581727][T25084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.581735][T25084] R13: 00007f5c71bb6038 R14: 00007f5c71bb5fa0 R15: 00007fffa8486468 [ 388.581747][T25084] [ 390.841812][ T55] block nbd2: Possible stuck request ffff888025447000: control (read@0,1024B). Runtime 180 seconds [ 390.852792][ T55] block nbd2: Possible stuck request ffff8880254471c0: control (read@1024,1024B). Runtime 180 seconds [ 390.864499][ T55] block nbd2: Possible stuck request ffff888025447380: control (read@2048,1024B). Runtime 180 seconds [ 390.875668][ T55] block nbd2: Possible stuck request ffff888025447540: control (read@3072,1024B). Runtime 180 seconds [ 392.124706][ T123] block nbd4: Possible stuck request ffff888025535080: control (read@0,1024B). Runtime 90 seconds [ 392.135377][ T123] block nbd4: Possible stuck request ffff888025535240: control (read@1024,1024B). Runtime 90 seconds [ 392.146691][ T123] block nbd4: Possible stuck request ffff888025535400: control (read@2048,1024B). Runtime 90 seconds [ 392.157780][ T123] block nbd4: Possible stuck request ffff8880255355c0: control (read@3072,1024B). Runtime 90 seconds [ 392.259764][ T5233] udevd[5233]: worker [13567] /devices/virtual/block/nbd2 timeout; kill it [ 392.269686][ T5233] udevd[5233]: seq 19243 '/devices/virtual/block/nbd2' killed [ 404.920639][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 409.742243][T25101] __nla_validate_parse: 25 callbacks suppressed [ 409.742265][T25101] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5672'. [ 409.917521][T25112] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5676'. [ 409.939728][T25112] validate_nla: 9 callbacks suppressed [ 409.939751][T25112] netlink: 'syz.1.5676': attribute type 4 has an invalid length. [ 409.985573][T25120] FAULT_INJECTION: forcing a failure. [ 409.985573][T25120] name failslab, interval 1, probability 0, space 0, times 1 [ 410.003023][T25122] nftables ruleset with unbound chain [ 410.020139][T25120] CPU: 0 UID: 0 PID: 25120 Comm: syz.4.5679 Not tainted syzkaller #0 PREEMPT(full) [ 410.020170][T25120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.020182][T25120] Call Trace: [ 410.020189][T25120] [ 410.020196][T25120] dump_stack_lvl+0x189/0x250 [ 410.020224][T25120] ? __pfx____ratelimit+0x10/0x10 [ 410.020249][T25120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.020270][T25120] ? __pfx__printk+0x10/0x10 [ 410.020296][T25120] ? fs_reclaim_acquire+0x7d/0x100 [ 410.020322][T25120] ? rcu_is_watching+0x15/0xb0 [ 410.020341][T25120] ? __pfx___might_resched+0x10/0x10 [ 410.020356][T25120] ? lock_acquire+0x5f/0x360 [ 410.020388][T25120] should_fail_ex+0x414/0x560 [ 410.020415][T25120] should_failslab+0xa8/0x100 [ 410.020441][T25120] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 410.020468][T25120] ? __alloc_skb+0x112/0x2d0 [ 410.020496][T25120] ? rcu_is_watching+0x15/0xb0 [ 410.020516][T25120] __alloc_skb+0x112/0x2d0 [ 410.020544][T25120] netlink_sendmsg+0x5c6/0xb30 [ 410.020576][T25120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.020604][T25120] ? aa_sock_msg_perm+0xf1/0x1d0 [ 410.020622][T25120] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.020642][T25120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.020669][T25120] __sock_sendmsg+0x219/0x270 [ 410.020703][T25120] ____sys_sendmsg+0x505/0x830 [ 410.020725][T25120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.020748][T25120] ? import_iovec+0x74/0xa0 [ 410.020772][T25120] ___sys_sendmsg+0x21f/0x2a0 [ 410.020792][T25120] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.020826][T25120] ? __fget_files+0x2a/0x420 [ 410.020852][T25120] ? __fget_files+0x3a0/0x420 [ 410.020883][T25120] __x64_sys_sendmsg+0x19b/0x260 [ 410.020903][T25120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.020927][T25120] ? __pfx_ksys_write+0x10/0x10 [ 410.020951][T25120] ? rcu_is_watching+0x15/0xb0 [ 410.020971][T25120] ? rcu_is_watching+0x15/0xb0 [ 410.020989][T25120] do_syscall_64+0xfa/0x3b0 [ 410.021015][T25120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.021034][T25120] ? clear_bhb_loop+0x60/0xb0 [ 410.021055][T25120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.021074][T25120] RIP: 0033:0x7f65fe38ebe9 [ 410.021091][T25120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.021107][T25120] RSP: 002b:00007f65ff13d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.021128][T25120] RAX: ffffffffffffffda RBX: 00007f65fe5b5fa0 RCX: 00007f65fe38ebe9 [ 410.021142][T25120] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 410.021154][T25120] RBP: 00007f65ff13d090 R08: 0000000000000000 R09: 0000000000000000 [ 410.021165][T25120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.021176][T25120] R13: 00007f65fe5b6038 R14: 00007f65fe5b5fa0 R15: 00007fffea9cdd88 [ 410.021195][T25120] [ 410.650894][T25160] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5693'. [ 410.657967][T25162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5691'. [ 410.699425][T25162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5691'. [ 410.772775][T25167] netlink: 'syz.2.5695': attribute type 1 has an invalid length. [ 410.784413][T25164] can: request_module (can-proto-0) failed. [ 410.796901][T25167] openvswitch: netlink: Multiple metadata blocks provided [ 410.851595][T25174] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5698'. [ 410.893618][T25176] hsr0 speed is unknown, defaulting to 1000 [ 410.903514][T25176] lo speed is unknown, defaulting to 1000 [ 411.019165][T25190] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 411.054066][T25194] netlink: 'syz.3.5704': attribute type 10 has an invalid length. [ 411.148945][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.162041][T25194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5704'. [ 411.172656][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5704'. [ 411.176417][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.203364][T25194] geneve2: entered promiscuous mode [ 411.208944][T25194] geneve2: entered allmulticast mode [ 411.287444][T25208] FAULT_INJECTION: forcing a failure. [ 411.287444][T25208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.322473][T25208] CPU: 1 UID: 0 PID: 25208 Comm: syz.4.5708 Not tainted syzkaller #0 PREEMPT(full) [ 411.322504][T25208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.322515][T25208] Call Trace: [ 411.322522][T25208] [ 411.322530][T25208] dump_stack_lvl+0x189/0x250 [ 411.322559][T25208] ? __pfx____ratelimit+0x10/0x10 [ 411.322585][T25208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.322607][T25208] ? __pfx__printk+0x10/0x10 [ 411.322630][T25208] ? __might_fault+0xb0/0x130 [ 411.322657][T25208] ? rcu_is_watching+0x15/0xb0 [ 411.322678][T25208] should_fail_ex+0x414/0x560 [ 411.322704][T25208] _copy_from_iter+0x1db/0x16f0 [ 411.322724][T25208] ? rcu_is_watching+0x15/0xb0 [ 411.322743][T25208] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 411.322769][T25208] ? __pfx__copy_from_iter+0x10/0x10 [ 411.322788][T25208] ? __build_skb_around+0x257/0x3e0 [ 411.322817][T25208] ? netlink_sendmsg+0x642/0xb30 [ 411.322843][T25208] ? skb_put+0x11b/0x210 [ 411.322861][T25208] netlink_sendmsg+0x6b2/0xb30 [ 411.322894][T25208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.322934][T25208] ? aa_sock_msg_perm+0xf1/0x1d0 [ 411.322952][T25208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.322972][T25208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.323000][T25208] __sock_sendmsg+0x219/0x270 [ 411.323025][T25208] ____sys_sendmsg+0x505/0x830 [ 411.323047][T25208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.323071][T25208] ? import_iovec+0x74/0xa0 [ 411.323094][T25208] ___sys_sendmsg+0x21f/0x2a0 [ 411.323114][T25208] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.323149][T25208] ? __fget_files+0x2a/0x420 [ 411.323187][T25208] ? __fget_files+0x3a0/0x420 [ 411.323220][T25208] __x64_sys_sendmsg+0x19b/0x260 [ 411.323248][T25208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.323272][T25208] ? __pfx_ksys_write+0x10/0x10 [ 411.323295][T25208] ? rcu_is_watching+0x15/0xb0 [ 411.323315][T25208] ? rcu_is_watching+0x15/0xb0 [ 411.323336][T25208] do_syscall_64+0xfa/0x3b0 [ 411.323363][T25208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.323382][T25208] ? clear_bhb_loop+0x60/0xb0 [ 411.323403][T25208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.323422][T25208] RIP: 0033:0x7f65fe38ebe9 [ 411.323441][T25208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.323468][T25208] RSP: 002b:00007f65ff13d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.323491][T25208] RAX: ffffffffffffffda RBX: 00007f65fe5b5fa0 RCX: 00007f65fe38ebe9 [ 411.323506][T25208] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 411.323520][T25208] RBP: 00007f65ff13d090 R08: 0000000000000000 R09: 0000000000000000 [ 411.323532][T25208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.323543][T25208] R13: 00007f65fe5b6038 R14: 00007f65fe5b5fa0 R15: 00007fffea9cdd88 [ 411.323566][T25208] [ 411.726727][T25176] lo speed is unknown, defaulting to 1000 [ 411.810702][T25221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5711'. [ 411.831249][T25224] netlink: 'syz.3.5713': attribute type 1 has an invalid length. [ 411.867432][T25229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5714'. [ 411.944107][T25224] bond9: (slave bridge5): making interface the new active one [ 411.953085][T25224] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 411.967342][T25224] netlink: 'syz.3.5713': attribute type 83 has an invalid length. [ 412.102202][T25246] netlink: 'syz.3.5713': attribute type 4 has an invalid length. [ 412.159300][T25246] wlan1: mtu less than device minimum [ 412.198529][T25250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.237482][T25253] FAULT_INJECTION: forcing a failure. [ 412.237482][T25253] name failslab, interval 1, probability 0, space 0, times 0 [ 412.266443][T25253] CPU: 0 UID: 0 PID: 25253 Comm: syz.2.5721 Not tainted syzkaller #0 PREEMPT(full) [ 412.266484][T25253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.266497][T25253] Call Trace: [ 412.266504][T25253] [ 412.266512][T25253] dump_stack_lvl+0x189/0x250 [ 412.266540][T25253] ? __pfx____ratelimit+0x10/0x10 [ 412.266566][T25253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.266587][T25253] ? __pfx__printk+0x10/0x10 [ 412.266619][T25253] should_fail_ex+0x414/0x560 [ 412.266645][T25253] should_failslab+0xa8/0x100 [ 412.266673][T25253] kmem_cache_alloc_noprof+0x73/0x3c0 [ 412.266698][T25253] ? skb_clone+0x212/0x3a0 [ 412.266719][T25253] skb_clone+0x212/0x3a0 [ 412.266740][T25253] __netlink_deliver_tap+0x404/0x850 [ 412.266774][T25253] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.266801][T25253] netlink_deliver_tap+0x19c/0x1b0 [ 412.266828][T25253] netlink_unicast+0x7fa/0x9e0 [ 412.266856][T25253] ? __pfx_netlink_unicast+0x10/0x10 [ 412.266880][T25253] ? netlink_sendmsg+0x642/0xb30 [ 412.266906][T25253] ? skb_put+0x11b/0x210 [ 412.266924][T25253] netlink_sendmsg+0x805/0xb30 [ 412.266955][T25253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.266983][T25253] ? aa_sock_msg_perm+0xf1/0x1d0 [ 412.267001][T25253] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.267021][T25253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.267048][T25253] __sock_sendmsg+0x219/0x270 [ 412.267072][T25253] ____sys_sendmsg+0x505/0x830 [ 412.267094][T25253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.267117][T25253] ? import_iovec+0x74/0xa0 [ 412.267139][T25253] ___sys_sendmsg+0x21f/0x2a0 [ 412.267159][T25253] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.267195][T25253] ? __fget_files+0x2a/0x420 [ 412.267222][T25253] ? __fget_files+0x3a0/0x420 [ 412.267254][T25253] __x64_sys_sendmsg+0x19b/0x260 [ 412.267274][T25253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.267298][T25253] ? __pfx_ksys_write+0x10/0x10 [ 412.267320][T25253] ? rcu_is_watching+0x15/0xb0 [ 412.267348][T25253] ? rcu_is_watching+0x15/0xb0 [ 412.267368][T25253] do_syscall_64+0xfa/0x3b0 [ 412.267396][T25253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.267415][T25253] ? clear_bhb_loop+0x60/0xb0 [ 412.267435][T25253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.267452][T25253] RIP: 0033:0x7f5c7198ebe9 [ 412.267479][T25253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.267498][T25253] RSP: 002b:00007f5c727c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.267519][T25253] RAX: ffffffffffffffda RBX: 00007f5c71bb5fa0 RCX: 00007f5c7198ebe9 [ 412.267533][T25253] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 412.267546][T25253] RBP: 00007f5c727c9090 R08: 0000000000000000 R09: 0000000000000000 [ 412.267559][T25253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.267571][T25253] R13: 00007f5c71bb6038 R14: 00007f5c71bb5fa0 R15: 00007fffa8486468 [ 412.267593][T25253] [ 412.741224][T25259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.875903][ T5937] hid-generic 0005:15C2:5505.0001: item fetching failed at offset 0/1 [ 412.883575][T25273] ip6gre2: entered allmulticast mode [ 412.901355][ T5937] hid-generic 0005:15C2:5505.0001: probe with driver hid-generic failed with error -22 [ 412.992588][T25287] netlink: 'syz.2.5728': attribute type 64 has an invalid length. [ 413.165234][T25307] netlink: 'syz.4.5738': attribute type 1 has an invalid length. [ 413.188339][T25307] 8021q: adding VLAN 0 to HW filter on device bond14 [ 413.287894][T25315] netlink: 'syz.3.5739': attribute type 1 has an invalid length. [ 413.631620][T25351] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 413.642001][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 413.729867][T25358] netlink: 'syz.0.5753': attribute type 6 has an invalid length. [ 413.849981][T25370] openvswitch: netlink: IP tunnel TTL not specified. [ 413.888796][ T55] block nbd0: Possible stuck request ffff888024fb7000: control (read@0,1024B). Runtime 300 seconds [ 413.900635][ T55] block nbd0: Possible stuck request ffff888024fb71c0: control (read@1024,1024B). Runtime 300 seconds [ 413.911776][ T55] block nbd0: Possible stuck request ffff888024fb7380: control (read@2048,1024B). Runtime 300 seconds [ 413.923288][ T55] block nbd0: Possible stuck request ffff888024fb7540: control (read@3072,1024B). Runtime 300 seconds [ 414.112428][T25391] Unsupported ieee802154 address type: 0 [ 414.453913][T25433] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 414.683955][ T7223] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 414.688475][T25448] hsr0 speed is unknown, defaulting to 1000 [ 414.706162][T25448] lo speed is unknown, defaulting to 1000 [ 414.715561][T25453] bridge6: entered promiscuous mode [ 414.737738][T25453] bridge6: entered allmulticast mode [ 414.929119][T25465] __nla_validate_parse: 24 callbacks suppressed [ 414.929140][T25465] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5788'. [ 415.082991][T25477] validate_nla: 1 callbacks suppressed [ 415.083013][T25477] netlink: 'syz.0.5790': attribute type 1 has an invalid length. [ 415.121162][T25448] lo speed is unknown, defaulting to 1000 [ 415.458857][T25500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5794'. [ 415.651677][T25514] netlink: 'syz.3.5800': attribute type 5 has an invalid length. [ 415.670513][T25514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5800'. [ 415.696817][T25516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5801'. [ 415.893484][T25542] bridge_slave_0: entered promiscuous mode [ 416.079019][T25555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5810'. [ 416.177640][T25561] openvswitch: netlink: Key type 10512 is out of range max 32 [ 416.189717][T25561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5811'. [ 416.302117][T25568] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 416.504279][T25591] tipc: Enabling of bearer rejected, failed to enable media [ 416.667732][T25608] bridge8: entered promiscuous mode [ 416.689469][T25608] bridge8: entered allmulticast mode [ 416.746677][T25608] veth0: entered promiscuous mode [ 416.753009][T25608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5829'. [ 416.762756][T25605] veth0: left promiscuous mode [ 417.067440][T25648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5839'. [ 417.243085][T25667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5843'. [ 417.268008][T25667] openvswitch: netlink: Flow key attr not present in new flow. [ 417.289771][T25667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5843'. [ 417.315159][T25667] openvswitch: netlink: Flow key attr not present in new flow. [ 417.355302][T25682] netlink: 'syz.4.5847': attribute type 6 has an invalid length. [ 417.369214][T25683] netlink: 'syz.1.5845': attribute type 1 has an invalid length. [ 417.381115][T25682] delete_channel: no stack [ 417.424547][T25686] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 417.490120][T25691] tap0: tun_chr_ioctl cmd 1074025677 [ 417.500924][T25691] tap0: linktype set to 65534 [ 417.517487][T25695] veth1_to_bond: entered allmulticast mode [ 417.549795][T25695] veth1_to_bond (unregistering): left allmulticast mode [ 418.750869][T25750] veth0: entered promiscuous mode [ 418.783415][T25749] veth0: left promiscuous mode [ 418.867831][T25761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.891455][T25765] pimreg3: entered allmulticast mode [ 419.041943][T25773] netlink: 'syz.4.5878': attribute type 1 has an invalid length. [ 419.186838][T25786] dvmrp1: entered allmulticast mode [ 419.197512][T25797] sctp: [Deprecated]: syz.0.5884 (pid 25797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.197512][T25797] Use struct sctp_sack_info instead [ 419.347613][T25817] netlink: 'syz.0.5892': attribute type 1 has an invalid length. [ 419.460289][T25820] can: request_module (can-proto-4) failed. [ 419.544861][T25840] 8021q: VLANs not supported on ip_vti0 [ 419.644132][T25850] netlink: 'syz.3.5900': attribute type 10 has an invalid length. [ 419.683472][T25855] FAULT_INJECTION: forcing a failure. [ 419.683472][T25855] name failslab, interval 1, probability 0, space 0, times 0 [ 419.728921][T25855] CPU: 1 UID: 0 PID: 25855 Comm: syz.2.5904 Not tainted syzkaller #0 PREEMPT(full) [ 419.728951][T25855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.728963][T25855] Call Trace: [ 419.728970][T25855] [ 419.728978][T25855] dump_stack_lvl+0x189/0x250 [ 419.729007][T25855] ? __pfx____ratelimit+0x10/0x10 [ 419.729033][T25855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.729055][T25855] ? __pfx__printk+0x10/0x10 [ 419.729083][T25855] ? __pfx___might_resched+0x10/0x10 [ 419.729101][T25855] ? lock_acquire+0x5f/0x360 [ 419.729126][T25855] should_fail_ex+0x414/0x560 [ 419.729149][T25855] should_failslab+0xa8/0x100 [ 419.729173][T25855] __kmalloc_cache_noprof+0x70/0x3d0 [ 419.729195][T25855] ? nf_tables_commit+0x79d/0x8700 [ 419.729217][T25855] nf_tables_commit+0x79d/0x8700 [ 419.729250][T25855] ? rcu_is_watching+0x15/0xb0 [ 419.729275][T25855] ? __pfx_nf_tables_commit+0x10/0x10 [ 419.729297][T25855] ? free_large_kmalloc+0x13a/0x1f0 [ 419.729324][T25855] ? nf_tables_newrule+0x23bc/0x2890 [ 419.729349][T25855] ? __pfx_nf_tables_newrule+0x10/0x10 [ 419.729379][T25855] nfnetlink_rcv+0x1a4b/0x2520 [ 419.729415][T25855] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 419.729443][T25855] ? ref_tracker_free+0x63a/0x7d0 [ 419.729480][T25855] ? __netlink_deliver_tap+0x807/0x850 [ 419.729506][T25855] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.729547][T25855] ? lock_release+0x4b/0x3e0 [ 419.729576][T25855] netlink_unicast+0x82c/0x9e0 [ 419.729602][T25855] ? __pfx_netlink_unicast+0x10/0x10 [ 419.729626][T25855] ? netlink_sendmsg+0x642/0xb30 [ 419.729650][T25855] ? skb_put+0x11b/0x210 [ 419.729668][T25855] netlink_sendmsg+0x805/0xb30 [ 419.729698][T25855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.729724][T25855] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.729742][T25855] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.729762][T25855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.729789][T25855] __sock_sendmsg+0x219/0x270 [ 419.729813][T25855] ____sys_sendmsg+0x505/0x830 [ 419.729834][T25855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.729857][T25855] ? import_iovec+0x74/0xa0 [ 419.729879][T25855] ___sys_sendmsg+0x21f/0x2a0 [ 419.729900][T25855] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.729933][T25855] ? __fget_files+0x2a/0x420 [ 419.729960][T25855] ? __fget_files+0x3a0/0x420 [ 419.729990][T25855] __x64_sys_sendmsg+0x19b/0x260 [ 419.730009][T25855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.730032][T25855] ? __pfx_ksys_write+0x10/0x10 [ 419.730054][T25855] ? rcu_is_watching+0x15/0xb0 [ 419.730074][T25855] ? rcu_is_watching+0x15/0xb0 [ 419.730092][T25855] do_syscall_64+0xfa/0x3b0 [ 419.730119][T25855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.730136][T25855] ? clear_bhb_loop+0x60/0xb0 [ 419.730157][T25855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.730173][T25855] RIP: 0033:0x7f5c7198ebe9 [ 419.730191][T25855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.730207][T25855] RSP: 002b:00007f5c727c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.730231][T25855] RAX: ffffffffffffffda RBX: 00007f5c71bb5fa0 RCX: 00007f5c7198ebe9 [ 419.730245][T25855] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 419.730257][T25855] RBP: 00007f5c727c9090 R08: 0000000000000000 R09: 0000000000000000 [ 419.730269][T25855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.730279][T25855] R13: 00007f5c71bb6038 R14: 00007f5c71bb5fa0 R15: 00007fffa8486468 [ 419.730301][T25855] [ 420.215976][T11669] hid-generic 0005:15C2:5505.0002: item fetching failed at offset 0/1 [ 420.227039][T11669] hid-generic 0005:15C2:5505.0002: probe with driver hid-generic failed with error -22 [ 420.335506][T25891] __nla_validate_parse: 12 callbacks suppressed [ 420.335530][T25891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5916'. [ 420.393968][T25895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5919'. [ 420.451448][T25896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5917'. [ 420.465270][T25900] FAULT_INJECTION: forcing a failure. [ 420.465270][T25900] name failslab, interval 1, probability 0, space 0, times 0 [ 420.478276][T25900] CPU: 1 UID: 0 PID: 25900 Comm: syz.2.5918 Not tainted syzkaller #0 PREEMPT(full) [ 420.478306][T25900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.478317][T25900] Call Trace: [ 420.478325][T25900] [ 420.478332][T25900] dump_stack_lvl+0x189/0x250 [ 420.478361][T25900] ? __pfx____ratelimit+0x10/0x10 [ 420.478387][T25900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.478409][T25900] ? __pfx__printk+0x10/0x10 [ 420.478435][T25900] ? fs_reclaim_acquire+0x7d/0x100 [ 420.478462][T25900] ? rcu_is_watching+0x15/0xb0 [ 420.478481][T25900] ? __pfx___might_resched+0x10/0x10 [ 420.478507][T25900] ? lock_acquire+0x5f/0x360 [ 420.478535][T25900] should_fail_ex+0x414/0x560 [ 420.478561][T25900] ? nf_tables_commit+0xaa9/0x8700 [ 420.478580][T25900] should_failslab+0xa8/0x100 [ 420.478607][T25900] __kvmalloc_node_noprof+0x161/0x5f0 [ 420.478633][T25900] ? nf_tables_commit+0xaa9/0x8700 [ 420.478651][T25900] ? nf_tables_commit+0x79d/0x8700 [ 420.478671][T25900] nf_tables_commit+0xaa9/0x8700 [ 420.478702][T25900] ? __pfx_nf_tables_commit+0x10/0x10 [ 420.478725][T25900] ? free_large_kmalloc+0x13a/0x1f0 [ 420.478751][T25900] ? nf_tables_newrule+0x23bc/0x2890 [ 420.478778][T25900] ? __pfx_nf_tables_newrule+0x10/0x10 [ 420.478808][T25900] nfnetlink_rcv+0x1a4b/0x2520 [ 420.478846][T25900] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 420.478877][T25900] ? ref_tracker_free+0x63a/0x7d0 [ 420.478916][T25900] ? __netlink_deliver_tap+0x807/0x850 [ 420.478942][T25900] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.478970][T25900] ? lock_release+0x4b/0x3e0 [ 420.479001][T25900] netlink_unicast+0x82c/0x9e0 [ 420.479030][T25900] ? __pfx_netlink_unicast+0x10/0x10 [ 420.479056][T25900] ? netlink_sendmsg+0x642/0xb30 [ 420.479081][T25900] ? skb_put+0x11b/0x210 [ 420.479100][T25900] netlink_sendmsg+0x805/0xb30 [ 420.479132][T25900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.479162][T25900] ? aa_sock_msg_perm+0xf1/0x1d0 [ 420.479180][T25900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.479202][T25900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.479230][T25900] __sock_sendmsg+0x219/0x270 [ 420.479254][T25900] ____sys_sendmsg+0x505/0x830 [ 420.479277][T25900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.479301][T25900] ? import_iovec+0x74/0xa0 [ 420.479324][T25900] ___sys_sendmsg+0x21f/0x2a0 [ 420.479345][T25900] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.479380][T25900] ? __fget_files+0x2a/0x420 [ 420.479407][T25900] ? __fget_files+0x3a0/0x420 [ 420.479439][T25900] __x64_sys_sendmsg+0x19b/0x260 [ 420.479460][T25900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.479484][T25900] ? __pfx_ksys_write+0x10/0x10 [ 420.479517][T25900] ? rcu_is_watching+0x15/0xb0 [ 420.479544][T25900] ? rcu_is_watching+0x15/0xb0 [ 420.479564][T25900] do_syscall_64+0xfa/0x3b0 [ 420.479592][T25900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.479612][T25900] ? clear_bhb_loop+0x60/0xb0 [ 420.479633][T25900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.479652][T25900] RIP: 0033:0x7f5c7198ebe9 [ 420.479671][T25900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.479688][T25900] RSP: 002b:00007f5c727c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.479713][T25900] RAX: ffffffffffffffda RBX: 00007f5c71bb5fa0 RCX: 00007f5c7198ebe9 [ 420.479728][T25900] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 420.479741][T25900] RBP: 00007f5c727c9090 R08: 0000000000000000 R09: 0000000000000000 [ 420.479753][T25900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 420.479766][T25900] R13: 00007f5c71bb6038 R14: 00007f5c71bb5fa0 R15: 00007fffa8486468 [ 420.479788][T25900] [ 420.906057][T25903] netlink: 'syz.3.5921': attribute type 3 has an invalid length. [ 420.935683][T25912] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.5924'. [ 420.958817][ T55] block nbd2: Possible stuck request ffff888025447000: control (read@0,1024B). Runtime 210 seconds [ 420.969778][ T55] block nbd2: Possible stuck request ffff8880254471c0: control (read@1024,1024B). Runtime 210 seconds [ 420.981465][ T55] block nbd2: Possible stuck request ffff888025447380: control (read@2048,1024B). Runtime 210 seconds [ 420.993157][ T55] block nbd2: Possible stuck request ffff888025447540: control (read@3072,1024B). Runtime 210 seconds [ 420.993423][T25913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5925'. [ 421.209683][T25934] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20001 [ 421.299494][T25942] FAULT_INJECTION: forcing a failure. [ 421.299494][T25942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.302207][T25941] netlink: 'syz.3.5935': attribute type 21 has an invalid length. [ 421.331769][T25942] CPU: 0 UID: 0 PID: 25942 Comm: syz.2.5934 Not tainted syzkaller #0 PREEMPT(full) [ 421.331798][T25942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.331810][T25942] Call Trace: [ 421.331817][T25942] [ 421.331824][T25942] dump_stack_lvl+0x189/0x250 [ 421.331851][T25942] ? __pfx____ratelimit+0x10/0x10 [ 421.331876][T25942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.331898][T25942] ? __pfx__printk+0x10/0x10 [ 421.331924][T25942] ? rcu_is_watching+0x15/0xb0 [ 421.331944][T25942] should_fail_ex+0x414/0x560 [ 421.331970][T25942] _copy_to_user+0x31/0xb0 [ 421.331991][T25942] simple_read_from_buffer+0xe1/0x170 [ 421.332019][T25942] proc_fail_nth_read+0x1b3/0x220 [ 421.332041][T25942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.332062][T25942] ? rw_verify_area+0x2a6/0x4d0 [ 421.332084][T25942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.332104][T25942] vfs_read+0x200/0xa30 [ 421.332125][T25942] ? fdget_pos+0x247/0x320 [ 421.332145][T25942] ? __pfx___mutex_lock+0x10/0x10 [ 421.332181][T25942] ? __pfx_vfs_read+0x10/0x10 [ 421.332208][T25942] ? __fget_files+0x3a0/0x420 [ 421.332235][T25942] ? __fget_files+0x2a/0x420 [ 421.332265][T25942] ksys_read+0x145/0x250 [ 421.332288][T25942] ? __pfx_ksys_read+0x10/0x10 [ 421.332309][T25942] ? rcu_is_watching+0x15/0xb0 [ 421.332328][T25942] ? rcu_is_watching+0x15/0xb0 [ 421.332343][T25942] do_syscall_64+0xfa/0x3b0 [ 421.332366][T25942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.332382][T25942] ? clear_bhb_loop+0x60/0xb0 [ 421.332399][T25942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.332415][T25942] RIP: 0033:0x7f5c7198d5fc [ 421.332431][T25942] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 421.332446][T25942] RSP: 002b:00007f5c727c9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.332467][T25942] RAX: ffffffffffffffda RBX: 00007f5c71bb5fa0 RCX: 00007f5c7198d5fc [ 421.332481][T25942] RDX: 000000000000000f RSI: 00007f5c727c90a0 RDI: 0000000000000004 [ 421.332494][T25942] RBP: 00007f5c727c9090 R08: 0000000000000000 R09: 0000000000000000 [ 421.332505][T25942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 421.332516][T25942] R13: 00007f5c71bb6038 R14: 00007f5c71bb5fa0 R15: 00007fffa8486468 [ 421.332537][T25942] [ 421.574583][T25941] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5935'. [ 421.639207][T25954] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5938'. [ 421.650191][T25954] netlink: 'syz.3.5938': attribute type 1 has an invalid length. [ 421.728463][T25958] vlan6: entered allmulticast mode [ 421.741391][T25962] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5942'. [ 421.741632][T25958] veth0_to_bond: entered allmulticast mode [ 421.821409][T25971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5943'. [ 422.048009][T25985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.201800][ T123] block nbd4: Possible stuck request ffff888025535080: control (read@0,1024B). Runtime 120 seconds [ 422.213705][ T123] block nbd4: Possible stuck request ffff888025535240: control (read@1024,1024B). Runtime 120 seconds [ 422.225226][ T123] block nbd4: Possible stuck request ffff888025535400: control (read@2048,1024B). Runtime 120 seconds [ 422.237607][ T123] block nbd4: Possible stuck request ffff8880255355c0: control (read@3072,1024B). Runtime 120 seconds [ 422.473134][T26000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5951'. [ 422.684421][T26022] netlink: 'syz.4.5957': attribute type 11 has an invalid length. [ 422.771622][T26026] bridge_slave_0: entered promiscuous mode [ 422.973712][T26043] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 423.067992][T26048] netlink: 'syz.2.5965': attribute type 1 has an invalid length. [ 423.083873][ T1037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.113329][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.113395][ T1037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.139293][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.147459][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.167809][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.175556][ T1037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 423.186877][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 423.225293][T26048] 8021q: adding VLAN 0 to HW filter on device bond10 [ 423.236515][ T1037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.249608][ T1037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.260084][ T1037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 423.277445][T26054] bond10 (unregistering): Released all slaves [ 423.290068][T26057] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 423.337241][ T1037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.363758][ T1037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.374983][ T1037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 423.399038][T26052] hsr0 speed is unknown, defaulting to 1000 [ 423.423686][T26052] lo speed is unknown, defaulting to 1000 [ 423.603351][ T1037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.631461][ T1037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.652507][ T1037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 423.700298][T26078] dummy0: left promiscuous mode [ 423.806318][T26089] bond5: (slave ip6gretap1): Releasing backup interface [ 423.816563][T26089] bond5: (slave ip6gretap1): the permanent HWaddr of slave - 02:3a:31:a0:0c:e0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 423.915898][T26089] bond5: (slave veth5): Releasing backup interface [ 423.935701][T26089] bond9: (slave macvlan2): Releasing backup interface [ 424.189358][ T1037] bridge_slave_0: left allmulticast mode [ 424.197108][ T1037] bridge_slave_0: left promiscuous mode [ 424.203276][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.206547][ T13] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 424.432673][ T1037] dvmrp0 (unregistering): left allmulticast mode [ 424.669065][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.683218][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.695099][ T1037] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 424.705787][ T1037] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 424.714803][ T1037] bond0 (unregistering): (slave team0): Releasing backup interface [ 424.724238][ T1037] bond0 (unregistering): Released all slaves [ 424.735629][ T1037] bond1 (unregistering): Released all slaves [ 424.744845][ T1037] bond2 (unregistering): Released all slaves [ 424.756983][ T1037] bond3 (unregistering): Released all slaves [ 424.768493][ T1037] bond4 (unregistering): Released all slaves [ 424.780040][ T1037] bond5 (unregistering): Released all slaves [ 424.797051][ T1037] bond6 (unregistering): (slave bond7): Releasing backup interface [ 424.806663][ T1037] bond7 (unregistering): left promiscuous mode [ 424.813314][ T1037] bond7 (unregistering): left allmulticast mode [ 424.820849][ T1037] bond6 (unregistering): Released all slaves [ 424.834393][ T1037] bond7 (unregistering): Released all slaves [ 424.845627][ T1037] bond8 (unregistering): Released all slaves [ 424.867137][T26118] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 424.884017][T26052] lo speed is unknown, defaulting to 1000 [ 424.962641][ T1037] : left promiscuous mode [ 425.042433][ T1037] tipc: Disabling bearer [ 425.060606][ T1037] tipc: Disabling bearer [ 425.105556][ T1037] tipc: Left network mode [ 425.240988][ T5870] Bluetooth: hci2: command tx timeout [ 425.292558][T26052] chnl_net:caif_netlink_parms(): no params data found [ 425.445285][T26176] __nla_validate_parse: 13 callbacks suppressed [ 425.445311][T26176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5999'. [ 425.462818][T26176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5999'. [ 425.477475][T26184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6000'. [ 425.560190][T26197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6002'. [ 425.595912][T26198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6003'. [ 425.790139][T26052] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.816196][T26052] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.823811][T26052] bridge_slave_0: entered allmulticast mode [ 425.837613][T26052] bridge_slave_0: entered promiscuous mode [ 425.858104][ T1037] hsr_slave_0: left promiscuous mode [ 425.867749][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.877042][T26213] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 425.877286][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.896517][ T1037] veth1_macvtap: left promiscuous mode [ 425.903335][ T1037] veth0_macvtap: left promiscuous mode [ 425.908959][ T1037] veth1_vlan: left promiscuous mode [ 425.914597][ T1037] veth0_vlan: left promiscuous mode [ 426.057826][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 426.074463][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 426.134882][T26052] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.143762][T26052] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.154558][T26052] bridge_slave_1: entered allmulticast mode [ 426.162266][T26052] bridge_slave_1: entered promiscuous mode [ 426.206153][T26052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.217897][T26208] hsr0 speed is unknown, defaulting to 1000 [ 426.220736][T26052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.241929][T26206] hsr0 speed is unknown, defaulting to 1000 [ 426.250132][T26208] lo speed is unknown, defaulting to 1000 [ 426.252399][T26052] team0: Port device team_slave_0 added [ 426.265573][T26052] team0: Port device team_slave_1 added [ 426.306786][T26052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.314303][T26052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.342703][T26216] netlink: 'syz.2.6007': attribute type 1 has an invalid length. [ 426.344910][T26052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.354121][T26216] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6007'. [ 426.370317][T26052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.378340][T26052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.407628][T26052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.411730][T26216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6007'. [ 426.441933][T26206] lo speed is unknown, defaulting to 1000 [ 426.526521][T26052] hsr_slave_0: entered promiscuous mode [ 426.542386][T26052] hsr_slave_1: entered promiscuous mode [ 426.548777][T26052] debugfs: 'hsr0' already exists in 'hsr' [ 426.561639][T26052] Cannot create hsr debugfs directory [ 426.598176][T26225] netlink: 'syz.4.6010': attribute type 3 has an invalid length. [ 426.653881][ T1037] IPVS: stop unused estimator thread 0... [ 426.857740][T26234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6012'. [ 426.879204][T26208] lo speed is unknown, defaulting to 1000 [ 426.911808][T26234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6012'. [ 426.936377][T26238] netlink: 'syz.2.6015': attribute type 1 has an invalid length. [ 427.018137][T26245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6016'. [ 427.301754][T26206] lo speed is unknown, defaulting to 1000 [ 427.320683][ T5870] Bluetooth: hci2: command tx timeout [ 427.517803][T26278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.401177][ T5870] Bluetooth: hci2: command tx timeout [ 430.643692][T26278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.670304][T26052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 430.704272][T26052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 430.997512][T26052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.029585][T26052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.196837][T26052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.225780][T26052] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.240323][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.247542][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.283863][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.291081][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.482212][ T5870] Bluetooth: hci2: command tx timeout [ 431.565997][T26052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.648125][T26052] veth0_vlan: entered promiscuous mode [ 431.678428][T26052] veth1_vlan: entered promiscuous mode [ 431.683537][T26324] netlink: 'syz.4.6038': attribute type 1 has an invalid length. [ 431.699651][T26052] veth0_macvtap: entered promiscuous mode [ 431.747862][T26326] __nla_validate_parse: 1 callbacks suppressed [ 431.747884][T26326] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6039'. [ 431.860613][T26052] veth1_macvtap: entered promiscuous mode [ 431.895960][T26328] bond16: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 431.914718][T26328] bond16: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 431.926722][T26328] bond16: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 431.948532][T26327] bond16: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 431.963754][T26327] bond16: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 431.983558][T26333] dvmrp1: left allmulticast mode [ 431.997940][T26336] netlink: 'syz.2.6041': attribute type 4 has an invalid length. [ 432.018078][ T5937] lo speed is unknown, defaulting to 1000 [ 432.050115][T26052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.073433][T26052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.076552][ T5937] syz2: Port: 1 Link DOWN [ 432.095090][T26340] netlink: 'syz.2.6043': attribute type 6 has an invalid length. [ 432.114234][ T6878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.165868][ T6878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.207133][ T6878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.245639][ T6878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.306847][T26345] bond17: entered promiscuous mode [ 432.317775][T26345] bond17: entered allmulticast mode [ 432.326048][T26345] 8021q: adding VLAN 0 to HW filter on device bond17 [ 432.333987][T26345] bridge1: port 1(bond17) entered blocking state [ 432.341980][T26345] bridge1: port 1(bond17) entered disabled state [ 432.379088][ T6722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.396029][ T6722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.438094][ T6722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.482578][ T6722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.499218][T26365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.971747][T26390] netlink: 'syz.4.6057': attribute type 1 has an invalid length. [ 433.050215][ T6722] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.070716][ T6722] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.080017][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.083341][ T6722] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.097611][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.106641][ T5184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.123723][ T6722] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.133635][ T5184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.142427][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.179908][T26399] hsr0 speed is unknown, defaulting to 1000 [ 433.188094][T26399] lo speed is unknown, defaulting to 1000 [ 433.389931][T26415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6064'. [ 433.452606][T26422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6067'. [ 433.562641][ T5184] Bluetooth: hci2: command tx timeout [ 433.735823][T26426] pimreg: entered allmulticast mode [ 433.756617][T26399] lo speed is unknown, defaulting to 1000 [ 433.822081][T26444] netlink: 'syz.4.6071': attribute type 1 has an invalid length. [ 433.971285][T26458] netlink: 'syz.4.6074': attribute type 7 has an invalid length. [ 434.010140][T26399] chnl_net:caif_netlink_parms(): no params data found [ 434.021318][ T6722] nci: nci_rx_work: unknown MT 0x6 [ 434.066476][T26399] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.074393][T26399] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.082288][T26399] bridge_slave_0: entered allmulticast mode [ 434.088976][T26399] bridge_slave_0: entered promiscuous mode [ 434.096245][T26399] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.103857][T26399] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.111585][T26399] bridge_slave_1: entered allmulticast mode [ 434.118291][T26399] bridge_slave_1: entered promiscuous mode [ 434.139729][T26399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.155665][T26399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.179379][T26399] team0: Port device team_slave_0 added [ 434.187648][T26399] team0: Port device team_slave_1 added [ 434.209919][T26399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.217432][T26399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.244000][T26399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.258229][T26399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.265524][T26399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.292901][T26399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.324493][T26399] hsr_slave_0: entered promiscuous mode [ 434.331278][T26399] hsr_slave_1: entered promiscuous mode [ 434.337317][T26399] debugfs: 'hsr0' already exists in 'hsr' [ 434.343149][T26399] Cannot create hsr debugfs directory [ 434.412630][T26399] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.478658][T26399] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.554429][T26399] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.610892][T26399] bond0: (slave netdevsim0): Releasing backup interface [ 434.631173][T26399] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 434.650317][T26399] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.783991][T26399] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 434.796587][T26399] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 434.833811][T26399] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 434.847482][T26399] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 434.984913][T26491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6084'. [ 434.998437][T26399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.025196][T26399] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.039392][T26491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6084'. [ 435.058572][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.065738][ T6878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.095229][T26494] tipc: Enabling of bearer rejected, failed to enable media [ 435.116168][ T6722] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.123716][ T6722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.161070][ T5184] Bluetooth: hci1: command tx timeout [ 435.197150][T26502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6088'. [ 435.243523][T26505] sit0: entered promiscuous mode [ 435.257593][T26505] netlink: 'syz.4.6089': attribute type 1 has an invalid length. [ 435.266933][T26505] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6089'. [ 435.284008][T26509] netlink: 'syz.4.6089': attribute type 1 has an invalid length. [ 435.293353][T26509] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6089'. [ 435.304219][T26513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6088'. [ 435.318311][T26502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.466684][T26525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6092'. [ 435.468790][T26399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.498472][T26524] netlink: 'syz.1.6093': attribute type 5 has an invalid length. [ 435.565250][T26399] veth0_vlan: entered promiscuous mode [ 435.600807][T26399] veth1_vlan: entered promiscuous mode [ 435.625653][T26399] veth0_macvtap: entered promiscuous mode [ 435.635722][T26399] veth1_macvtap: entered promiscuous mode [ 435.685015][T26399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.736279][T26399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.782107][ T6887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.813162][ T6887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.837908][ T6887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.853959][ T5850] udevd[5850]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 435.894588][ T6887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.016373][ T6892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.033939][ T6892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.063314][ T6887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.076254][ T6887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.238368][T26571] team0 (unregistering): Port device team_slave_0 removed [ 436.267111][T26571] team0 (unregistering): Port device team_slave_1 removed [ 436.897039][T26617] netlink: 'syz.4.6114': attribute type 6 has an invalid length. [ 436.962887][T26615] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 436.972128][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.982396][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.992219][T26615] gretap1: entered promiscuous mode [ 436.999487][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 437.006766][T26615] gretap1: entered allmulticast mode [ 437.032643][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 437.045674][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 437.144660][T26618] hsr0 speed is unknown, defaulting to 1000 [ 437.168279][T26618] lo speed is unknown, defaulting to 1000 [ 437.242004][ T5184] Bluetooth: hci1: command tx timeout [ 437.318350][T26641] __nla_validate_parse: 5 callbacks suppressed [ 437.318371][T26641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6124'. [ 437.527960][T26618] lo speed is unknown, defaulting to 1000 [ 437.677476][T26665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6130'. [ 437.782387][T26618] chnl_net:caif_netlink_parms(): no params data found [ 437.878591][T26618] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.891093][T26618] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.909046][T26618] bridge_slave_0: entered allmulticast mode [ 437.918367][T26618] bridge_slave_0: entered promiscuous mode [ 437.927175][T26618] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.934811][T26618] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.942304][T26618] bridge_slave_1: entered allmulticast mode [ 437.949631][T26618] bridge_slave_1: entered promiscuous mode [ 438.032542][T26618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.045615][T26618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.086092][T26618] team0: Port device team_slave_0 added [ 438.098232][T26618] team0: Port device team_slave_1 added [ 438.153994][T26618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.171056][T26618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.199109][T26618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.219524][T26618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.221822][T26700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 438.238556][T26700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 438.246851][T26700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 438.256466][T26618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.270604][T26700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 438.289698][T26618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.293199][T26700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 438.316746][T26700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 438.325104][T26700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 438.334908][T26704] veth1_macvtap: left promiscuous mode [ 438.360018][T26700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 438.367448][T26700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 438.374999][T26700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 438.382622][T26704] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.390215][T26704] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.400290][T26708] netlink: 'syz.4.6143': attribute type 1 has an invalid length. [ 438.406057][T26618] hsr_slave_0: entered promiscuous mode [ 438.418404][T26618] hsr_slave_1: entered promiscuous mode [ 438.425033][T26618] debugfs: 'hsr0' already exists in 'hsr' [ 438.431652][T26618] Cannot create hsr debugfs directory [ 438.464466][T26713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6143'. [ 438.465632][T26708] 8021q: adding VLAN 0 to HW filter on device bond18 [ 438.514227][T26713] bond18 (unregistering): Released all slaves [ 438.720741][T26618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.732587][T26618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.825818][T26733] netlink: 'syz.3.6150': attribute type 23 has an invalid length. [ 438.843981][T26618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.858929][T26618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.936660][T26618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.965282][T26618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.020228][T26618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.031385][T26618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.081426][ T5184] Bluetooth: hci4: command tx timeout [ 439.189701][T26618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 439.212540][T26618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 439.233030][T26763] team0: Device gtp0 is of different type [ 439.254603][T26618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 439.274240][T26767] netlink: 'syz.3.6160': attribute type 1 has an invalid length. [ 439.284510][T26767] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.6160'. [ 439.297651][T26618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 439.320670][ T5184] Bluetooth: hci1: command tx timeout [ 439.414189][T26774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6161'. [ 439.431640][T26618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.457038][T26774] team_slave_1: entered promiscuous mode [ 439.477394][T26618] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.495914][ T6722] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.503104][ T6722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.532761][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.540127][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.779318][T26618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.837223][T26618] veth0_vlan: entered promiscuous mode [ 439.855692][T26618] veth1_vlan: entered promiscuous mode [ 439.898018][T26618] veth0_macvtap: entered promiscuous mode [ 439.909809][T26618] veth1_macvtap: entered promiscuous mode [ 439.938640][T26618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.954341][T26618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.973581][ T6878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.984156][ T6878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.997792][ T6878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.017291][ T6878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.107892][ T6892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.137995][ T6892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.168649][ T6892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.187655][ T6892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.549147][T26838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6179'. [ 440.601776][T26838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6179'. [ 440.863751][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 440.872832][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 440.873768][ T6892] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.890284][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 440.904813][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 440.912574][ T6892] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.913300][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 440.945549][T26847] netlink: 'syz.0.6182': attribute type 1 has an invalid length. [ 440.953737][T26847] netlink: 16110 bytes leftover after parsing attributes in process `syz.0.6182'. [ 440.963648][T26852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6183'. [ 440.997557][ T6892] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.032932][T26859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6185'. [ 441.043627][ T6892] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.146726][ T6892] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.161101][ T5870] Bluetooth: hci4: command tx timeout [ 441.176359][ T6892] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.203894][T26849] hsr0 speed is unknown, defaulting to 1000 [ 441.204654][T26871] tipc: Enabling of bearer rejected, failed to enable media [ 441.221946][T26870] tipc: Enabling of bearer rejected, failed to enable media [ 441.235811][T26849] lo speed is unknown, defaulting to 1000 [ 441.296710][ T6892] bond0: (slave netdevsim0): Releasing backup interface [ 441.306359][ T6892] bond0: (slave netdevsim0): the permanent HWaddr of slave - 96:9c:d4:54:9d:58 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 441.341753][ T6892] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.368288][ T6892] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.401958][ T5870] Bluetooth: hci1: command tx timeout [ 441.436275][T26876] netlink: 'syz.1.6191': attribute type 10 has an invalid length. [ 441.447767][T26876] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 441.546866][ T6892] bridge1: port 1(bond17) entered disabled state [ 441.593175][ T6892] tipc: Resetting bearer [ 441.770794][ T6892] tipc: Disabling bearer [ 441.778122][ T6892] bond6 (unregistering): (slave gretap1): Releasing active interface [ 441.787777][ T6892] gretap1 (unregistering): left promiscuous mode [ 441.794431][ T6892] gretap1 (unregistering): left allmulticast mode [ 441.818829][ T6892] bond5 (unregistering): (slave geneve3): Releasing active interface [ 441.829497][ T6892] bond4 (unregistering): (slave geneve2): Releasing active interface [ 441.846160][ T6892] team0: Port device geneve0 removed [ 442.047251][ T6892] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 442.058571][ T6892] bond0 (unregistering): Released all slaves [ 442.073902][ T6892] bond1 (unregistering): Released all slaves [ 442.090354][ T6892] bond2 (unregistering): Released all slaves [ 442.106782][ T6892] bond3 (unregistering): (slave veth3): Releasing active interface [ 442.118895][ T6892] bond3 (unregistering): Released all slaves [ 442.130052][ T6892] bond4 (unregistering): Released all slaves [ 442.140447][ T6892] bond5 (unregistering): Released all slaves [ 442.155179][ T6892] bond6 (unregistering): Released all slaves [ 442.165140][ T6892] bond7 (unregistering): Released all slaves [ 442.181997][ T6892] bond8 (unregistering): Released all slaves [ 442.194931][ T6892] bond9 (unregistering): Released all slaves [ 442.206849][ T6892] bond10 (unregistering): Released all slaves [ 442.217747][ T6892] bond11 (unregistering): Released all slaves [ 442.231688][ T6892] bond12 (unregistering): Released all slaves [ 442.244312][ T6892] team0: Port device bond13 removed [ 442.255278][ T6892] bond13 (unregistering): Released all slaves [ 442.266991][ T6892] bond14 (unregistering): Released all slaves [ 442.279227][ T6892] bond15 (unregistering): Released all slaves [ 442.288551][ T6892] bond16 (unregistering): Released all slaves [ 442.301953][ T6892] bond17 (unregistering): Released all slaves [ 442.320522][T26889] batman_adv: batadv0: Adding interface: dummy0 [ 442.326907][T26889] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.354501][T26889] batman_adv: batadv0: Interface activated: dummy0 [ 442.366170][T26849] lo speed is unknown, defaulting to 1000 [ 442.569647][T26910] __nla_validate_parse: 2 callbacks suppressed [ 442.569668][T26910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6200'. [ 442.652831][T26919] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6202'. [ 442.687277][T26923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6204'. [ 442.729751][T26849] chnl_net:caif_netlink_parms(): no params data found [ 442.885743][T26939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6205'. [ 442.946464][T26849] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.964632][T26849] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.979506][T26849] bridge_slave_0: entered allmulticast mode [ 442.987389][T26849] bridge_slave_0: entered promiscuous mode [ 443.003459][T26849] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.006332][ T5870] Bluetooth: hci0: command tx timeout [ 443.020254][T26849] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.027847][T26849] bridge_slave_1: entered allmulticast mode [ 443.035694][T26849] bridge_slave_1: entered promiscuous mode [ 443.067715][T26849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.080170][T26849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.125482][T26849] team0: Port device team_slave_0 added [ 443.134387][T26849] team0: Port device team_slave_1 added [ 443.167880][T26849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.180172][T26849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.212533][T26849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.228350][T26849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.238180][T26849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.264232][ T5870] Bluetooth: hci4: command tx timeout [ 443.271806][T26849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.321946][T26849] hsr_slave_0: entered promiscuous mode [ 443.329273][T26849] hsr_slave_1: entered promiscuous mode [ 443.337205][T26849] debugfs: 'hsr0' already exists in 'hsr' [ 443.347943][T26849] Cannot create hsr debugfs directory [ 443.564858][T26943] netlink: 'syz.3.6207': attribute type 2 has an invalid length. [ 443.673087][T26945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6208'. [ 443.673086][T26946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6208'. [ 443.835621][ T6892] tipc: Disabling bearer [ 443.841188][ T6892] tipc: Left network mode [ 443.859219][T26849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 443.873143][T26849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 443.893624][T26849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 443.902024][ T6892] IPVS: stopping backup sync thread 25190 ... [ 443.919821][T26958] netlink: 'syz.1.6212': attribute type 1 has an invalid length. [ 443.921660][T26849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 443.939327][T26958] netlink: 'syz.1.6212': attribute type 2 has an invalid length. [ 443.948082][T26958] netlink: 'syz.1.6212': attribute type 2 has an invalid length. [ 443.958994][T26958] netlink: 'syz.1.6212': attribute type 1 has an invalid length. [ 443.968779][ T55] block nbd0: Possible stuck request ffff888024fb7000: control (read@0,1024B). Runtime 330 seconds [ 443.970609][T26958] netlink: 'syz.1.6212': attribute type 1 has an invalid length. [ 443.979991][ T55] block nbd0: Possible stuck request ffff888024fb71c0: control (read@1024,1024B). Runtime 330 seconds [ 443.999552][ T55] block nbd0: Possible stuck request ffff888024fb7380: control (read@2048,1024B). Runtime 330 seconds [ 444.011981][ T55] block nbd0: Possible stuck request ffff888024fb7540: control (read@3072,1024B). Runtime 330 seconds [ 444.259820][T26973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6215'. [ 444.286835][T26849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.304079][ T6892] batadv_slave_1: left promiscuous mode [ 444.312351][ T6892] hsr_slave_0: left promiscuous mode [ 444.318324][ T6892] hsr_slave_1: left promiscuous mode [ 444.330970][ T6892] veth1_macvtap: left promiscuous mode [ 444.336612][ T6892] veth0_macvtap: left promiscuous mode [ 444.383800][ T6892] pimreg (unregistering): left allmulticast mode [ 444.405241][ T6892] team0 (unregistering): Port device batadv1 removed [ 444.527676][T26981] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 444.535712][T26979] netlink: 'syz.0.6217': attribute type 4 has an invalid length. [ 444.560879][T26849] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.574940][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.582103][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.611525][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.618688][ T6878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.836837][T26849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.850283][ T6892] IPVS: stop unused estimator thread 0... [ 445.073611][T26849] veth0_vlan: entered promiscuous mode [ 445.081806][ T5870] Bluetooth: hci0: command tx timeout [ 445.106610][T26849] veth1_vlan: entered promiscuous mode [ 445.154067][T26849] veth0_macvtap: entered promiscuous mode [ 445.167305][T26849] veth1_macvtap: entered promiscuous mode [ 445.186611][T26849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.215118][T26849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.239408][ T6892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.283631][ T6892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.298395][ T6892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.322783][ T5870] Bluetooth: hci4: command tx timeout [ 445.323985][ T6892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.409709][ T6892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.422619][ T6892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.468561][ T6878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.487771][ T6878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.549593][T27025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6229'. [ 445.604923][T27032] netlink: 'syz.4.6175': attribute type 1 has an invalid length. [ 445.612785][T27032] netlink: 'syz.4.6175': attribute type 1 has an invalid length. [ 445.718400][T27042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6233'. [ 445.956956][T27060] nbd: socks must be embedded in a SOCK_ITEM attr [ 445.976488][T27060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6236'. [ 446.057007][T27068] : renamed from bridge_slave_0 (while UP) [ 446.372222][T27097] tipc: Started in network mode [ 446.380162][T27097] tipc: Node identity , cluster identity 4711 [ 446.389232][T27097] tipc: Failed to obtain node identity [ 446.396034][T27097] tipc: Enabling of bearer rejected, failed to enable media [ 446.427127][T27097] syzkaller0: entered promiscuous mode [ 446.434589][T27097] syzkaller0: entered allmulticast mode [ 446.447288][T27101] 8021q: VLANs not supported on ip_vti0 [ 446.657107][T27115] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 447.161302][ T5870] Bluetooth: hci0: command tx timeout [ 447.746728][T27149] netlink: 'syz.1.6263': attribute type 1 has an invalid length. [ 447.754822][T27149] __nla_validate_parse: 2 callbacks suppressed [ 447.754843][T27149] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6263'. [ 447.919780][T27169] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6269'. [ 448.048719][T27183] net_ratelimit: 24 callbacks suppressed [ 448.048743][T27183] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 448.179132][T27193] Bluetooth: MGMT ver 1.23 [ 448.247887][T27197] tipc: Started in network mode [ 448.257532][T27197] tipc: Node identity 36b6958ff44c, cluster identity 4711 [ 448.258803][T27201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6283'. [ 448.265578][T27197] tipc: Enabled bearer , priority 0 [ 448.348824][T27197] syzkaller0: MTU too low for tipc bearer [ 448.356444][T27197] tipc: Disabling bearer [ 448.386759][T27211] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6283'. [ 448.509249][T27215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6286'. [ 448.564074][T27218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6289'. [ 448.701251][T27221] validate_nla: 3 callbacks suppressed [ 448.701274][T27221] netlink: 'syz.1.6290': attribute type 1 has an invalid length. [ 448.739778][T27221] nbd: error processing sock list [ 448.755425][T27221] block nbd3: shutting down sockets [ 448.868907][ T5184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 448.876652][ T5184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 448.884574][ T5184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 448.893580][ T5184] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 448.915987][ T5184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 448.987829][T27233] hsr0 speed is unknown, defaulting to 1000 [ 448.995083][T27233] lo speed is unknown, defaulting to 1000 [ 449.240692][ T5870] Bluetooth: hci0: command tx timeout [ 449.289086][T27233] lo speed is unknown, defaulting to 1000 [ 449.485452][T27260] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6301'. [ 449.513705][T27233] chnl_net:caif_netlink_parms(): no params data found [ 449.667598][T27267] netlink: 'syz.1.6304': attribute type 10 has an invalid length. [ 449.721661][T27233] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.722215][ T31] INFO: task udevd:6109 blocked for more than 143 seconds. [ 449.736618][T27233] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.755135][T27233] bridge_slave_0: entered allmulticast mode [ 449.771824][T27233] bridge_slave_0: entered promiscuous mode [ 449.782407][T27233] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.789612][T27233] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.794166][ T31] Not tainted syzkaller #0 [ 449.798857][T27233] bridge_slave_1: entered allmulticast mode [ 449.809389][T27233] bridge_slave_1: entered promiscuous mode [ 449.850394][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 449.892365][ T31] task:udevd state:D stack:21584 pid:6109 tgid:6109 ppid:5233 task_flags:0x400140 flags:0x00004006 [ 449.908641][ T31] Call Trace: [ 449.912047][ T31] [ 449.915036][ T31] __schedule+0x1798/0x4cc0 [ 449.919622][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 449.926097][ T31] ? __pfx___schedule+0x10/0x10 [ 449.931216][ T31] ? do_raw_spin_lock+0x121/0x290 [ 449.936279][ T31] ? schedule+0x91/0x360 [ 449.941011][ T31] ? rcu_is_watching+0x15/0xb0 [ 449.945892][ T31] ? rcu_is_watching+0x15/0xb0 [ 449.950770][ T31] ? lock_release+0x4b/0x3e0 [ 449.955396][ T31] schedule+0x165/0x360 [ 449.959592][ T31] io_schedule+0x80/0xd0 [ 449.964067][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 449.969385][ T31] ? lock_release+0x4b/0x3e0 [ 449.974399][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 449.981132][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 449.986807][ T31] ? __filemap_get_folio+0x760/0xaf0 [ 449.992215][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 449.997500][ T31] do_read_cache_folio+0x1aa/0x590 [ 450.003005][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 450.008493][ T31] read_part_sector+0xb6/0x2b0 [ 450.013452][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 450.018898][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 450.024651][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 450.031103][ T31] bdev_disk_changed+0x75f/0x14b0 [ 450.036194][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 450.042555][ T31] ? wait_on_inode+0xc0/0x230 [ 450.047286][ T31] blkdev_get_whole+0x380/0x510 [ 450.052258][ T31] bdev_open+0x31e/0xd30 [ 450.056524][ T31] blkdev_open+0x3a8/0x510 [ 450.060963][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 450.066022][ T31] do_dentry_open+0x950/0x13f0 [ 450.071548][ T31] vfs_open+0x3b/0x340 [ 450.075634][ T31] ? path_openat+0x2ecd/0x3830 [ 450.080447][ T31] path_openat+0x2ee5/0x3830 [ 450.085289][ T31] ? arch_stack_walk+0xfc/0x150 [ 450.090178][ T31] ? stack_depot_save_flags+0x40/0x860 [ 450.095800][ T31] ? __pfx_path_openat+0x10/0x10 [ 450.101412][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.107537][ T31] do_filp_open+0x1fa/0x410 [ 450.112387][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 450.117539][ T31] ? _raw_spin_unlock+0x28/0x50 [ 450.123066][ T31] ? alloc_fd+0x64c/0x6c0 [ 450.127585][ T31] do_sys_openat2+0x121/0x1c0 [ 450.132797][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 450.138331][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 450.143776][ T31] ? rcu_is_watching+0x15/0xb0 [ 450.148598][ T31] __x64_sys_openat+0x138/0x170 [ 450.153767][ T31] do_syscall_64+0xfa/0x3b0 [ 450.158848][ T31] ? rcu_is_watching+0x15/0xb0 [ 450.163980][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.170234][ T31] ? clear_bhb_loop+0x60/0xb0 [ 450.174975][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.180964][ T31] RIP: 0033:0x7fe29cca7407 [ 450.185681][ T31] RSP: 002b:00007ffef3e4eaa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 450.194577][ T31] RAX: ffffffffffffffda RBX: 00007fe29d399880 RCX: 00007fe29cca7407 [ 450.203180][ T31] RDX: 00000000000a0800 RSI: 0000560e7b33f3d0 RDI: ffffffffffffff9c [ 450.211351][ T31] RBP: 0000560e7b335910 R08: 0000000000000000 R09: 0000000000000000 [ 450.219459][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560e7b34a830 [ 450.228072][ T31] R13: 0000560e7b343190 R14: 0000000000000000 R15: 0000560e7b34a830 [ 450.236157][ T31] [ 450.239363][ T31] INFO: lockdep is turned off. [ 450.244213][ T31] NMI backtrace for cpu 0 [ 450.244232][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 450.244254][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.244266][ T31] Call Trace: [ 450.244274][ T31] [ 450.244281][ T31] dump_stack_lvl+0x189/0x250 [ 450.244311][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.244334][ T31] ? __pfx__printk+0x10/0x10 [ 450.244365][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 450.244389][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 450.244413][ T31] ? __pfx__printk+0x10/0x10 [ 450.244439][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 450.244467][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 450.244488][ T31] watchdog+0xf93/0xfe0 [ 450.244512][ T31] ? watchdog+0x1de/0xfe0 [ 450.244536][ T31] kthread+0x70e/0x8a0 [ 450.244556][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.244578][ T31] ? __pfx_kthread+0x10/0x10 [ 450.244599][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 450.244623][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.244644][ T31] ? __pfx_kthread+0x10/0x10 [ 450.244664][ T31] ret_from_fork+0x3f9/0x770 [ 450.244684][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 450.244705][ T31] ? __switch_to_asm+0x39/0x70 [ 450.244727][ T31] ? __switch_to_asm+0x33/0x70 [ 450.244750][ T31] ? __pfx_kthread+0x10/0x10 [ 450.244773][ T31] ret_from_fork_asm+0x1a/0x30 [ 450.244804][ T31] [ 450.244812][ T31] Sending NMI from CPU 0 to CPUs 1: [ 450.394847][ C1] NMI backtrace for cpu 1 [ 450.394873][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 450.394891][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.394900][ C1] RIP: 0010:asm_sysvec_call_function_single+0x0/0x20 [ 450.394923][ C1] Code: e6 76 79 0a e9 e1 05 00 00 90 f3 0f 1e fa 0f 01 ca fc 6a ff e8 91 04 00 00 48 89 c4 48 89 e7 e8 f6 75 79 0a e9 c1 05 00 00 90 0f 1e fa 0f 01 ca fc 6a ff e8 71 04 00 00 48 89 c4 48 89 e7 e8 [ 450.394937][ C1] RSP: 0018:ffffc90000197db8 EFLAGS: 000000c2 [ 450.394953][ C1] RAX: bb7f19fa12ff7100 RBX: ffffffff819683b8 RCX: bb7f19fa12ff7100 [ 450.394966][ C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 450.394977][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 450.394988][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38430 [ 450.395000][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 450.395011][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 450.395024][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.395036][ C1] CR2: 00007f94168f0e9c CR3: 000000007d038000 CR4: 00000000003526f0 [ 450.395052][ C1] Call Trace: [ 450.395058][ C1] [ 450.395063][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 450.395085][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 96 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 450.395098][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 450.395111][ C1] default_idle+0x13/0x20 [ 450.395126][ C1] default_idle_call+0x74/0xb0 [ 450.395140][ C1] do_idle+0x1e8/0x510 [ 450.395157][ C1] ? __pfx_do_idle+0x10/0x10 [ 450.395178][ C1] cpu_startup_entry+0x44/0x60 [ 450.395193][ C1] start_secondary+0x101/0x110 [ 450.395214][ C1] common_startup_64+0x13e/0x147 [ 450.395245][ C1] [ 450.396677][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 450.596199][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 450.605318][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.615377][ T31] Call Trace: [ 450.618656][ T31] [ 450.621586][ T31] dump_stack_lvl+0x99/0x250 [ 450.626187][ T31] ? __asan_memcpy+0x40/0x70 [ 450.630785][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.635986][ T31] ? __pfx__printk+0x10/0x10 [ 450.640601][ T31] vpanic+0x281/0x750 [ 450.644692][ T31] ? __pfx_vpanic+0x10/0x10 [ 450.649218][ T31] ? preempt_schedule+0xae/0xc0 [ 450.654130][ T31] ? preempt_schedule_common+0x83/0xd0 [ 450.659791][ T31] panic+0xb9/0xc0 [ 450.663528][ T31] ? __pfx_panic+0x10/0x10 [ 450.667955][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 450.673339][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 450.679674][ T31] watchdog+0xfd2/0xfe0 [ 450.683847][ T31] ? watchdog+0x1de/0xfe0 [ 450.688275][ T31] kthread+0x70e/0x8a0 [ 450.692366][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.697068][ T31] ? __pfx_kthread+0x10/0x10 [ 450.701672][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 450.706907][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.712211][ T31] ? __pfx_kthread+0x10/0x10 [ 450.716923][ T31] ret_from_fork+0x3f9/0x770 [ 450.721536][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 450.726746][ T31] ? __switch_to_asm+0x39/0x70 [ 450.731521][ T31] ? __switch_to_asm+0x33/0x70 [ 450.736308][ T31] ? __pfx_kthread+0x10/0x10 [ 450.740933][ T31] ret_from_fork_asm+0x1a/0x30 [ 450.745728][ T31] [ 450.749099][ T31] Kernel Offset: disabled [ 450.753425][ T31] Rebooting in 86400 seconds..