last executing test programs: 2.497644655s ago: executing program 2 (id=10166): r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) 2.022219032s ago: executing program 4 (id=10171): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r0, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) 2.021615846s ago: executing program 0 (id=10172): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) ioctl(r1, 0x1, &(0x7f0000000040)="10ae71") setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0}, 0x24040000) 1.877092636s ago: executing program 0 (id=10175): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x8707, 0x40, 0xdd, 0x4, {{0x20, 0x4, 0x0, 0x2, 0x80, 0x68, 0x0, 0x0, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}, {[@lsrr={0x83, 0xb, 0xf6, [@empty, @multicast2]}, @generic={0x82, 0x12, "4b6cd6232835b15bdeea73e283c788dc"}, @lsrr={0x83, 0x23, 0x20, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}]}, @cipso={0x86, 0xa, 0xffffffffffffffff, [{0x1, 0x4, "71bf"}]}, @ssrr={0x89, 0x1b, 0x91, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc085}, 0x200000c1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f00000004c0)=@ethtool_drvinfo={0x3, "e1a4df85181bfbc4c1e30aea57856a20f95d4816d6d1909e36294d4a26e48196", "a94afd3c6761d8c189ba4416c20619af33da236f32d8105fc4e83a55b1ae83a7", "242cceda0f7f52455782629808ab8ff69bb175ff217581adfa4970ae915218c7", "84cd7ab832dd393ed9251dd2bba1c90b16802468174a3c31ed3e39a54af5d9be", "81c4839450d41c9be76ff19b07440169751edb23b7fa5b57ffa540780d73a3c7", "5565cecf39917b652fce7f75", 0x4e, 0x8, 0x6, 0xccae, 0x400}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7800, 0x786, 0xc61, 0x7fffffff, {{0x24, 0x4, 0x1, 0x3d, 0x90, 0x68, 0x0, 0xf, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0x11, "8aa5f0aa462c77bb37a841e114e72a"}, @timestamp_addr={0x44, 0x2c, 0xcc, 0x1, 0x9, [{@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@private=0xa010101, 0x25e}, {@broadcast, 0x6}, {@empty, 0x800}]}, @timestamp_addr={0x44, 0x3c, 0xcc, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x6}, 0x872}, {@multicast2, 0x7fffffff}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@local, 0x3000000}, {@broadcast, 0x2}, {@empty, 0x3}]}]}}}}}) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r8 = ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2}, @GTPA_O_TEI={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.860898894s ago: executing program 4 (id=10176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r4, 0x813, 0x70bd26, 0x7, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xffff}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) 1.697759423s ago: executing program 0 (id=10178): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x3, 0x1, 'x'}, 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x8, 0x4, "83c2f6b0"}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000046000200000000000700000000000000050001000000000085100000faffffff95"], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x20028814) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r3}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 1.696409268s ago: executing program 4 (id=10179): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) (async) 1.618011526s ago: executing program 1 (id=10180): r0 = socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r1, 0x10f, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x3], 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 1.601631496s ago: executing program 3 (id=10181): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0927bd7000fddbf7926e8085324ac19031df25010000000000200001410000001800170000000b01ffe0006574"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0xd23e}}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0927bd7000fddbf7926e8085324ac19031df25010000000000200001410000001800170000000b01ffe0006574"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0xd23e}}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) 1.473495005s ago: executing program 1 (id=10182): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x80, 0x1, 0x8, 0x24, @local, @rand_addr=' \x01\x00', 0xc0, 0x7800, 0x4, 0xff}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x41000, 0x25, '\x00', r0, @sk_reuseport}, 0x94) 1.413808054s ago: executing program 1 (id=10183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000040)="c6a9484c7642c58b097158148880ace6758949bcad10aa03a5636257b5226c6f07a2fad138465115049e11cbe4ca5f8602dc263afb304cd46a686daf781fa069ce4f1ba1fd8c6fcfac1752db9de1a0882b53f7c41fe3ae5a3879b86b61cb", 0x5e}, {&(0x7f00000000c0)="70dff338802ef0cc921c5372fd3d8af94533120972491645e2f1fc1ed0479ec66ad773183b6d42f42a64115995dd03ab08946795f72caca29207085775cd8cbd7986b7f723d75d5160e1f3895488049c2c6cb18e939737affcc082cd7c9938bc4f5b1f3000bd", 0x66}, {&(0x7f0000000200)="75a01448df4b157f3f738c09e83539ab37289e234e5f7d7c461096645aa8f0f0cf13a9061c8c497f549e636d69417cdad04a8856e6c04aeaca8704f3a810447daf027553bcdeb3892c8ec579c2f38262982f4de265f8580cf19a6f4adf97986ef21262e0d7d6455d4992d393be369e8e4d50081c9e55742a972b029dee259b90a0cf148c0a7806f5", 0x88}, {&(0x7f0000000300)="564ec9767794f3afbc195644ecb0236d7660d4c8876e4db1b2d41adb0a9d66416e4726ed87e1939d94e29e9d0ca65feb0e80f5328fb8a41b174fc91a43203a532d1247b9415ba2f1415013872e271eb8b6f7923b033fdbca88873101f482651b428b7c8e222d4e14710c9cfa4d09f7a06447f4953a51e0c7e4f7751d9397865b8f5cf393356cbfdcc4103c71c0fc53", 0x8f}, {&(0x7f00000003c0)="6788cfb0998d9f65fb3c8edc01cf359d1ad13b880183015ac4e4a30c4e33efe23b95b56246be3857cb91b5e53e04ec47508306a46951fe8531168c214a7f78c6dfa270ed3af403430f1fd953b1c7a5e09f22751527f759c2fe97ad8533c921df7d12d35f8592db9477c05c73b3e218c1fb6d5048ac3c00ebd0214e41bd5a54e1573bce8c1d745ca28edf8da85e34177906382bde246f1e21dbbcd5dbd6ad92834cc5fe53c65dfc1ae57b", 0xaa}, {&(0x7f0000000480)="8f38e2eb5d9f3e31c3bc801d1836e51ec7c2fdbe5f0b1df98391ca7c667ef2460267102f0cf36fa1a7ad8aeea1e0e7bbe54933580eaa759f4c52fb06e12d60136aea7a8cd7863670b10f82bde0f506b0c2c8d1501df747c655b9c7bb440627914a4e624cf98fd7080e5a2b2375c245d425a793ee7ab22f12560c06f7f051549ae1ca279237563730c35871131becd4153fc2f93bd9f8a6b9b130499bb05600ad5468", 0xa2}, {&(0x7f0000000540)="d9998c5e4362c08c65e9ea16224dd08ff288bf2e13e60b7eec4ce9a032625b58e31ee8db789cde618ae377a78b2905791d52be00f8de9f594edc07371d4864b9d3fdd9ffda54fb9ad12818a813af12742a3d400447f467380668af696bc922da134f5be2fc518f0f13ef493f7d5e7e7cfe6e53becd348712604e7474158c7436f4ffccb69de80e6817a260", 0x8b}, {&(0x7f0000000600)="d9b67b4121537bc765f83f47292a2d7020e0f03e13332ff19812888d4b21ebdfad1b902b528800d89d00012f59ded4108a92799a3808a6cc4eea6c", 0x3b}, {&(0x7f0000000640)="41e19d50386ba190968c2c17f8286117b1232111a701448363a90045fa48f5ff28bfbccc8936ff15bacd8ea6b27330a59cb58d7046b8837dc26dbb5caca92263fecf36cf3c7226", 0x47}, {&(0x7f00000006c0)="9e4f6966b820b33d1e0c18f40cc189d8caae8a3a7fd8826df810ba29dd2133442d9346c9e764eedcac0b1e86a3bd862af52b7a985c7ffefdebd5a70df2dc", 0x3e}], 0xa) close(r0) 1.403999439s ago: executing program 2 (id=10184): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000000000008000a40001000000900020073797a31000000000900010073797a31000000000800054000000021080003400000004008000f"], 0x74}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @remote}, 0x14) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c20000030000000000008100100008004500003800000000fb019078ac1e0001ac1414aa0301907803240000450000000001000000410007e0000001ffffffffa8a24d00004b252c"], 0x0) 1.377175387s ago: executing program 4 (id=10185): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000027c0)={{0xffffffffffffffff, 0x0, 0x290482, &(0x7f0000000040)={@_ha_fsid={[0x1, 0xfffffffb]}, {0x2, 0xffff, 0x5, 0x9}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, 0x0}, 0x0, 0x0}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), r0) r2 = socket$inet6(0xa, 0x3, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f00000032c0)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="0f7fa9d63678"}]}, 0x28}, 0x1, 0x0, 0x0, 0x884}, 0x840) (fail_nth: 9) 1.273051555s ago: executing program 3 (id=10186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0, 0x604000000000000}, 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14, 0x14, 0x0, 0x7f}, [@FRA_SRC={0x8}]}, 0x24}}, 0x0) 1.25584548s ago: executing program 3 (id=10187): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000ac0)="ee", 0x1}, {&(0x7f0000000180)="052bb6962747fa83b9691aad31b3cfec1c4d840a3cdbd2df6ee8ad807242cb312f8c7e0d0d5a3b2616f0653c043134ba69b95885e9e70072393d83543e81e676de5c1db18e3b23f1eaaf88c03edc282d748c176b553424a8313d9d5859", 0x5d}, {&(0x7f0000000200)="bd8982e8dabb9c14b76f34c12dff28fb5493e7cc5b3d19a590765c9f0fb95d0896c5fb210b95b7ad618dec1737e0570a599d7dc82964b59753c7f823210608a4c9e91e0aad0e30dbe35344285c5521703d280061397735e461dc39bddcb022f01135541645bc1f218113914652e1ca1293363b55edf2200598e11d933cb830116fe37c40b0930cce056bd07de3ca78788fb95d4530e3d67cd327a3edb8417796b1f8316ca507e1722e019bd1b885495130ff4eb57cfc1d3fcccee3d1cae5bb57592042ce039d2ea978d8c5ae0b", 0xcd}], 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000ac0)="ee", 0x1}, {&(0x7f0000000180)="052bb6962747fa83b9691aad31b3cfec1c4d840a3cdbd2df6ee8ad807242cb312f8c7e0d0d5a3b2616f0653c043134ba69b95885e9e70072393d83543e81e676de5c1db18e3b23f1eaaf88c03edc282d748c176b553424a8313d9d5859", 0x5d}, {&(0x7f0000000200)="bd8982e8dabb9c14b76f34c12dff28fb5493e7cc5b3d19a590765c9f0fb95d0896c5fb210b95b7ad618dec1737e0570a599d7dc82964b59753c7f823210608a4c9e91e0aad0e30dbe35344285c5521703d280061397735e461dc39bddcb022f01135541645bc1f218113914652e1ca1293363b55edf2200598e11d933cb830116fe37c40b0930cce056bd07de3ca78788fb95d4530e3d67cd327a3edb8417796b1f8316ca507e1722e019bd1b885495130ff4eb57cfc1d3fcccee3d1cae5bb57592042ce039d2ea978d8c5ae0b", 0xcd}], 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) (async) 1.158384705s ago: executing program 4 (id=10188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200890000003c0001800c00010062697477697365002c0002800800034000000004080001400000001408000240000000671700000000000080080001006eee7e000900010073797a30"], 0x110}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r5, &(0x7f0000000080), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x8, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x1, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x8, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x4, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0xfffffff8, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x6, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x3, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x9, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0xd, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x6, 0x1, 0x8, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.084629334s ago: executing program 3 (id=10189): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)={0x50, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x50}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}]}, 0x50}}, 0x4004080) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r9, &(0x7f0000000080)={0x27, r8, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7e8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xf1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x38a}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008085) 794.667342ms ago: executing program 3 (id=10190): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x70bd25, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x24000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000000000000000200000014000480100001800a00010072656469720000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ab8672117ff586587c31008cb4ab00bee897522e9fb7bca1c0ae2fa3153d3bcfa04aabfc0ffaed561cc0be58e8099b30dccf754c06fc94ed1da3d14046244a9e4d91ac0613639f4130a1a19ab9b2db57827435b061479ad182b8ff96fe9935abc05dc9170f1ca0000000000000009b9d99aa6f7015f6b888ce749fa742a9bbc1631a1372312316e5501c1c369375b188d0a7732f75c3666feb1"], 0x68}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close(r9) syz_emit_ethernet(0x257, &(0x7f0000000240)={@local, @empty, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x1, 0x4}}, {@ipv6={0x86dd, @tipc_packet={0xf, 0x6, "059bdd", 0x219, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x29, 0x6, 0x1, 0x7, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x3c, 0x2, 0x1, 0x6, 0x0, [@empty]}, @srh={0x8, 0x12, 0x4, 0x9, 0x3e, 0x10, 0x6, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @dev={0xfe, 0x80, '\x00', 0x20}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x1, 0xb, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x88, 0xbe, [0x7]}}, @calipso={0x7, 0x48, {0x0, 0x10, 0x5, 0x6, [0xfffffffffffffff7, 0xfffffffffffffff9, 0x9, 0xc, 0x1, 0x5, 0x7, 0x2]}}]}, @srh={0x16, 0x8, 0x4, 0x4, 0x61, 0x50, 0x0, [@local, @mcast2, @remote, @private0]}, @srh={0x60, 0xa, 0x4, 0x5, 0x7f, 0x60, 0x5, [@private0, @remote, @dev={0xfe, 0x80, '\x00', 0x39}, @dev={0xfe, 0x80, '\x00', 0x40}, @private0={0xfc, 0x0, '\x00', 0x1}]}], @payload_named={{{{{0x29, 0x0, 0x0, 0x1, 0x0, 0xa, 0x2, 0x2, 0x4, 0x0, 0x1, 0x9, 0x0, 0x2, 0x4, 0xe, 0x1, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x2, 0x3}}, [0x0]}}}}}}, &(0x7f00000004c0)={0x1, 0x4, [0x29d, 0xe95, 0x125, 0xb99]}) 753.801512ms ago: executing program 1 (id=10191): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000019140)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000019100)={&(0x7f00000190c0)={0x38, 0x140b, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x2, 0x4e23, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0xfc94, &(0x7f0000000100)='macvlan0\x00', 0x401, 0x8000, 0x6}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000020301030000fae5ffffffffffff0000080004400000000000272d0cb4173e25a80914dd5990fd0b9286dd500d924d24e3c26c43d9b01d7cf42f87f36029050ce2bf383bedf9ea5b7da841ee12d1d9dd0d9b7a41a62c2e0f3f52dd6b5cab74da468bcfabdb1cbe52aea61c08030000004c85621a8d0cd2b7b1070f46f0d4b6583129647a1248d4e12b08ea987c31858c6f1ebb5a3468c1e41979e02c74235384df029101aa8c503a5655a5ce029f9c38a59ee76426a46715d461d05e90b08afe899b14"], 0x2c}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x271c, &(0x7f0000000080)=""/102377, &(0x7f0000000040)=0x18fe9) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000019140)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000019100)={&(0x7f00000190c0)={0x38, 0x140b, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) (async) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x2, 0x4e23, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0xfc94, &(0x7f0000000100)='macvlan0\x00', 0x401, 0x8000, 0x6}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000020301030000fae5ffffffffffff0000080004400000000000272d0cb4173e25a80914dd5990fd0b9286dd500d924d24e3c26c43d9b01d7cf42f87f36029050ce2bf383bedf9ea5b7da841ee12d1d9dd0d9b7a41a62c2e0f3f52dd6b5cab74da468bcfabdb1cbe52aea61c08030000004c85621a8d0cd2b7b1070f46f0d4b6583129647a1248d4e12b08ea987c31858c6f1ebb5a3468c1e41979e02c74235384df029101aa8c503a5655a5ce029f9c38a59ee76426a46715d461d05e90b08afe899b14"], 0x2c}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) (async) socket(0x15, 0x5, 0x0) (async) getsockopt(r9, 0x200000000114, 0x271c, &(0x7f0000000080)=""/102377, &(0x7f0000000040)=0x18fe9) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) 705.933053ms ago: executing program 0 (id=10192): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff06, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0xffffffffffffffff, 0x4, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) 623.848806ms ago: executing program 2 (id=10193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800dd8d00000000000001800200000000000000000000000600120002"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 597.90935ms ago: executing program 4 (id=10194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0x7}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[], 0x98}}, 0x24000044) select(0x40, &(0x7f00000000c0)={0x3fffffffc0, 0x6, 0x9, 0x3, 0x7fffffffffffffff, 0x6, 0x5, 0x2}, &(0x7f0000000140)={0x7f, 0x7ff, 0x8, 0x4, 0x7, 0x3, 0x5, 0x80}, &(0x7f0000000200)={0x5, 0x4, 0x9, 0x8, 0x0, 0xfffffffffffff531, 0x1000000000, 0x7}, &(0x7f0000000280)={0x0, 0x2710}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x16, 0x0, &(0x7f0000000240)) r7 = socket(0x40000000015, 0x5, 0x0) ppoll(&(0x7f0000000040)=[{r7, 0x85dc}], 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r10 = socket$l2tp6(0xa, 0x2, 0x73) pwrite64(r10, &(0x7f0000000440)="e79fb8f310ed04588800dc6180f771b275d0f71aafdc0fdd8377a31d3d1e8daba3be7618c14683a4dbdb78096536e03ff48c44e1a3c2cfb9eca5607c71b587ffbdf8661850f1e5e542d7d33a4ef0836fd7aac2d7711844ec9a2872fbf9b707c5d3c84b000c23dd63839da417bae077b698df5d8830a7cc7d046361e316bd6d0dbf10db406c275015fc0b81447c33e9323e534f3699cd7135", 0x98, 0xff) (async) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 537.689812ms ago: executing program 1 (id=10195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000198001fcffffffffffffff0020010000000000000000000000000000bc1414aa00000000000000000000000000000000f1f025ffff4a2e6309580000cde1b3cde501de6bf633d6e23641ccf6e595efe3092c3c6503652984515f2b7f4dbfdc79f61474e448dcaf6b5c3b7d86c4315c8e9b7f4f6018852954bdfb79cbf16810061594af885655319c802671712e6c9ebdd19d6c313f720b27ed777f297b11e5345e85e7946d5389bc8633e43dc2727eb46d5294f651c5fe988638e42613e071c70cd072746bf38d78c4af451ed4bfb4c0be0171faa9927e8ca302f839783cd0f9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000000000a000a"], 0xbc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=""/131, 0x83}], 0x1}, 0x2}], 0x1, 0x10122, 0x0) shutdown(r2, 0x0) 537.415949ms ago: executing program 0 (id=10196): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f00000001c0)=""/145, &(0x7f0000000280)=0x91) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x7}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f00000001c0)=""/145, &(0x7f0000000280)=0x91) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x7}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) (async) 483.967426ms ago: executing program 2 (id=10197): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) (async, rerun: 64) syz_emit_ethernet(0x1011, &(0x7f0000001800)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@llc={0x4, {@llc={0x4, 0xf0, "d8", "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"}}}}}, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x0}, 0x94) (async) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r4, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x800) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (rerun: 64) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x400, 0x70bd26, 0x0, {0xa}, [@RTA_DST={0x8, 0x1, @private=0xa010102}]}, 0x24}}, 0x0) 440.352455ms ago: executing program 3 (id=10198): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x2070, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x9}, @typed={0xa, 0x131, 0x0, 0x0, @str='vcan0\x00'}, @generic="370d48c9e014c4eab253acdb44eec50c36c7e17b07295dd8eb3a1433826470c351fa6c59d27578e3992c6233c81337e96ea7c3aadd0dca65a5cb41df5f2230587dcde161e75e19c950120193a7e2c49d1d5e93711854d429fa5c8b0932401005b46af44b4ebc5b0782c5459789c3bf203bbb2b1cb5ce9d627c6d0c7990e6dcefc32ce42848f99250559f27dff14149117b32cb931c472b8ec0e9376be8c9d35c099b3292af4e74673284343a6e2d578f19a243062dd1a06f42294e0cd66df9215bb2fd1182026f5e6d5fa44bc5458fce0bc0ead03cba8540a9348d85c93e9eca27120c97b54b8900ab5b0ee4b308e430f527af7a03243db25c59f62505f7", @nested={0x1255, 0x96, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @u32=0x3}, @generic="b5590be9f7b7f3244954dc1c4230b5e98945713f024bfff823b6dd7485e97e5db1c6918ebfab87f4afa21b29edff60bf700a7f5a8c3dd6f76385f3bd222f2ad57bb66ff614bfd399d4975a191fa738e197967bfefe3cda70d41a18d64044e199e1db8e7917d76550191e4da5f8c2f9330f3919ccb11d8e15430776acd182754bb16b1c86dc066da1d38ceb4f2035edc1f0dd5835d748944ce21f80ceb828fc728261be3e1f7773c3f85151000c25065c894b69760969e56b1962992b95c22b95b4f33a6c420fc3b00f90f586550621a4e5febab342cedee046e3cac2ade1242ba875f3330ff629f7b4d297d5d6a6bf2c518bd3ff119afef5c7104fd650336c890c2889dbb40942af46bef457e23c0076d07d15e228a67390289133e212cb7566944042d42e0999fc5aa3b5982396968935513482adee78936a891cc137b97d5ef67d53483aa001c1aab731ce0211f4370c4398eafe3e1cab840eab8d9b8317fb339103d5d074b4bd09017c4c9f537cca08889e395724a1cbf6e45f2c041bf351b0dc1b7ab40f36576555080a53b447126910fe8e9e31db979b2f17f5816045f3765bd1a48393a39bcea86517577ce71dad3d8cdbf3ed15d640655dca90f202f61fb63091be03fc35c0b88a781dd60b3d11e7bfcd88893b5271f9c8606f1ed97eae80314d6291434513cb170531db39b3444bb9f961e097983add21a3ab439fe1870489e482140a5c6227b49b9b95c23a95cd1359186e8f82587b4c7a2121daca9de389ac987330743b83a017951aafa55cbbf0bdd852474b58b49ada9d1ab7f20220a1a9fd8e700b43e603f375270e8e721610e676d08301971a720b90bfc9a991182d90a2f16266ff602aeebe516da141a4d00520d06cd873e77502351eb02d9099175de5df19516d110e4d2b64da635c2f37a7b78a0799dc58132b397e89c3c9d807134d72cbaf2ef549379cba42dd8af159d0e05d0378b6e77ea55c3815c8f83cb7a3b2583e2ff58d0a568d892511303882e1af4c193f3d36645cfb9222bda82e6d9bd4f52a0ede5c48e8965de0ca5b07b60895f7de26659399d02d2e4ebb140389d871d5a48fea8bde2dc9b29f282df17b934e677f23bffc53495dc72b772ecf395569dc1f9e134e01a28143c6bfc95897cc7b7654765806464df9b946581b4fef00b3014afb1df08a71815d47097ed520b343fc83381b92bc5427e1b11bb7fcf2c4efb97fcac08c72554790359a26a6fa553716818bf833433cb933b701e28479ff0eb9ccc77c297f9899cba7e67fc51cc44c5d7284da8ad24506a9c3d1e0b0787248b94bb2500e27163c2db5960662c305516a1d4fbdd983e5bab3b5756f8dc72a44951b0d7932331df8d8031e5197760ec85423341454b90f7180dbd6ed4bb337f1e5a47e954541b81043a58bcea7bc0ccdaf8dc63ef651ca49db5057252dab399b3992accecbabf04c154bfbf9a1df7dc687abe5f447566e1fcba9bfdf5d8339974a9d3fdb4a74702069053d5eed9dc1dfa42e9097dbae70c15ac17440faa6f95ebfbc6742700b7828336d8aa3d44950e14b9985d93f9435b4203fce0d07baa3c74e58e65fcf2e58eae91c47e8ca560a337e3bd7450c069376215ad37db05393c9678abd0f984bd85769d914bdd34251515505257b16041db350beaa07206f1a52bd68b56ade7d486d153735e7f096ee42cbbbe3cdc319b7d506d747ae34f265f7b4d01db0e8c841362755f71a4093e7fbb16d8ff4ee35693ca90594b768f55bede1a5914522a1e5734ce3380524f36bc1f97f81d7a9717a369a066e64d5bb0a7e985ebbbc872dee848bb9db487ffd8c979fb149934c70072962de4338b04491d604b6a072ff9de3f845ddd9f8623f3286b089da763fa670034226ae6ccb8972b70ab30ceddfc445cda1251c7cf6033cf13ce521fadb4138a676ee828e2dadbb2586da8410b76c5de854496cc0889b080a467118e2b2188b1f15604a162220bfe7521d4f2647ae87d63de0242c147ccf091ddee2c356e544929dc1f563acd3f5529c5122150687857afa593c7f28d3b316d6f583482732a52a1f30ee32dab586a8c1967b703f1960470ba0fdeda9892a7b7840c950f3258175ee29377c933fa1a0c878e9b87487ce35e3908559d42c42b96066801c1868a88e361dc4e87e963b250dacd08ffebfaea8ec300dd027db0c749be81c953f6de8a23a01286910a94221b2ad2a7cc76a69df2c802fdbaebf0de6fa39caf52c0e0f63d31bca24ab9930182b2f1f20b7f7b7b4a8cef45529d7572144d0f1033fa90e201ef84a4928309f7584e8b3eda6cb8d4df272e7236daa7342d16bcecb66268c29911428c943c23253a7854c62572339f42553bf38b4e4ff6415e3b42bd5b76fe298b2211ed20eda8ec6842053cecf0e77002865c9adfdb541ec212a62a93c3ca6bac967443acb9a016ebc5553767f1d8e466619b988e5e905e499db8777d39082a2df1ead413c529106354f619bcc7ceb4e02e60bbee591f7a5edf4ffbc913a1ff38e98a5c8ee7fff2115d05f9a61d5bdc56c05b47f6dd807e0f17994a9b695b47f33df41c38dd2c145b899045d81a310f7311b68fcf7a5f38f41a119b130a613e5c03897d00aadef8b8b7fed9712825c470b21ef17165b2a97ac06c891322e51bb1732ca103356f07f008c79302d2e9adaf941c947b4c73e27cd7c005dadf4f02c36ab9868ff8177f972decd694a1ed1066a0c8b087649e2dc81fc8c09c7267c1bd3bf8ac2269b0a1722d094f01a851107b42e17220fff1673e87ffb940775856682b6937768233b1b7032e2ce072491ef2789efdf42d6e172869e076b019f32ef917d3bd948cc3b2233bf2236ffaacd63c60b332a1046706fe9f9a647e05f1aad446693deb4382d48c803fa87420c34782f0ec0797c0455f4a55ef8923f8bf4edb49fdf6a06159a9d5b61b9ad0afda0557d2188cbed094a010e098d29dff692392faeafa79d976d6c78fa16a080658aa36b1a0cc412c30d550ca8975540a0b87a0bf4a086533b69d6683b05873fda1b82c8e85aa51da8f1d89c95cce619cf689b026251738ad679eb5249436bc78d21705b115a5776e57bb0c4680bdc79aef2edd18fb824398e7411fca1b384c07ccf4b1028e9621948e0da09250f3efe3ba30a52fe5647c18483ff27d525c7225568f84da6243eeaaaf5a7e93c99085a31b6a518f0cdb211957d67bfe9f62ba5f6c486aec9311fd9ace11fd65f94daa6e1427f84e5de42049f0cf48f3cc87556585f42130e139194f5254f732aad36c3e8c7fedf73488b147d731149f8d477afcdd15a066d27c5530bf93378e3d88c3d8ca07f742b63c51d7f0f805170a459a6ca4594203a6c9439953d5b6178b7a8db9f58183b11e3fa4311e523266b42f92bfd66257fc0740d5f5a1c5a50fce4bb1df35a4e610aabe777deeeaa72a0f34d8a29c79ab76b5f48187e65bb8d6bfa7312da73e1a9f3e164046571072fb1001d5ed5f5fe0fc1a7cf8064262018c433e5b31237e67dda391cb809c8e06782563d6c98159d4c1c460b0e00ab517b2732d3bc12819ea4e50f23bf62a46886b7a6e3272c3821b2a4f943fbf472ff634cf3bd5122119746398b58bbe3c403ef6b4fae5fb8e9f7ae9c07ed421b12f4738bd1cfebdbbee2f9a6857bb4d010968155f9b55b54d8ee87cf528b62f5f0fab05164d617e2bd63d842476f918f2d2df39b1ad7360af0678ba855730b8eeef97af7b785b9c07789fab41920cc66dd065e5cfff9b40f178727fc8a5fff99068b811efd818420eb1bc45f2a7a22f9f877bc09a9efb9bd49d770ead599f0c2e0fdb4ffcad3441c62f6486613fde086ebdeb5a40c7ad89c7edefbb5b8f42812ba7dafc70740be174f01f2af47fa0be93b8e5c1d4c72c0ce9500cfd88057c5aae1647634696f0cd43418009d90d0e288ecfe9abe93fa61dd83ddaffe3d85083b1268d091941f911a1a0ab06ac833d16f066ea116d0b33a216d21c02f9ba5a19bbece29ffa94ee903c23cf505e4c972c61a3ac99952f32453d40c881ee56f26a978fad21a5e53e611f9f1de54816420df5cafe3a67c0accdb686b2d0961211c73ae048c8775c0b9798a744c6aeb5a1317827e36426c0ddd18038a970e45ae15f1b551300b93c3e27c0df7fa6f889fdc72ab50835696ac4e567bf289ec247d851c2c715b9495e77b5a3dbd03d3aff3180043316d5959709d89b18331b4fb4c921ee14c576d4ce71930b5baf0deb0fc060d35e1e9f1c1323d243ccfc166bda65527438b8b41d969661a1df70a7abff735b35554056a82f498d46eeb835fe6a84f474379699531a5d5d5be2cd0916342ea79424219d1aef2f5871829cb58394898f8901f33d4fc83c67108ebfcfa4c54ae697c2651803c15e6ffa00e583c11f2c91e179562fc6c0e05a6f178f29841a5d1ca12feb279fe86801f32ac95d8977d5993dfc0fbd664ce2cde73afa4b9621d05e1779e6fdc36d579a370381154572d75260cf60a071158e99cfafd311c8af97e268737a729c1ee18bb6a95c64dfaea95cc6c5ba2e82dad8e0cb95334d05cb60db3491f0c756cccf26bc1c9665947bb8107f9bd2825de12311513ac374bd4c7b370243fa8576601f731b8dcb77a3db0950d98b600e67245532940012eece1e09f4d9f009435309227b0f28de1e014afba15b10953cf3dc610fbcbb652965cc72f3a26f91e7510094253b3bae289868b54a5f7f10a20116c0945890bd913534432d386ec3c8047bc525c71d7c37c5111ff90cdf25abaef49ea1a17a1ace80df37bb51cb253f5f6ceec8983a1762f1d4ae0e432e28f46998fa09a29e3165e0c69ed600281d7cc8a9ef09a0033de405e03b8c3afa09e192a1fd83bdf663ef51dc9f49060d5905dfa36abbda8831b168cb1a3f6205a51057da70011ac49ea48b21bcaf27c4f021ff2fa88f777e65d96f27829bbb8d5a7823626457ce00e3351b35ad2048630ff9533bb2b34a0aaba7cf9eab969c1554b3c1a497d0528b34c3f1a1a22405d1c0d9693c19bce1bc9ed536a66fcccbefa942a1cacec656ef56191d32db0fd471e62ac40db50c27ffc6a4de3eee510867d666a5d2a3af70ea49993858c998987e0e3cb534f9146144a7296b9a96c755f122e15e9aed76f537c51837487c554e4d25ddcae881d58069a0093915c3bbe2f8647849acca3aab55432da7107c422274cb43e398e17b8c4f43c50a6a4617d7f3656d3505110f885fc2d2b950c6c34ea0120da2f111e794a38a24fe8e6e70c25c2d2fc6c00dc9c369b1b5dbb5d7bb5f4d3d34f8bfdc633be412182c50caea9b2782666ed1fd8fba61c9fc0b3f75aa05a28b2dd57afc9b6b5f1628a7f2980dffa903711ed1c582532d1c74576771040a0687f0c2b3204e79aef004629afe78e9cff053a4322cd5521509a4a0a771a45eccb7001f70e17ad2ed44ea84c5535aabb704341bf71f0646fb6483f14965f0a502fd4cd6c545bf2d4c51ed6431a9a324087c75511a678d2484337537659f60b75f4475ea8115ec9fd355c66322e9d765e38a29aa3bf84e80f58315d5ac09661b74dfc588edc20576598ddb865c5adbc14326dc5ab43d3a0c39d078f95d878e86abbb69d90a2ad81cf49787f3c949d3a2744bb1024192c361af620af42639c04be79b7c9cb588a603dadca39a79c42ae9884196cdf2b97ef17d49f2eebb26cb12a8944b105ddb9d82f855dfec36cbb0a40f841dcfd2feba91cf3e6805473b9e1b58aee324799da01a94de853f61a6e319bf16efcb42b44b0308437b3", @nested={0x4, 0x132}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x2}, @generic="a0f95a3b544fa6e72627b669bfc4517affc35533d3620c695f760f097544323b5427bd1666cb5f8ff4cfe8550c3535b9e29a0a4be6fdcd30de4f8222d5cb80869d2bcf3cf2313dd69e293a24e00e4ddd224a2c622b900869426f17a7497ce303ad6d3c187333e1e639651f11", @generic="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", @generic="ea3956933b1b0595c34d80c0e787036b85e41e52cb17439dec444659e24c9873d6c601a08b8702e0e46e4eec61c6ed75326a0a2ecbc7171fa4177a8c0efe409d108321472bf0d81bab140716b6c2ad02da1949ea4f9485e96381a535559fe92b8c0d619860abdbdb07a5f89d97f16ae2d3d9044a80e6b31f837f0c5b1e598388b4736a991136dfe21c88202d62571d0beaf96884bba03f758c0f5b3e7ac53d1e3c29608b00cc10e0c677a044684b276962a6852c0f1dfb921acdba22343a", @typed={0x14, 0x118, 0x0, 0x0, @ipv6=@remote}]}, @generic="935510d862d66faab93b0f9f89dfa897211bd1f473a6672ee9d8f4f7f75488617de40196e43580a119d5b81281750c16722242a4a00e071385c98de754d902a4546658f1ba2db9baabab4b214db2eb24addebba8f41ad46f7ddf308fbb644c0e678e0fd22b2389ab1a2f0cc4cc42f77ab1aa310f355987ff1ca37847baaf1fc42a1d2b808a0277e473a2ded918865e8c2eb5c567d89229ec02ee28d29b68126d96cf98a8f9ece3ba1f4b359aa79e1eed37af97a4884edced86a86bc9eac772f7891a52c32b016e843203403e585b5152b2bd8474bd67fe5240f32068e71edc2125916b76d79280f2af2cc1c8dd21b60aead1e6", @generic="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"]}, 0x2070}, 0x1, 0x0, 0x0, 0x8054}, 0x80) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffffffffffffff84, 0x2, {{0x2, 0x0, 0x5, 0x1, 0xc}, 0x4, 0xfffffffe, 0x9, 0x5, 0x7, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x2, 0x1000, 0x101, 0xfffffffe, 0x5}}}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x8001}, @TCA_RATE={0x0, 0x5, {0xf6, 0x3}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000600)="38008e7064086f9abdc8bd4978df", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x18, r10, 0x1, 0x7, 0x6, @remote}, 0x14) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) 393.762338ms ago: executing program 1 (id=10199): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000000c0)="fb43d3958653c4", 0x7}], 0x1}}], 0x2, 0x4044805) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x8000000000025a5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050890) accept4$nfc_llcp(r6, &(0x7f0000000340), &(0x7f0000000480)=0x60, 0x80000) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf1186dd604dda0000140600fc01000000000000000000000000af44fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64f4eade4b90e2c80a2f22cce4978c88a9d95b24003d5459739dab2179d82e352000000052000100000000000000"], 0x20}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r10, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9000000002090300000000000000000002005e000900010073797a300000000008000540000000130900010073797a30000000000800034000000101440002001400018008000100ac1414aa08000200ac1414aa0c00028005000100210000000c000280050001003a0000000c0002800500010006000000060003400001000008000640000000000800054000000019"], 0x90}, 0x1, 0x0, 0x0, 0x95}, 0x48044) 392.070699ms ago: executing program 0 (id=10200): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8881}], 0x1, 0x20006850) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x10000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000240)=0x10) recvfrom$phonet(r3, &(0x7f0000000380)=""/153, 0x99, 0x2020, &(0x7f0000000440)={0x23, 0x6, 0x6, 0x6}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0xf7}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x7, 0x20, 0xfffffffa, 0xb4, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x68, 0x0, 0xf, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@lsrr={0x83, 0x7, 0xc6, [@broadcast]}, @rr={0x7, 0x17, 0xbc, [@private=0xa010102, @empty, @rand_addr=0x64010102, @local, @empty]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) 175.571707ms ago: executing program 2 (id=10201): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) close(0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) sendto$unix(r2, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@flowinfo={{0x14, 0x29, 0xb, 0x8000}}], 0x18}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 0s ago: executing program 2 (id=10202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7b4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c010105fb7000"}, 0xd8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): ly 0 port 6081 - 0 [ 885.118632][ T5117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.129972][ T5117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.294375][ T5838] Bluetooth: hci2: command tx timeout [ 885.367729][ T5117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 885.379619][ T5117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 885.389427][ T5117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 885.399462][ T5117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 885.502033][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.529680][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.552643][T13687] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.559862][T13687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.590534][T13687] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.597743][T13687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.857086][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.897547][ T5117] veth0_vlan: entered promiscuous mode [ 885.910690][ T5117] veth1_vlan: entered promiscuous mode [ 885.941393][ T5117] veth0_macvtap: entered promiscuous mode [ 885.951210][ T5117] veth1_macvtap: entered promiscuous mode [ 885.971016][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.987011][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.001240][T13671] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.011054][T13671] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.027035][T13671] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.036472][T13671] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.128400][T13681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.137162][T13681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.177313][T13671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.185908][T13671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.374204][ T5838] Bluetooth: hci2: command tx timeout [ 889.162653][ T5193] udevd[5193]: worker [2107] /devices/virtual/block/nbd6 is taking a long time [ 889.453816][ T5838] Bluetooth: hci2: command tx timeout [ 890.115345][T16274] lec:lec_start_xmit: lec0:No lecd attached [ 895.853384][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 895.861593][ C0] lec:lec_tx_timeout: lec0 [ 900.832951][T13680] bridge_slave_1: left allmulticast mode [ 900.838855][T13680] bridge_slave_1: left promiscuous mode [ 900.845633][T13680] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.855447][T13680] bridge_slave_0: left allmulticast mode [ 900.861703][T13680] bridge_slave_0: left promiscuous mode [ 900.868696][T13680] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.990774][T13680] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 901.000478][T13680] ip6gre1 (unregistering): left promiscuous mode [ 901.216944][T13680] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 901.225654][T13680] bridge3 (unregistering): left promiscuous mode [ 901.478590][T13680] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.487300][T13680] bond_slave_0: left promiscuous mode [ 901.496721][T13680] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.507192][T13680] bond_slave_1: left promiscuous mode [ 901.516004][T13680] .` (unregistering): Released all slaves [ 901.529788][T13680] bond0 (unregistering): Released all slaves [ 901.545144][T13680] bond1 (unregistering): Released all slaves [ 901.566351][T13680] bond2 (unregistering): Released all slaves [ 901.580593][T13680] bond3 (unregistering): Released all slaves [ 901.595644][T13680] bond4 (unregistering): Released all slaves [ 901.610249][T13680] bond5 (unregistering): Released all slaves [ 901.635036][T13680] bond6 (unregistering): Released all slaves [ 901.649708][T13680] bond7 (unregistering): Released all slaves [ 901.663653][T13680] bond8 (unregistering): Released all slaves [ 901.786106][T13680] 9: left promiscuous mode [ 901.872126][T13680] tipc: Disabling bearer [ 901.877761][T13680] tipc: Disabling bearer [ 901.885543][T13680] tipc: Left network mode [ 902.839827][T13680] hsr_slave_0: left promiscuous mode [ 902.850417][T13680] hsr_slave_1: left promiscuous mode [ 902.857587][T13680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.865222][T13680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.875905][T13680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.884240][T13680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.900216][T13680] veth1_macvtap: left promiscuous mode [ 902.907045][T13680] veth1_vlan: left promiscuous mode [ 903.152153][T13680] team0 (unregistering): Port device team_slave_1 removed [ 903.166781][T13680] team0 (unregistering): Port device team_slave_0 removed [ 903.504972][T13680] IPVS: stop unused estimator thread 0... [ 909.190453][ T5369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8856'. [ 909.227346][ T5369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8856'. [ 909.254672][ T5371] : renamed from virt_wifi0 [ 909.268581][ T5373] netlink: 'syz.4.8856': attribute type 2 has an invalid length. [ 909.298184][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8858'. [ 909.325961][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8858'. [ 909.444387][ T5385] netlink: 'syz.3.8860': attribute type 1 has an invalid length. [ 909.463551][ T5385] netlink: 280 bytes leftover after parsing attributes in process `syz.3.8860'. [ 910.551650][ T5441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8873'. [ 910.561860][ T5439] netlink: 'syz.1.8875': attribute type 51 has an invalid length. [ 910.575574][ T5441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8873'. [ 910.616417][ T5441] gretap0: entered promiscuous mode [ 910.631374][ T5441] gretap0: left promiscuous mode [ 910.665331][ T5449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.692025][ T5449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.700092][ T5452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8878'. [ 910.722062][ T5449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.736764][ T5449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.987026][ T5476] mac80211_hwsim hwsim76 syzkaller0: left promiscuous mode [ 911.005600][ T5476] mac80211_hwsim hwsim76 syzkaller0: left allmulticast mode [ 911.019133][ T5476] tipc: Resetting bearer [ 911.081871][ T5482] net_ratelimit: 52 callbacks suppressed [ 911.081895][ T5482] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 911.247184][ T5495] openvswitch: netlink: Flow actions attr not present in new flow. [ 911.379025][ T5506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8894'. [ 911.430146][ T5508] tap0: tun_chr_ioctl cmd 1074025676 [ 911.436164][ T5508] tap0: owner set to 0 [ 911.442708][ T5508] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 911.452401][ T5508] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 911.467428][ T5508] netlink: 'syz.4.8893': attribute type 12 has an invalid length. [ 911.476686][ T5508] netlink: 'syz.4.8893': attribute type 29 has an invalid length. [ 911.489194][ T5508] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8893'. [ 911.550775][ T5512] syzkaller0: entered promiscuous mode [ 911.567075][ T5512] syzkaller0: entered allmulticast mode [ 911.669161][ T5518] xt_CT: No such helper "snmp_trap" [ 911.737941][ T5525] netlink: 'syz.0.8897': attribute type 1 has an invalid length. [ 911.766589][ T5527] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 911.828574][ T5530] netlink: 'syz.4.8901': attribute type 1 has an invalid length. [ 912.215378][ T5538] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 912.227056][ T5538] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 912.345788][ T5545] bond5: (slave gretap1): making interface the new active one [ 912.360769][ T5545] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 912.559373][T13680] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 912.780520][ T29] audit: type=1800 audit(1775197835.332:15): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8911" name="memory.events" dev="tmpfs" ino=2924 res=0 errno=0 [ 912.975895][T21717] block nbd6: Possible stuck request ffff888027288000: control (read@0,1024B). Runtime 90 seconds [ 912.985191][ T5597] netlink: 'syz.4.8916': attribute type 1 has an invalid length. [ 912.987441][T21717] block nbd6: Possible stuck request ffff888027288200: control (read@1024,1024B). Runtime 90 seconds [ 913.007807][T21717] block nbd6: Possible stuck request ffff888027288400: control (read@2048,1024B). Runtime 90 seconds [ 913.019631][T21717] block nbd6: Possible stuck request ffff888027288600: control (read@3072,1024B). Runtime 90 seconds [ 913.136786][ T5597] bond6: entered promiscuous mode [ 913.156136][ T5597] 8021q: adding VLAN 0 to HW filter on device bond6 [ 913.189729][ T5609] 8021q: adding VLAN 0 to HW filter on device bond6 [ 913.198621][ T5609] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 913.209740][ T5609] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 913.234592][ T5609] bond6: (slave vcan1): making interface the new active one [ 913.242296][ T5609] vcan1: entered promiscuous mode [ 913.252015][ T5609] bond6: (slave vcan1): Enslaving as an active interface with an up link [ 913.678064][ T5630] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 913.788465][ T5630] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 913.844327][ T5623] syzkaller0: entered promiscuous mode [ 913.849853][ T5623] syzkaller0: entered allmulticast mode [ 914.142950][ T5656] netlink: 'syz.4.8931': attribute type 16 has an invalid length. [ 914.155820][ T5656] netlink: 'syz.4.8931': attribute type 17 has an invalid length. [ 914.208530][ T5656] erspan0: left allmulticast mode [ 914.229828][ T5656] sit0: left promiscuous mode [ 914.281453][ T5656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.300532][ T5656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 914.339389][ T5659] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 914.512329][ T5673] __nla_validate_parse: 17 callbacks suppressed [ 914.512351][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8937'. [ 914.599764][ T5675] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8938'. [ 914.701402][ T5682] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8942'. [ 914.711163][ T5682] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8942'. [ 914.721321][ T5682] netlink: 'syz.4.8942': attribute type 5 has an invalid length. [ 914.731620][ T5682] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8942'. [ 914.802428][ T5683] bond2: option all_slaves_active: invalid value (222) [ 914.816300][ T5683] bond2 (unregistering): Released all slaves [ 914.870666][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8941'. [ 915.117259][ T5707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8947'. [ 915.134205][ T5707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8947'. [ 915.262118][ T5720] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8952'. [ 915.626642][ T5730] netlink: zone id is out of range [ 915.637318][ T5734] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8955'. [ 915.664592][ T5730] netlink: zone id is out of range [ 915.673976][ T5730] netlink: zone id is out of range [ 915.679566][ T5730] netlink: zone id is out of range [ 915.695290][ T5730] netlink: zone id is out of range [ 915.714784][ T5730] netlink: zone id is out of range [ 915.767305][ T3649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 915.784600][ T3649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 915.792681][ T3649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 915.801572][ T3649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 915.810444][ T3649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 916.062130][ T5744] netlink: 'syz.0.8957': attribute type 1 has an invalid length. [ 916.298566][ T5750] bond7: (slave geneve3): making interface the new active one [ 916.328683][ T5750] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 916.400332][T26919] bridge0: port 1(syz_tun) entered disabled state [ 916.468855][T26919] syz_tun (unregistering): left allmulticast mode [ 916.478465][T26919] syz_tun (unregistering): left promiscuous mode [ 916.497739][T26919] bridge0: port 1(syz_tun) entered disabled state [ 916.582250][ T5757] 8021q: adding VLAN 0 to HW filter on device bond7 [ 916.606105][T31948] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 916.626228][T31948] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 916.726633][T31948] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 916.840100][T31948] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 916.885317][T13687] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.917787][T13687] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.080931][T13687] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.108593][T13687] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.281460][ T5802] netlink: 'syz.4.8965': attribute type 10 has an invalid length. [ 917.365563][T13687] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.399474][T13687] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.506736][ T5802] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 917.580631][ T5812] h: entered promiscuous mode [ 917.615484][T13687] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.636035][T13687] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.790308][ T5817] net_ratelimit: 4 callbacks suppressed [ 917.790327][ T5817] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 919.076919][T13687] bond10 (unregistering): (slave bridge11): Releasing active interface [ 919.085513][T13687] bridge11 (unregistering): left promiscuous mode [ 919.091958][T13687] bridge11 (unregistering): left allmulticast mode [ 919.117723][T13687] bond12 (unregistering): (slave bridge12): Releasing active interface [ 919.219612][T13687] bond0 (unregistering): Released all slaves [ 919.231124][T13687] bond1 (unregistering): Released all slaves [ 919.245094][T13687] bond2 (unregistering): Released all slaves [ 919.261087][T13687] bond3 (unregistering): Released all slaves [ 919.281946][T13687] bond4 (unregistering): Released all slaves [ 919.297856][T13687] bond5 (unregistering): Released all slaves [ 919.316479][T13687] bond6 (unregistering): Released all slaves [ 919.329909][T13687] bond7 (unregistering): Released all slaves [ 919.349453][T13687] bond8 (unregistering): Released all slaves [ 919.366372][T13687] bond9 (unregistering): (slave veth5): Releasing active interface [ 919.377510][T13687] bond9 (unregistering): (slave vlan2): Releasing active interface [ 919.387712][T13687] bond9 (unregistering): Released all slaves [ 919.408420][T13687] bond10 (unregistering): Released all slaves [ 919.421917][T13687] bond11 (unregistering): Released all slaves [ 919.436486][T13687] bond12 (unregistering): Released all slaves [ 919.460895][ T5736] chnl_net:caif_netlink_parms(): no params data found [ 919.696346][T13687] : left promiscuous mode [ 919.720412][ T29] audit: type=1107 audit(1775197842.272:16): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 919.764145][ T29] audit: type=1107 audit(1775197842.292:17): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g( {pz|;#t6.DJUc' [ 919.908997][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.916923][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.924674][ T5736] bridge_slave_0: entered allmulticast mode [ 919.933633][ T5736] bridge_slave_0: entered promiscuous mode [ 919.965734][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.978683][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.994556][ T5736] bridge_slave_1: entered allmulticast mode [ 920.016668][ T5736] bridge_slave_1: entered promiscuous mode [ 920.628505][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.830520][ T5928] __nla_validate_parse: 15 callbacks suppressed [ 920.830544][ T5928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8983'. [ 920.930703][ T5938] netlink: 'syz.0.8985': attribute type 1 has an invalid length. [ 920.940616][ T5938] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8985'. [ 920.950675][ T5938] netlink: 'syz.0.8985': attribute type 1 has an invalid length. [ 920.958592][ T5938] netlink: 'syz.0.8985': attribute type 8 has an invalid length. [ 920.971576][ T5938] netlink: 606 bytes leftover after parsing attributes in process `syz.0.8985'. [ 920.981509][ T5938] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8985'. [ 921.037590][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.417772][ T5736] team0: Port device team_slave_0 added [ 921.487353][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8992'. [ 921.500812][ T5736] team0: Port device team_slave_1 added [ 921.663662][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.683233][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.752421][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.892510][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.902165][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.953860][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.440644][ T5987] syzkaller1: entered promiscuous mode [ 922.460697][ T5987] syzkaller1: entered allmulticast mode [ 922.530231][ T5736] hsr_slave_0: entered promiscuous mode [ 922.549818][ T5736] hsr_slave_1: entered promiscuous mode [ 922.725494][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9000'. [ 922.820928][T13687] veth1_macvtap: left promiscuous mode [ 922.839432][T13687] veth0_macvtap: left promiscuous mode [ 922.858305][T13687] veth1_vlan: left promiscuous mode [ 923.061665][ T6031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9004'. [ 923.084177][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9005'. [ 923.096376][ T6034] sctp: [Deprecated]: syz.3.9005 (pid 6034) Use of int in maxseg socket option. [ 923.096376][ T6034] Use struct sctp_assoc_value instead [ 923.114953][ T6031] Unsupported ieee802154 address type: 0 [ 923.530974][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9007'. [ 923.679594][ T6053] xt_hashlimit: max too large, truncated to 1048576 [ 924.050077][ T6067] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20004 [ 924.092712][ T6067] netlink: 'syz.3.9011': attribute type 17 has an invalid length. [ 924.121461][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9011'. [ 924.599723][T13687] IPVS: stop unused estimator thread 0... [ 924.866629][ T6107] netlink: 'syz.4.9019': attribute type 3 has an invalid length. [ 924.974128][ T6105] syzkaller0: entered promiscuous mode [ 926.401852][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880adf99000: rx timeout, send abort [ 926.410618][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880adf99000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 926.534859][ T6155] openvswitch: netlink: Key type 237 is out of range max 32 [ 926.646880][ T6159] netlink: 'syz.1.9034': attribute type 1 has an invalid length. [ 926.656145][ T6159] netlink: 'syz.1.9034': attribute type 3 has an invalid length. [ 926.664411][ T6159] __nla_validate_parse: 2 callbacks suppressed [ 926.664429][ T6159] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9034'. [ 927.462318][ T6183] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9041'. [ 927.624746][ T6129] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 928.010679][ T5736] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 928.061512][ T5736] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 928.101316][ T5736] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 928.183618][ T5736] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 928.557413][ T6231] openvswitch: netlink: Multiple metadata blocks provided [ 928.652865][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9050'. [ 928.671096][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.748985][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.781958][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.789208][ T6877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.812858][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.820196][ T6877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.962853][ T6245] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.9053'. [ 929.032220][ T6245] openvswitch: netlink: Missing key (keys=40, expected=100) [ 929.694868][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.877078][ T5736] veth0_vlan: entered promiscuous mode [ 929.939163][ T5736] veth1_vlan: entered promiscuous mode [ 929.991261][ T6293] netlink: 54 bytes leftover after parsing attributes in process `syz.4.9061'. [ 930.065089][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9061'. [ 930.069531][ T5736] veth0_macvtap: entered promiscuous mode [ 930.132437][ T5736] veth1_macvtap: entered promiscuous mode [ 930.199865][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.230988][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.303218][T13680] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.332847][T13680] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.380605][T13680] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.416049][T13680] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.538722][ T6304] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.9062'. [ 930.639314][ T6309] netlink: 'syz.4.9064': attribute type 1 has an invalid length. [ 930.831464][T31949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.855820][T31949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.966954][T31949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.989685][T31949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.097141][ T6324] bond0: entered promiscuous mode [ 931.102232][ T6324] bond_slave_0: entered promiscuous mode [ 931.114610][ T6324] bond_slave_1: entered promiscuous mode [ 931.133828][ T6324] mac80211_hwsim hwsim84 wlan1: entered promiscuous mode [ 931.158130][ T6324] batadv0: entered promiscuous mode [ 931.186023][ T6324] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 931.227889][ T6324] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 931.292431][ T6324] hsr1: entered promiscuous mode [ 931.346840][ T6324] hsr1: entered allmulticast mode [ 931.351943][ T6324] bond0: entered allmulticast mode [ 931.383746][ T6324] bond_slave_0: entered allmulticast mode [ 931.390593][ T6324] bond_slave_1: entered allmulticast mode [ 931.433012][ T6324] mac80211_hwsim hwsim84 wlan1: entered allmulticast mode [ 931.454420][ T6324] batadv0: entered allmulticast mode [ 931.460458][ T6324] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 931.512612][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9070'. [ 931.526738][ T6324] bond0: left promiscuous mode [ 931.531593][ T6324] bond_slave_0: left promiscuous mode [ 931.551388][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 931.563844][ T6324] bond_slave_1: left promiscuous mode [ 931.593758][ T6324] mac80211_hwsim hwsim84 wlan1: left promiscuous mode [ 931.620284][ T6324] batadv0: left promiscuous mode [ 931.790999][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 931.820280][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 931.830020][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 931.840646][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 931.860666][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 932.588521][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9080'. [ 932.588556][ T6388] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9079'. [ 932.812915][T13680] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 932.866612][T13680] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.900719][T13680] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.921741][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9084'. [ 932.936824][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9084'. [ 932.974712][ T6374] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9075'. [ 933.013437][ T6377] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9075'. [ 933.170411][T13680] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.182544][T13680] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.278440][ T6416] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.324852][T13680] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.335522][T13680] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.338970][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9088'. [ 933.355832][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9088'. [ 933.390209][ T6416] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.452652][T13680] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.466758][T13680] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.515320][ T6416] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.601728][ T6426] netlink: 'syz.4.9089': attribute type 1 has an invalid length. [ 933.610125][ T6426] nbd: error processing sock list [ 933.621761][ T6427] netlink: 'syz.4.9089': attribute type 1 has an invalid length. [ 933.626285][ T6416] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.647789][ T6427] nbd: error processing sock list [ 933.934500][ T5838] Bluetooth: hci1: command tx timeout [ 933.941840][ T6357] chnl_net:caif_netlink_parms(): no params data found [ 934.219413][T13680] erspan0 (unregistering): left promiscuous mode [ 934.238174][T13680] gretap0 (unregistering): left promiscuous mode [ 934.467936][T13680] bond5 (unregistering): (slave bridge4): Removing an active aggregator [ 934.478646][T13680] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 934.486944][T13680] bond5 (unregistering): (slave bridge4): the permanent HWaddr of slave - 52:66:3d:37:ff:4f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 934.506597][T13680] bridge4 (unregistering): left promiscuous mode [ 934.512938][T13680] bridge4 (unregistering): left allmulticast mode [ 934.567209][T13680] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 934.577451][T13680] bridge5 (unregistering): left promiscuous mode [ 934.584601][T13680] bridge5 (unregistering): left allmulticast mode [ 934.629331][T13680] bond6 (unregistering): (slave bridge6): Removing an active aggregator [ 934.638560][T13680] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 934.647539][T13680] bridge6 (unregistering): left promiscuous mode [ 934.656175][T13680] bridge6 (unregistering): left allmulticast mode [ 934.706962][T13680] bond7 (unregistering): (slave bridge7): Releasing backup interface [ 934.716414][T13680] bridge7 (unregistering): left promiscuous mode [ 934.772283][T13680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.781926][T13680] bond_slave_0: left promiscuous mode [ 934.789963][T13680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.799551][T13680] bond_slave_1: left promiscuous mode [ 934.809579][T13680] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 934.819153][T13680] batadv0: left promiscuous mode [ 934.827957][T13680] bond0 (unregistering): Released all slaves [ 934.839194][T13680] bond1 (unregistering): (slave veth3): Releasing active interface [ 934.849564][T13680] bond1 (unregistering): Released all slaves [ 934.862983][T13680] bond2 (unregistering): Released all slaves [ 934.878425][T13680] bond3 (unregistering): Released all slaves [ 934.892035][T13680] bond4 (unregistering): Released all slaves [ 934.911336][T13680] bond5 (unregistering): Released all slaves [ 934.929135][T13680] bond6 (unregistering): Released all slaves [ 934.945839][T13680] bond7 (unregistering): Released all slaves [ 934.960612][T13680] bond8 (unregistering): Released all slaves [ 935.036348][ T6877] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.088410][ T6442] netlink: 'syz.0.9093': attribute type 16 has an invalid length. [ 935.099149][ T6442] netlink: 'syz.0.9093': attribute type 17 has an invalid length. [ 935.184381][ T6442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 935.267998][ T6877] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.284001][T13680] tipc: Left network mode [ 935.381763][T31949] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.560071][T31949] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.636285][ T6461] netlink: 'syz.0.9098': attribute type 1 has an invalid length. [ 935.648236][ T6461] netlink: 'syz.0.9098': attribute type 1 has an invalid length. [ 935.686702][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.726461][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.760315][ T6357] bridge_slave_0: entered allmulticast mode [ 935.784178][ T6357] bridge_slave_0: entered promiscuous mode [ 935.790337][ T6467] netlink: 'syz.4.9100': attribute type 3 has an invalid length. [ 935.825290][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.847135][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.874191][ T6357] bridge_slave_1: entered allmulticast mode [ 935.882675][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9102'. [ 935.897594][ T6475] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9100'. [ 935.906870][ T6357] bridge_slave_1: entered promiscuous mode [ 936.014641][ T5838] Bluetooth: hci1: command tx timeout [ 936.041543][ T6474] netlink: 'syz.2.9102': attribute type 5 has an invalid length. [ 936.104277][ T6357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.186509][ T6357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.337911][ T6490] IPVS: rr: FWM 3 0x00000003 - no destination available [ 936.355079][ T6357] team0: Port device team_slave_0 added [ 936.379782][ T6490] IPVS: rr: FWM 3 0x00000003 - no destination available [ 936.398971][ T6357] team0: Port device team_slave_1 added [ 936.639478][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.661569][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.763166][ T6357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.904860][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 936.912892][ C0] lec:lec_tx_timeout: lec0 [ 936.930733][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.949802][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.992318][ T6357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.378824][ T6357] hsr_slave_0: entered promiscuous mode [ 937.389557][ T6357] hsr_slave_1: entered promiscuous mode [ 937.397837][ T6357] debugfs: 'hsr0' already exists in 'hsr' [ 937.403645][ T6357] Cannot create hsr debugfs directory [ 937.865831][ T6542] veth1_macvtap: left promiscuous mode [ 938.093883][ T5838] Bluetooth: hci1: command tx timeout [ 938.097221][ T6557] __nla_validate_parse: 3 callbacks suppressed [ 938.097239][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9121'. [ 938.252011][ T6563] sctp: [Deprecated]: syz.2.9122 (pid 6563) Use of int in max_burst socket option deprecated. [ 938.252011][ T6563] Use struct sctp_assoc_value instead [ 938.642682][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9124'. [ 938.761189][ T6583] netlink: 'syz.0.9125': attribute type 9 has an invalid length. [ 939.016180][T13680] hsr_slave_0: left promiscuous mode [ 939.046178][T13680] hsr_slave_1: left promiscuous mode [ 939.052917][T13680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.071072][T13680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.086562][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9130'. [ 939.098349][T13680] veth1_macvtap: left promiscuous mode [ 939.106829][T13680] veth1_vlan: left promiscuous mode [ 939.112250][T13680] veth0_vlan: left promiscuous mode [ 939.318923][ T6604] delete_channel: no stack [ 939.834486][ T6613] Bluetooth: MGMT ver 1.23 [ 939.938207][ T6627] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9138'. [ 940.002303][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9136'. [ 940.036955][ T6613] netlink: 'syz.1.9134': attribute type 16 has an invalid length. [ 940.069862][ T6613] netlink: 'syz.1.9134': attribute type 17 has an invalid length. [ 940.174980][ T5838] Bluetooth: hci1: command tx timeout [ 940.212307][ T6613] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 940.223130][ T6636] netlink: 'syz.0.9140': attribute type 142 has an invalid length. [ 940.505699][ T6644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.763230][T13680] IPVS: stop unused estimator thread 0... [ 940.803912][ T6357] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 940.842426][ T6357] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 940.884004][ T6357] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 940.928581][ T6357] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 940.989999][ T6665] syzkaller1: entered promiscuous mode [ 941.009161][ T6665] syzkaller1: entered allmulticast mode [ 941.110145][ T6668] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 941.568536][ T6357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.657210][ T6357] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.688158][ T6697] erspan0: entered allmulticast mode [ 941.718491][T13674] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.725774][T13674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.799146][T13674] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.806414][T13674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.944404][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9156'. [ 942.048196][ T6718] syzkaller1: entered promiscuous mode [ 942.065331][ T6718] syzkaller1: entered allmulticast mode [ 942.331052][ T6733] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9162'. [ 942.490379][ T6746] netlink: 'syz.4.9164': attribute type 1 has an invalid length. [ 942.538596][ T6752] netlink: 'syz.4.9164': attribute type 1 has an invalid length. [ 942.747998][ T6357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.088058][T21717] block nbd6: Possible stuck request ffff888027288000: control (read@0,1024B). Runtime 120 seconds [ 943.098999][T21717] block nbd6: Possible stuck request ffff888027288200: control (read@1024,1024B). Runtime 120 seconds [ 943.110256][T21717] block nbd6: Possible stuck request ffff888027288400: control (read@2048,1024B). Runtime 120 seconds [ 943.122896][T21717] block nbd6: Possible stuck request ffff888027288600: control (read@3072,1024B). Runtime 120 seconds [ 943.348964][ T6773] netlink: 'syz.0.9169': attribute type 51 has an invalid length. [ 943.372035][ T6776] netlink: 'syz.2.9168': attribute type 8 has an invalid length. [ 943.397563][ T6357] veth0_vlan: entered promiscuous mode [ 943.405245][ T6778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.440731][ T6778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.635952][ T6357] veth1_vlan: entered promiscuous mode [ 943.826485][ T6795] netlink: 'syz.0.9172': attribute type 21 has an invalid length. [ 943.886258][ T6357] veth0_macvtap: entered promiscuous mode [ 943.901986][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9173'. [ 943.968841][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9173'. [ 944.030046][ T6357] veth1_macvtap: entered promiscuous mode [ 944.118178][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.151662][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.215239][T13674] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.242975][T13674] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.290383][T13674] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.320614][T13674] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.402696][ T6816] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9176'. [ 944.440742][ T6811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 944.680088][T13680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.698882][T13680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.812853][T13674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.843744][T13674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.321807][ T6857] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9186'. [ 945.359888][ T6857] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9186'. [ 945.495440][ T6862] xt_hashlimit: overflow, try lower: 3/0 [ 945.731765][ T3649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 945.746458][ T3649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 945.761096][ T3649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 945.770012][ T3649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 945.780175][ T3649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 945.914384][ T5488] veth0_vlan: left promiscuous mode [ 945.996523][ T5488] veth0_vlan: entered promiscuous mode [ 946.091467][ T6881] netlink: 'syz.4.9192': attribute type 1 has an invalid length. [ 946.129819][ T6881] netlink: 'syz.4.9192': attribute type 2 has an invalid length. [ 946.189945][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9193'. [ 946.352167][T13674] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.397327][T13674] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.431743][T13674] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 946.762476][T13674] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 946.808955][ T6910] netlink: 'syz.2.9198': attribute type 2 has an invalid length. [ 946.836514][T13674] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.850647][T13674] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 947.853354][ T3649] Bluetooth: hci5: command tx timeout [ 948.139466][T13674] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.149855][T13674] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.160897][T13674] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 948.213002][T13674] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.229124][T13674] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.241511][T13674] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 948.262599][T13671] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.280788][T13671] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 948.291413][T13671] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.310959][T13671] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 948.374436][T13671] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.397844][T13671] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 948.450806][ T6958] netlink: 'syz.1.9206': attribute type 1 has an invalid length. [ 948.533394][ T6958] 8021q: adding VLAN 0 to HW filter on device bond3 [ 948.561060][ T6961] netlink: 'syz.3.9207': attribute type 3 has an invalid length. [ 948.637684][ T6967] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 948.679346][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9208'. [ 948.801806][ T6964] macsec3: entered promiscuous mode [ 948.823595][ T6964] bridge0: entered promiscuous mode [ 948.829031][ T6964] macsec3: entered allmulticast mode [ 948.845906][ T6964] bridge0: entered allmulticast mode [ 948.856844][ T6964] bridge0: port 3(macsec3) entered blocking state [ 948.870704][ T6964] bridge0: port 3(macsec3) entered disabled state [ 948.870832][ T6979] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9212'. [ 948.913868][ T6964] bridge0: left allmulticast mode [ 948.918958][ T6964] bridge0: left promiscuous mode [ 949.551567][T13674] ip6gre0 (unregistering): left allmulticast mode [ 949.820992][T13674] bond6 (unregistering): (slave gretap1): Releasing active interface [ 949.895287][T13674] bond7 (unregistering): (slave geneve3): Releasing active interface [ 949.944484][ T3649] Bluetooth: hci5: command tx timeout [ 950.048119][T13674] bond4 (unregistering): (slave bridge0): Releasing backup interface [ 950.056477][T13674] bridge0 (unregistering): left promiscuous mode [ 950.063927][T13674] bridge0 (unregistering): left allmulticast mode [ 950.366654][T13674] bond1 (unregistering): Released all slaves [ 950.380621][T13674] bond2 (unregistering): Released all slaves [ 950.396315][T13674] bond3 (unregistering): Released all slaves [ 950.411049][T13674] bond4 (unregistering): Released all slaves [ 950.431223][T13674] bond5 (unregistering): Released all slaves [ 950.445200][T13674] bond6 (unregistering): Released all slaves [ 950.460650][T13674] bond0 (unregistering): Released all slaves [ 950.478307][T13674] bond7 (unregistering): Released all slaves [ 950.510236][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9216'. [ 950.673723][ T7029] netlink: 'syz.4.9218': attribute type 4 has an invalid length. [ 950.683731][ T7029] netlink: 'syz.4.9218': attribute type 2 has an invalid length. [ 950.736766][T13674] : left promiscuous mode [ 950.798500][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9217'. [ 950.844806][T13671] bond0: (slave bond_slave_0): interface is now down [ 950.852231][T13671] bond0: (slave bond_slave_1): interface is now down [ 950.871788][T13674] : left promiscuous mode [ 950.895620][T13687] bond0: (slave bond_slave_0): interface is now down [ 950.913294][T13687] bond0: (slave bond_slave_1): interface is now down [ 950.943614][T13687] bond0: (slave bond_slave_0): interface is now down [ 950.959703][T13687] bond0: (slave bond_slave_1): interface is now down [ 950.967125][ T7035] syzkaller1: entered promiscuous mode [ 950.972718][ T7035] syzkaller1: entered allmulticast mode [ 951.013882][T13680] bond0: (slave bond_slave_0): interface is now down [ 951.025762][T13680] bond0: (slave bond_slave_1): interface is now down [ 951.030350][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9221'. [ 951.056449][T13680] bond0: now running without any active interface! [ 951.089452][T13674] tipc: Disabling bearer [ 951.144194][T13674] tipc: Left network mode [ 951.353725][ T6870] chnl_net:caif_netlink_parms(): no params data found [ 951.919664][ T7093] 8021q: VLANs not supported on sit0 [ 951.950700][ T6870] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.978297][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.998153][ T6870] bridge_slave_0: entered allmulticast mode [ 951.999588][ T7096] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9232'. [ 952.018058][ T6870] bridge_slave_0: entered promiscuous mode [ 952.018372][ T3649] Bluetooth: hci5: command tx timeout [ 952.038458][ T7096] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9232'. [ 952.059928][ T7096] netlink: 'syz.4.9232': attribute type 6 has an invalid length. [ 952.074395][ T7096] netlink: 'syz.4.9232': attribute type 5 has an invalid length. [ 952.084754][ T7096] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9232'. [ 952.125166][ T6870] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.152820][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.183909][ T6870] bridge_slave_1: entered allmulticast mode [ 952.200337][ T6870] bridge_slave_1: entered promiscuous mode [ 952.504438][ T6870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.594770][ T6870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.884636][ T6870] team0: Port device team_slave_0 added [ 952.928670][ T6870] team0: Port device team_slave_1 added [ 953.034385][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9244'. [ 953.064496][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.107020][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.203868][ T6870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.268622][T13674] hsr_slave_0: left promiscuous mode [ 953.287391][T13674] hsr_slave_1: left promiscuous mode [ 953.344195][T13674] veth1_macvtap: left promiscuous mode [ 953.350079][T13674] veth1_vlan: left promiscuous mode [ 953.384706][ T3649] Bluetooth: hci1: command tx timeout [ 953.412875][ T7152] netlink: 'syz.3.9246': attribute type 11 has an invalid length. [ 953.472841][ T7152] netlink: 'syz.3.9246': attribute type 11 has an invalid length. [ 953.519823][ T7152] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9246'. [ 954.093995][ T3649] Bluetooth: hci5: command tx timeout [ 954.308393][T13674] veth0_to_team (unregistering): left allmulticast mode [ 954.421939][ T6870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.429995][ T6870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.457254][ T6870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.478355][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9247'. [ 954.642219][ T7189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9252'. [ 954.658660][ T6870] hsr_slave_0: entered promiscuous mode [ 954.675205][ T6870] hsr_slave_1: entered promiscuous mode [ 954.681711][ T6870] debugfs: 'hsr0' already exists in 'hsr' [ 954.728738][ T7189] netlink: 'syz.4.9252': attribute type 11 has an invalid length. [ 954.754685][ T6870] Cannot create hsr debugfs directory [ 954.775581][ T7192] netlink: 'syz.3.9254': attribute type 1 has an invalid length. [ 954.980988][ T7197] netlink: 'syz.4.9256': attribute type 30 has an invalid length. [ 955.079985][ T7197] bond8: option arp_missed_max: invalid value (0) [ 955.088095][ T7197] bond8: option arp_missed_max: allowed values 1 - 255 [ 955.098549][ T7197] bond8 (unregistering): Released all slaves [ 955.126751][ T7209] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 955.292076][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.299880][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.436550][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.453933][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.491161][ T7202] veth0_vlan: left promiscuous mode [ 955.635928][ T5300] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.659735][ T5300] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.681310][T13674] IPVS: stop unused estimator thread 0... [ 955.767645][ T5300] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.847524][ T5300] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.178488][ T7254] __nla_validate_parse: 3 callbacks suppressed [ 956.178511][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9272'. [ 956.454545][ T7271] netlink: 'syz.3.9275': attribute type 4 has an invalid length. [ 956.616516][ T7281] netlink: 'syz.4.9276': attribute type 8 has an invalid length. [ 956.645438][ T7280] netlink: 'syz.1.9277': attribute type 1 has an invalid length. [ 956.684231][ T7280] bond4: entered promiscuous mode [ 956.689738][ T7280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 956.781831][ T7286] bond4: (slave bridge1): making interface the new active one [ 956.802403][ T7286] bridge1: entered promiscuous mode [ 956.816117][ T7286] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 956.907643][ T7280] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 956.929677][ T7280] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 956.982033][ T7291] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 956.991124][ T7291] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 957.205112][ T6870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 957.213003][T16274] lec:lec_start_xmit: lec0:No lecd attached [ 957.225922][ T6870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 957.254717][ T6870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 957.276662][ T6870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 957.391469][ T6870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.418149][ T6870] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.431850][T13674] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.439081][T13674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.471601][ T5300] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.478778][ T5300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.881235][ T5300] tipc: Subscription rejected, illegal request [ 957.941613][ T6870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.075129][ T6870] veth0_vlan: entered promiscuous mode [ 958.121620][ T6870] veth1_vlan: entered promiscuous mode [ 958.270666][ T6870] veth0_macvtap: entered promiscuous mode [ 958.290811][ T6870] veth1_macvtap: entered promiscuous mode [ 958.395126][ T7359] netlink: zone id is out of range [ 958.400315][ T7359] netlink: zone id is out of range [ 958.411124][ T7359] netlink: zone id is out of range [ 958.485813][ T7364] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20000 [ 958.497537][ T7359] netlink: zone id is out of range [ 958.502707][ T7359] netlink: zone id is out of range [ 958.516000][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.540020][ T7359] netlink: zone id is out of range [ 958.570718][ T7359] netlink: zone id is out of range [ 958.617163][ T7355] xt_HMARK: proto mask must be zero with L3 mode [ 958.618751][ T7359] netlink: zone id is out of range [ 958.647740][ T7359] netlink: zone id is out of range [ 958.741447][ T6870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.752675][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9294'. [ 958.766031][ T7375] netlink: 'syz.4.9294': attribute type 8 has an invalid length. [ 958.788519][T13687] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.799635][ T7379] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9295'. [ 958.832207][T13687] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.858603][ T7383] batadv0: entered promiscuous mode [ 958.880430][ T7383] batadv0: entered allmulticast mode [ 958.903301][ T7383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.937171][T13687] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.983434][T13687] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.009940][ T7394] netlink: 'syz.4.9298': attribute type 1 has an invalid length. [ 959.087812][ T7394] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9298'. [ 959.170789][ T7394] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9298'. [ 959.268488][ T7394] netlink: 'syz.4.9298': attribute type 1 has an invalid length. [ 959.313146][ T7394] netlink: 618 bytes leftover after parsing attributes in process `syz.4.9298'. [ 959.404394][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9301'. [ 959.450855][ T7414] netlink: 'syz.1.9301': attribute type 1 has an invalid length. [ 959.464529][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9301'. [ 959.493814][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9301'. [ 959.503675][T13687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.520095][T13687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.530989][ T7414] netlink: 'syz.1.9301': attribute type 1 has an invalid length. [ 959.572183][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9301'. [ 959.642986][T13680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.675949][T13680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.160001][ T7438] net_ratelimit: 134 callbacks suppressed [ 960.160023][ T7438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 960.599353][ T7460] macvlan0: entered promiscuous mode [ 960.611964][ T7457] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 960.652992][ T7461] syzkaller0: entered promiscuous mode [ 960.671659][ T7461] syzkaller0: entered allmulticast mode [ 960.970422][ T7481] bond5: option mode: invalid value (133) [ 960.981025][ T7481] bond5 (unregistering): Released all slaves [ 961.060839][ T7480] syzkaller0: entered promiscuous mode [ 961.067699][ T7480] syzkaller0: entered allmulticast mode [ 961.081823][ T7480] openvswitch: netlink: Flow key attr not present in new flow. [ 961.576065][ T7513] __nla_validate_parse: 1 callbacks suppressed [ 961.576087][ T7513] netlink: 284 bytes leftover after parsing attributes in process `syz.0.9323'. [ 961.586754][ T7518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9325'. [ 962.233806][ T7553] netlink: 'syz.3.9331': attribute type 23 has an invalid length. [ 962.655251][ T3649] Bluetooth: hci5: command tx timeout [ 962.896131][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 962.904218][ C0] lec:lec_tx_timeout: lec0 [ 963.945320][ T7555] x_tables: duplicate underflow at hook 1 [ 964.003698][ T7550] syzkaller1: entered promiscuous mode [ 964.021437][ T7550] syzkaller1: entered allmulticast mode [ 964.137453][ T7564] netlink: 'syz.2.9334': attribute type 1 has an invalid length. [ 964.271261][ T7574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 964.278595][ T7574] IPv6: NLM_F_CREATE should be set when creating new route [ 964.352087][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9339'. [ 964.383411][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9339'. [ 964.398097][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9339'. [ 964.421974][ T7584] sctp: [Deprecated]: syz.2.9340 (pid 7584) Use of int in max_burst socket option. [ 964.421974][ T7584] Use struct sctp_assoc_value instead [ 964.528979][ T7592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9342'. [ 964.557907][ T7593] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9337'. [ 964.616942][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9344'. [ 964.627877][ T7598] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9344'. [ 964.637587][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9344'. [ 965.070818][ T7619] netlink: 'syz.4.9349': attribute type 10 has an invalid length. [ 965.086492][ T7615] syzkaller1: entered promiscuous mode [ 965.100508][ T7615] syzkaller1: entered allmulticast mode [ 965.190102][ T7625] x_tables: duplicate underflow at hook 1 [ 966.098066][ T7668] IPv6: sit1: Disabled Multicast RS [ 966.117137][ T7668] sit1: entered allmulticast mode [ 966.627846][ T7711] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 966.738046][ T7705] __nla_validate_parse: 5 callbacks suppressed [ 966.738076][ T7705] netlink: 300 bytes leftover after parsing attributes in process `syz.2.9373'. [ 966.935443][ T7720] netlink: 'syz.1.9377': attribute type 16 has an invalid length. [ 966.977339][ T7720] netlink: 'syz.1.9377': attribute type 3 has an invalid length. [ 967.009598][ T7720] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9377'. [ 967.415190][ T7736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9380'. [ 967.594374][ T7750] netlink: 'syz.2.9383': attribute type 142 has an invalid length. [ 967.634769][ T7749] netlink: 'syz.2.9383': attribute type 142 has an invalid length. [ 967.675568][ T7750] netlink: 'syz.2.9383': attribute type 10 has an invalid length. [ 967.683682][ T7750] netlink: 396 bytes leftover after parsing attributes in process `syz.2.9383'. [ 968.001310][ T7767] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9387'. [ 969.190553][ T7833] syzkaller1: entered promiscuous mode [ 969.196823][ T7833] syzkaller1: entered allmulticast mode [ 969.463682][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9404'. [ 969.486808][ T7849] netlink: 'syz.4.9404': attribute type 11 has an invalid length. [ 969.500789][ T7849] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9404'. [ 969.921548][ T7872] netlink: 'syz.2.9408': attribute type 2 has an invalid length. [ 969.941190][ T7872] netlink: 119 bytes leftover after parsing attributes in process `syz.2.9408'. [ 970.051807][ T7876] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9409'. [ 970.226962][ T7888] veth0_vlan: entered promiscuous mode [ 970.286026][ T7888] bond1: (slave vlan0): Enslaving as a backup interface with a down link [ 970.438937][ T7902] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9415'. [ 970.688992][ T7915] syzkaller0: entered promiscuous mode [ 970.706998][ T7915] syzkaller0: entered allmulticast mode [ 971.010439][ T7928] syzkaller1: entered promiscuous mode [ 971.019564][ T7928] syzkaller1: entered allmulticast mode [ 971.400674][ T7955] nft_compat: unsupported protocol 0 [ 971.407147][ T7950] can: request_module (can-proto-0) failed. [ 971.428796][ T7950] GUP no longer grows the stack in syz.0.9427 (7950): 200000003000-20000000a000 (200000001000) [ 971.442638][ T7950] CPU: 0 UID: 0 PID: 7950 Comm: syz.0.9427 Not tainted syzkaller #0 PREEMPT(full) [ 971.442669][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 971.442681][ T7950] Call Trace: [ 971.442690][ T7950] [ 971.442700][ T7950] dump_stack_lvl+0xe8/0x150 [ 971.442735][ T7950] __get_user_pages+0x2453/0x29d0 [ 971.442770][ T7950] ? __lock_acquire+0x6b5/0x2cf0 [ 971.442819][ T7950] ? __gup_longterm_locked+0xc4e/0x1630 [ 971.442850][ T7950] ? down_read_killable+0x1bb/0x340 [ 971.442887][ T7950] __gup_longterm_locked+0xdcf/0x1630 [ 971.442948][ T7950] gup_fast_fallback+0x1d82/0x22e0 [ 971.443016][ T7950] ? __pfx_gup_fast_fallback+0x10/0x10 [ 971.443056][ T7950] ? is_valid_gup_args+0x11f/0x200 [ 971.443087][ T7950] ? get_user_pages_fast+0x4d/0xb0 [ 971.443130][ T7950] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 971.443164][ T7950] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 971.443192][ T7950] iov_iter_get_pages2+0x5e/0xa0 [ 971.443221][ T7950] __se_sys_vmsplice+0x7b3/0x1490 [ 971.443265][ T7950] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 971.443290][ T7950] ? __pfx_futex_wake+0x10/0x10 [ 971.443399][ T7950] do_syscall_64+0x14d/0xf80 [ 971.443423][ T7950] ? trace_irq_disable+0x3b/0x150 [ 971.443441][ T7950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.443462][ T7950] ? clear_bhb_loop+0x40/0x90 [ 971.443487][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.443508][ T7950] RIP: 0033:0x7f7b0559c819 [ 971.443529][ T7950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.443547][ T7950] RSP: 002b:00007f7b06403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 971.443572][ T7950] RAX: ffffffffffffffda RBX: 00007f7b05815fa0 RCX: 00007f7b0559c819 [ 971.443587][ T7950] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 971.443600][ T7950] RBP: 00007f7b05632c91 R08: 0000000000000000 R09: 0000000000000000 [ 971.443613][ T7950] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 971.443627][ T7950] R13: 00007f7b05816038 R14: 00007f7b05815fa0 R15: 00007ffd113ca578 [ 971.443664][ T7950] [ 971.895030][ T7964] __nla_validate_parse: 1 callbacks suppressed [ 971.895050][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9429'. [ 971.921221][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9429'. [ 972.380166][ T7989] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 972.391249][ T7989] sock: sock_set_timeout: `syz.0.9433' (pid 7989) tries to set negative timeout [ 972.569941][ T7996] mac80211_hwsim hwsim101 : renamed from wlan1 (while UP) [ 973.138750][T21717] block nbd6: Possible stuck request ffff888027288000: control (read@0,1024B). Runtime 150 seconds [ 973.149800][T21717] block nbd6: Possible stuck request ffff888027288200: control (read@1024,1024B). Runtime 150 seconds [ 973.161041][T21717] block nbd6: Possible stuck request ffff888027288400: control (read@2048,1024B). Runtime 150 seconds [ 973.173476][T21717] block nbd6: Possible stuck request ffff888027288600: control (read@3072,1024B). Runtime 150 seconds [ 973.480629][ T8053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9453'. [ 973.602144][ T8058] netlink: 'syz.4.9454': attribute type 1 has an invalid length. [ 973.676423][ T8058] bond8: entered promiscuous mode [ 973.688181][ T8058] 8021q: adding VLAN 0 to HW filter on device bond8 [ 973.725509][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9457'. [ 973.759625][ T8058] bond8: (slave bridge24): making interface the new active one [ 973.767818][ T8058] bridge24: entered promiscuous mode [ 973.777748][ T8058] bond8: (slave bridge24): Enslaving as an active interface with an up link [ 973.788073][ T8064] netlink: 'syz.2.9457': attribute type 1 has an invalid length. [ 973.796895][ T8064] netlink: 'syz.2.9457': attribute type 2 has an invalid length. [ 973.835197][ T8075] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9459'. [ 974.004106][ T8087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 974.026374][ T8091] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 974.032845][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9463'. [ 974.247404][ T29] audit: type=1800 audit(1775197896.802:18): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9466" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=184 res=0 errno=0 [ 974.287710][ T8110] netlink: 'syz.4.9469': attribute type 21 has an invalid length. [ 974.304930][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9469'. [ 974.520387][ T8114] netlink: 'syz.2.9471': attribute type 1 has an invalid length. [ 974.774401][ T8134] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9477'. [ 974.985861][ T8142] syzkaller1: entered promiscuous mode [ 975.001773][ T8142] syzkaller1: entered allmulticast mode [ 975.125807][ T8150] pimreg: entered allmulticast mode [ 975.167992][ T8150] Unsupported ieee802154 address type: 0 [ 975.336110][ T8164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9488'. [ 975.376252][ T8170] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9487'. [ 975.392605][ T8169] netlink: 'syz.4.9485': attribute type 10 has an invalid length. [ 975.477644][ T8169] bridge0: entered allmulticast mode [ 975.511095][ T8169] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 975.659971][ T8178] netlink: 'syz.1.9489': attribute type 9 has an invalid length. [ 976.136899][ T8188] bond9: Invalid ad_actor_system MAC address. [ 976.143011][ T8188] bond9: option ad_actor_system: invalid value (1) [ 976.198907][ T8188] bond9 (unregistering): Released all slaves [ 976.604442][ T8228] Cannot find add_set index 0 as target [ 976.978329][ T8254] sctp: [Deprecated]: syz.2.9507 (pid 8254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 976.978329][ T8254] Use struct sctp_sack_info instead [ 977.006034][ T8254] __nla_validate_parse: 7 callbacks suppressed [ 977.006055][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9507'. [ 977.034002][ T8254] hsr_slave_0: left promiscuous mode [ 977.053789][ T8254] hsr_slave_1: left promiscuous mode [ 977.085752][ T8257] netlink: 'syz.0.9508': attribute type 29 has an invalid length. [ 977.093779][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9508'. [ 977.108217][ T8257] netlink: 'syz.0.9508': attribute type 29 has an invalid length. [ 977.120245][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9508'. [ 977.346832][ T8271] netlink: 'syz.0.9513': attribute type 1 has an invalid length. [ 977.434806][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9514'. [ 977.984361][ T8314] bond2: entered promiscuous mode [ 978.004530][ T8314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 978.088137][ T8318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9527'. [ 978.494966][ T8346] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9534'. [ 978.828502][T13674] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.841035][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9540'. [ 978.851403][T13674] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.901143][T13674] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.922695][T13674] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 979.407443][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9548'. [ 979.517076][ T8411] bond2: option lp_interval: invalid value (0) [ 979.526212][ T8411] bond2: option lp_interval: allowed values 1 - 2147483647 [ 979.556593][ T8411] bond2 (unregistering): Released all slaves [ 979.760501][ T8429] validate_nla: 3 callbacks suppressed [ 979.760521][ T8429] netlink: 'syz.0.9553': attribute type 13 has an invalid length. [ 979.782553][ T8429] netlink: 'syz.0.9553': attribute type 58 has an invalid length. [ 979.798801][ T8429] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9553'. [ 980.360241][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9566'. [ 980.408273][ T8466] syzkaller1: entered promiscuous mode [ 980.425430][ T8466] syzkaller1: entered allmulticast mode [ 980.770009][ T8489] bridge0: port 3(syz_tun) entered blocking state [ 980.795819][ T8489] bridge0: port 3(syz_tun) entered disabled state [ 980.820595][ T8489] syz_tun: entered allmulticast mode [ 980.834221][ T8489] syz_tun: entered promiscuous mode [ 981.284251][ T8525] vcan0: tx address claim with dlc 0 [ 981.886642][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 981.896795][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 981.907083][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 981.921029][ T8550] bridge_slave_0: left allmulticast mode [ 981.922884][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 981.939919][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 981.974806][ T8550] bridge_slave_0: left promiscuous mode [ 982.025738][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.087138][ T8550] bridge_slave_1: left allmulticast mode [ 982.092843][ T8550] bridge_slave_1: left promiscuous mode [ 982.115811][ T8568] netlink: 'syz.2.9596': attribute type 1 has an invalid length. [ 982.128038][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.149270][ T8550] bond0: (slave bond_slave_0): Releasing backup interface [ 982.172066][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 982.188079][ T8550] bond0: (slave bond_slave_1): Releasing backup interface [ 982.249766][ T8550] team0: Port device team_slave_0 removed [ 982.276589][ T8550] team0: Port device team_slave_1 removed [ 982.292855][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.305778][ T8550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.329432][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.354936][ T8550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.371625][ T8550] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 982.410519][ T8551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 982.447724][ T8563] netlink: 'syz.3.9595': attribute type 1 has an invalid length. [ 982.461058][ T8563] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.510190][ T8568] bond3: entered promiscuous mode [ 982.515959][ T8568] 8021q: adding VLAN 0 to HW filter on device bond3 [ 982.562209][ T8572] bond3: (slave bridge2): making interface the new active one [ 982.583975][ T8572] bridge2: entered promiscuous mode [ 982.592857][ T8572] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 982.667594][T29740] syz_tun (unregistering): left allmulticast mode [ 982.680846][T29740] syz_tun (unregistering): left promiscuous mode [ 982.694977][T29740] bridge0: port 3(syz_tun) entered disabled state [ 982.696405][ T8584] __nla_validate_parse: 14 callbacks suppressed [ 982.696422][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9598'. [ 982.747646][ T8586] netlink: 'syz.2.9599': attribute type 35 has an invalid length. [ 982.758587][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9598'. [ 983.474753][ T8620] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9606'. [ 983.602072][ T8625] sctp: [Deprecated]: syz.0.9608 (pid 8625) Use of int in maxseg socket option. [ 983.602072][ T8625] Use struct sctp_assoc_value instead [ 983.900050][ T8634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9610'. [ 983.931842][ T8635] netlink: 'syz.2.9611': attribute type 9 has an invalid length. [ 984.019992][ T5838] Bluetooth: hci4: command tx timeout [ 984.110036][ T8637] mac80211_hwsim hwsim100 wlan0: entered promiscuous mode [ 984.301492][ T8555] chnl_net:caif_netlink_parms(): no params data found [ 984.351078][T13687] bridge_slave_1: left allmulticast mode [ 984.377462][T13687] bridge_slave_1: left promiscuous mode [ 984.384246][T13687] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.420838][T13687] bridge_slave_0: left allmulticast mode [ 984.451331][T13687] bridge_slave_0: left promiscuous mode [ 984.460142][ T8665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9618'. [ 984.469756][T13687] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.664045][ T8674] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 984.670067][ T8675] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 984.920302][T13687] bond5 (unregistering): (slave gretap1): Releasing active interface [ 985.011467][T13687] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 985.027134][T13687] bridge0 (unregistering): left allmulticast mode [ 986.094323][ T5838] Bluetooth: hci4: command tx timeout [ 986.103422][T13687] bond8 (unregistering): (slave bridge24): Releasing backup interface [ 986.111811][T13687] bridge24 (unregistering): left promiscuous mode [ 986.200229][T13687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.209388][T13687] bond_slave_0: left allmulticast mode [ 986.216456][T13687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.225919][T13687] bond_slave_1: left allmulticast mode [ 986.235253][T13687] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 986.244627][T13687] mac80211_hwsim hwsim84 wlan1: left allmulticast mode [ 986.251828][T13687] bond0 (unregistering): Released all slaves [ 986.265771][T13687] bond1 (unregistering): Released all slaves [ 986.280732][T13687] bond2 (unregistering): (slave C): Releasing backup interface [ 986.288949][T13687] bond2 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 986.301554][T13687] bond2 (unregistering): Released all slaves [ 986.318393][T13687] bond3 (unregistering): Released all slaves [ 986.332698][T13687] bond4 (unregistering): Released all slaves [ 986.348206][T13687] bond5 (unregistering): Released all slaves [ 986.364255][T13687] bond6 (unregistering): (slave vcan1): Releasing backup interface [ 986.372316][T13687] vcan1: left promiscuous mode [ 986.388921][T13687] bond6 (unregistering): Released all slaves [ 986.401992][T13687] bond7 (unregistering): Released all slaves [ 986.415791][T13687] bond8 (unregistering): Released all slaves [ 986.892007][ T8705] bond5 (unregistering): Released all slaves [ 986.928507][T13687] tipc: Left network mode [ 987.035138][ T8555] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.052679][ T8555] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.086563][ T8555] bridge_slave_0: entered allmulticast mode [ 987.108119][ T8555] bridge_slave_0: entered promiscuous mode [ 987.150647][ T8555] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.161045][ T8555] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.172236][ T8555] bridge_slave_1: entered allmulticast mode [ 987.181611][ T8555] bridge_slave_1: entered promiscuous mode [ 987.194028][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9630'. [ 987.364426][ T8738] tipc: Started in network mode [ 987.378712][ T8738] tipc: Node identity ac14140f, cluster identity 4711 [ 987.400885][ T8738] tipc: New replicast peer: 255.255.255.255 [ 987.434439][ T8738] tipc: Enabled bearer , priority 10 [ 987.521131][ T8555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.598886][ T8555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.950110][ T8555] team0: Port device team_slave_0 added [ 988.041210][ T8555] team0: Port device team_slave_1 added [ 988.108353][ T8757] netlink: 'syz.2.9635': attribute type 1 has an invalid length. [ 988.182824][ T5838] Bluetooth: hci4: command tx timeout [ 988.316176][ T8757] 8021q: adding VLAN 0 to HW filter on device bond5 [ 988.365711][ T8762] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 988.422122][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.462801][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.536082][ T8555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.614538][ T8766] 8021q: adding VLAN 0 to HW filter on device bond6 [ 988.641864][ T8766] bond5: (slave bond6): Enslaving as an active interface with a down link [ 988.728724][ T5887] tipc: Node number set to 2886997007 [ 988.736411][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.761465][ T8790] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 988.769215][ T8790] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 988.777033][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.834714][ T8555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.964497][ T8795] nbd7: detected capacity change from 0 to 63 [ 988.993901][ T8795] netlink: 'syz.0.9642': attribute type 1 has an invalid length. [ 989.025757][ T8795] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9642'. [ 989.210174][ T8555] hsr_slave_0: entered promiscuous mode [ 989.239761][ T8555] hsr_slave_1: entered promiscuous mode [ 989.446284][ T8805] syzkaller0: entered promiscuous mode [ 989.452000][ T8805] syzkaller0: entered allmulticast mode [ 989.471400][T13687] hsr_slave_0: left promiscuous mode [ 989.485279][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9647'. [ 989.495628][T13687] hsr_slave_1: left promiscuous mode [ 989.502339][T13687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.591557][ T5838] block nbd7: Receive control failed (result -104) [ 989.626015][ T8824] netlink: 'syz.1.9646': attribute type 1 has an invalid length. [ 990.028805][ T8828] bond5: (slave gretap1): making interface the new active one [ 990.037600][ T8828] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 990.254004][ T5838] Bluetooth: hci4: command tx timeout [ 990.727230][T13687] IPVS: stop unused estimator thread 0... [ 991.578581][ T8904] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9662'. [ 991.595232][ T8909] netlink: 'syz.2.9665': attribute type 1 has an invalid length. [ 991.607754][ T8555] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 991.655318][ T8555] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 991.816136][ T8913] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 991.837023][ T8913] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 991.884542][ T8555] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 991.905751][ T8910] syzkaller0: entered promiscuous mode [ 991.911296][ T8910] syzkaller0: entered allmulticast mode [ 991.955763][ T8921] bond7: (slave gretap1): making interface the new active one [ 991.986566][ T8921] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 992.030028][ T8555] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 992.367037][ T8949] bond2: entered promiscuous mode [ 992.389955][ T8949] bond2: entered allmulticast mode [ 992.398795][ T8949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 992.407535][ T8952] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.9673'. [ 992.597930][ T8965] ipvlan2: entered allmulticast mode [ 992.611338][ T8965] batadv_slave_1: entered allmulticast mode [ 992.661907][ T8968] netlink: 'syz.0.9678': attribute type 12 has an invalid length. [ 992.712982][ T8974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9681'. [ 992.751313][ T8975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9680'. [ 992.828392][ T8980] netlink: 212048 bytes leftover after parsing attributes in process `syz.2.9681'. [ 992.902958][ T8555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.986139][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 993.077920][ T8988] netlink: 'syz.1.9684': attribute type 1 has an invalid length. [ 993.200618][ T8988] 8021q: adding VLAN 0 to HW filter on device bond6 [ 993.287862][ T8997] bond6: (slave ip6erspan0): making interface the new active one [ 993.306113][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9685'. [ 993.335765][ T9007] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9686'. [ 993.369208][ T8997] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 993.490367][ T8555] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.563664][T13681] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.570872][T13681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.612411][T13681] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.619623][T13681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.684268][ T9024] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9691'. [ 994.118974][ T9045] tipc: Enabling of bearer rejected, already enabled [ 994.142131][ T9054] netlink: 'syz.0.9698': attribute type 16 has an invalid length. [ 994.190971][ T9054] __nla_validate_parse: 4 callbacks suppressed [ 994.190992][ T9054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9698'. [ 994.542227][ T8555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.693322][ T29] audit: type=1107 audit(1775197917.242:19): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=')$M< sXBh[~:uN&~Y#~mA5R&e}pp [ 994.693322][ T29] 8Ub[9bD""_R32mXT_ܖ؍@3$d+ 哋' [ 995.518733][ T8555] veth0_vlan: entered promiscuous mode [ 995.637166][ T8555] veth1_vlan: entered promiscuous mode [ 995.771510][ T8555] veth0_macvtap: entered promiscuous mode [ 995.810710][ T8555] veth1_macvtap: entered promiscuous mode [ 995.899780][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.963347][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.030662][ T5300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.049864][ T5300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.079869][ T5300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.126404][ T9151] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9720'. [ 996.138013][ T5300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.184274][ T9153] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9721'. [ 996.206942][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9720'. [ 996.287860][ T9160] netlink: 'syz.0.9720': attribute type 1 has an invalid length. [ 996.316653][ T9160] netlink: 'syz.0.9720': attribute type 2 has an invalid length. [ 996.462494][ T9172] netlink: 'syz.2.9725': attribute type 39 has an invalid length. [ 996.592303][T13681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.632304][T13681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.010789][ T5300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.044419][ T5300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.993658][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 998.001758][ C0] lec:lec_tx_timeout: lec0 [ 998.064973][ T9225] syzkaller0: entered promiscuous mode [ 998.070501][ T9225] syzkaller0: entered allmulticast mode [ 998.153646][ T9232] FAULT_INJECTION: forcing a failure. [ 998.153646][ T9232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.177916][ T9238] netlink: 'syz.1.9740': attribute type 1 has an invalid length. [ 998.229235][ T9232] CPU: 0 UID: 0 PID: 9232 Comm: syz.0.9737 Not tainted syzkaller #0 PREEMPT(full) [ 998.229264][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 998.229276][ T9232] Call Trace: [ 998.229284][ T9232] [ 998.229293][ T9232] dump_stack_lvl+0xe8/0x150 [ 998.229325][ T9232] should_fail_ex+0x412/0x560 [ 998.229358][ T9232] _copy_from_user+0x2d/0xb0 [ 998.229382][ T9232] ___sys_sendmsg+0x1c6/0x360 [ 998.229415][ T9232] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.229478][ T9232] ? __fget_files+0x2a/0x420 [ 998.229497][ T9232] ? __fget_files+0x3a0/0x420 [ 998.229526][ T9232] __x64_sys_sendmsg+0x1bd/0x2a0 [ 998.229555][ T9232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 998.229591][ T9232] ? __pfx_ksys_write+0x10/0x10 [ 998.229626][ T9232] do_syscall_64+0x14d/0xf80 [ 998.229652][ T9232] ? trace_irq_disable+0x3b/0x150 [ 998.229669][ T9232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.229689][ T9232] ? clear_bhb_loop+0x40/0x90 [ 998.229714][ T9232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.229735][ T9232] RIP: 0033:0x7f7b0559c819 [ 998.229766][ T9232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.229783][ T9232] RSP: 002b:00007f7b063e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.229806][ T9232] RAX: ffffffffffffffda RBX: 00007f7b05816090 RCX: 00007f7b0559c819 [ 998.229821][ T9232] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000005 [ 998.229834][ T9232] RBP: 00007f7b063e2090 R08: 0000000000000000 R09: 0000000000000000 [ 998.229846][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.229858][ T9232] R13: 00007f7b05816128 R14: 00007f7b05816090 R15: 00007ffd113ca578 [ 998.229892][ T9232] [ 998.471131][ T9238] bond7: entered promiscuous mode [ 998.482039][ T9238] 8021q: adding VLAN 0 to HW filter on device bond7 [ 998.787515][ T9261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9745'. [ 998.802479][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9745'. [ 999.504264][ T9296] syzkaller0: entered promiscuous mode [ 999.525994][ T9296] syzkaller0: entered allmulticast mode [ 999.913903][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9756'. [ 999.922807][ T9325] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9756'. [ 999.982534][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9756'. [ 1000.052280][ T9330] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9756'. [ 1002.276435][ T9328] netem: change failed [ 1002.281312][ T9332] netem: change failed [ 1002.294060][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9756'. [ 1002.328171][ T9387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9759'. [ 1002.531133][ T9399] bridge0: port 3(batadv1) entered blocking state [ 1002.548790][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9763'. [ 1002.582584][ T9399] bridge0: port 3(batadv1) entered disabled state [ 1002.592646][ T9399] batadv1: entered allmulticast mode [ 1002.600872][ T9399] batadv1: entered promiscuous mode [ 1002.676020][ T5193] udevd[5193]: worker [2107] /devices/virtual/block/nbd6 timeout; kill it [ 1002.703251][ T5193] udevd[5193]: seq 36097 '/devices/virtual/block/nbd6' killed [ 1002.819544][ T9419] syzkaller1: entered promiscuous mode [ 1002.851655][ T9419] syzkaller1: entered allmulticast mode [ 1002.882625][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9769'. [ 1003.013817][T31949] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1003.025687][T31949] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1003.072454][ T9429] syzkaller0: entered promiscuous mode [ 1003.094944][ T9429] syzkaller0: entered allmulticast mode [ 1003.114613][ T9439] netlink: 'syz.4.9774': attribute type 1 has an invalid length. [ 1003.125713][ T9440] netlink: 'syz.3.9775': attribute type 1 has an invalid length. [ 1003.145286][ T9439] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9774'. [ 1003.175170][ T9439] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9774'. [ 1003.190431][ T9440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1003.227731][T21717] block nbd6: Possible stuck request ffff888027288000: control (read@0,1024B). Runtime 180 seconds [ 1003.229497][ T9439] : entered promiscuous mode [ 1003.242754][T21717] block nbd6: Possible stuck request ffff888027288200: control (read@1024,1024B). Runtime 180 seconds [ 1003.257672][T21717] block nbd6: Possible stuck request ffff888027288400: control (read@2048,1024B). Runtime 180 seconds [ 1003.269735][T21717] block nbd6: Possible stuck request ffff888027288600: control (read@3072,1024B). Runtime 180 seconds [ 1003.527580][ T9457] syzkaller0: entered promiscuous mode [ 1003.535572][ T9457] syzkaller0: entered allmulticast mode [ 1003.638362][ T9459] tipc: Enabling not permitted [ 1003.648007][ T9459] tipc: Enabling of bearer rejected, failed to enable media [ 1003.832675][ T9475] syzkaller1: entered promiscuous mode [ 1003.841120][ T9477] netlink: 'syz.0.9784': attribute type 3 has an invalid length. [ 1003.849850][ T9475] syzkaller1: entered allmulticast mode [ 1004.112769][ T9492] syzkaller0: entered promiscuous mode [ 1004.121455][ T9492] syzkaller0: entered allmulticast mode [ 1004.458727][ T9507] bond3: option xmit_hash_policy: invalid value (64) [ 1004.470422][ T9507] bond3 (unregistering): Released all slaves [ 1004.850892][ T9530] sctp: [Deprecated]: syz.3.9801 (pid 9530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1004.850892][ T9530] Use struct sctp_sack_info instead [ 1004.879025][ T9533] IPv6: addrconf: prefix option has invalid lifetime [ 1004.889457][ T9530] sctp: [Deprecated]: syz.3.9801 (pid 9530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1004.889457][ T9530] Use struct sctp_sack_info instead [ 1004.928236][ T9535] netlink: 'syz.1.9804': attribute type 1 has an invalid length. [ 1004.979687][ T9535] bond8: entered promiscuous mode [ 1004.985366][ T9535] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1004.998206][ T9542] __nla_validate_parse: 6 callbacks suppressed [ 1004.998226][ T9542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9806'. [ 1005.145220][ T9545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9807'. [ 1005.165705][ T9535] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1005.189046][ T9535] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1005.224079][ T9554] tipc: Failed to remove unknown binding: 66,0,0/0:471096101/471096102 [ 1005.232832][ T9554] tipc: Failed to remove unknown binding: 66,0,0/0:471096101/471096102 [ 1005.234090][ T9535] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1005.258644][ T9535] bond8: (slave ip6gre1): making interface the new active one [ 1005.268141][ T9535] ip6gre1: entered promiscuous mode [ 1005.268195][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9810'. [ 1005.280149][ T9535] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 1005.338620][ T9553] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9810'. [ 1005.351214][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9810'. [ 1005.430262][ T9565] netlink: 'syz.1.9813': attribute type 11 has an invalid length. [ 1005.448567][ T9565] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.9813'. [ 1005.532569][ T9573] Bluetooth: MGMT ver 1.23 [ 1005.538616][ T9567] ip6gre1: entered promiscuous mode [ 1005.556650][ T9576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9816'. [ 1005.566837][ T9567] ip6gre1: entered allmulticast mode [ 1005.789807][ T9590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9818'. [ 1006.110345][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9826'. [ 1006.431454][ T9635] syzkaller1: entered promiscuous mode [ 1006.451063][ T9635] syzkaller1: entered allmulticast mode [ 1006.465617][ T9638] netlink: 'syz.0.9832': attribute type 1 has an invalid length. [ 1006.516362][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9832'. [ 1006.540535][ T9638] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1006.581985][ T9636] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1006.607580][ T9636] bond3: entered allmulticast mode [ 1006.708583][ T9659] netlink: 'syz.1.9840': attribute type 1 has an invalid length. [ 1006.790272][ T9659] bond9: entered promiscuous mode [ 1006.795939][ T9659] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1006.817276][ T9666] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1006.847082][ T5300] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1006.856528][ T5300] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1006.883423][T32542] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1006.887816][ T9667] l2tp_ppp: sess 2/0: no socket in recv [ 1007.043263][T32542] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1007.081350][ T9681] netlink: 'syz.0.9842': attribute type 21 has an invalid length. [ 1007.120463][ T9673] syzkaller0: entered promiscuous mode [ 1007.128986][ T9673] syzkaller0: entered allmulticast mode [ 1007.165752][ T9681] netlink: 'syz.0.9842': attribute type 1 has an invalid length. [ 1007.241105][ T9688] xt_TCPMSS: Only works on TCP SYN packets [ 1007.258309][ T9688] netlink: 'syz.3.9846': attribute type 3 has an invalid length. [ 1007.266460][ T9688] netlink: 'syz.3.9846': attribute type 1 has an invalid length. [ 1007.613928][ T5838] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1007.614094][ T3649] Bluetooth: hci2: command 0x0401 tx timeout [ 1007.856517][ T5951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1009.481443][ T9708] netlink: 'syz.4.9849': attribute type 1 has an invalid length. [ 1009.516721][ T9705] syzkaller1: entered promiscuous mode [ 1009.543940][ T9705] syzkaller1: entered allmulticast mode [ 1009.849518][ T9730] netlink: 'syz.4.9854': attribute type 1 has an invalid length. [ 1009.945631][ T9730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1009.990201][ T9737] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1010.026262][ T9730] bond3: (slave veth0_to_bond): making interface the new active one [ 1010.036969][ T9730] veth0_to_bond: entered promiscuous mode [ 1010.043734][ T9730] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1010.089230][ T9730] __nla_validate_parse: 5 callbacks suppressed [ 1010.089260][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9854'. [ 1010.231078][ T9737] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1010.329469][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9860'. [ 1010.573957][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1010.796623][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9865'. [ 1010.922131][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9867'. [ 1010.946791][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9867'. [ 1010.991163][ T9786] netlink: 'syz.1.9867': attribute type 12 has an invalid length. [ 1011.035728][ T9786] netlink: 'syz.1.9867': attribute type 11 has an invalid length. [ 1011.789026][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9875'. [ 1012.286984][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9880'. [ 1012.572616][ T9861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9887'. [ 1012.619434][ T9860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9887'. [ 1012.912491][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9894'. [ 1012.937857][ T9882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1013.711354][ T9894] netlink: 'syz.4.9899': attribute type 63 has an invalid length. [ 1013.712204][ T9895] netlink: 'syz.4.9899': attribute type 63 has an invalid length. [ 1013.728368][ T9894] netlink: 'syz.4.9899': attribute type 63 has an invalid length. [ 1013.898412][ T9899] netlink: 'syz.1.9900': attribute type 10 has an invalid length. [ 1015.480839][ T9852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1015.491717][ T9859] __nla_validate_parse: 2 callbacks suppressed [ 1015.491736][ T9859] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9886'. [ 1015.657278][ T9906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9901'. [ 1015.709744][ T9910] IPv6: NLM_F_CREATE should be specified when creating new route [ 1015.721039][ T9904] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1015.732701][ T9913] netlink: 'syz.0.9904': attribute type 1 has an invalid length. [ 1015.736184][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9903'. [ 1015.740934][ T9911] IPv6: NLM_F_CREATE should be specified when creating new route [ 1015.784357][ T9913] bond4: entered promiscuous mode [ 1015.790157][ T9913] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1015.805725][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9903'. [ 1015.816282][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9904'. [ 1015.935555][ T9920] lo: entered allmulticast mode [ 1015.964474][ T9919] lo: left allmulticast mode [ 1016.031252][ T9924] syzkaller0: entered promiscuous mode [ 1016.041408][ T9924] syzkaller0: entered allmulticast mode [ 1016.107196][ T9924] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9909'. [ 1016.372880][ T9957] pim6reg527: entered allmulticast mode [ 1016.391707][ T9951] syzkaller1: entered promiscuous mode [ 1016.408603][ T9951] syzkaller1: entered allmulticast mode [ 1016.426636][ T9964] netlink: 'syz.1.9919': attribute type 4 has an invalid length. [ 1016.445942][ T9961] netlink: 'syz.1.9919': attribute type 4 has an invalid length. [ 1016.672036][ T9974] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9921'. [ 1016.880619][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9926'. [ 1016.913572][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9926'. [ 1016.927632][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9926'. [ 1016.978673][ T29] audit: type=1804 audit(1775197939.532:20): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9928" name="/newroot/160/cgroup.controllers" dev="tmpfs" ino=832 res=1 errno=0 [ 1017.046438][ T29] audit: type=1800 audit(1775197939.532:21): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9928" name="cgroup.controllers" dev="tmpfs" ino=832 res=0 errno=0 [ 1017.165268][ T29] audit: type=1800 audit(1775197939.532:22): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9928" name="cgroup.controllers" dev="tmpfs" ino=832 res=0 errno=0 [ 1017.166374][T10000] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1017.209660][T10005] sctp: [Deprecated]: syz.3.9932 (pid 10005) Use of int in max_burst socket option. [ 1017.209660][T10005] Use struct sctp_assoc_value instead [ 1017.441168][T10016] netlink: 'syz.3.9935': attribute type 1 has an invalid length. [ 1017.530720][T10016] bond2: entered promiscuous mode [ 1017.546068][T10016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1017.564929][T10023] ipvlan3: entered allmulticast mode [ 1017.571991][T10023] batadv_slave_1: entered allmulticast mode [ 1017.582236][T10023] batman_adv: batadv0: Adding interface: ipvlan3 [ 1017.588826][T10023] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.618618][T10023] batman_adv: batadv0: Interface activated: ipvlan3 [ 1017.647315][T10025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1017.662482][T10025] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 1017.708073][T10025] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1017.737209][T10025] bond2: (slave vcan1): making interface the new active one [ 1017.747822][T10025] vcan1: entered promiscuous mode [ 1017.759246][T10025] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 1017.825448][T10039] netlink: 'syz.0.9939': attribute type 4 has an invalid length. [ 1017.943230][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1018.405114][T10074] netlink: 'syz.3.9947': attribute type 1 has an invalid length. [ 1018.588386][T10085] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1019.195930][T10038] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1019.216686][T10046] tipc: Started in network mode [ 1019.221698][T10046] tipc: Node identity ac141411, cluster identity 4711 [ 1019.231379][T10046] tipc: New replicast peer: 255.255.255.255 [ 1019.234687][ T1697] block nbd7: Possible stuck request ffff8880272e0000: control (read@0,1024B). Runtime 30 seconds [ 1019.241028][T10046] tipc: Enabled bearer , priority 10 [ 1019.248687][ T1697] block nbd7: Possible stuck request ffff8880272e0200: control (read@1024,1024B). Runtime 30 seconds [ 1019.266209][ T1697] block nbd7: Possible stuck request ffff8880272e0400: control (read@2048,1024B). Runtime 30 seconds [ 1019.277462][ T1697] block nbd7: Possible stuck request ffff8880272e0600: control (read@3072,1024B). Runtime 30 seconds [ 1019.309704][T10074] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1019.411949][T13680] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.429851][T13680] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.470682][T13680] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.496362][T13680] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.640884][T10107] netlink: 'syz.3.9953': attribute type 21 has an invalid length. [ 1019.659832][T10107] netlink: 'syz.3.9953': attribute type 4 has an invalid length. [ 1019.694604][T10107] netlink: 'syz.3.9953': attribute type 5 has an invalid length. [ 1019.779869][T10116] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1019.788779][T10114] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1019.846286][T10114] netlink: 'syz.2.9956': attribute type 21 has an invalid length. [ 1019.897232][T10116] openvswitch: netlink: Flow actions attr not present in new flow. [ 1020.157902][T10133] syzkaller0: entered promiscuous mode [ 1020.166716][T10133] syzkaller0: entered allmulticast mode [ 1020.354912][ T5824] tipc: Node number set to 2886997009 [ 1020.759714][T10166] __nla_validate_parse: 77 callbacks suppressed [ 1020.759736][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9972'. [ 1020.781443][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9972'. [ 1021.144360][T13674] veth0_to_bond: left promiscuous mode [ 1021.208447][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9981'. [ 1021.359211][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9982'. [ 1021.458234][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9985'. [ 1021.529087][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9988'. [ 1021.544115][T10205] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1021.554051][T10205] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9988'. [ 1021.710056][T10215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1021.827825][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9995'. [ 1021.860983][T10225] netlink: 'syz.1.9995': attribute type 30 has an invalid length. [ 1021.883782][T10229] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9995'. [ 1021.916795][T10230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9998'. [ 1022.009870][T10230] veth0_to_team: entered promiscuous mode [ 1022.063242][T10230] veth0_to_team: left promiscuous mode [ 1022.199882][T16274] lec:lec_start_xmit: lec0:No lecd attached [ 1022.228904][T10230] veth0_to_team: entered promiscuous mode [ 1022.250872][T10230] veth0_to_team: left promiscuous mode [ 1022.311723][T10230] veth0_to_team: entered promiscuous mode [ 1022.319545][T10230] veth0_to_team: left promiscuous mode [ 1022.377470][T10230] veth0_to_team: entered promiscuous mode [ 1022.393162][T10230] veth0_to_team: left promiscuous mode [ 1022.460646][T10230] veth0_to_team: entered promiscuous mode [ 1022.468991][T10230] veth0_to_team: left promiscuous mode [ 1022.535027][T10230] veth0_to_team: entered promiscuous mode [ 1022.553525][T10230] veth0_to_team: left promiscuous mode [ 1022.618928][T10230] veth0_to_team: entered promiscuous mode [ 1022.628124][T10230] veth0_to_team: left promiscuous mode [ 1022.698118][T10230] veth0_to_team: entered promiscuous mode [ 1022.708414][T10230] veth0_to_team: left promiscuous mode [ 1022.771480][T10272] syzkaller1: entered promiscuous mode [ 1022.779018][T10272] syzkaller1: entered allmulticast mode [ 1022.885851][T10276] bridge_slave_1: left allmulticast mode [ 1022.892067][T10276] bridge_slave_1: left promiscuous mode [ 1022.899890][T10276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.920291][T10276] bridge_slave_0: left allmulticast mode [ 1022.930188][T10276] bridge_slave_0: left promiscuous mode [ 1022.937750][T10276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.056462][ T5838] Bluetooth: hci2: command 0x0401 tx timeout [ 1023.056743][T10287] netlink: 'syz.0.10014': attribute type 3 has an invalid length. [ 1023.062675][ T3649] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1023.170563][T10291] xt_hashlimit: size too large, truncated to 1048576 [ 1023.200798][T10293] netlink: 'syz.2.10018': attribute type 1 has an invalid length. [ 1023.264361][T10293] bond8: entered promiscuous mode [ 1023.270698][T10293] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1023.390162][T10293] bond8: (slave bridge4): making interface the new active one [ 1023.443113][T10293] bridge4: entered promiscuous mode [ 1023.450723][T10293] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 1023.748939][T10326] netdevsim netdevsim3: Direct firmware load for 0 failed with error -2 [ 1023.760673][T10326] netdevsim netdevsim3: Falling back to sysfs fallback for: 0 [ 1023.942779][T10339] netlink: 'syz.0.10027': attribute type 25 has an invalid length. [ 1023.965674][T13674] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.965744][T10339] netlink: 'syz.0.10027': attribute type 25 has an invalid length. [ 1023.977044][T13674] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.021336][T13674] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.045095][T10342] tipc: Enabled bearer , priority 10 [ 1024.051523][T13680] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.504503][T10370] syzkaller1: entered promiscuous mode [ 1024.510049][T10370] syzkaller1: entered allmulticast mode [ 1024.861585][T10384] veth7: entered allmulticast mode [ 1025.034862][T10400] dvmrp0: entered allmulticast mode [ 1025.060213][T10403] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1025.269217][T10414] Cannot find add_set index 2 as target [ 1025.287149][T10415] Cannot find add_set index 2 as target [ 1025.359032][T10418] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1025.678137][T10434] delete_channel: no stack [ 1025.898625][T10445] bond5: option lp_interval: invalid value (0) [ 1025.907050][T10445] bond5: option lp_interval: allowed values 1 - 2147483647 [ 1025.917908][T10445] bond5 (unregistering): Released all slaves [ 1026.165049][T10463] __nla_validate_parse: 20 callbacks suppressed [ 1026.165072][T10463] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10053'. [ 1026.312306][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10056'. [ 1026.337267][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 1026.385566][T10476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10057'. [ 1026.417384][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10057'. [ 1026.610138][T10487] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1026.772193][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10063'. [ 1026.842929][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10063'. [ 1027.124288][ T5903] IPVS: starting estimator thread 0... [ 1027.224415][T10514] IPVS: using max 28 ests per chain, 67200 per kthread [ 1027.281305][T10517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10068'. [ 1027.309401][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10070'. [ 1027.701262][T10537] veth1_to_team: entered promiscuous mode [ 1027.731787][T10537] veth1_to_team: entered allmulticast mode [ 1027.832035][T10546] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10080'. [ 1027.842619][T10546] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1027.853427][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5650 ms [ 1027.861493][ C0] lec:lec_tx_timeout: lec0 [ 1027.869174][T10547] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1027.888074][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10077'. [ 1028.516585][T10544] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1028.604222][T10593] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1028.770448][T10600] syzkaller0: entered promiscuous mode [ 1028.782581][T10600] syzkaller0: entered allmulticast mode [ 1029.022428][ T5911] IPVS: starting estimator thread 0... [ 1029.124527][T10616] IPVS: using max 27 ests per chain, 64800 per kthread [ 1029.300923][T10632] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1029.378194][T10632] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1029.390019][T10632] gretap3: entered promiscuous mode [ 1029.397106][T10632] gretap3: entered allmulticast mode [ 1029.454406][T10643] netlink: 'syz.3.10107': attribute type 2 has an invalid length. [ 1029.597075][T10647] FAULT_INJECTION: forcing a failure. [ 1029.597075][T10647] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.610134][T10647] CPU: 1 UID: 0 PID: 10647 Comm: syz.4.10111 Not tainted syzkaller #0 PREEMPT(full) [ 1029.610163][T10647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1029.610176][T10647] Call Trace: [ 1029.610185][T10647] [ 1029.610194][T10647] dump_stack_lvl+0xe8/0x150 [ 1029.610230][T10647] should_fail_ex+0x412/0x560 [ 1029.610267][T10647] should_failslab+0xa8/0x100 [ 1029.610293][T10647] ? skb_clone+0x212/0x3a0 [ 1029.610320][T10647] kmem_cache_alloc_noprof+0x87/0x650 [ 1029.610342][T10647] ? __netlink_lookup+0xc6/0x8b0 [ 1029.610373][T10647] skb_clone+0x212/0x3a0 [ 1029.610403][T10647] __netlink_deliver_tap+0x404/0x850 [ 1029.610438][T10647] ? netlink_deliver_tap+0x2e/0x1b0 [ 1029.610461][T10647] netlink_deliver_tap+0x19c/0x1b0 [ 1029.610493][T10647] netlink_unicast+0x7e3/0x9b0 [ 1029.610532][T10647] ? __pfx_netlink_unicast+0x10/0x10 [ 1029.610562][T10647] ? netlink_sendmsg+0x650/0xb40 [ 1029.610580][T10647] ? skb_put+0x11b/0x210 [ 1029.610605][T10647] netlink_sendmsg+0x813/0xb40 [ 1029.610635][T10647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.610659][T10647] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1029.610691][T10647] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1029.610717][T10647] ____sys_sendmsg+0x972/0x9f0 [ 1029.610750][T10647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1029.610784][T10647] ? import_iovec+0x73/0xa0 [ 1029.610809][T10647] ___sys_sendmsg+0x2a5/0x360 [ 1029.610839][T10647] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.610899][T10647] ? __fget_files+0x2a/0x420 [ 1029.610915][T10647] ? __fget_files+0x3a0/0x420 [ 1029.610943][T10647] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1029.610972][T10647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1029.611008][T10647] ? __pfx_ksys_write+0x10/0x10 [ 1029.611045][T10647] do_syscall_64+0x14d/0xf80 [ 1029.611070][T10647] ? trace_irq_disable+0x3b/0x150 [ 1029.611087][T10647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.611107][T10647] ? clear_bhb_loop+0x40/0x90 [ 1029.611132][T10647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.611152][T10647] RIP: 0033:0x7f77cf79c819 [ 1029.611172][T10647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.611189][T10647] RSP: 002b:00007f77d058c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.611211][T10647] RAX: ffffffffffffffda RBX: 00007f77cfa15fa0 RCX: 00007f77cf79c819 [ 1029.611226][T10647] RDX: 0000000000000840 RSI: 0000200000003380 RDI: 0000000000000004 [ 1029.611239][T10647] RBP: 00007f77d058c090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.611252][T10647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.611264][T10647] R13: 00007f77cfa16038 R14: 00007f77cfa15fa0 R15: 00007ffcbb23caa8 [ 1029.611298][T10647] [ 1030.046660][T10667] syzkaller0: entered promiscuous mode [ 1030.063215][T10667] syzkaller0: entered allmulticast mode [ 1030.094189][T10673] netlink: 'syz.4.10116': attribute type 1 has an invalid length. [ 1030.172073][T10680] netlink: 'syz.4.10116': attribute type 10 has an invalid length. [ 1030.220019][T10673] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1030.248513][T10682] netlink: 'syz.3.10118': attribute type 5 has an invalid length. [ 1030.298089][T10680] bond4: (slave geneve2): making interface the new active one [ 1030.346526][T10680] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1030.523674][T10689] netlink: 'syz.3.10121': attribute type 1 has an invalid length. [ 1030.546752][T10691] netlink: 'syz.4.10122': attribute type 2 has an invalid length. [ 1030.680727][T10689] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1030.705240][T10691] 9: entered promiscuous mode [ 1030.754300][T10701] openvswitch: netlink: Multiple metadata blocks provided [ 1030.858086][T10704] openvswitch: netlink: Unknown key attributes 2 [ 1031.560992][T10744] dvmrp0: entered allmulticast mode [ 1031.746793][T10756] __nla_validate_parse: 16 callbacks suppressed [ 1031.746815][T10756] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10137'. [ 1031.917857][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10138'. [ 1032.139739][T10772] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10141'. [ 1032.334835][T10779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10144'. [ 1032.397097][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10146'. [ 1032.653378][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1032.713643][T10803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1032.822071][T10813] syzkaller0: entered promiscuous mode [ 1032.836240][T10813] syzkaller0: entered allmulticast mode [ 1032.926863][T10825] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10153'. [ 1032.946503][T10813] --map-set only usable from mangle table [ 1033.046849][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10158'. [ 1033.061018][T10828] block nbd0: reconnected socket [ 1033.073599][ T3649] block nbd0: Receive control failed (result -32) [ 1033.100564][T10830] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1033.108185][T10833] netlink: 'syz.0.10160': attribute type 4 has an invalid length. [ 1033.136305][T10830] bond9 (unregistering): Released all slaves [ 1033.171880][T10833] netlink: 'syz.0.10160': attribute type 4 has an invalid length. [ 1033.287699][T10841] netlink: 'syz.3.10162': attribute type 2 has an invalid length. [ 1033.308670][T21717] block nbd6: Possible stuck request ffff888027288000: control (read@0,1024B). Runtime 210 seconds [ 1033.321385][T21717] block nbd6: Possible stuck request ffff888027288200: control (read@1024,1024B). Runtime 210 seconds [ 1033.336404][T21717] block nbd6: Possible stuck request ffff888027288400: control (read@2048,1024B). Runtime 210 seconds [ 1033.348085][T21717] block nbd6: Possible stuck request ffff888027288600: control (read@3072,1024B). Runtime 210 seconds [ 1033.541774][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10166'. [ 1033.618387][T10859] team0 (unregistering): Port device team_slave_0 removed [ 1033.639047][T10859] team0 (unregistering): Port device team_slave_1 removed [ 1033.653697][T10870] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10170'. [ 1033.667685][T10870] Cannot find add_set index 0 as target [ 1033.675283][T10866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10167'. [ 1033.698237][T10853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1034.052581][T10890] netlink: 'syz.4.10176': attribute type 21 has an invalid length. [ 1034.353708][T10898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1034.461188][T10898] batman_adv: batadv0: Removing interface: ipvlan3 [ 1034.515161][T10922] syzkaller0: entered promiscuous mode [ 1034.520778][T10922] syzkaller0: entered allmulticast mode [ 1034.531792][T10918] FAULT_INJECTION: forcing a failure. [ 1034.531792][T10918] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.531974][T10921] pim6reg1: entered promiscuous mode [ 1034.556467][T10921] pim6reg1: entered allmulticast mode [ 1034.559996][T10918] CPU: 0 UID: 0 PID: 10918 Comm: syz.4.10185 Not tainted syzkaller #0 PREEMPT(full) [ 1034.560022][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1034.560033][T10918] Call Trace: [ 1034.560041][T10918] [ 1034.560049][T10918] dump_stack_lvl+0xe8/0x150 [ 1034.560081][T10918] should_fail_ex+0x412/0x560 [ 1034.560113][T10918] should_failslab+0xa8/0x100 [ 1034.560136][T10918] ? skb_clone+0x212/0x3a0 [ 1034.560159][T10918] kmem_cache_alloc_noprof+0x87/0x650 [ 1034.560188][T10918] skb_clone+0x212/0x3a0 [ 1034.560214][T10918] __netlink_deliver_tap+0x404/0x850 [ 1034.560246][T10918] ? netlink_deliver_tap+0x2e/0x1b0 [ 1034.560267][T10918] netlink_deliver_tap+0x19c/0x1b0 [ 1034.560287][T10918] netlink_sendskb+0x68/0x140 [ 1034.560315][T10918] netlink_unicast+0x3a3/0x9b0 [ 1034.560357][T10918] ? __pfx_netlink_unicast+0x10/0x10 [ 1034.560393][T10918] netlink_rcv_skb+0x2b6/0x4b0 [ 1034.560412][T10918] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1034.560437][T10918] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1034.560474][T10918] ? down_read+0x272/0x2e0 [ 1034.560497][T10918] ? genl_rcv+0xd/0x40 [ 1034.560520][T10918] genl_rcv+0x28/0x40 [ 1034.560540][T10918] netlink_unicast+0x80f/0x9b0 [ 1034.560574][T10918] ? __pfx_netlink_unicast+0x10/0x10 [ 1034.560601][T10918] ? netlink_sendmsg+0x650/0xb40 [ 1034.560618][T10918] ? skb_put+0x11b/0x210 [ 1034.560642][T10918] netlink_sendmsg+0x813/0xb40 [ 1034.560671][T10918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1034.560694][T10918] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1034.560723][T10918] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1034.560747][T10918] ____sys_sendmsg+0x972/0x9f0 [ 1034.560779][T10918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1034.560811][T10918] ? import_iovec+0x73/0xa0 [ 1034.560837][T10918] ___sys_sendmsg+0x2a5/0x360 [ 1034.560865][T10918] ? __pfx____sys_sendmsg+0x10/0x10 [ 1034.560925][T10918] ? __fget_files+0x2a/0x420 [ 1034.560946][T10918] ? __fget_files+0x3a0/0x420 [ 1034.560974][T10918] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1034.560999][T10918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1034.561032][T10918] ? __pfx_ksys_write+0x10/0x10 [ 1034.561065][T10918] do_syscall_64+0x14d/0xf80 [ 1034.561086][T10918] ? trace_irq_disable+0x3b/0x150 [ 1034.561102][T10918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.561120][T10918] ? clear_bhb_loop+0x40/0x90 [ 1034.561143][T10918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.561160][T10918] RIP: 0033:0x7f77cf79c819 [ 1034.561178][T10918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.561192][T10918] RSP: 002b:00007f77d058c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1034.561213][T10918] RAX: ffffffffffffffda RBX: 00007f77cfa15fa0 RCX: 00007f77cf79c819 [ 1034.561226][T10918] RDX: 0000000000000840 RSI: 0000200000003380 RDI: 0000000000000004 [ 1034.561237][T10918] RBP: 00007f77d058c090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.561248][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.561258][T10918] R13: 00007f77cfa16038 R14: 00007f77cfa15fa0 R15: 00007ffcbb23caa8 [ 1034.561290][T10918] [ 1035.046286][T10940] netlink: 'syz.3.10190': attribute type 1 has an invalid length. [ 1035.139707][T10946] bond4: (slave gretap1): making interface the new active one [ 1035.206151][T10946] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1035.490295][ T5300] tipc: Subscription rejected, illegal request [ 1035.531452][T10958] syzkaller0: entered promiscuous mode [ 1035.538229][T10958] syzkaller0: entered allmulticast mode [ 1035.725422][T10985] netlink: 'syz.1.10199': attribute type 1 has an invalid length. [ 1035.741264][T10985] netlink: 'syz.1.10199': attribute type 2 has an invalid length. [ 1035.763096][T10985] netlink: 'syz.1.10199': attribute type 2 has an invalid length. [ 1035.796445][T10985] netlink: 'syz.1.10199': attribute type 2 has an invalid length. [ 1036.013350][ T5838] Bluetooth: hci2: command 0x0401 tx timeout [ 1036.038198][ T3649] [ 1036.040566][ T3649] ====================================================== [ 1036.047593][ T3649] WARNING: possible circular locking dependency detected [ 1036.054709][ T3649] syzkaller #0 Not tainted [ 1036.059120][ T3649] ------------------------------------------------------ [ 1036.066130][ T3649] kworker/u9:1/3649 is trying to acquire lock: [ 1036.072277][ T3649] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 1036.082807][ T3649] [ 1036.082807][ T3649] but task is already holding lock: [ 1036.090171][ T3649] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 1036.100435][ T3649] [ 1036.100435][ T3649] which lock already depends on the new lock. [ 1036.100435][ T3649] [ 1036.110835][ T3649] [ 1036.110835][ T3649] the existing dependency chain (in reverse order) is: [ 1036.119849][ T3649] [ 1036.119849][ T3649] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1036.127840][ T3649] down_write+0x96/0x200 [ 1036.132618][ T3649] kernfs_add_one+0x41/0x5c0 [ 1036.137729][ T3649] kernfs_create_dir_ns+0xde/0x130 [ 1036.143455][ T3649] internal_create_group+0x425/0x1180 [ 1036.149437][ T3649] cpuhp_invoke_callback+0x445/0x860 [ 1036.155275][ T3649] cpuhp_issue_call+0x430/0x7a0 [ 1036.160703][ T3649] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 1036.167296][ T3649] __cpuhp_setup_state+0x3f/0x60 [ 1036.172757][ T3649] do_one_initcall+0x250/0x8d0 [ 1036.178044][ T3649] do_initcall_level+0x104/0x190 [ 1036.183515][ T3649] do_initcalls+0x59/0xa0 [ 1036.188376][ T3649] kernel_init_freeable+0x2a6/0x3e0 [ 1036.194098][ T3649] kernel_init+0x1d/0x1d0 [ 1036.198953][ T3649] ret_from_fork+0x51e/0xb90 [ 1036.204070][ T3649] ret_from_fork_asm+0x1a/0x30 [ 1036.209363][ T3649] [ 1036.209363][ T3649] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1036.217181][ T3649] [ 1036.217181][ T3649] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1036.225086][ T3649] cpus_read_lock+0x42/0x160 [ 1036.230203][ T3649] static_key_slow_inc+0x12/0x30 [ 1036.235684][ T3649] nbd_genl_reconfigure+0x132f/0x1ea0 [ 1036.241614][ T3649] genl_family_rcv_msg_doit+0x22a/0x330 [ 1036.247707][ T3649] genl_rcv_msg+0x61c/0x7a0 [ 1036.252741][ T3649] netlink_rcv_skb+0x232/0x4b0 [ 1036.258115][ T3649] genl_rcv+0x28/0x40 [ 1036.262622][ T3649] netlink_unicast+0x80f/0x9b0 [ 1036.267911][ T3649] netlink_sendmsg+0x813/0xb40 [ 1036.273205][ T3649] ____sys_sendmsg+0x972/0x9f0 [ 1036.278491][ T3649] ___sys_sendmsg+0x2a5/0x360 [ 1036.283691][ T3649] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1036.289155][ T3649] do_syscall_64+0x14d/0xf80 [ 1036.294283][ T3649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.300805][ T3649] [ 1036.300805][ T3649] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1036.308561][ T3649] __mutex_lock+0x19f/0x1300 [ 1036.313690][ T3649] nbd_queue_rq+0x37b/0x1100 [ 1036.318806][ T3649] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1036.324961][ T3649] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1036.331815][ T3649] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1036.338408][ T3649] blk_mq_run_hw_queue+0x348/0x4f0 [ 1036.344045][ T3649] blk_mq_dispatch_list+0xd16/0xe10 [ 1036.349768][ T3649] blk_mq_flush_plug_list+0x48d/0x570 [ 1036.355668][ T3649] __blk_flush_plug+0x3ed/0x4d0 [ 1036.361045][ T3649] __submit_bio+0x28d/0x580 [ 1036.366078][ T3649] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1036.372255][ T3649] block_read_full_folio+0x599/0x830 [ 1036.378078][ T3649] filemap_read_folio+0x137/0x3b0 [ 1036.383636][ T3649] do_read_cache_folio+0x358/0x590 [ 1036.389281][ T3649] read_part_sector+0xb6/0x2b0 [ 1036.394581][ T3649] adfspart_check_ICS+0xa5/0xa40 [ 1036.400051][ T3649] bdev_disk_changed+0x7ba/0x1550 [ 1036.405603][ T3649] blkdev_get_whole+0x380/0x510 [ 1036.410982][ T3649] bdev_open+0x31e/0xd30 [ 1036.415746][ T3649] blkdev_open+0x470/0x610 [ 1036.420686][ T3649] do_dentry_open+0x785/0x14e0 [ 1036.425971][ T3649] vfs_open+0x3b/0x340 [ 1036.430597][ T3649] path_openat+0x2e08/0x3860 [ 1036.435707][ T3649] do_file_open+0x23e/0x4a0 [ 1036.440730][ T3649] do_sys_openat2+0x113/0x200 [ 1036.445932][ T3649] __x64_sys_openat+0x138/0x170 [ 1036.451314][ T3649] do_syscall_64+0x14d/0xf80 [ 1036.456517][ T3649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.462935][ T3649] [ 1036.462935][ T3649] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1036.470158][ T3649] __mutex_lock+0x19f/0x1300 [ 1036.475416][ T3649] nbd_queue_rq+0xc6/0x1100 [ 1036.480439][ T3649] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1036.486513][ T3649] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1036.493369][ T3649] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1036.499870][ T3649] blk_mq_run_hw_queue+0x348/0x4f0 [ 1036.505594][ T3649] blk_mq_dispatch_list+0xd16/0xe10 [ 1036.511313][ T3649] blk_mq_flush_plug_list+0x48d/0x570 [ 1036.517204][ T3649] __blk_flush_plug+0x3ed/0x4d0 [ 1036.522579][ T3649] __submit_bio+0x28d/0x580 [ 1036.527607][ T3649] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1036.533762][ T3649] block_read_full_folio+0x599/0x830 [ 1036.539576][ T3649] filemap_read_folio+0x137/0x3b0 [ 1036.545121][ T3649] do_read_cache_folio+0x358/0x590 [ 1036.550870][ T3649] read_part_sector+0xb6/0x2b0 [ 1036.556156][ T3649] adfspart_check_ICS+0xa5/0xa40 [ 1036.561710][ T3649] bdev_disk_changed+0x7ba/0x1550 [ 1036.567254][ T3649] blkdev_get_whole+0x380/0x510 [ 1036.572627][ T3649] bdev_open+0x31e/0xd30 [ 1036.577389][ T3649] blkdev_open+0x470/0x610 [ 1036.582327][ T3649] do_dentry_open+0x785/0x14e0 [ 1036.587625][ T3649] vfs_open+0x3b/0x340 [ 1036.592221][ T3649] path_openat+0x2e08/0x3860 [ 1036.597335][ T3649] do_file_open+0x23e/0x4a0 [ 1036.602357][ T3649] do_sys_openat2+0x113/0x200 [ 1036.607582][ T3649] __x64_sys_openat+0x138/0x170 [ 1036.612996][ T3649] do_syscall_64+0x14d/0xf80 [ 1036.618127][ T3649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.624561][ T3649] [ 1036.624561][ T3649] -> #4 (set->srcu){.+.+}-{0:0}: [ 1036.631693][ T3649] __synchronize_srcu+0xca/0x300 [ 1036.637343][ T3649] elevator_switch+0x1e8/0x7a0 [ 1036.642641][ T3649] elevator_change+0x2cc/0x450 [ 1036.647942][ T3649] elevator_set_default+0x36c/0x430 [ 1036.653663][ T3649] blk_register_queue+0x366/0x430 [ 1036.659209][ T3649] __add_disk+0x677/0xd50 [ 1036.664060][ T3649] add_disk_fwnode+0xfb/0x480 [ 1036.669271][ T3649] nbd_dev_add+0x72c/0xb50 [ 1036.674335][ T3649] nbd_init+0x168/0x1f0 [ 1036.679013][ T3649] do_one_initcall+0x250/0x8d0 [ 1036.684300][ T3649] do_initcall_level+0x104/0x190 [ 1036.689765][ T3649] do_initcalls+0x59/0xa0 [ 1036.694614][ T3649] kernel_init_freeable+0x2a6/0x3e0 [ 1036.700339][ T3649] kernel_init+0x1d/0x1d0 [ 1036.705180][ T3649] ret_from_fork+0x51e/0xb90 [ 1036.710290][ T3649] ret_from_fork_asm+0x1a/0x30 [ 1036.715582][ T3649] [ 1036.715582][ T3649] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1036.723493][ T3649] __mutex_lock+0x19f/0x1300 [ 1036.728605][ T3649] elevator_change+0x1b3/0x450 [ 1036.733895][ T3649] elevator_set_none+0xb5/0x140 [ 1036.739266][ T3649] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1036.745605][ T3649] nbd_start_device+0x17f/0xb10 [ 1036.750975][ T3649] nbd_genl_connect+0x165b/0x1cf0 [ 1036.756789][ T3649] genl_family_rcv_msg_doit+0x22a/0x330 [ 1036.762887][ T3649] genl_rcv_msg+0x61c/0x7a0 [ 1036.767930][ T3649] netlink_rcv_skb+0x232/0x4b0 [ 1036.773221][ T3649] genl_rcv+0x28/0x40 [ 1036.777726][ T3649] netlink_unicast+0x80f/0x9b0 [ 1036.783015][ T3649] netlink_sendmsg+0x813/0xb40 [ 1036.788314][ T3649] ____sys_sendmsg+0x972/0x9f0 [ 1036.793607][ T3649] ___sys_sendmsg+0x2a5/0x360 [ 1036.798808][ T3649] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1036.804267][ T3649] do_syscall_64+0x14d/0xf80 [ 1036.809397][ T3649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.815893][ T3649] [ 1036.815893][ T3649] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1036.824504][ T3649] blk_alloc_queue+0x546/0x680 [ 1036.829797][ T3649] __blk_mq_alloc_disk+0x197/0x390 [ 1036.835437][ T3649] nbd_dev_add+0x499/0xb50 [ 1036.840547][ T3649] nbd_init+0x168/0x1f0 [ 1036.845220][ T3649] do_one_initcall+0x250/0x8d0 [ 1036.850513][ T3649] do_initcall_level+0x104/0x190 [ 1036.855976][ T3649] do_initcalls+0x59/0xa0 [ 1036.860834][ T3649] kernel_init_freeable+0x2a6/0x3e0 [ 1036.866553][ T3649] kernel_init+0x1d/0x1d0 [ 1036.871397][ T3649] ret_from_fork+0x51e/0xb90 [ 1036.876507][ T3649] ret_from_fork_asm+0x1a/0x30 [ 1036.881799][ T3649] [ 1036.881799][ T3649] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1036.889007][ T3649] fs_reclaim_acquire+0x71/0x100 [ 1036.894466][ T3649] kmem_cache_alloc_noprof+0x40/0x650 [ 1036.900388][ T3649] __kernfs_iattrs+0xdf/0x340 [ 1036.905673][ T3649] kernfs_iop_setattr+0xea/0x3f0 [ 1036.911136][ T3649] notify_change+0xc1a/0xf40 [ 1036.916257][ T3649] do_truncate+0x1c2/0x250 [ 1036.921218][ T3649] path_openat+0x2f89/0x3860 [ 1036.926428][ T3649] do_file_open+0x23e/0x4a0 [ 1036.931458][ T3649] do_sys_openat2+0x113/0x200 [ 1036.936664][ T3649] __x64_sys_openat+0x138/0x170 [ 1036.942044][ T3649] do_syscall_64+0x14d/0xf80 [ 1036.947160][ T3649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.953576][ T3649] [ 1036.953576][ T3649] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1036.962090][ T3649] __lock_acquire+0x15a5/0x2cf0 [ 1036.967461][ T3649] lock_acquire+0xf0/0x2e0 [ 1036.972398][ T3649] down_write+0x96/0x200 [ 1036.977170][ T3649] kernfs_unlink_sibling+0x71/0x180 [ 1036.982912][ T3649] __kernfs_remove+0x3e7/0x660 [ 1036.988232][ T3649] kernfs_remove_by_name_ns+0xaf/0x130 [ 1036.994220][ T3649] sysfs_unmerge_group+0xd4/0x140 [ 1036.999777][ T3649] dpm_sysfs_remove+0x76/0xd0 [ 1037.004989][ T3649] device_del+0x250/0x8f0 [ 1037.009847][ T3649] device_unregister+0x21/0xf0 [ 1037.015133][ T3649] hci_conn_del+0xc36/0x1230 [ 1037.020248][ T3649] hci_abort_conn_sync+0xdd0/0x1190 [ 1037.025972][ T3649] hci_cmd_sync_work+0x213/0x400 [ 1037.031431][ T3649] process_scheduled_works+0xb6e/0x18c0 [ 1037.037601][ T3649] worker_thread+0xa53/0xfc0 [ 1037.042716][ T3649] kthread+0x388/0x470 [ 1037.047301][ T3649] ret_from_fork+0x51e/0xb90 [ 1037.052415][ T3649] ret_from_fork_asm+0x1a/0x30 [ 1037.057701][ T3649] [ 1037.057701][ T3649] other info that might help us debug this: [ 1037.057701][ T3649] [ 1037.067922][ T3649] Chain exists of: [ 1037.067922][ T3649] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1037.067922][ T3649] [ 1037.082345][ T3649] Possible unsafe locking scenario: [ 1037.082345][ T3649] [ 1037.089790][ T3649] CPU0 CPU1 [ 1037.095158][ T3649] ---- ---- [ 1037.100516][ T3649] lock(&root->kernfs_rwsem); [ 1037.105296][ T3649] lock(cpuhp_state_mutex); [ 1037.112442][ T3649] lock(&root->kernfs_rwsem); [ 1037.119745][ T3649] lock(&root->kernfs_iattr_rwsem); [ 1037.125043][ T3649] [ 1037.125043][ T3649] *** DEADLOCK *** [ 1037.125043][ T3649] [ 1037.133196][ T3649] 5 locks held by kworker/u9:1/3649: [ 1037.138492][ T3649] #0: ffff8880628fe948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1037.149394][ T3649] #1: ffffc9000e247c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1037.161985][ T3649] #2: ffff88805d1ccec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1037.172013][ T3649] #3: ffff88805d1cc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1037.181775][ T3649] #4: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 1037.192486][ T3649] [ 1037.192486][ T3649] stack backtrace: [ 1037.198549][ T3649] CPU: 1 UID: 0 PID: 3649 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1037.198566][ T3649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1037.198585][ T3649] Workqueue: hci2 hci_cmd_sync_work [ 1037.198606][ T3649] Call Trace: [ 1037.198616][ T3649] [ 1037.198624][ T3649] dump_stack_lvl+0xe8/0x150 [ 1037.198644][ T3649] print_circular_bug+0x2e1/0x300 [ 1037.198668][ T3649] check_noncircular+0x12e/0x150 [ 1037.198691][ T3649] __lock_acquire+0x15a5/0x2cf0 [ 1037.198712][ T3649] ? __lock_acquire+0x6b5/0x2cf0 [ 1037.198734][ T3649] lock_acquire+0xf0/0x2e0 [ 1037.198751][ T3649] ? kernfs_unlink_sibling+0x71/0x180 [ 1037.198770][ T3649] down_write+0x96/0x200 [ 1037.198790][ T3649] ? kernfs_unlink_sibling+0x71/0x180 [ 1037.198805][ T3649] ? __pfx_down_write+0x10/0x10 [ 1037.198824][ T3649] ? kernfs_root+0x1c/0x230 [ 1037.198843][ T3649] ? kernfs_root+0x1c/0x230 [ 1037.198862][ T3649] ? kernfs_root+0x1c/0x230 [ 1037.198881][ T3649] ? kernfs_root+0x1ea/0x230 [ 1037.198901][ T3649] kernfs_unlink_sibling+0x71/0x180 [ 1037.198917][ T3649] __kernfs_remove+0x3e7/0x660 [ 1037.198933][ T3649] kernfs_remove_by_name_ns+0xaf/0x130 [ 1037.198950][ T3649] sysfs_unmerge_group+0xd4/0x140 [ 1037.198971][ T3649] dpm_sysfs_remove+0x76/0xd0 [ 1037.198993][ T3649] device_del+0x250/0x8f0 [ 1037.199011][ T3649] ? klist_iter_exit+0xc1/0x100 [ 1037.199031][ T3649] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 1037.199054][ T3649] ? __pfx_device_del+0x10/0x10 [ 1037.199072][ T3649] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1037.199090][ T3649] device_unregister+0x21/0xf0 [ 1037.199109][ T3649] hci_conn_del+0xc36/0x1230 [ 1037.199133][ T3649] ? hci_abort_conn_sync+0xa7b/0x1190 [ 1037.199146][ T3649] hci_abort_conn_sync+0xdd0/0x1190 [ 1037.199162][ T3649] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 1037.199178][ T3649] ? abort_conn_sync+0x26/0x210 [ 1037.199196][ T3649] ? abort_conn_sync+0x26/0x210 [ 1037.199210][ T3649] ? abort_conn_sync+0x19c/0x210 [ 1037.199225][ T3649] ? __pfx_abort_conn_sync+0x10/0x10 [ 1037.199242][ T3649] hci_cmd_sync_work+0x213/0x400 [ 1037.199261][ T3649] ? process_scheduled_works+0xa8d/0x18c0 [ 1037.199281][ T3649] process_scheduled_works+0xb6e/0x18c0 [ 1037.199309][ T3649] ? __pfx_process_scheduled_works+0x10/0x10 [ 1037.199330][ T3649] ? assign_work+0x3d5/0x5e0 [ 1037.199350][ T3649] worker_thread+0xa53/0xfc0 [ 1037.199377][ T3649] kthread+0x388/0x470 [ 1037.199392][ T3649] ? __pfx_worker_thread+0x10/0x10 [ 1037.199409][ T3649] ? __pfx_kthread+0x10/0x10 [ 1037.199423][ T3649] ret_from_fork+0x51e/0xb90 [ 1037.199443][ T3649] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.199460][ T3649] ? __switch_to+0xc7d/0x1450 [ 1037.199477][ T3649] ? __pfx_kthread+0x10/0x10 [ 1037.199491][ T3649] ret_from_fork_asm+0x1a/0x30 [ 1037.199517][ T3649] [ 1039.013449][T10977] syzkaller0: entered promiscuous mode [ 1039.018968][T10977] syzkaller0: entered allmulticast mode [ 1039.026872][T10979] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1039.034819][T10984] __nla_validate_parse: 13 callbacks suppressed [ 1039.034843][T10984] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10198'.