last executing test programs: 11.734425207s ago: executing program 1 (id=4302): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@delnexthop={0x48, 0x69, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x40) 11.581742597s ago: executing program 1 (id=4303): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000000b14010000e0ffffffffffff070001"], 0x28}}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket(0xf, 0x80803, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000640)={r4, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={r4, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}}, [0x9, 0x1, 0x0, 0x20d0b0d1, 0x6, 0x2281, 0x9, 0xb, 0x6f, 0x7fffffff, 0xdfa, 0x3, 0x203, 0x8, 0x80000001]}, &(0x7f0000000240)=0x100) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600110d0000000000000000030000000000000008000a00fe03ffff"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 64) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r6, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f00007d9000/0x8000)=nil, 0x8000, 0x1, 0x80010, r8, 0x90832000) (async) r10 = socket$inet6(0xa, 0x2, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r11) (async) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x50483}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xb}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x17}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x9005}, 0x0) (async, rerun: 32) sendmmsg$inet(r10, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (rerun: 32) 11.003205238s ago: executing program 1 (id=4308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x3f, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10e198a9a456c61b}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r6, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffffffff, 0x45}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40085}, 0x14c54) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1fffffffffffff5b, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x89b0, &(0x7f0000000080)={'macvtap0\x00', 0x2000}) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000180)={'ip_vti0\x00', 0x2000}) 10.525828857s ago: executing program 1 (id=4309): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30}, 0x4004810) r5 = socket(0x10, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x7fffffff, 0x7}, &(0x7f0000000040)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b5001000", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf2510000000840004801300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00003c00078008000200010000000800040001f0ffff080001001e000000080001000e00000008000300a40b0000080004008000000008000400040000001c00078008000400ff000000080001000700000008000200ff0f00004800068022000300c57807ce8c2b9443ecac024a5bf4b660386202d375bc1fb1011ac57935080000040005000f000300d06385241820c4cba0882f000800010003000000040005005000018044000400200001000a004e2000007b06fc00000000000000000000000000000106000000200002000a004e2200001000ff01000000000000000000000000000104000000080003003209000004000780100004800900010073797a300000000058000480540007800800030006000000080003000f000000080001001f000000080001000100000008000400030000000800040009000000080001001b0000000800040008000000080003000500000008000200040000001400098008000100ffffffff08000100000000804c0009800800020046c20000080002005c000000080001000100008008000100020000000800010008000000080002000400000008000200faffffff08000200000000000800010040000000"], 0x1fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) recvmmsg(r8, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000004e40)=""/4111, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000100)=0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x10000, 0x240, 0x60000, r7}, &(0x7f00000000c0)=0x10) 8.419408416s ago: executing program 3 (id=4323): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt(r2, 0x1, 0x2, &(0x7f00000003c0)=""/165, &(0x7f0000000480)=0xa5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmmsg$unix(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) 8.181409991s ago: executing program 3 (id=4326): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) pwrite64(r2, &(0x7f0000000000)="3786211b57cd35bd4a6f12cdf8919b3b", 0x10, 0x4) (async) writev(r1, &(0x7f0000003500)=[{&(0x7f00000035c0)='4', 0x1}, {&(0x7f0000000080)='C', 0x1}, {&(0x7f00000000c0)="d40d", 0x2}], 0x3) 7.975957743s ago: executing program 3 (id=4328): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x30, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2f0}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40005) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f0000000600)={0x9, 0x7}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.769365283s ago: executing program 2 (id=4333): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x305, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x8000000}, 0x0) (async) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xfffffffc}, &(0x7f0000000180)=0x8) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x7}, 0xc) (async) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffa}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r2, &(0x7f0000000280), 0x1, 0x800) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x206}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xb9bd}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x400}]}}}]}, 0x4c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="090b0000000000000000050000000800030089"], 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xc000) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00@\x00', @ANYRES16=0x0, @ANYBLOB="000329bd70007cdbcf25100000002c000180140002007465616d5f736c6176655f300000000014000200776c616e3000"/58], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 6.767381401s ago: executing program 1 (id=4334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000001c0)={0x56ed028a, {{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}}, {{0xa, 0x4e23, 0x3, @private0, 0x2}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x50, 0x10, 0xc03, 0xffffffff, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 6.668004257s ago: executing program 1 (id=4335): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000004) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}, {0xe, 0xd}}}, 0x24}}, 0x4040840) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a30000000000900010073797a300000000008000a400400000420000000080a01040000000000000000010000000900010073797a30"], 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) 5.056965194s ago: executing program 2 (id=4341): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x0, 0x1, 0x2, 0x8001, 0xd626}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000040000000a"], 0x50) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt(r3, 0x1, 0x2, &(0x7f00000003c0)=""/165, &(0x7f0000000480)=0xa5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.904600355s ago: executing program 4 (id=4342): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000000001"], 0xfc}}, 0x0) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 4.68995928s ago: executing program 2 (id=4343): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000680)={0x0, 0x7, 0x3}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmmsg$inet6(r2, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x8, 0x5}, 0xc) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, 0x0, 0x103, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) recvfrom(r4, &(0x7f0000000080)=""/215, 0xd7, 0x40000002, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 4.664770271s ago: executing program 4 (id=4344): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r3}, 0x10) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) (async) socket$alg(0x26, 0x5, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x0) (async) r8 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x2, 0x547b31180522e04c}, {0x0, 0x4, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000007100007e527a0e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r9, &(0x7f0000000740)="8a0d", &(0x7f00000006c0)=""/46}, 0x20) (async) r10 = socket$alg(0x26, 0x5, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (async) bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000180)="11da3c544a6149f44b1a8c3d8a39cc3d630e8ef9170ccf07ef1800322de53ae3b1", 0x21) 4.537483753s ago: executing program 3 (id=4345): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x32) sendmmsg$sock(r1, &(0x7f0000000500)=[{{&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x2, {0x9d539c643fdc67d4, 0xff, 0x2}, 0xff}, 0x18) r9 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) connect(r7, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e21, @broadcast}, 0x0, 0x1, 0x2, 0x2}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}}, 0x8000) 4.22990604s ago: executing program 4 (id=4346): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x16, 0x4, 0x8}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x811) 2.38662711s ago: executing program 2 (id=4348): r0 = socket$pppl2tp(0x18, 0x1, 0x1) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) sendto$inet(r1, &(0x7f0000000200)='%', 0x1, 0x20000805, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x8, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x8}}}}, 0x30) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @private}, 0x2, 0x3, 0x2}}, 0x2e) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6, @ANYBLOB="fda4a7f49d28b93ab4845ce1c08ec5cbb9b40c3e090d35c9f2c19aacdb25c46d54661f9d6bf0e5cb86a9d312a1f930e5bf794262630ee0db4689bdd1892aac3ec03ca6dc8a1cd74659077530a8fb351b15e3b5dd33b5cc2d32f3e31e6a5eac834c86a94060a8221567a87eea0136ddb22f4855358c5cf54acc2de26d21945e259d1760efed36bad8319f35fd76f297d8f62dfc813c74be32a8dd2774fdf8aa842cdd26649bc909dbafae76add2de6c4faa96cb"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.250006415s ago: executing program 2 (id=4349): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) close(r1) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, r3, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) 2.125788991s ago: executing program 2 (id=4350): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket(0x10, 0xa, 0x7a58) recvmsg$unix(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/187, 0xbb}], 0x2, &(0x7f0000000780)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x8000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x70bf27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x0) syz_emit_ethernet(0xdc2, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd8c, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225"}}}}}, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000010000895000000354f0000d578e9f076fe1083e55b8ad3a5c34e45db541359293d6874b8c20f89f0f7df7f2297b286d9954204d4403dd1664a00bf6666d0756f82e4f5ca28cd58714a47974ecd2e4bf01754920b6e7133400f6c47c7dc8d38e2dde689fe4146bcf469e20b3cbe031c1cdbaf9004dc7f8d31f06ae10075a58b3b5874b29f321d57b3ca363e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x15, 0x0, 0x0, 0x0, 0x49000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000, 0x0, 0x1, 0x0, @value=r0}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8084) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020e0000300000000000000000000000030005000000000002000000ac1e000100000000000000000300060000000054ab723e0e764ef60000000000000000000800120026"], 0x80}}, 0x4000000) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r6) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x6c, r10, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8533d1f71521"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4d}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x6c}}, 0x841) 1.861663159s ago: executing program 0 (id=4351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x11eac000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x40}}, 0x0) 1.861108986s ago: executing program 4 (id=4352): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="d88fb769bff2e262fe836a6663d386bc", 0x20) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f00000006c0)) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001680)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1000, @mcast2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)="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", 0xfe1}], 0x1, &(0x7f0000001280)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}}], 0x1, 0x84) 1.565890873s ago: executing program 4 (id=4353): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, r4, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0d, 0xfac01]}]]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140002"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.237850038s ago: executing program 0 (id=4354): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x17f40, 0x20, 0xf, 0x101, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@noop, @noop, @generic={0x82, 0x4, "13f1"}, @ssrr={0x89, 0xb, 0x5c, [@remote, @rand_addr=0x64010102]}]}}}}}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000200)={r2, 0x1, 0x6, @random="c40962b36e3e"}, 0x10) listen(r0, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x1, {0x41, 0x0, 0x2}}, 0xfffffffffffffe6b, 0x0, 0x0, 0x0, 0x0, 0x4008011}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) 1.13127386s ago: executing program 4 (id=4355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x3}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80004, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xd, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xd}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008065}, 0x4008000) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) recvmmsg(r5, &(0x7f00000003c0), 0x0, 0x2000, &(0x7f00000004c0)) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) getsockname(r9, 0x0, &(0x7f0000000040)) (async) syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000001}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x54}}, 0x20008820) 909.985828ms ago: executing program 0 (id=4356): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='dlm_bast\x00', r0}, 0x18) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 747.070296ms ago: executing program 0 (id=4357): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000580)={0x1, 0x2, 0x1000, 0xb, &(0x7f0000000440)="d6e93f0d2f58768d6b48a5", 0xdb, 0x0, &(0x7f0000000480)="181e5a206a744c3b3616c60a5b244668d13eefb3a184b38e03bccab902dec2dfd797623dc1ff5b62966234ae02be1b03a4240ae05d03181fb8fdf57cd1ef71c44f45f5b2f429f1b2fa50a15e53849dd548bf19c42d5b9f23adc15b8bd717956682d95f8bae229c461dd1fb65e600489e16f584014d157242d9d39db20e6307d71ba2e31586d7c67dc65098f0e821924753df3f9cf09a9b0145834702f7449d433fdcb28d134c68331434ffa09d6dc0fe53d7a7bc1b09fbc85cdcb8f2aeb85cdb5a6b3c4b0d5fb454ee79ba8ee47deeadf2ac76f649a0bf6817de3a"}) close(0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="161096792425a7443a62c8f3a50a362038dd0d0ffdd358d9b8c0b9db17805d19522c23014bea6130a4b8b03d05e5c0e523b91bfd87874dbe5ea77939b2bfc6baf099e431c8ffe9942937f76710cdb51724edf73324bd47178dab4a6e381b6fef5448447d28f856c5e8d157da9c6dcea6caec36b6e1ee26171a625a1993d82a", 0x7f}, {&(0x7f00000000c0)="cff2a5", 0x3}, {&(0x7f0000000200)="e9ea6933a2ef0c9a9968fa2b751ed58750a6a217e38d9249521f06707c75ff26c71410fe6995720db1aefbea5a86c404cf23a9a7dfea89d8779c63ae4e3f47caf19a1b4a8ef3a973d049de96f4de86af63cf52d764f9e8c58f74abac64f1ad69c6595d361a682ccebd84cb5f26267218ea72464fb0a8973ef036cb69295dce3904496cf676415cd7df5ccd0869b700f1711214fe1466a6d50e9ae78f2ddeae5e97acdb4d0675bd63f21e872dc0a5a9", 0xaf}, {&(0x7f0000000180)="9a4a0bdf8ecdf5d6c46705fdd78f8ce4c7a4017161", 0x15}, {&(0x7f00000002c0)="f0b6a3a5295596be73fa595d226ac07854e0b608b50c00109614e2149d2edc6e5ea1", 0x22}, {&(0x7f0000000300)="2d908fc13181e4", 0x7}, {&(0x7f0000000340)="cd8d65636da5b9e56744f108e76f0c09b615943e767335c55f90ffb1ad1365809ad0e4d885f933308c95dca828c986935b33c9cca858312e767fc5db85f6884faa5f97c48ddcd76c830cc889a3f8974c26", 0x51}, {&(0x7f0000000cc0)="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", 0x1000}], 0x8) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 496.436533ms ago: executing program 0 (id=4358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630109000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10010}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 277.850648ms ago: executing program 0 (id=4359): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000880)={0x1}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x305) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYBLOB="2d419c2baec0e31fcd23561fa2fdf56cbf0f5ffe96e741f76087b0a8a27ea25f29", @ANYRESHEX, @ANYRESOCT=r3, @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES16=r2], 0x3c}}, 0x0) 201.591543ms ago: executing program 3 (id=4360): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x81764109abc7f5e6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 0s ago: executing program 3 (id=4361): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): m:1357 pagetables:1089 [ 325.902391][T15592] sec_pagetables:0 bounce:0 [ 325.902391][T15592] kernel_misc_reclaimable:0 [ 325.902391][T15592] free:1314263 free_pcp:15301 free_cma:0 [ 326.150802][T15592] Node 0 active_anon:19040kB inactive_anon:0kB active_file:13080kB inactive_file:159584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121196kB dirty:576kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13592kB pagetables:4512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 326.214252][T15592] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 326.250906][T15592] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 326.297150][T15592] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 326.308839][T15592] Node 0 DMA32 free:1346772kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19476kB inactive_anon:0kB active_file:13080kB inactive_file:158004kB unevictable:1536kB writepending:576kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:44404kB local_pcp:24084kB free_cma:0kB [ 326.366865][T15592] lowmem_reserve[]: 0 0 1 1 1 [ 326.379632][T15592] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 326.457683][T15633] __nla_validate_parse: 47 callbacks suppressed [ 326.457706][T15633] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2790'. [ 326.483855][T15592] lowmem_reserve[]: 0 0 0 0 0 [ 326.488663][T15592] Node 1 Normal free:3894900kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15680kB local_pcp:7808kB free_cma:0kB [ 326.548891][T15619] "syz.3.2790" (15619) uses obsolete ecb(arc4) skcipher [ 326.556378][T15592] lowmem_reserve[]: 0 0 0 0 0 [ 326.556442][T15592] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 326.556594][T15592] Node 0 DMA32: 1780*4kB (UME) 669*8kB (UME) 304*16kB (UME) 125*32kB (UME) 8*64kB (UME) 7*128kB (UME) 4*256kB (UM) 3*512kB (UME) 8*1024kB (ME) 3*2048kB (M) 319*4096kB (UM) = 1346264kB [ 326.556808][T15592] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 326.556958][T15592] Node 1 Normal: 215*4kB (UE) 53*8kB (UME) 49*16kB (UME) 167*32kB (UME) 40*64kB (UME) 11*128kB (UME) 4*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3894900kB [ 326.649934][T15592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.661511][T15592] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 326.686253][T15592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.696394][T15592] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 326.706045][T15592] 44570 total pagecache pages [ 326.710754][T15592] 0 pages in swap cache [ 326.715680][T15592] Free swap = 124996kB [ 326.719941][T15592] Total swap = 124996kB [ 326.725369][T15592] 2097051 pages RAM [ 326.729221][T15592] 0 pages HighMem/MovableOnly [ 326.734438][T15592] 425656 pages reserved [ 326.745805][T15592] 0 pages cma reserved [ 326.804175][ T72] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.813213][ T72] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.841731][T15608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2786'. [ 326.883167][ T72] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.895555][ T72] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.023974][T15645] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2793'. [ 327.099046][T15645] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2793'. [ 327.108603][T15647] veth0: entered promiscuous mode [ 327.160107][T15645] tipc: Enabled bearer , priority 0 [ 327.194476][T15645] syzkaller0: entered promiscuous mode [ 327.224088][T15645] syzkaller0: entered allmulticast mode [ 327.349490][T15672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2798'. [ 327.387071][T15645] tipc: Resetting bearer [ 327.442049][T15644] tipc: Resetting bearer [ 327.559236][T15644] tipc: Disabling bearer [ 327.639934][T15652] veth0: left promiscuous mode [ 327.825932][T15679] syzkaller1: entered promiscuous mode [ 327.833740][T15679] syzkaller1: entered allmulticast mode [ 328.160667][T15707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2808'. [ 328.373067][T15716] validate_nla: 2 callbacks suppressed [ 328.373091][T15716] netlink: 'syz.2.2810': attribute type 1 has an invalid length. [ 328.409864][T15716] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2810'. [ 328.471158][T15719] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 328.482132][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2810'. [ 328.724487][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2816'. [ 329.053838][T15761] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 329.233616][T15772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2825'. [ 329.379093][T15778] openvswitch: netlink: Unknown nsh attribute 0 [ 329.392046][T15778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.490109][T15782] netlink: 'syz.3.2829': attribute type 32 has an invalid length. [ 329.504316][T15782] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 330.015265][ T8069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.023149][ T8069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.467942][T15833] tipc: Enabled bearer , priority 0 [ 330.493007][T15834] syzkaller0: entered promiscuous mode [ 330.502488][T15834] syzkaller0: entered allmulticast mode [ 330.605598][T15834] netlink: 'syz.3.2842': attribute type 1 has an invalid length. [ 330.798472][T15841] tipc: Resetting bearer [ 330.878860][T15841] tipc: Disabling bearer [ 331.306316][T15856] netlink: 'syz.1.2851': attribute type 10 has an invalid length. [ 331.412142][T15856] team0: Port device geneve0 added [ 331.728640][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.740618][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.750374][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.776986][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.789026][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.016795][T15892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.134289][T15894] __nla_validate_parse: 9 callbacks suppressed [ 332.134314][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2861'. [ 332.204929][T15894] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2861'. [ 332.249712][T15900] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2864'. [ 332.364985][T15903] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2862'. [ 332.462849][T15912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2862'. [ 332.517549][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2862'. [ 332.641110][T15914] netlink: 'syz.3.2867': attribute type 10 has an invalid length. [ 332.678534][T15914] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2867'. [ 332.727180][T15914] batadv0: entered promiscuous mode [ 332.732458][T15914] batadv0: entered allmulticast mode [ 332.793866][T15914] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 332.898587][T15872] lo speed is unknown, defaulting to 1000 [ 333.261508][T15935] netlink: 'syz.0.2874': attribute type 1 has an invalid length. [ 333.309627][T15938] openvswitch: netlink: Actions may not be safe on all matching packets [ 333.335508][T15935] netlink: 'syz.0.2874': attribute type 2 has an invalid length. [ 333.535791][T15950] IPVS: length: 157 != 24 [ 333.563716][T15950] netlink: 'syz.3.2878': attribute type 1 has an invalid length. [ 333.853899][ T5871] Bluetooth: hci3: command tx timeout [ 334.236554][T15979] netlink: 'syz.1.2886': attribute type 39 has an invalid length. [ 334.465178][T15872] chnl_net:caif_netlink_parms(): no params data found [ 334.974868][T16007] netlink: 'syz.4.2894': attribute type 1 has an invalid length. [ 335.082354][T16007] bond8: entered promiscuous mode [ 335.095044][T16007] 8021q: adding VLAN 0 to HW filter on device bond8 [ 335.139982][T16010] bond0: entered promiscuous mode [ 335.151472][T16010] dummy0: entered promiscuous mode [ 335.157751][T16010] geneve1: entered promiscuous mode [ 335.165652][T16010] batadv0: entered promiscuous mode [ 335.172599][T16010] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 335.218215][T16010] hsr1: entered allmulticast mode [ 335.240511][T16010] bond0: entered allmulticast mode [ 335.263666][T16010] dummy0: entered allmulticast mode [ 335.278021][T16010] geneve1: entered allmulticast mode [ 335.305285][T16010] batadv0: entered allmulticast mode [ 335.321435][T16010] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 335.375016][T16010] bond0: left promiscuous mode [ 335.383392][T16010] dummy0: left promiscuous mode [ 335.418091][T16010] geneve1: left promiscuous mode [ 335.427232][T16010] batadv0: left promiscuous mode [ 335.487883][T16032] bridge0: port 2(syz_tun) entered blocking state [ 335.495973][T16032] bridge0: port 2(syz_tun) entered disabled state [ 335.505662][T16032] syz_tun: entered allmulticast mode [ 335.515556][T16032] syz_tun: entered promiscuous mode [ 335.525162][T16032] bridge0: port 2(syz_tun) entered blocking state [ 335.531793][T16032] bridge0: port 2(syz_tun) entered forwarding state [ 335.572351][T15872] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.591584][T15872] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.614328][T15872] bridge_slave_0: entered allmulticast mode [ 335.657261][T15872] bridge_slave_0: entered promiscuous mode [ 335.679375][T15872] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.705813][T15872] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.713151][T15872] bridge_slave_1: entered allmulticast mode [ 335.726646][T15872] bridge_slave_1: entered promiscuous mode [ 335.933431][ T5871] Bluetooth: hci3: command tx timeout [ 336.011622][T15872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.053428][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'. [ 336.073009][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'. [ 336.109333][T15872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.150532][T16060] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2907'. [ 336.340308][T15872] team0: Port device team_slave_0 added [ 336.368687][T15872] team0: Port device team_slave_1 added [ 336.555308][T16073] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 336.576838][T15872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.588473][T15872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.620109][T15872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.664686][T15872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.682118][T15872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.872732][T15872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.260171][T15872] hsr_slave_0: entered promiscuous mode [ 337.269563][T15872] hsr_slave_1: entered promiscuous mode [ 337.294687][T15872] debugfs: 'hsr0' already exists in 'hsr' [ 337.300611][T15872] Cannot create hsr debugfs directory [ 337.607094][T16118] __nla_validate_parse: 1 callbacks suppressed [ 337.607115][T16118] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2919'. [ 338.003487][ T5871] Bluetooth: hci3: command tx timeout [ 338.136738][T16138] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2929'. [ 338.301113][T16142] netlink: 'syz.1.2930': attribute type 11 has an invalid length. [ 338.382525][T16143] tc_dump_action: action bad kind [ 338.934386][T15872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.945518][T16163] netlink: 'syz.4.2934': attribute type 1 has an invalid length. [ 338.965899][T15872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 338.978464][T16163] netlink: 'syz.4.2934': attribute type 2 has an invalid length. [ 338.998102][T16165] netlink: 'syz.4.2934': attribute type 1 has an invalid length. [ 338.999112][T15872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.026003][T16165] netlink: 'syz.4.2934': attribute type 2 has an invalid length. [ 339.072394][T15872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.277010][T16182] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2936'. [ 339.402678][T15872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.412145][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2937'. [ 339.429661][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2937'. [ 339.464916][T15872] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.534212][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.541415][ T8069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.572040][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.579281][ T8069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.708997][T16194] netlink: 'syz.1.2940': attribute type 11 has an invalid length. [ 339.956642][T16202] netlink: 'syz.1.2943': attribute type 1 has an invalid length. [ 340.029539][T16207] netlink: 'syz.0.2945': attribute type 30 has an invalid length. [ 340.085110][ T5871] Bluetooth: hci3: command tx timeout [ 340.317270][T13077] IPVS: starting estimator thread 0... [ 340.321233][T15872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.343499][T16216] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 340.413838][T16221] IPVS: using max 23 ests per chain, 55200 per kthread [ 340.445435][T15872] veth0_vlan: entered promiscuous mode [ 340.455011][T16223] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2948'. [ 340.499070][T15872] veth1_vlan: entered promiscuous mode [ 340.599096][T15872] veth0_macvtap: entered promiscuous mode [ 340.657601][T15872] veth1_macvtap: entered promiscuous mode [ 340.720433][T15872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.783747][T15872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.963339][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 340.995245][T12584] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.021375][T12584] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.036253][T12584] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.076024][T12584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.242485][T12578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.270477][T12578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.342356][T16249] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2955'. [ 341.380460][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2956'. [ 341.403188][T16251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2956'. [ 341.418905][T16249] xfrm0: left promiscuous mode [ 341.429393][T16253] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2955'. [ 341.430916][ T8065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.465433][ T8065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.846441][T16266] macvtap2: entered promiscuous mode [ 341.882561][T16266] vlan0: entered promiscuous mode [ 341.907898][T16266] macvtap2: entered allmulticast mode [ 341.918203][T16266] vlan0: entered allmulticast mode [ 341.924660][T16266] veth0_vlan: entered allmulticast mode [ 342.003426][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 342.158547][T16284] netlink: 'syz.0.2966': attribute type 11 has an invalid length. [ 342.503873][T16300] netlink: 'syz.3.2973': attribute type 10 has an invalid length. [ 342.526808][T16300] team0: Device hsr_slave_0 failed to register rx_handler [ 342.792003][T16315] netlink: 'syz.3.2977': attribute type 1 has an invalid length. [ 342.826454][T16316] netlink: 'syz.3.2977': attribute type 1 has an invalid length. [ 342.850342][T16318] __nla_validate_parse: 1 callbacks suppressed [ 342.850363][T16318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2978'. [ 342.869650][T16317] netlink: zone id is out of range [ 342.883876][T16317] netlink: zone id is out of range [ 342.904365][T16317] netlink: zone id is out of range [ 342.920515][T16317] netlink: zone id is out of range [ 342.926067][T16317] netlink: zone id is out of range [ 342.950079][T16317] netlink: zone id is out of range [ 342.970228][T16317] netlink: zone id is out of range [ 343.222590][T16336] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 343.242058][T16338] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2986'. [ 343.260331][T16332] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2983'. [ 343.696802][T16354] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2991'. [ 344.051016][T16363] netlink: 'syz.1.2994': attribute type 6 has an invalid length. [ 344.400746][T16372] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2996'. [ 344.433754][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.443246][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.456396][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.464708][T16372] hsr_slave_0: left promiscuous mode [ 344.472323][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.480202][T16372] hsr_slave_1: left promiscuous mode [ 344.491230][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.635248][T16378] vlan5: entered allmulticast mode [ 345.838915][T16430] ksmbd: Unknown IPC event: 4, ignore. [ 345.999186][ T8069] team0: Port device geneve0 removed [ 346.204524][ T8069] bond0 (unregistering): Released all slaves [ 346.315842][ T8069] bond1 (unregistering): Released all slaves [ 346.331450][ T8069] bond2 (unregistering): Released all slaves [ 346.348831][ T8069] bond3 (unregistering): Released all slaves [ 346.368134][ T8069] bond4 (unregistering): Released all slaves [ 346.383984][ T8069] bond5 (unregistering): Released all slaves [ 346.401192][ T8069] bond6 (unregistering): Released all slaves [ 346.514103][ T8069] bond7 (unregistering): (slave bond8): Releasing backup interface [ 346.523193][ T8069] bond7 (unregistering): Released all slaves [ 346.567360][ T5871] Bluetooth: hci2: command tx timeout [ 346.631445][ T8069] bond8 (unregistering): Released all slaves [ 346.660725][T16418] wg1: entered allmulticast mode [ 346.669512][T16423] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 346.841898][T16374] lo speed is unknown, defaulting to 1000 [ 346.883721][ T55] block nbd0: Possible stuck request ffff888024ef0000: control (read@281479271612416,65536B). Runtime 240 seconds [ 346.971276][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3016'. [ 347.212285][T16449] netlink: 'syz.2.3018': attribute type 1 has an invalid length. [ 347.254546][T16449] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3018'. [ 347.306554][T16449] netlink: 'syz.2.3018': attribute type 1 has an invalid length. [ 347.533747][T16466] netlink: 'syz.0.3024': attribute type 1 has an invalid length. [ 347.547233][T16466] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3024'. [ 347.992321][T16478] netlink: 'syz.0.3027': attribute type 10 has an invalid length. [ 348.032124][T16478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3027'. [ 348.057153][T16478] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3027'. [ 348.334456][T16374] chnl_net:caif_netlink_parms(): no params data found [ 348.502796][ T8069] : left promiscuous mode [ 348.627276][ T8069] tipc: Disabling bearer [ 348.637388][ T8069] tipc: Left network mode [ 348.644210][ T5871] Bluetooth: hci2: command tx timeout [ 348.645047][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3034'. [ 348.679188][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3034'. [ 348.697820][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3034'. [ 348.895555][T16374] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.902941][T16374] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.911448][T16374] bridge_slave_0: entered allmulticast mode [ 348.938481][T16526] netlink: 'syz.4.3039': attribute type 4 has an invalid length. [ 348.958605][T16374] bridge_slave_0: entered promiscuous mode [ 348.983057][T16529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3038'. [ 348.996043][T16530] netlink: 'syz.4.3039': attribute type 4 has an invalid length. [ 349.049465][T16374] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.057046][T16374] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.070677][T16374] bridge_slave_1: entered allmulticast mode [ 349.099155][T16374] bridge_slave_1: entered promiscuous mode [ 349.148775][T16532] tipc: Disabling bearer [ 349.250448][T16526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3039'. [ 349.380867][T16542] sit2: entered promiscuous mode [ 349.411826][T16542] sit2: entered allmulticast mode [ 349.440763][T16374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.601180][T16374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.618615][T16555] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3046'. [ 349.620079][T16556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3047'. [ 350.034539][T16571] netlink: 'syz.4.3051': attribute type 1 has an invalid length. [ 350.459689][T16565] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 350.602408][T16571] bond9: entered promiscuous mode [ 350.608209][T16571] 8021q: adding VLAN 0 to HW filter on device bond9 [ 350.706532][T16577] 8021q: adding VLAN 0 to HW filter on device bond9 [ 350.714255][T16577] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 350.734266][ T5871] Bluetooth: hci2: command tx timeout [ 350.768594][T16577] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 350.788421][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3056'. [ 350.854438][T16599] netlink: 'syz.0.3056': attribute type 9 has an invalid length. [ 350.867537][T16577] bond9: (slave wireguard0): making interface the new active one [ 350.880121][T16577] wireguard0: entered promiscuous mode [ 350.888510][T16577] bond9: (slave wireguard0): Enslaving as an active interface with an up link [ 350.925487][ T8069] hsr_slave_0: left promiscuous mode [ 350.932744][ T8069] hsr_slave_1: left promiscuous mode [ 351.006427][ T8069] pimreg3 (unregistering): left allmulticast mode [ 351.028104][T16606] netlink: 'syz.4.3058': attribute type 9 has an invalid length. [ 351.282977][ T8069] batadv_slave_1 (unregistering): left allmulticast mode [ 351.942754][T16374] team0: Port device team_slave_0 added [ 351.951894][T16374] team0: Port device team_slave_1 added [ 352.017317][T16612] tipc: Enabled bearer , priority 0 [ 352.030655][T16613] syzkaller0: entered promiscuous mode [ 352.038304][T16613] syzkaller0: entered allmulticast mode [ 352.066341][T16621] tipc: Resetting bearer [ 352.213076][T16374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.225708][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.267558][T16374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.304769][T16374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.319955][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.358494][T16374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.413813][T16621] tipc: Resetting bearer [ 352.477653][T16621] tipc: Disabling bearer [ 352.491677][T16639] net_ratelimit: 8 callbacks suppressed [ 352.491697][T16639] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 352.803789][ T5871] Bluetooth: hci2: command tx timeout [ 352.847841][T16374] hsr_slave_0: entered promiscuous mode [ 352.880070][T16374] hsr_slave_1: entered promiscuous mode [ 353.191769][ T8069] IPVS: stop unused estimator thread 0... [ 353.466796][T16672] netlink: 'syz.1.3073': attribute type 3 has an invalid length. [ 353.492665][T16672] __nla_validate_parse: 4 callbacks suppressed [ 353.492687][T16672] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3073'. [ 353.544941][T16679] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3074'. [ 353.680757][T16679] tipc: Enabled bearer , priority 0 [ 353.695617][T16679] syzkaller0: entered promiscuous mode [ 353.703388][T16679] syzkaller0: entered allmulticast mode [ 353.793997][T16679] tipc: Resetting bearer [ 353.858183][T16677] tipc: Resetting bearer [ 353.914966][T16677] tipc: Disabling bearer [ 353.978346][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 354.113991][T16702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3085'. [ 354.134061][T16697] tipc: Enabled bearer , priority 0 [ 354.154690][T16697] syzkaller0: entered promiscuous mode [ 354.173645][T16697] syzkaller0: entered allmulticast mode [ 354.198953][T16697] netlink: 21 bytes leftover after parsing attributes in process `syz.1.3083'. [ 354.238293][T16697] tipc: Resetting bearer [ 354.299478][T16696] tipc: Resetting bearer [ 354.355865][T16696] tipc: Disabling bearer [ 354.467594][T16711] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3086'. [ 354.740542][T16374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 354.772106][T16374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 354.816175][T16374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 354.873104][T16374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 355.006284][T16742] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3094'. [ 355.031516][T16744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3096'. [ 355.063204][T16747] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 355.149278][T16742] tipc: Enabled bearer , priority 0 [ 355.195522][T16749] syzkaller0: entered promiscuous mode [ 355.211058][T16749] syzkaller0: entered allmulticast mode [ 355.334020][T16742] tipc: Resetting bearer [ 355.394415][T16738] tipc: Resetting bearer [ 355.403707][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3101'. [ 355.464108][T16738] tipc: Disabling bearer [ 355.505219][T16764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3102'. [ 355.559659][T16374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.590843][T16374] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.730883][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.738272][ T8069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.776526][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.784110][ T8069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.923107][T16374] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.958114][T16374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.355628][T16766] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 356.837048][T16374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.068567][T16374] veth0_vlan: entered promiscuous mode [ 357.171570][T16803] syzkaller0: entered promiscuous mode [ 357.177609][T16803] syzkaller0: entered allmulticast mode [ 359.085977][T16374] veth1_vlan: entered promiscuous mode [ 359.347932][T16374] veth0_macvtap: entered promiscuous mode [ 359.387098][T16374] veth1_macvtap: entered promiscuous mode [ 359.460027][T16374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.488864][T16837] __nla_validate_parse: 4 callbacks suppressed [ 359.488886][T16837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3124'. [ 359.516688][T16374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.587827][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.631636][T12578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.674177][T12578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.692854][T12578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.839566][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.853035][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.890895][ T8069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.900178][ T8069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.939779][T16851] netlink: 'syz.0.3126': attribute type 1 has an invalid length. [ 361.107539][ T5860] bridge0: port 2(syz_tun) entered disabled state [ 361.107960][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.151866][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.169191][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.179345][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.188172][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.307179][ T5860] syz_tun (unregistering): left allmulticast mode [ 361.348181][ T5860] syz_tun (unregistering): left promiscuous mode [ 361.390803][T16887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3137'. [ 361.416766][ T5860] bridge0: port 2(syz_tun) entered disabled state [ 361.627448][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3140'. [ 361.688285][T16896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3140'. [ 361.717874][ T8069] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.730057][ T8069] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 361.740745][ T8069] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 361.802316][T16900] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 361.903464][ T8069] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.952142][ T8069] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 361.963772][ T8069] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 362.021678][T16910] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 362.091683][ T8069] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.108581][ T8069] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 362.122065][ T8069] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 362.206292][ T8069] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.224914][ T8069] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 362.250111][ T8069] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 362.594802][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3152'. [ 362.603913][ T5233] udevd[5233]: worker [6671] terminated by signal 33 (Unknown signal 33) [ 362.604305][ T5233] udevd[5233]: worker [6671] failed while handling '/devices/netdevsim1/net/eth3' [ 362.640908][T16935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3153'. [ 362.660873][ T8069] veth0_to_bridge: left allmulticast mode [ 362.667117][ T8069] veth0_to_bridge: left promiscuous mode [ 362.678476][ T8069] bridge0: port 1(veth0_to_bridge) entered disabled state [ 362.845361][T16943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3155'. [ 363.296155][ T51] Bluetooth: hci0: command tx timeout [ 363.904926][ T8069] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 363.915083][ T8069] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 363.925629][ T8069] bond6 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 3e:5f:d9:4a:af:bc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 364.079238][ T8069] bond8 (unregistering): (slave gretap1): Releasing active interface [ 364.241612][ T8069] team0: Port device geneve0 removed [ 364.694486][ T8069] smc: removing net device bond0 with user defined pnetid SYZ2 [ 364.702746][ T8069] bond0 (unregistering): Released all slaves [ 364.810102][ T8069] bond1 (unregistering): Released all slaves [ 364.826079][ T8069] bond2 (unregistering): Released all slaves [ 364.938271][ T8069] bond3 (unregistering): (slave vlan3): Releasing active interface [ 364.949550][ T8069] bond3 (unregistering): Released all slaves [ 365.068631][ T8069] bond4 (unregistering): Released all slaves [ 365.086016][ T8069] bond5 (unregistering): Released all slaves [ 365.195490][ T8069] bond6 (unregistering): (slave veth11): Releasing backup interface [ 365.206506][ T8069] bond6 (unregistering): Released all slaves [ 365.222013][ T8069] bond7 (unregistering): Released all slaves [ 365.239659][ T8069] bond8 (unregistering): Released all slaves [ 365.264435][T16882] lo speed is unknown, defaulting to 1000 [ 365.377036][ T51] Bluetooth: hci0: command tx timeout [ 365.540685][T16954] netlink: 'syz.4.3157': attribute type 33 has an invalid length. [ 365.784322][T16963] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.815542][T16963] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 366.046705][T16973] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3163'. [ 366.139869][T16973] tipc: Enabled bearer , priority 0 [ 366.151010][T16973] syzkaller0: entered promiscuous mode [ 366.159268][T16973] syzkaller0: entered allmulticast mode [ 366.186416][T16977] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3165'. [ 366.208328][T16973] tipc: Resetting bearer [ 366.236361][T16969] tipc: Resetting bearer [ 366.277739][T16980] netlink: 'syz.3.3166': attribute type 1 has an invalid length. [ 366.288414][T16969] tipc: Disabling bearer [ 366.288850][T16980] netlink: 'syz.3.3166': attribute type 2 has an invalid length. [ 366.302564][T16980] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.3166'. [ 366.492205][T16989] netlink: 'syz.4.3168': attribute type 4 has an invalid length. [ 366.562304][T16989] netlink: 'syz.4.3168': attribute type 4 has an invalid length. [ 366.604001][T16989] 8021q: VLANs not supported on wg1 [ 366.642853][T16996] sctp: [Deprecated]: syz.2.3171 (pid 16996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.642853][T16996] Use struct sctp_sack_info instead [ 366.680920][T16882] chnl_net:caif_netlink_parms(): no params data found [ 366.787234][T17002] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3172'. [ 366.938622][ T8069] tipc: Left network mode [ 366.943948][T17005] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 366.965625][T17011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3174'. [ 367.018261][T16882] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.026529][T16882] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.035351][T16882] bridge_slave_0: entered allmulticast mode [ 367.045733][T16882] bridge_slave_0: entered promiscuous mode [ 367.057262][T16882] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.065174][T16882] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.073046][T16882] bridge_slave_1: entered allmulticast mode [ 367.081408][T16882] bridge_slave_1: entered promiscuous mode [ 367.268164][T16882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.282178][T16882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.302042][T17019] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3176'. [ 367.327091][T17017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3176'. [ 367.357809][T17019] 1{X: entered promiscuous mode [ 367.368176][T17019] 1{X: left allmulticast mode [ 367.440169][T16882] team0: Port device team_slave_0 added [ 367.453671][ T51] Bluetooth: hci0: command tx timeout [ 367.498313][T16882] team0: Port device team_slave_1 added [ 367.562574][T17027] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3178'. [ 367.758443][T17036] tipc: Started in network mode [ 367.771976][T17036] tipc: Node identity 3e9791d43f96, cluster identity 4711 [ 367.780867][T17036] tipc: Enabled bearer , priority 0 [ 367.792555][T16882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.801410][T16882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.829025][T16882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.877031][T17027] syzkaller0: entered promiscuous mode [ 367.882687][T17027] syzkaller0: entered allmulticast mode [ 367.892150][T16882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.899374][T16882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.927578][T16882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.026650][T17034] tipc: Resetting bearer [ 368.326656][T16882] hsr_slave_0: entered promiscuous mode [ 368.352776][T16882] hsr_slave_1: entered promiscuous mode [ 368.379532][T16882] debugfs: 'hsr0' already exists in 'hsr' [ 368.405785][T16882] Cannot create hsr debugfs directory [ 368.422242][T17025] tipc: Resetting bearer [ 368.525069][T17025] tipc: Disabling bearer [ 368.710059][T17059] netlink: 'syz.3.3184': attribute type 1 has an invalid length. [ 369.049552][T17075] sch_fq: defrate 0 ignored. [ 369.191164][ T8069] veth0_macvtap: left allmulticast mode [ 369.202664][ T8069] veth1_macvtap: left promiscuous mode [ 369.222462][ T8069] veth0_macvtap: left promiscuous mode [ 369.234806][ T8069] veth1_vlan: left promiscuous mode [ 369.240210][ T8069] veth0_vlan: left promiscuous mode [ 369.524004][ T51] Bluetooth: hci0: command tx timeout [ 369.755991][T17087] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 369.787378][T17087] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 370.741008][T17089] ip6gre1: entered allmulticast mode [ 371.293993][ T8069] IPVS: stop unused estimator thread 0... [ 371.775762][T17140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3208'. [ 371.934734][T17145] openvswitch: netlink: Key type 29 is not supported [ 371.964737][T17138] syzkaller0: entered promiscuous mode [ 371.970347][T17138] syzkaller0: entered allmulticast mode [ 372.014963][T17143] tipc: Enabled bearer , priority 0 [ 372.060589][T16882] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.098787][T16882] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.141215][T17150] ipvlan2: entered promiscuous mode [ 372.154524][T16882] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 372.190468][T16882] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 372.372215][T17169] syz0: rxe_newlink: already configured on lo [ 372.394975][T17169] 0{X: left allmulticast mode [ 372.420075][T17169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.634111][T17133] tipc: Resetting bearer [ 372.770242][T17188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3220'. [ 373.073685][T13077] tipc: Node number set to 16880084 [ 374.489644][T17133] tipc: Disabling bearer [ 374.527975][T17214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3222'. [ 374.547347][T16882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.578365][T17214] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 374.579050][T17214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3222'. [ 374.636329][T16882] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.677412][T17214] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 374.700847][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.716610][ T8069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.791570][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.798927][ T8069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.809409][T17219] IPVS: persistence engine module ip_vs_pe_ not found [ 374.882142][T17223] netlink: 'syz.2.3228': attribute type 5 has an invalid length. [ 375.169459][T16882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.220863][T16882] veth0_vlan: entered promiscuous mode [ 375.236534][T16882] veth1_vlan: entered promiscuous mode [ 375.272572][T16882] veth0_macvtap: entered promiscuous mode [ 375.282573][T16882] veth1_macvtap: entered promiscuous mode [ 375.306393][T16882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.321010][T16882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.338267][T12575] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.347906][T12575] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.360474][T12575] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.370808][T12575] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.446070][ T8069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.464218][ T8069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.494892][ T8069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.502823][ T8069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.964492][ T55] block nbd0: Possible stuck request ffff888024ef0000: control (read@281479271612416,65536B). Runtime 270 seconds [ 378.622409][ T5233] udevd[5233]: worker [5916] /devices/virtual/block/nbd0 timeout; kill it [ 378.631929][ T5233] udevd[5233]: seq 11481 '/devices/virtual/block/nbd0' killed [ 395.707269][T17240] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3232'. [ 395.962506][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3234'. [ 396.075528][ T1162] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.126598][ T1162] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.183932][ T8069] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.195543][T12578] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.384957][T17262] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3241'. [ 396.745109][T17277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.763393][T17277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.774470][T17279] netlink: 'syz.4.3243': attribute type 1 has an invalid length. [ 396.790361][T17279] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3243'. [ 396.799713][T17277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.811190][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.828003][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 396.926112][ T8069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.937592][ T8069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 397.100945][ T8069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.112625][ T8069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 397.156585][T17287] tipc: Enabled bearer , priority 0 [ 397.217718][T17284] syzkaller0: entered allmulticast mode [ 397.231849][T17283] tipc: Disabling bearer [ 397.259329][ T8069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.270072][ T8069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 397.429484][ T8069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.461553][ T8069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 397.461787][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3249'. [ 397.504226][T17275] lo speed is unknown, defaulting to 1000 [ 397.718877][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fc3fc00: rx timeout, send abort [ 397.727447][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fc3fc00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 397.901135][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3253'. [ 398.023755][ T8069] veth0_to_bridge: left allmulticast mode [ 398.084389][ T8069] veth0_to_bridge: left promiscuous mode [ 398.090388][ T8069] bridge0: port 1(veth0_to_bridge) entered disabled state [ 398.382601][T17324] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20000 [ 398.893476][ T51] Bluetooth: hci1: command tx timeout [ 399.499738][ T8069] bond6 (unregistering): (slave gretap1): Releasing active interface [ 399.559286][ T8069] dvmrp0 (unregistering): left allmulticast mode [ 399.627094][ T8069] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 399.636930][ T8069] geneve1 (unregistering): left allmulticast mode [ 399.657543][ T8069] team0: Port device geneve0 removed [ 400.149566][ T8069] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 400.158818][ T8069] dummy0: left allmulticast mode [ 400.168431][ T8069] bond0 (unregistering): Released all slaves [ 400.186594][ T8069] bond1 (unregistering): Released all slaves [ 400.201171][ T8069] bond2 (unregistering): Released all slaves [ 400.305434][ T8069] bond3 (unregistering): Released all slaves [ 400.319967][ T8069] bond4 (unregistering): Released all slaves [ 400.334454][ T8069] bond5 (unregistering): Released all slaves [ 400.348840][ T8069] bond6 (unregistering): Released all slaves [ 400.367122][ T8069] bond7 (unregistering): Released all slaves [ 400.391355][ T8069] bond8 (unregistering): Released all slaves [ 400.408277][ T8069] bond9 (unregistering): Released all slaves [ 400.423684][ T8069] bond10 (unregistering): Released all slaves [ 400.441197][ T8069] bond11 (unregistering): Released all slaves [ 400.461744][T17322] netlink: 'syz.4.3257': attribute type 1 has an invalid length. [ 400.496048][T17322] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3257'. [ 400.660980][T17326] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.3258'. [ 400.963408][ T51] Bluetooth: hci1: command tx timeout [ 401.033356][T17275] chnl_net:caif_netlink_parms(): no params data found [ 401.168064][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3264'. [ 401.189568][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3264'. [ 401.201229][T17351] netlink: 'syz.3.3264': attribute type 15 has an invalid length. [ 401.249235][T17275] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.260204][T17275] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.267794][T17275] bridge_slave_0: entered allmulticast mode [ 401.276777][T17275] bridge_slave_0: entered promiscuous mode [ 401.287044][T17275] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.294381][T17275] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.301810][T17275] bridge_slave_1: entered allmulticast mode [ 401.324120][T17275] bridge_slave_1: entered promiscuous mode [ 401.371469][T17355] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3265'. [ 401.402758][T17275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.417166][T17275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.474456][T17275] team0: Port device team_slave_0 added [ 401.499802][T17275] team0: Port device team_slave_1 added [ 401.646479][T17275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.656752][T17362] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3267'. [ 401.666363][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.709571][T17275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.733870][T17364] dummy0: entered promiscuous mode [ 401.749262][T17275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.768531][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.803764][T17275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.931194][T17375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3271'. [ 402.086807][T17275] hsr_slave_0: entered promiscuous mode [ 402.094888][T17275] hsr_slave_1: entered promiscuous mode [ 402.101362][T17275] debugfs: 'hsr0' already exists in 'hsr' [ 402.107526][T17275] Cannot create hsr debugfs directory [ 402.306609][ T8069] : left promiscuous mode [ 402.459001][T17400] netlink: 'syz.4.3281': attribute type 2 has an invalid length. [ 402.478089][ T8069] tipc: Left network mode [ 402.488361][T17400] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3281'. [ 402.519102][ T8069] IPVS: stopping master sync thread 7224 ... [ 402.521603][T17400] nbd: must specify a device to reconfigure [ 402.737162][T17407] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3282'. [ 403.044317][ T51] Bluetooth: hci1: command tx timeout [ 403.354724][T17436] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.364114][T17436] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.997725][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.024333][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.073791][T12587] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.082577][T12587] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.317837][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3301'. [ 404.356794][T17480] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3301'. [ 404.617244][T17492] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 404.691031][ T8069] hsr_slave_0: left promiscuous mode [ 404.700623][ T8069] hsr_slave_1: left promiscuous mode [ 404.730339][ T8069] vlan0: left allmulticast mode [ 404.745286][ T8069] veth0_vlan: left allmulticast mode [ 404.760954][ T8069] vlan0: left promiscuous mode [ 404.768800][ T8069] veth0_macvtap: left allmulticast mode [ 405.137413][ T51] Bluetooth: hci1: command tx timeout [ 405.885898][T12587] smc: removing ib device syz0 [ 405.901513][T17275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 405.936086][T17275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 406.033378][ T5982] lo speed is unknown, defaulting to 1000 [ 406.039278][ T5982] syz0: Port: 1 Link DOWN [ 406.094923][T17275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 406.179422][T17275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 406.728639][T17275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.763568][T17554] netlink: 'syz.2.3315': attribute type 1 has an invalid length. [ 406.776942][T17557] netlink: 'syz.1.3316': attribute type 1 has an invalid length. [ 406.794111][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3315'. [ 406.850044][T17275] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.938829][T17562] gretap1: entered promiscuous mode [ 407.048868][ T55] block nbd0: Possible stuck request ffff888024ef0000: control (read@281479271612416,65536B). Runtime 300 seconds [ 407.054697][T12575] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.068279][T12575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.125879][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'. [ 407.172004][T12584] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.179264][T12584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.352428][T17572] netlink: 'syz.3.3319': attribute type 4 has an invalid length. [ 407.376625][T17568] veth0: entered promiscuous mode [ 407.447615][T17567] veth0: left promiscuous mode [ 408.199620][T17275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.397865][T17610] netlink: 'syz.1.3331': attribute type 1 has an invalid length. [ 408.436741][T17610] veth1_macvtap: left promiscuous mode [ 408.594215][T17275] veth0_vlan: entered promiscuous mode [ 408.612954][T17612] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3332'. [ 408.651959][T17275] veth1_vlan: entered promiscuous mode [ 408.827119][T17275] veth0_macvtap: entered promiscuous mode [ 408.862949][T17275] veth1_macvtap: entered promiscuous mode [ 408.957247][T17275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.015401][T17275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.145968][ T72] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.170832][T17631] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 409.180825][ T72] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.425547][ T72] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.459192][ T72] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.647241][T17650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3342'. [ 409.802824][T17653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3343'. [ 409.824441][T17658] netlink: 'syz.4.3344': attribute type 5 has an invalid length. [ 409.832287][T17524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.832308][T17524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.157565][T17658] bond10: entered promiscuous mode [ 410.165686][T17658] bond10: entered allmulticast mode [ 410.171480][T17658] 8021q: adding VLAN 0 to HW filter on device bond10 [ 410.216893][T17675] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3348'. [ 410.221079][T12579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.243098][T12579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.351324][T17679] netlink: 'syz.1.3350': attribute type 6 has an invalid length. [ 410.820460][T17693] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 410.828493][T17695] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3355'. [ 410.860971][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3355'. [ 411.414004][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 411.424994][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 411.437875][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 411.450788][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 411.459053][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 411.659846][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3362'. [ 411.744333][T17726] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3364'. [ 411.827575][T17728] ip6erspan0: entered promiscuous mode [ 411.837396][T17728] ip6erspan0: entered allmulticast mode [ 412.211122][T17743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3370'. [ 412.378400][T17755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3371'. [ 412.722555][T17768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3378'. [ 412.827795][T17771] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 413.059622][T17785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3383'. [ 413.069089][T17785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3383'. [ 413.078365][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3383'. [ 413.078391][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3383'. [ 413.157407][T17714] chnl_net:caif_netlink_parms(): no params data found [ 413.448167][T17803] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 413.524351][ T51] Bluetooth: hci4: command tx timeout [ 413.603888][T17810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'. [ 413.739313][T17714] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.752424][T17714] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.760190][T17714] bridge_slave_0: entered allmulticast mode [ 413.769922][T17714] bridge_slave_0: entered promiscuous mode [ 413.780114][T17714] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.790976][T17714] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.792490][T17819] netlink: 'syz.2.3392': attribute type 1 has an invalid length. [ 413.798725][T17714] bridge_slave_1: entered allmulticast mode [ 413.801072][T17714] bridge_slave_1: entered promiscuous mode [ 413.823686][T17819] netlink: 'syz.2.3392': attribute type 10 has an invalid length. [ 413.831646][T17819] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3392'. [ 413.869662][T17824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3393'. [ 413.919722][T17714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.934117][T17714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.093397][T17714] team0: Port device team_slave_0 added [ 414.119212][T17714] team0: Port device team_slave_1 added [ 414.211012][T17714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.229821][T17714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.266461][T17714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.286022][T17714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.303086][T17714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.345336][T17714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.388133][T13077] hid-generic 0005:0C45:06F5.0002: hidraw0: BLUETOOTH HID v0.c7 Device [syz1] on aa:aa:aa:aa:aa:aa [ 414.517539][T17844] netlink: 'syz.3.3400': attribute type 13 has an invalid length. [ 414.629419][T17714] hsr_slave_0: entered promiscuous mode [ 414.662916][T17714] hsr_slave_1: entered promiscuous mode [ 414.670031][T17714] debugfs: 'hsr0' already exists in 'hsr' [ 414.676348][T17714] Cannot create hsr debugfs directory [ 414.719471][T17850] netlink: 'syz.0.3402': attribute type 1 has an invalid length. [ 414.748975][T17850] netlink: 'syz.0.3402': attribute type 3 has an invalid length. [ 415.304953][T17714] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.338528][T17714] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.419558][T17714] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.453316][T17714] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.577128][T17714] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.588518][T17714] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.605275][ T51] Bluetooth: hci4: command tx timeout [ 415.655322][T17714] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.723895][T17714] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.962249][T17908] netlink: 'syz.2.3421': attribute type 2 has an invalid length. [ 415.977811][T17908] netlink: 'syz.2.3421': attribute type 16 has an invalid length. [ 415.990538][T17908] netlink: 'syz.2.3421': attribute type 17 has an invalid length. [ 416.043161][T17908] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.050526][T17908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.058219][T17908] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.065467][T17908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.082709][T17917] openvswitch: netlink: Flow key attr not present in new flow. [ 416.099717][T17908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.346569][T17714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.419081][T17714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.474194][T17714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.539089][T17714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.748231][T17941] netlink: 'syz.3.3428': attribute type 33 has an invalid length. [ 416.871576][T17714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.976068][T17714] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.029052][T12584] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.036341][T12584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.099851][T12584] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.107117][T12584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.272455][T12584] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 417.687234][ T51] Bluetooth: hci4: command tx timeout [ 417.764293][T17714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.001086][T17975] __nla_validate_parse: 8 callbacks suppressed [ 418.001108][T17975] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3436'. [ 418.434934][T18003] netlink: 'syz.2.3442': attribute type 13 has an invalid length. [ 418.471864][T18003] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3442'. [ 418.542116][T17714] veth0_vlan: entered promiscuous mode [ 418.586243][T17714] veth1_vlan: entered promiscuous mode [ 418.700574][T17714] veth0_macvtap: entered promiscuous mode [ 418.738666][T17714] veth1_macvtap: entered promiscuous mode [ 418.820302][T18019] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3448'. [ 418.983590][T17714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.054934][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3448'. [ 419.107791][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3448'. [ 419.184212][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3448'. [ 419.317081][T17714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.624964][T18025] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3449'. [ 419.769353][T17523] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.778966][ T51] Bluetooth: hci4: command tx timeout [ 419.814727][T17523] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.881774][T17523] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.917153][T17523] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.632698][T12579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.718401][T12579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.939140][ T8069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.955837][ T8069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.306600][T18065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3457'. [ 423.059468][T18106] validate_nla: 1 callbacks suppressed [ 423.059491][T18106] netlink: 'syz.4.3468': attribute type 21 has an invalid length. [ 424.208838][T18126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3475'. [ 425.473246][ C1] sched: DL replenish lagged too much [ 426.732609][T18131] netlink: 284 bytes leftover after parsing attributes in process `syz.3.3476'. [ 426.743886][T18129] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3474'. [ 426.955515][T18140] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3477'. [ 427.219711][T18146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3481'. [ 427.318635][T18134] netlink: 'syz.0.3477': attribute type 6 has an invalid length. [ 427.714268][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 428.007915][T18162] vlan2: entered promiscuous mode [ 428.024709][T18162] vlan2: entered allmulticast mode [ 428.042777][T18162] hsr_slave_1: entered allmulticast mode [ 428.128419][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3488'. [ 428.159690][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3488'. [ 428.567646][T18173] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.3491'. [ 429.349660][T18186] batadv1: entered allmulticast mode [ 429.902514][T18193] netlink: 'syz.2.3495': attribute type 11 has an invalid length. [ 429.979664][T18194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3495'. [ 432.001828][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3502'. [ 432.038554][T18218] netlink: 'syz.0.3502': attribute type 4 has an invalid length. [ 432.401057][T18222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3503'. [ 432.455676][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3503'. [ 433.895100][T18249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3512'. [ 434.060282][T18249] netlink: 'syz.1.3512': attribute type 1 has an invalid length. [ 434.089264][T18249] netlink: 'syz.1.3512': attribute type 1 has an invalid length. [ 434.149380][T18249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3512'. [ 435.516068][T18256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3514'. [ 435.532036][T18256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3514'. [ 435.562172][T18256] netlink: 'syz.4.3514': attribute type 2 has an invalid length. [ 435.802752][T18260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3516'. [ 436.517967][T18270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3520'. [ 436.789156][T18273] netlink: 'syz.4.3521': attribute type 11 has an invalid length. [ 436.801322][T18273] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3521'. [ 437.550785][ T55] block nbd0: Possible stuck request ffff888024ef0000: control (read@281479271612416,65536B). Runtime 330 seconds [ 437.977135][T18287] tipc: Enabling of bearer rejected, failed to enable media [ 439.178549][T18314] dvmrp0: entered allmulticast mode [ 439.223077][T18314] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 439.659033][T18330] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 439.814654][T18332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3536'. [ 439.870702][T18332] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.168117][T18332] bridge_slave_1 (unregistering): left allmulticast mode [ 440.181161][T18332] bridge_slave_1 (unregistering): left promiscuous mode [ 440.199281][T18332] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.938664][ T30] audit: type=1804 audit(1755626670.100:2): pid=18346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3542" name="/newroot/27/cgroup.controllers" dev="tmpfs" ino=155 res=1 errno=0 [ 440.969950][ T30] audit: type=1800 audit(1755626670.100:3): pid=18346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3542" name="cgroup.controllers" dev="tmpfs" ino=155 res=0 errno=0 [ 442.011109][T18362] veth0_to_bridge: entered promiscuous mode [ 442.067267][T18363] netlink: 'syz.3.3547': attribute type 1 has an invalid length. [ 442.109434][T18363] netlink: 'syz.3.3547': attribute type 1 has an invalid length. [ 442.202152][T18361] veth0_to_bridge: left promiscuous mode [ 443.132510][T18390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3554'. [ 443.170072][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3555'. [ 443.177004][T18390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3554'. [ 443.252768][T18393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3555'. [ 443.261541][T18398] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3557'. [ 443.728100][T18417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3566'. [ 443.760159][T18417] netlink: 50 bytes leftover after parsing attributes in process `syz.3.3566'. [ 443.832860][T18420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.892968][T18424] netlink: 'syz.0.3570': attribute type 1 has an invalid length. [ 443.905084][T18427] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 443.905799][T18426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3568'. [ 443.939035][T18420] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3567'. [ 444.020562][T18427] netlink: 'syz.1.3569': attribute type 30 has an invalid length. [ 444.097795][T18434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3572'. [ 444.136393][T18424] macvlan2: entered promiscuous mode [ 444.142045][T18424] macvlan2: entered allmulticast mode [ 444.152648][T18424] bond1: entered promiscuous mode [ 444.172687][T18424] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 444.208004][T18424] bond1: left promiscuous mode [ 444.279695][T18436] netem: unknown loss type 0 [ 444.291011][T18436] netem: change failed [ 444.336867][T18438] macvlan2: entered promiscuous mode [ 444.342225][T18438] macvlan2: entered allmulticast mode [ 444.387930][T18438] sch_fq: defrate 0 ignored. [ 445.136748][T18474] delete_channel: no stack [ 445.397014][T18486] netlink: 'syz.4.3583': attribute type 4 has an invalid length. [ 445.437020][T18486] netlink: 'syz.4.3583': attribute type 4 has an invalid length. [ 445.486980][T18486] netlink: 'syz.4.3583': attribute type 11 has an invalid length. [ 445.701661][T18496] netlink: 'syz.1.3587': attribute type 6 has an invalid length. [ 445.846454][T18503] netlink: 'syz.2.3589': attribute type 1 has an invalid length. [ 446.126019][T18518] Bluetooth: MGMT ver 1.23 [ 446.348165][T18527] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 446.399921][T18532] tipc: Enabled bearer , priority 0 [ 446.428796][T18532] syzkaller0: entered promiscuous mode [ 446.442036][T18532] syzkaller0: entered allmulticast mode [ 446.542220][T18532] tipc: Resetting bearer [ 446.593741][T18530] tipc: Resetting bearer [ 446.618330][T18544] netlink: 'syz.4.3604': attribute type 32 has an invalid length. [ 446.655569][T18530] tipc: Disabling bearer [ 446.780671][T18546] tipc: Started in network mode [ 446.822810][T18546] tipc: Node identity 1625cdf42ef4, cluster identity 4711 [ 446.857743][T18546] tipc: Enabled bearer , priority 0 [ 446.867357][T18549] syzkaller0: entered promiscuous mode [ 446.882036][T18549] syzkaller0: entered allmulticast mode [ 446.972690][T18545] tipc: Resetting bearer [ 447.040768][T18545] tipc: Disabling bearer [ 447.187139][T18569] netlink: 'syz.4.3613': attribute type 5 has an invalid length. [ 447.222049][T18569] geneve2: entered promiscuous mode [ 447.232301][T18569] geneve2: entered allmulticast mode [ 447.240855][ T72] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 447.282172][ T72] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 447.338148][T18577] syzkaller1: entered promiscuous mode [ 447.353615][T18577] syzkaller1: entered allmulticast mode [ 447.360894][ T72] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 447.388341][ T72] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 447.834605][T18602] sctp: [Deprecated]: syz.3.3625 (pid 18602) Use of int in max_burst socket option. [ 447.834605][T18602] Use struct sctp_assoc_value instead [ 447.902754][T18606] only policy match revision 0 supported [ 447.902778][T18606] unable to load match [ 448.141120][T18619] __nla_validate_parse: 23 callbacks suppressed [ 448.141142][T18619] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3628'. [ 448.154751][T18618] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3628'. [ 448.176627][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3629'. [ 448.192990][T18619] pim6reg: entered allmulticast mode [ 448.202684][T18619] pim6reg: left allmulticast mode [ 448.332571][T18625] netlink: 'syz.1.3630': attribute type 58 has an invalid length. [ 448.337484][T18628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3631'. [ 448.343400][T18625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3630'. [ 448.950851][T18661] netlink: 46 bytes leftover after parsing attributes in process `syz.1.3640'. [ 449.001052][T18660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3641'. [ 449.072471][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3640'. [ 449.088303][T18661] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 449.101837][T18661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.222112][T18674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3644'. [ 449.414221][T18686] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3648'. [ 449.482812][T18686] tipc: Enabled bearer , priority 0 [ 449.689464][T18686] syzkaller0: entered promiscuous mode [ 449.706197][T18686] syzkaller0: entered allmulticast mode [ 449.728994][T18686] tipc: Resetting bearer [ 449.850886][T12587] tipc: Resetting bearer [ 449.899624][T18683] tipc: Resetting bearer [ 450.401377][ T980] IPVS: starting estimator thread 0... [ 450.474700][ T5982] tipc: Node number set to 953273844 [ 450.506260][T18720] IPVS: using max 24 ests per chain, 57600 per kthread [ 451.799185][T18683] tipc: Disabling bearer [ 451.965718][T18723] netlink: 'syz.4.3657': attribute type 1 has an invalid length. [ 452.005798][T18727] netlink: 'syz.0.3659': attribute type 1 has an invalid length. [ 452.024510][T18729] netlink: 'syz.1.3660': attribute type 4 has an invalid length. [ 452.052396][T18725] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 452.840745][T18772] veth1_macvtap: left promiscuous mode [ 453.076695][T18778] sctp: [Deprecated]: syz.1.3676 (pid 18778) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.076695][T18778] Use struct sctp_sack_info instead [ 453.267299][T18785] __nla_validate_parse: 3 callbacks suppressed [ 453.267319][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3680'. [ 453.328574][T18789] netlink: 'syz.4.3679': attribute type 32 has an invalid length. [ 453.361593][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3679'. [ 453.377401][T18789] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 454.125179][T18817] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.132416][T18817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.264728][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3691'. [ 454.334162][T18837] net veth1_virt_wifi .: renamed from virt_wifi0 [ 454.390408][T18839] veth0_to_team: entered promiscuous mode [ 454.414309][T18839] veth0_to_team: entered allmulticast mode [ 454.652017][T18851] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3698'. [ 454.883905][T18862] bond2: entered promiscuous mode [ 454.889563][T18862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.897386][T18862] bridge0: port 2(bond2) entered blocking state [ 454.909106][T18862] bridge0: port 2(bond2) entered disabled state [ 454.915819][T18862] bond2: entered allmulticast mode [ 454.953178][T18862] bridge0: port 2(bond2) entered blocking state [ 454.959737][T18862] bridge0: port 2(bond2) entered forwarding state [ 455.037776][T18863] bond3: entered promiscuous mode [ 455.050253][T18863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.058679][T18863] bridge0: port 3(bond3) entered blocking state [ 455.067944][T18863] bridge0: port 3(bond3) entered disabled state [ 455.074659][T18863] bond3: entered allmulticast mode [ 455.084479][T18863] bridge0: port 3(bond3) entered blocking state [ 455.090924][T18863] bridge0: port 3(bond3) entered forwarding state [ 455.105322][T17523] bridge0: port 2(bond2) entered disabled state [ 455.121345][T17523] bridge0: port 3(bond3) entered disabled state [ 455.180123][T18870] netlink: 'syz.3.3705': attribute type 12 has an invalid length. [ 455.215494][T18870] netlink: 'syz.3.3705': attribute type 29 has an invalid length. [ 455.241320][T18870] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3705'. [ 455.257485][T18870] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3705'. [ 455.271472][T18875] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3706'. [ 455.342127][T18879] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 455.473977][T18890] Bluetooth: MGMT ver 1.23 [ 455.725796][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3712'. [ 455.770382][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3712'. [ 455.813324][T18895] netlink: 'syz.2.3712': attribute type 7 has an invalid length. [ 455.958498][T18912] netlink: 'syz.4.3717': attribute type 3 has an invalid length. [ 456.292023][T18930] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3721'. [ 456.935002][T18952] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 457.134459][T18956] tipc: Started in network mode [ 457.139421][T18956] tipc: Node identity 2ee13ef7a3d6, cluster identity 4711 [ 457.154969][T18956] tipc: Enabled bearer , priority 0 [ 457.174868][T18956] syzkaller0: entered promiscuous mode [ 457.180397][T18956] syzkaller0: entered allmulticast mode [ 457.228998][T18956] tipc: Resetting bearer [ 457.242931][T18953] tipc: Resetting bearer [ 457.325135][T18953] tipc: Disabling bearer [ 458.134782][T19003] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 458.567941][T19014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.579664][T19025] sctp: [Deprecated]: syz.1.3753 (pid 19025) Use of int in maxseg socket option. [ 458.579664][T19025] Use struct sctp_assoc_value instead [ 458.586388][T19014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.640948][T19018] __nla_validate_parse: 3 callbacks suppressed [ 458.640968][T19018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3750'. [ 458.659887][T19018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3750'. [ 458.739008][T19014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.765875][T19014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.951299][T19014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.975401][T19014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.039166][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3754'. [ 459.088176][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3754'. [ 459.123180][T19049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3757'. [ 459.147482][T19050] tipc: Enabling of bearer rejected, failed to enable media [ 459.185703][T19014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.198075][T19014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.401200][T12584] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.417228][T12584] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.608837][T12587] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.626686][T12587] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.638109][T12587] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.649440][T12587] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.672418][T12587] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.693284][T12587] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.586113][ T30] audit: type=1804 audit(1755626689.760:4): pid=19102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3774" name="/newroot/122/cgroup.controllers" dev="tmpfs" ino=631 res=1 errno=0 [ 460.652064][ T30] audit: type=1800 audit(1755626689.760:5): pid=19102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3774" name="cgroup.controllers" dev="tmpfs" ino=631 res=0 errno=0 [ 460.692524][ T30] audit: type=1804 audit(1755626689.760:6): pid=19102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3774" name="/newroot/122/cgroup.controllers" dev="tmpfs" ino=631 res=1 errno=0 [ 460.841166][T19116] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3777'. [ 460.967026][T19124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3780'. [ 461.009080][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3776'. [ 461.053470][T19116] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 461.418480][T19142] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3785'. [ 461.694866][T19158] netlink: 'syz.2.3789': attribute type 13 has an invalid length. [ 461.749037][T19158] gretap0: refused to change device tx_queue_len [ 461.767608][T19158] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 461.821120][T19165] team0: Device gtp0 is of different type [ 462.052299][T19176] netlink: 'syz.0.3796': attribute type 11 has an invalid length. [ 462.063410][T19176] netlink: 'syz.0.3796': attribute type 11 has an invalid length. [ 462.080558][T19176] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3796'. [ 462.245115][ T51] Bluetooth: hci4: command tx timeout [ 462.819619][T19205] hsr_slave_0 (unregistering): left promiscuous mode [ 465.725608][T19209] __nla_validate_parse: 2 callbacks suppressed [ 465.725628][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3808'. [ 465.824377][T19212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3807'. [ 466.189160][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3815'. [ 466.246408][T19236] smc: net device bond0 applied user defined pnetid SYZ2 [ 466.357509][T19235] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3817'. [ 466.386714][T19235] gretap0: entered promiscuous mode [ 466.454049][T19247] Bluetooth: MGMT ver 1.23 [ 466.602998][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3825'. [ 466.624054][T19259] netlink: 'syz.3.3824': attribute type 1 has an invalid length. [ 466.799638][T19269] netlink: 'syz.4.3827': attribute type 10 has an invalid length. [ 466.831743][T19269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3827'. [ 466.841834][T19269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3827'. [ 467.050151][T19281] netlink: 'syz.4.3832': attribute type 1 has an invalid length. [ 467.454278][T19300] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 467.702334][T19308] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3841'. [ 467.855889][ T55] block nbd0: Possible stuck request ffff888024ef0000: control (read@281479271612416,65536B). Runtime 360 seconds [ 467.862628][T19322] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3847'. [ 467.997068][T19322] tipc: Enabled bearer , priority 0 [ 468.003861][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 468.036829][T19322] syzkaller0: entered promiscuous mode [ 468.051772][T19322] syzkaller0: entered allmulticast mode [ 468.124123][T19322] tipc: Resetting bearer [ 468.160069][T19319] tipc: Resetting bearer [ 468.217307][T19319] tipc: Disabling bearer [ 468.402364][T19307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 468.416865][T19307] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 468.458764][T19347] netlink: 'syz.2.3854': attribute type 12 has an invalid length. [ 468.476020][T19346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3855'. [ 468.543073][T19307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 468.566573][T19307] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 468.735703][T19356] netlink: 'syz.0.3857': attribute type 1 has an invalid length. [ 468.783425][T19356] netlink: 'syz.0.3857': attribute type 3 has an invalid length. [ 468.885682][T19307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 468.909761][T19307] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 469.054744][T19307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 469.060715][T19307] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 469.379650][T19370] tipc: Enabled bearer , priority 0 [ 469.401250][T19370] syzkaller0: entered promiscuous mode [ 469.422841][T19370] syzkaller0: entered allmulticast mode [ 469.493869][T19376] xfrm1: entered promiscuous mode [ 469.499402][T19376] xfrm1: entered allmulticast mode [ 469.514858][T19377] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 469.533184][T19370] tipc: Resetting bearer [ 469.564473][T19368] tipc: Resetting bearer [ 469.644894][T19368] tipc: Disabling bearer [ 469.918217][T19387] team_slave_0: entered promiscuous mode [ 469.924353][T19387] team_slave_1: entered promiscuous mode [ 470.388573][T19415] tipc: Enabled bearer , priority 0 [ 470.401861][T19415] syzkaller0: entered promiscuous mode [ 470.412077][T19415] syzkaller0: entered allmulticast mode [ 470.457225][T19415] tipc: Resetting bearer [ 470.488362][T19411] tipc: Resetting bearer [ 470.489649][T19422] openvswitch: netlink: IP tunnel dst address not specified [ 470.587161][T19411] tipc: Disabling bearer [ 470.822730][T19432] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.830613][T19432] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.150175][T19452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.178651][T19452] team0: Port device bond1 added [ 471.285110][T19469] __nla_validate_parse: 11 callbacks suppressed [ 471.285135][T19469] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3897'. [ 471.313097][T19451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.327092][T19451] team0: Port device bond2 added [ 471.356598][T19472] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3897'. [ 471.441181][T19459] syzkaller0: entered promiscuous mode [ 471.459594][T19459] syzkaller0: entered allmulticast mode [ 471.477752][T19469] tipc: Started in network mode [ 471.482797][T19469] tipc: Node identity 080211000001, cluster identity 4711 [ 471.493851][T19469] tipc: Enabled bearer , priority 0 [ 471.509077][T19472] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 471.517515][T19472] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 471.545060][T19480] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 471.553131][T19480] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 471.570450][T19469] tipc: Resetting bearer [ 471.833665][T19489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3904'. [ 471.876294][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3902'. [ 471.927420][T19498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3902'. [ 471.984156][T19488] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 471.990819][T19488] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 472.002554][T19498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3902'. [ 472.015025][T19500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3902'. [ 472.099235][T19502] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 472.278096][T19508] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3910'. [ 472.318070][T19508] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3910'. [ 472.351529][T19508] tipc: Enabling of bearer rejected, already enabled [ 472.548838][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3916'. [ 472.559320][ T5982] tipc: Node number set to 134418688 [ 472.901125][T19549] netlink: 'syz.1.3921': attribute type 15 has an invalid length. [ 472.954157][T19554] netlink: 'syz.1.3921': attribute type 15 has an invalid length. [ 473.179640][T19563] tipc: Enabling of bearer rejected, already enabled [ 473.229464][T19570] syz_tun: entered allmulticast mode [ 473.292015][T19565] syz_tun: left allmulticast mode [ 473.406385][T19575] netlink: 'syz.3.3930': attribute type 1 has an invalid length. [ 473.466443][T19582] netlink: 'syz.1.3933': attribute type 3 has an invalid length. [ 473.505012][T19582] netlink: 'syz.1.3933': attribute type 4 has an invalid length. [ 473.526519][T19575] bond1: entered promiscuous mode [ 473.545111][T19575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.636066][T19587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.650919][T19587] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 473.688993][T19587] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 473.722928][T19587] bond1: (slave wireguard0): making interface the new active one [ 473.772878][T19587] wireguard0: entered promiscuous mode [ 473.788853][T19587] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 473.909244][T19606] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 474.200820][T19622] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 474.340565][T19631] netlink: 'syz.3.3945': attribute type 3 has an invalid length. [ 474.475962][T19636] geneve2: entered promiscuous mode [ 474.486985][T19636] geneve2: entered allmulticast mode [ 474.496739][ T72] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 474.521557][ T72] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 474.546409][ T72] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 474.569601][ T72] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 474.647759][T19636] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.676901][T19636] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.742686][T19636] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 474.818088][T19648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.980256][T19636] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.998722][T19636] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.011471][T19636] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 475.481567][T19636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.498410][T19636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.511031][T19636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 475.540713][T19659] bridge0: port 3(veth0_to_bridge) entered blocking state [ 475.557721][T19659] bridge0: port 3(veth0_to_bridge) entered disabled state [ 475.566523][T19659] veth0_to_bridge: entered allmulticast mode [ 475.576226][T19659] veth0_to_bridge: entered promiscuous mode [ 475.582570][T19659] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 475.595832][T19659] bridge0: port 3(veth0_to_bridge) entered blocking state [ 475.603232][T19659] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 475.659221][T19636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.693788][T19636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.720240][T19636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 476.059743][T12587] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.090280][T12587] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 476.122205][T12587] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 476.168333][T12587] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.181544][T12587] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 476.200833][T12587] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 476.328223][T19691] netlink: 'syz.0.3967': attribute type 1 has an invalid length. [ 476.336521][T19686] bond2: entered promiscuous mode [ 476.336552][T19686] bond2: entered allmulticast mode [ 476.337049][T19686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.368803][T19694] __nla_validate_parse: 9 callbacks suppressed [ 476.368822][T19694] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3968'. [ 476.462957][T19700] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3969'. [ 476.594941][T19686] bond2 (unregistering): Released all slaves [ 476.610582][T19706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3970'. [ 476.622345][T12584] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.631242][T12584] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 476.639991][T12584] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 476.657382][ T72] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.669259][ T72] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 476.677957][ T72] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 476.691977][T19689] tunl0: entered promiscuous mode [ 476.699973][T19689] netlink: 'syz.0.3967': attribute type 3 has an invalid length. [ 476.714556][T19689] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3967'. [ 476.732424][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'. [ 476.743841][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3958'. [ 476.753032][T19697] netlink: 'syz.0.3967': attribute type 3 has an invalid length. [ 476.771823][T19697] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3967'. [ 476.801007][T19706] geneve2: entered promiscuous mode [ 476.945306][T19711] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 477.073602][T19717] raw_sendmsg: syz.2.3974 forgot to set AF_INET. Fix it! [ 477.365657][T19731] syzkaller0: entered promiscuous mode [ 477.371221][T19731] syzkaller0: entered allmulticast mode [ 477.527714][T19731] IPVS: persistence engine module ip_vs_pe_ not found [ 477.582163][T19755] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3985'. [ 477.758078][T19759] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20003 [ 478.142842][T19787] bridge_slave_0: left allmulticast mode [ 478.150645][T19787] bridge_slave_0: left promiscuous mode [ 478.161338][T19787] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.181299][T19787] bond0: (slave bond_slave_0): Releasing backup interface [ 478.203945][T19787] bond0: (slave bond_slave_1): Releasing backup interface [ 478.232964][T19787] team0: Port device team_slave_0 removed [ 478.252348][T19787] team0: Port device team_slave_1 removed [ 478.263666][T19787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.271424][T19787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.286874][T19787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.299384][T19787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.326471][T19787] bond2: left allmulticast mode [ 478.331731][T19787] bridge0: port 2(bond2) entered disabled state [ 478.359964][T19787] bond3: left allmulticast mode [ 478.368300][T19787] bridge0: port 3(bond3) entered disabled state [ 478.395562][T19788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.794671][T19807] netlink: 'syz.2.3999': attribute type 9 has an invalid length. [ 478.826090][T19805] can: request_module (can-proto-0) failed. [ 478.887292][T19809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4000'. [ 479.064233][T19813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4002'. [ 479.381525][T19832] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 479.398231][T19832] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 479.413414][T19828] syz.4.4007 uses old SIOCAX25GETINFO [ 480.004629][T19868] syz_tun: entered allmulticast mode [ 480.066810][T19868] syz_tun (unregistering): left allmulticast mode [ 480.420250][T19885] macvlan2: entered allmulticast mode [ 480.427907][T19885] bond0: (slave macvlan2): Opening slave failed [ 480.598983][T19887] veth3: entered allmulticast mode [ 480.635768][T19898] tipc: Enabled bearer , priority 0 [ 480.674680][T19898] syzkaller0: entered promiscuous mode [ 480.703084][T19898] syzkaller0: entered allmulticast mode [ 480.868278][T19901] tipc: Resetting bearer [ 480.944783][T19901] tipc: Disabling bearer [ 481.090467][T19915] tipc: Enabled bearer , priority 0 [ 481.104120][T19924] netlink: 'syz.1.4038': attribute type 3 has an invalid length. [ 481.138637][T19915] syzkaller0: entered promiscuous mode [ 481.173633][T19915] syzkaller0: entered allmulticast mode [ 481.396569][T19915] tipc: Resetting bearer [ 481.438768][T19914] tipc: Resetting bearer [ 481.460519][T19939] __nla_validate_parse: 9 callbacks suppressed [ 481.460543][T19939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4041'. [ 481.490333][T19945] netlink: 'syz.2.4044': attribute type 2 has an invalid length. [ 481.500790][T19939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.512792][T19914] tipc: Disabling bearer [ 481.549352][T19939] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 481.598106][T19939] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 481.699059][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4047'. [ 481.728225][T19957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4047'. [ 482.272457][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4058'. [ 482.306417][T19989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4058'. [ 483.940824][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4067'. [ 483.950864][T20025] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4066'. [ 483.996921][T20029] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 484.060087][T20032] bridge0: port 4(batadv1) entered blocking state [ 484.115017][T20032] bridge0: port 4(batadv1) entered disabled state [ 484.143236][T20032] batadv1: entered allmulticast mode [ 484.171193][T20032] batadv1: entered promiscuous mode [ 484.575290][ T72] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 484.585600][ T72] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 484.601662][T20067] syzkaller0: entered promiscuous mode [ 484.611083][T20060] netlink: 'syz.1.4074': attribute type 10 has an invalid length. [ 484.620759][T20067] syzkaller0: entered allmulticast mode [ 484.662411][T20060] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 485.232660][T20090] netlink: 800 bytes leftover after parsing attributes in process `syz.2.4083'. [ 485.557847][T20108] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4089'. [ 485.677614][T20110] veth0_to_bridge: entered promiscuous mode [ 485.702810][T20110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4090'. [ 485.744661][T20109] veth0_to_bridge: left promiscuous mode [ 485.932006][T20124] "syz.0.4095" (20124) uses obsolete ecb(arc4) skcipher [ 485.943637][T20124] netlink: 'syz.0.4095': attribute type 1 has an invalid length. [ 485.956937][T20123] netlink: 'syz.3.4096': attribute type 142 has an invalid length. [ 486.039806][T20128] "syz.4.4099" (20128) uses obsolete ecb(arc4) skcipher [ 486.050435][T20124] 8021q: adding VLAN 0 to HW filter on device bond4 [ 486.119958][T20127] bond4: (slave gretap1): making interface the new active one [ 486.134511][T20127] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 486.151482][T20131] vlan2: entered allmulticast mode [ 486.157280][T20131] bond0: entered allmulticast mode [ 486.166651][T20131] bond_slave_0: entered allmulticast mode [ 486.182754][T20131] bond_slave_1: entered allmulticast mode [ 486.376319][T20143] netlink: 'syz.2.4104': attribute type 83 has an invalid length. [ 486.908512][T20163] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 487.586754][T20183] __nla_validate_parse: 1 callbacks suppressed [ 487.586774][T20183] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4115'. [ 487.619270][T20186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4113'. [ 488.479960][T20206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.649730][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4122'. [ 488.783816][T20219] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4123'. [ 489.162172][T20226] ip6gre2: entered allmulticast mode [ 490.196794][T20251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4134'. [ 490.448770][T20257] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 490.922373][T20265] netlink: 'syz.3.4139': attribute type 1 has an invalid length. [ 490.966763][T20265] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4139'. [ 491.065123][T20271] netlink: 'syz.3.4139': attribute type 1 has an invalid length. [ 491.128579][T20271] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4139'. [ 492.027436][T20301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4148'. [ 492.731213][T20317] netlink: 'syz.3.4152': attribute type 1 has an invalid length. [ 492.768818][T20317] netlink: 'syz.3.4152': attribute type 11 has an invalid length. [ 492.814169][T20317] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4152'. [ 493.249953][T20331] netlink: 'syz.3.4156': attribute type 1 has an invalid length. [ 493.487085][T20331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.712852][T20343] bond2: (slave gretap1): making interface the new active one [ 493.800109][T20343] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 493.845173][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4160'. [ 494.550260][T20370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4169'. [ 494.600190][T20372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4169'. [ 494.634166][T20370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4169'. [ 494.780269][T20377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4170'. [ 494.822999][T20377] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 495.007042][T20381] netlink: 'syz.2.4172': attribute type 1 has an invalid length. [ 495.434139][T20394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4177'. [ 495.506288][T20386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4174'. [ 495.934312][T20400] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 495.981017][T20400] macvlan2: left promiscuous mode [ 496.008339][T20400] geneve2: left promiscuous mode [ 496.046722][T20400] xfrm1: left promiscuous mode [ 496.086969][T20394] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4177'. [ 496.108967][T20394] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4177'. [ 498.144435][ T55] block nbd0: Possible stuck request ffff888024ef0000: control (read@281479271612416,65536B). Runtime 390 seconds [ 502.173642][T20423] netlink: 'syz.4.4182': attribute type 12 has an invalid length. [ 502.181533][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4182'. [ 502.193813][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4184'. [ 502.218463][T20426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4184'. [ 502.560623][T20433] tap0: tun_chr_ioctl cmd 1074025678 [ 502.577223][T20433] tap0: group set to 0 [ 502.589945][T12587] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.600042][T20436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4185'. [ 502.640677][T12587] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.670720][T12587] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.694694][T20435] veth0_to_bridge: entered promiscuous mode [ 502.788951][T12587] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.799752][T20434] veth0_to_bridge: left promiscuous mode [ 502.949699][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4187'. [ 503.750019][T20450] bond0: Error: Cannot enslave bond to itself. [ 503.932971][T20452] : entered promiscuous mode [ 504.709213][T20473] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4201'. [ 505.321750][T20484] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4205'. [ 505.370669][T20485] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4205'. [ 505.628557][T20489] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4206'. [ 505.698087][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4208'. [ 507.439519][T20536] __nla_validate_parse: 2 callbacks suppressed [ 507.439544][T20536] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4219'. [ 507.890986][T20542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4221'. [ 507.951281][T20545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4222'. [ 508.132218][T20550] netlink: 'syz.1.4223': attribute type 1 has an invalid length. [ 508.189498][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4223'. [ 508.208859][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4223'. [ 508.646213][T20560] batman_adv: batadv0: Adding interface: dummy0 [ 508.673600][T20560] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.801382][T20560] batman_adv: batadv0: Interface activated: dummy0 [ 508.912928][T20564] batadv0: mtu less than device minimum [ 508.965264][T20564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 508.977800][T20564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 508.989846][T20564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.002055][T20564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.014165][T20564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.026265][T20564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.038306][T20564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.050359][T20564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.062382][T20564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.225826][T20569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4229'. [ 509.292920][T20569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4229'. [ 509.428295][T20577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4230'. [ 509.445203][T20569] netlink: 'syz.2.4229': attribute type 1 has an invalid length. [ 509.624013][T20583] syzkaller0: entered promiscuous mode [ 509.653534][T20583] syzkaller0: entered allmulticast mode [ 509.896681][T20583] tipc: Enabled bearer , priority 0 [ 510.071737][T20599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4236'. [ 510.101310][T20593] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 34 [ 510.203948][T20581] tipc: Resetting bearer [ 510.374575][T20581] tipc: Disabling bearer [ 511.107157][T20626] netlink: 'syz.0.4242': attribute type 1 has an invalid length. [ 511.147267][T20626] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4242'. [ 511.172626][T20626] netlink: 'syz.0.4242': attribute type 1 has an invalid length. [ 511.745676][T20637] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 512.874624][T20652] __nla_validate_parse: 2 callbacks suppressed [ 512.874646][T20652] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4253'. [ 513.821412][T20662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4256'. [ 514.269740][T20670] netlink: 'syz.3.4261': attribute type 5 has an invalid length. [ 514.395599][T20672] netlink: 'syz.0.4262': attribute type 1 has an invalid length. [ 515.056390][T20685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4266'. [ 515.105152][T20685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4266'. [ 515.181872][T20685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4266'. [ 515.229888][T20685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4266'. [ 515.390332][T20668] net_ratelimit: 10 callbacks suppressed [ 515.390356][T20668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.482027][T13077] IPVS: starting estimator thread 0... [ 515.534841][T20693] wg1: entered promiscuous mode [ 515.564094][T20693] wg1: entered allmulticast mode [ 515.594026][T20695] IPVS: using max 28 ests per chain, 67200 per kthread [ 515.748800][T20693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4268'. [ 515.998573][T20710] netlink: 'syz.1.4271': attribute type 1 has an invalid length. [ 516.048715][T20710] netlink: 'syz.1.4271': attribute type 2 has an invalid length. [ 516.521822][T20714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4272'. [ 516.967208][T20730] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.4277'. [ 517.013984][T20731] tipc: Enabled bearer , priority 0 [ 517.040416][T20730] netlink: 'syz.0.4277': attribute type 1 has an invalid length. [ 517.064803][T20731] syzkaller0: entered promiscuous mode [ 517.070348][T20731] syzkaller0: entered allmulticast mode [ 517.122059][T20730] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4277'. [ 517.250045][T20731] tipc: Resetting bearer [ 517.298487][T20726] tipc: Resetting bearer [ 517.522856][T20726] tipc: Disabling bearer [ 517.974956][T20752] netlink: 'syz.1.4283': attribute type 1 has an invalid length. [ 518.039358][T20752] __nla_validate_parse: 1 callbacks suppressed [ 518.039379][T20752] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4283'. [ 518.082532][T20746] veth7: entered allmulticast mode [ 518.660250][T20759] netlink: 'syz.1.4285': attribute type 5 has an invalid length. [ 518.728310][T20759] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4285'. [ 518.762993][T20759] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4285'. [ 518.808183][T20759] netlink: 'syz.1.4285': attribute type 6 has an invalid length. [ 518.877298][T20759] netlink: 'syz.1.4285': attribute type 5 has an invalid length. [ 518.938348][T20759] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4285'. [ 519.304051][T20771] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 519.409311][T20774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4290'. [ 519.580916][T20776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4291'. [ 519.612640][T20776] wg2: entered allmulticast mode [ 519.796425][T20780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4293'. [ 519.993695][T20786] dvmrp0: left allmulticast mode [ 520.045728][T20788] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4297'. [ 520.112861][T20790] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4297'. [ 520.572304][T20791] syzkaller0: entered promiscuous mode [ 520.590728][T20791] syzkaller0: entered allmulticast mode [ 521.706817][T20816] netlink: 'syz.1.4303': attribute type 1 has an invalid length. [ 521.795502][T20823] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4304'. [ 522.394316][T20836] netlink: 'syz.1.4308': attribute type 2 has an invalid length. [ 523.144766][T20844] netlink: 'syz.0.4310': attribute type 33 has an invalid length. [ 523.193407][T20844] __nla_validate_parse: 1 callbacks suppressed [ 523.193427][T20844] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4310'. [ 523.461792][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'. [ 523.652553][T20863] netlink: 'syz.2.4315': attribute type 1 has an invalid length. [ 523.676420][T20863] netlink: 'syz.2.4315': attribute type 1 has an invalid length. [ 524.009033][T20869] tipc: Enabling of bearer rejected, already enabled [ 524.240276][T20872] netlink: 'syz.4.4319': attribute type 1 has an invalid length. [ 524.299161][T20872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 524.398230][T20880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4320'. [ 524.409298][T20880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4320'. [ 524.483832][T20872] vlan0: entered allmulticast mode [ 524.502398][T20872] veth1: entered allmulticast mode [ 524.530721][T20872] bond2: (slave vlan0): making interface the new active one [ 524.543561][T20872] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 524.725952][T20885] netlink: 'syz.4.4322': attribute type 83 has an invalid length. [ 525.160739][T20898] netlink: 'syz.0.4325': attribute type 5 has an invalid length. [ 525.209395][T20898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4325'. [ 525.322495][T20906] tipc: Enabled bearer , priority 0 [ 525.337218][T20906] syzkaller0: entered promiscuous mode [ 525.342933][T20906] syzkaller0: entered allmulticast mode [ 525.426682][T20906] tipc: Resetting bearer [ 525.485200][T20905] tipc: Resetting bearer [ 525.562019][T20905] tipc: Disabling bearer [ 526.106498][T20917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4331'. [ 526.132051][T20917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4331'. [ 526.188132][T20917] erspan0: entered promiscuous mode [ 526.200853][T20917] batadv_slave_1: entered promiscuous mode [ 526.628597][T20924] sctp: [Deprecated]: syz.2.4333 (pid 20924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 526.628597][T20924] Use struct sctp_sack_info instead [ 526.663096][T20925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4335'. [ 526.674347][T20919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4332'. [ 526.967122][T20925] lo speed is unknown, defaulting to 1000 [ 527.001268][T20925] lo speed is unknown, defaulting to 1000 [ 527.039400][T20925] lo speed is unknown, defaulting to 1000 [ 527.096710][T20929] gretap0: left promiscuous mode [ 527.178307][T20929] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.185654][T20929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.203853][T20940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4337'. [ 527.831740][T20925] infiniband syz0: set active [ 527.845500][T20925] infiniband syz0: added lo [ 527.859584][T20925] syz0: rxe_create_cq: returned err = -12 [ 527.880891][T20925] infiniband syz0: Couldn't create ib_mad CQ [ 527.901788][T20925] infiniband syz0: Couldn't open port 1 [ 528.031575][T20925] RDS/IB: syz0: added [ 528.049652][T20925] smc: adding ib device syz0 with port count 1 [ 528.061626][T20925] smc: ib device syz0 port 1 has pnetid [ 528.081978][T20929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.166199][ T5951] lo speed is unknown, defaulting to 1000 [ 528.201065][T13068] lo speed is unknown, defaulting to 1000 [ 528.218587][T20925] lo speed is unknown, defaulting to 1000 [ 529.002555][T20968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4345'. [ 529.089712][T20971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4346'. [ 529.126325][T20971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4346'. [ 529.190295][T20970] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 529.252805][T20968] team_slave_0: entered promiscuous mode [ 529.259934][T20968] team_slave_1: entered promiscuous mode [ 529.313330][T20968] macsec2: entered promiscuous mode [ 529.339288][T20968] team0: entered promiscuous mode [ 529.356723][T20968] macsec2: entered allmulticast mode [ 529.375367][T20968] team0: entered allmulticast mode [ 529.389355][T20968] team_slave_0: entered allmulticast mode [ 529.405656][T20968] team_slave_1: entered allmulticast mode [ 529.431981][T20968] team0: Device macsec2 is already an upper device of the team interface [ 529.466907][T20968] team0: left allmulticast mode [ 529.472031][T20968] team_slave_0: left allmulticast mode [ 529.485694][T20968] team_slave_1: left allmulticast mode [ 529.501359][T20968] team0: left promiscuous mode [ 529.513019][T20968] team_slave_0: left promiscuous mode [ 529.518624][T20968] team_slave_1: left promiscuous mode [ 530.753714][T20979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4347'. [ 531.061273][T20925] lo speed is unknown, defaulting to 1000 [ 531.832557][T21000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4353'. [ 531.884377][T21000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4353'. [ 532.238473][T21006] tipc: Enabled bearer , priority 0 [ 532.436741][T21006] tipc: Disabling bearer [ 532.504548][T20925] lo speed is unknown, defaulting to 1000 [ 532.726595][ T55] block nbd0: Possible stuck request ffff888024ef0000: control (read@281479271612416,65536B). Runtime 420 seconds [ 533.070215][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4360'. [ 533.125028][ T31] INFO: task udevd:5916 blocked for more than 143 seconds. [ 533.144076][ T31] Not tainted syzkaller #0 [ 533.149083][ T31] Blocked by coredump. [ 533.184554][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 533.220258][ T31] task:udevd state:D stack:22952 pid:5916 tgid:5916 ppid:5233 task_flags:0x40054c flags:0x00004006 [ 533.275015][ T31] Call Trace: [ 533.279609][ T31] [ 533.293435][ T31] __schedule+0x1798/0x4cc0 [ 533.312186][ T31] ? __pfx___schedule+0x10/0x10 [ 533.323033][ T31] ? schedule+0x91/0x360 [ 533.339342][ T31] schedule+0x165/0x360 [ 533.351551][ T31] io_schedule+0x80/0xd0 [ 533.360987][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 533.369923][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 533.379357][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 533.388411][ T31] ? __filemap_fdatawait_range+0x1d2/0x230 [ 533.397901][ T31] ? __filemap_get_folio+0x9a6/0xaf0 [ 533.407173][ T31] truncate_inode_pages_range+0xa77/0xda0 [ 533.413125][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 533.422443][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.431517][ T31] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 533.440330][ T31] ? smp_call_function_many_cond+0xe38/0x12d0 [ 533.450034][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 533.457980][ T31] ? __pfx_has_bh_in_lru+0x10/0x10 [ 533.468281][ T31] blkdev_flush_mapping+0x108/0x270 [ 533.476727][ T31] ? bdev_release+0x40f/0x650 [ 533.481704][ T31] bdev_release+0x417/0x650 [ 533.490537][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 533.498775][ T31] blkdev_release+0x15/0x20 [ 533.507576][ T31] __fput+0x44c/0xa70 [ 533.511909][ T31] task_work_run+0x1d1/0x260 [ 533.519252][ T31] ? __pfx_task_work_run+0x10/0x10 [ 533.528353][ T31] do_exit+0x6b5/0x2300 [ 533.532806][ T31] ? do_raw_spin_lock+0x121/0x290 [ 533.540753][ T31] ? __pfx_do_exit+0x10/0x10 [ 533.549485][ T31] ? __up_read+0x280/0x680 [ 533.556642][ T31] do_group_exit+0x21c/0x2d0 [ 533.561590][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.570352][ T31] get_signal+0x1286/0x1340 [ 533.578969][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 533.588412][ T31] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 533.598386][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 533.608523][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 533.617971][ T31] exit_to_user_mode_loop+0x75/0x110 [ 533.627901][ T31] do_syscall_64+0x2bd/0x3b0 [ 533.632891][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.641296][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.651392][ T31] ? clear_bhb_loop+0x60/0xb0 [ 533.659393][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.668706][ T31] RIP: 0033:0x7f323c4a7407 [ 533.676032][ T31] RSP: 002b:00007ffe3fb9e9e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 533.689378][ T31] RAX: fffffffffffffffc RBX: 00007f323cbfd880 RCX: 00007f323c4a7407 [ 533.700677][ T31] RDX: 0000000000010000 RSI: 00007f323cbed000 RDI: 0000000000000009 [ 533.713086][ T31] RBP: 0000563c19b6b050 R08: 0000000000000000 R09: 0000000000000000 [ 533.723945][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 533.732209][ T31] R13: 00010000ffff0000 R14: 0000563c19b7bb68 R15: 00007f323cd2439c [ 533.746419][ T31] [ 533.749769][ T31] [ 533.749769][ T31] Showing all locks held in the system: [ 533.763453][ T31] 1 lock held by khungtaskd/31: [ 533.768512][ T31] #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 533.799057][ T31] 2 locks held by kworker/u8:4/72: [ 533.807036][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.823210][ T31] #1: ffffc9000212fbc0 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.840308][ T31] 2 locks held by getty/5625: [ 533.846681][ T31] #0: ffff88802fd760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 533.862528][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 533.878939][ T31] 4 locks held by kworker/0:3/5864: [ 533.884917][ T31] 2 locks held by kworker/0:5/5876: [ 533.890536][ T31] 1 lock held by udevd/5916: [ 533.900886][ T31] #0: ffff888143b12358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 533.912552][ T31] 3 locks held by kworker/u8:19/12579: [ 533.924394][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 533.945349][ T31] #1: ffffc90002f87bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 533.961151][ T31] #2: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 533.973240][ T31] 4 locks held by kworker/0:8/13077: [ 533.978789][ T31] 2 locks held by kworker/u8:29/17523: [ 533.990606][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 534.003276][ T31] #1: ffffc9000b007bc0 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 534.023827][ T31] 3 locks held by kworker/u8:30/17524: [ 534.029516][ T31] #0: ffff88814d145948 ((wq_completion)l2tp){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 534.046652][ T31] #1: ffffc9000ac57bc0 ((work_completion)(&session->del_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 534.063048][ T31] #2: ffffffff8e13f800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 534.079829][ T31] 7 locks held by syz.1.4335/20925: [ 534.087836][ T31] #0: ffffffff99e67858 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 534.104883][ T31] #1: ffffffff8f2984b0 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x341/0x5a0 [ 534.119909][ T31] #2: ffffffff8f28ac90 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xfe/0x3d0 [ 534.132553][ T31] #3: ffffffff8f28ae50 (rdma_nets_rwsem){++++}-{4:4}, at: enable_device_and_get+0x270/0x3d0 [ 534.148759][ T31] #4: ffff88807ec98f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 534.160110][ T31] #5: ffff88807ec99290 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3b0 [ 534.180095][ T31] #6: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 534.195110][ T31] 1 lock held by syz.2.4350/20989: [ 534.200528][ T31] #0: ffffffff8e13f800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 534.214221][ T31] 1 lock held by syz.4.4355/21006: [ 534.219492][ T31] #0: ffffffff8e13f800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 534.237608][ T31] 2 locks held by syz.0.4359/21016: [ 534.243113][ T31] #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 534.252416][ T31] #1: ffffffff8dfd3010 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x8de/0x1ff0 [ 534.271103][ T31] 1 lock held by syz.3.4361/21021: [ 534.276631][ T31] #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 534.292908][ T31] [ 534.296427][ T31] ============================================= [ 534.296427][ T31] [ 534.310610][ T31] NMI backtrace for cpu 1 [ 534.310641][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 534.310666][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.310679][ T31] Call Trace: [ 534.310688][ T31] [ 534.310699][ T31] dump_stack_lvl+0x189/0x250 [ 534.310733][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.310760][ T31] ? __pfx__printk+0x10/0x10 [ 534.310813][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 534.310843][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 534.310872][ T31] ? __pfx__printk+0x10/0x10 [ 534.310907][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 534.310945][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 534.310973][ T31] watchdog+0xf93/0xfe0 [ 534.311011][ T31] ? watchdog+0x1de/0xfe0 [ 534.311048][ T31] kthread+0x711/0x8a0 [ 534.311079][ T31] ? __pfx_watchdog+0x10/0x10 [ 534.311108][ T31] ? __pfx_kthread+0x10/0x10 [ 534.311137][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.311165][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.311192][ T31] ? __pfx_kthread+0x10/0x10 [ 534.311220][ T31] ret_from_fork+0x3f9/0x770 [ 534.311245][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 534.311275][ T31] ? __switch_to_asm+0x39/0x70 [ 534.311302][ T31] ? __switch_to_asm+0x33/0x70 [ 534.311329][ T31] ? __pfx_kthread+0x10/0x10 [ 534.311357][ T31] ret_from_fork_asm+0x1a/0x30 [ 534.311404][ T31] [ 534.311412][ T31] Sending NMI from CPU 1 to CPUs 0: [ 534.458744][ C0] NMI backtrace for cpu 0 [ 534.458763][ C0] CPU: 0 UID: 0 PID: 5864 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 534.458783][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.458796][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 534.458836][ C0] RIP: 0010:unwind_next_frame+0x0/0x2390 [ 534.458859][ C0] Code: 0a cc 89 d9 80 e1 07 80 c1 03 38 c1 7c 92 48 89 df e8 74 54 b0 00 eb 88 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 [ 534.458876][ C0] RSP: 0018:ffffc90000006ea0 EFLAGS: 00000202 [ 534.458891][ C0] RAX: 0000000000000001 RBX: ffffc90000006f60 RCX: fb239bacc4e00e00 [ 534.458904][ C0] RDX: dffffc0000000000 RSI: ffffffff818d4261 RDI: ffffc90000006ea8 [ 534.458917][ C0] RBP: ffffc90000006f30 R08: ffffc90000006f70 R09: 000000000000001a [ 534.458929][ C0] R10: ffffc90000006ef8 R11: ffffffff81ac3910 R12: ffff888032b18000 [ 534.458943][ C0] R13: 0000000000000000 R14: ffffffff81ac3910 R15: ffffc90000006ea8 [ 534.458956][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 534.458970][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.458982][ C0] CR2: 00007ffef2018f98 CR3: 000000000df36000 CR4: 00000000003526f0 [ 534.458998][ C0] Call Trace: [ 534.459005][ C0] [ 534.459011][ C0] arch_stack_walk+0x11c/0x150 [ 534.459038][ C0] ? kthread+0x711/0x8a0 [ 534.459070][ C0] stack_trace_save+0x9c/0xe0 [ 534.459091][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 534.459111][ C0] ? kasan_save_free_info+0x46/0x50 [ 534.459131][ C0] ? consume_skb+0x9e/0xf0 [ 534.459157][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 534.459176][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 534.459198][ C0] ? __lock_acquire+0xab9/0xd20 [ 534.459224][ C0] kasan_save_track+0x3e/0x80 [ 534.459246][ C0] ? kasan_save_track+0x3e/0x80 [ 534.459267][ C0] ? kasan_save_free_info+0x46/0x50 [ 534.459284][ C0] ? __kasan_slab_free+0x5b/0x80 [ 534.459306][ C0] ? kmem_cache_free+0x18f/0x400 [ 534.459329][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 534.459348][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 534.459366][ C0] ? nft_do_chain+0x409/0x1920 [ 534.459383][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 534.459401][ C0] ? nf_hook_slow+0xc2/0x220 [ 534.459426][ C0] ? NF_HOOK+0x206/0x3a0 [ 534.459449][ C0] ? NF_HOOK+0x309/0x3a0 [ 534.459471][ C0] ? __netif_receive_skb+0x143/0x380 [ 534.459494][ C0] ? process_backlog+0x60e/0x14f0 [ 534.459518][ C0] ? __napi_poll+0xc7/0x360 [ 534.459539][ C0] ? net_rx_action+0x707/0xe30 [ 534.459562][ C0] ? handle_softirqs+0x283/0x870 [ 534.459578][ C0] ? do_softirq+0xec/0x180 [ 534.459593][ C0] ? __local_bh_enable_ip+0x17d/0x1c0 [ 534.459609][ C0] ? kernel_fpu_end+0xd2/0x120 [ 534.459632][ C0] ? blake2s_compress+0x5f/0xd0 [ 534.459655][ C0] ? blake2s_final+0x116/0x260 [ 534.459674][ C0] ? wg_noise_handshake_create_response+0x6bb/0x970 [ 534.459696][ C0] ? wg_packet_send_handshake_response+0xf6/0x2d0 [ 534.459722][ C0] ? wg_packet_handshake_receive_worker+0x627/0xfb0 [ 534.459750][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 534.459766][ C0] ? worker_thread+0x8a0/0xda0 [ 534.459783][ C0] ? kthread+0x711/0x8a0 [ 534.459824][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 534.459842][ C0] kasan_save_free_info+0x46/0x50 [ 534.459860][ C0] __kasan_slab_free+0x5b/0x80 [ 534.459883][ C0] kmem_cache_free+0x18f/0x400 [ 534.459910][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 534.459934][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 534.459955][ C0] ? nf_ip_checksum+0x13c/0x510 [ 534.459977][ C0] nft_synproxy_do_eval+0x345/0x570 [ 534.459995][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 534.460020][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 534.460054][ C0] nft_do_chain+0x409/0x1920 [ 534.460071][ C0] ? __lock_acquire+0xab9/0xd20 [ 534.460106][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 534.460146][ C0] nft_do_chain_inet+0x25d/0x340 [ 534.460164][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 534.460183][ C0] ? __lock_acquire+0xab9/0xd20 [ 534.460212][ C0] ? NF_HOOK+0x9a/0x3a0 [ 534.460236][ C0] ? NF_HOOK+0x9a/0x3a0 [ 534.460261][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 534.460280][ C0] nf_hook_slow+0xc2/0x220 [ 534.460309][ C0] NF_HOOK+0x206/0x3a0 [ 534.460340][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 534.460365][ C0] ? NF_HOOK+0x9a/0x3a0 [ 534.460388][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 534.460411][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 534.460439][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 534.460465][ C0] ? skb_dst+0x4f/0xd0 [ 534.460489][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 534.460516][ C0] NF_HOOK+0x309/0x3a0 [ 534.460541][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 534.460565][ C0] ? NF_HOOK+0x9a/0x3a0 [ 534.460588][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 534.460610][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 534.460636][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 534.460666][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 534.460690][ C0] __netif_receive_skb+0x143/0x380 [ 534.460715][ C0] ? process_backlog+0x2d5/0x14f0 [ 534.460740][ C0] process_backlog+0x60e/0x14f0 [ 534.460774][ C0] ? __pfx_process_backlog+0x10/0x10 [ 534.460798][ C0] ? invoke_rcu_core+0xb6/0x200 [ 534.460817][ C0] ? __pfx_invoke_rcu_core+0x10/0x10 [ 534.460839][ C0] __napi_poll+0xc7/0x360 [ 534.460860][ C0] ? net_rx_action+0x46d/0xe30 [ 534.460887][ C0] net_rx_action+0x707/0xe30 [ 534.460910][ C0] ? __lock_acquire+0xab9/0xd20 [ 534.460945][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 534.460972][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 534.461001][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 534.461038][ C0] handle_softirqs+0x283/0x870 [ 534.461064][ C0] ? do_softirq+0xec/0x180 [ 534.461083][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 534.461103][ C0] ? kernel_fpu_end+0xc8/0x120 [ 534.461127][ C0] do_softirq+0xec/0x180 [ 534.461142][ C0] [ 534.461148][ C0] [ 534.461154][ C0] ? __pfx_do_softirq+0x10/0x10 [ 534.461171][ C0] ? __local_bh_disable_ip+0xf1/0x190 [ 534.461188][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 534.461207][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 534.461233][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 534.461250][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 534.461268][ C0] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 534.461296][ C0] kernel_fpu_end+0xd2/0x120 [ 534.461319][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 534.461347][ C0] blake2s_compress+0x5f/0xd0 [ 534.461372][ C0] blake2s_final+0x116/0x260 [ 534.461393][ C0] wg_noise_handshake_create_response+0x6bb/0x970 [ 534.461416][ C0] ? ktime_get_coarse_with_offset+0x83/0x140 [ 534.461442][ C0] ? __pfx_wg_noise_handshake_create_response+0x10/0x10 [ 534.461463][ C0] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 534.461485][ C0] ? ktime_get_coarse_with_offset+0x83/0x140 [ 534.461513][ C0] ? down_write_trylock+0x2e0/0x370 [ 534.461559][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.461584][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 534.461612][ C0] ? wg_socket_endpoint_from_skb+0x28b/0x7a0 [ 534.461641][ C0] ? ktime_get_coarse_with_offset+0xfb/0x140 [ 534.461664][ C0] wg_packet_send_handshake_response+0xf6/0x2d0 [ 534.461692][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 534.461719][ C0] ? wg_socket_set_peer_endpoint_from_skb+0xc8/0x120 [ 534.461758][ C0] wg_packet_handshake_receive_worker+0x627/0xfb0 [ 534.461797][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 534.461825][ C0] ? register_lock_class+0x51/0x320 [ 534.461854][ C0] ? __lock_acquire+0xab9/0xd20 [ 534.461885][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 534.461905][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.461926][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 534.461943][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 534.461961][ C0] process_scheduled_works+0xae1/0x17b0 [ 534.461994][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 534.462021][ C0] worker_thread+0x8a0/0xda0 [ 534.462073][ C0] kthread+0x711/0x8a0 [ 534.462096][ C0] ? __pfx_worker_thread+0x10/0x10 [ 534.462113][ C0] ? __pfx_kthread+0x10/0x10 [ 534.462147][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.462168][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.462191][ C0] ? __pfx_kthread+0x10/0x10 [ 534.462213][ C0] ret_from_fork+0x3f9/0x770 [ 534.462232][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 534.462252][ C0] ? __switch_to_asm+0x39/0x70 [ 534.462276][ C0] ? __switch_to_asm+0x33/0x70 [ 534.462299][ C0] ? __pfx_kthread+0x10/0x10 [ 534.462321][ C0] ret_from_fork_asm+0x1a/0x30 [ 534.462353][ C0] [ 535.360228][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 535.367150][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 535.376298][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.386389][ T31] Call Trace: [ 535.389702][ T31] [ 535.392673][ T31] dump_stack_lvl+0x99/0x250 [ 535.397319][ T31] ? __asan_memcpy+0x40/0x70 [ 535.401948][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.407181][ T31] ? __pfx__printk+0x10/0x10 [ 535.411824][ T31] vpanic+0x281/0x750 [ 535.415857][ T31] ? __pfx_vpanic+0x10/0x10 [ 535.420396][ T31] ? preempt_schedule+0xae/0xc0 [ 535.425293][ T31] ? preempt_schedule_common+0x83/0xd0 [ 535.430799][ T31] panic+0xb9/0xc0 [ 535.434556][ T31] ? __pfx_panic+0x10/0x10 [ 535.439013][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 535.444435][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 535.450624][ T31] watchdog+0xfd2/0xfe0 [ 535.454825][ T31] ? watchdog+0x1de/0xfe0 [ 535.459200][ T31] kthread+0x711/0x8a0 [ 535.463311][ T31] ? __pfx_watchdog+0x10/0x10 [ 535.468031][ T31] ? __pfx_kthread+0x10/0x10 [ 535.472750][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 535.477992][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.483232][ T31] ? __pfx_kthread+0x10/0x10 [ 535.487865][ T31] ret_from_fork+0x3f9/0x770 [ 535.492499][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 535.497658][ T31] ? __switch_to_asm+0x39/0x70 [ 535.502489][ T31] ? __switch_to_asm+0x33/0x70 [ 535.507301][ T31] ? __pfx_kthread+0x10/0x10 [ 535.511939][ T31] ret_from_fork_asm+0x1a/0x30 [ 535.516763][ T31] [ 535.520166][ T31] Kernel Offset: disabled [ 535.524527][ T31] Rebooting in 86400 seconds..