last executing test programs: 5.842144124s ago: executing program 4 (id=4120): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x84000000, 0x0) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r2, &(0x7f0000000480)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x7, {0x7, 0xd, "686d55acab"}}, 0xa) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x0) recvmsg(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) setsockopt$inet_buf(r8, 0x0, 0x2c, &(0x7f00000004c0)="e0e857604670bf9650724aaab6c117949dffa1db5cff23c9a8e8497d307ec005e4251b3fcd97d70dc3bb695a5059f13a1293b90bd5b169a2f27fbae58447b53a1bd7b109b9bec7277b93f3596a9d9a7af9a5dd8ec9736bba3ef91ae68bd9f3a74b0d1cb0720e533771ec12b5d1b36efccc214107ed73cf0620be42089b688321f77a5b95c26c089d3458f3769969cd7861f802efa818adb14aca9798eb3bbf9e85140ae2e8f63aa693b982a53ffdaf4b", 0xb0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r6}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "5fe768dd4ef11ac51fe04eb8ca2a6786948593b69693ed74", "d43880d62d9a67234af78bec647cf93a0de7b8ec18f9fd696fa9f5d0f4bd7cd4"}}}}}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 5.714426623s ago: executing program 2 (id=4123): r0 = socket(0x0, 0x1, 0x80) recvmmsg(r0, &(0x7f0000003680)=[{{&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/41, 0x29}, {&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000003c0)=""/35, 0x23}], 0x4}, 0x6}, {{&(0x7f0000000440)=@tipc=@id, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)=""/46, 0x2e}], 0x2, &(0x7f0000000580)=""/29, 0x1d}, 0x7fffffff}, {{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000700)=""/7, 0x7}], 0x2, &(0x7f0000000780)=""/213, 0xd5}, 0xe}, {{&(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000900)=""/232, 0xe8}, {&(0x7f0000000a00)=""/168, 0xa8}, {&(0x7f0000000ac0)=""/252, 0xfc}, {&(0x7f0000000bc0)=""/222, 0xde}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/190, 0xbe}, {&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/189, 0xbd}, {&(0x7f0000001e80)=""/19, 0x13}], 0x9, &(0x7f0000001f80)=""/8, 0x8}, 0x800}, {{&(0x7f0000001fc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002040)=""/162, 0xa2}, {&(0x7f0000002100)=""/192, 0xc0}, {&(0x7f00000021c0)}, {&(0x7f0000002200)=""/219, 0xdb}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/87, 0x57}, {&(0x7f0000003380)=""/110, 0x6e}, {&(0x7f0000003400)=""/89, 0x59}, {&(0x7f0000003480)=""/60, 0x3c}], 0x9, &(0x7f0000003580)=""/195, 0xc3}, 0x4}], 0x5, 0x400100a0, &(0x7f00000037c0)={0x0, 0x3938700}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "800600", 0x0, 0x6c, 0xff, @local, @local}}}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0x80000000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0xac, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_USERDATA={0x96, 0xd, 0x1, 0x0, "c7cb1687998060231db927d87a1f3f39a1be2db347dfdfaef6b22e0271672ec847cdb0b15ac1c89d862f011b213fb9a55303b3e788660e63092a7267b17ac54483b466c6d42882cffc7415d9eeda8edeca8da15e9d7fc63cfe37ff0f8a4d499f56972e3d44b0e54b8835892d24526e2c91b86c7ec55ef84be4397e435ebfb904846ff4a7e5fe0041588f1fe12030fdda55c7"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd4}}, 0x4) 5.360704631s ago: executing program 2 (id=4126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xfffffffe, 0x1}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r0) unshare(0x6a040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1f0bd26, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec0e96bb89261cb20081"], 0x1c}, 0x1, 0xfff0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r7, r8, 0x2f, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, &(0x7f0000000740), 0x0, 0x2}}, 0x30) r9 = socket$inet6(0xa, 0x3, 0x24) sendmmsg$inet6(r9, &(0x7f0000001440)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x9, @remote, 0x20}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000200)="45ec299fdc27b3f212fc4255cd8828fcbb07ceddcd65a763f2dda5ce2d0c3405fc3ce9871026356d18919980cec11f8b2e3243c37a58fc6e0f26b7e4432ef2b97ada4c394447cdc356001c9c45c8786faa5680d23661ca3739ed12", 0x5b}, {&(0x7f0000000280)="f869027bf398da85829de9f2426bb49fd8747b4419097cfb", 0x18}, {&(0x7f00000002c0)="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", 0x1000}], 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x108}}], 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.357133249s ago: executing program 0 (id=4127): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r0, 0xfffffffc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x3}, 0x94) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x46, &(0x7f0000000380), 0x4) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="30011001", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 5.251704671s ago: executing program 3 (id=4128): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, '$\x0e+\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x40000000}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x4}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xff}, @NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, '$},\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000580)={r5, 0x7}, &(0x7f0000000600)=0x8) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='nv', 0x2) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010000304000000000000008000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000002000128008000100677470001400028005000600094000000800040000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x56438000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getchain={0x0, 0x66, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10013}, {0xffff, 0xfff2}, {0x8, 0x7}}, [{0x0, 0xb, 0xfffffffe}, {0x0, 0xb, 0xcd0}, {0x0, 0xb, 0x4}, {0x0, 0xb, 0x10000}, {0x0, 0xb, 0x5}, {0x0, 0xb, 0x4}, {0x0, 0xb, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$l2tp(0x2, 0x2, 0x73) 5.133281286s ago: executing program 0 (id=4129): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x41, 0x0}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x3, 0xa}, {0xffe0, 0xd}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4051}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0x8) r11 = accept4(r10, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x81, 0x20, 0xfea, 0xfffffffffffffffa}, &(0x7f0000000440)=0x18) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="3183000000010000000019"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) socket$inet_sctp(0x2, 0x5, 0x84) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000047c0000040042801c0001800600060088a80000100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5.103023093s ago: executing program 3 (id=4130): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000010000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYRES64=r2], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) syz_emit_ethernet(0x82, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x5, "91ec92"}]}]}}}}}}}, 0x0) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES64=0x0, @ANYBLOB="00000000600000005800128008000100677470004c000280080001000e43b963150b3555b3c7ca1097e0289dcdd2ce0a7c76037054f6ca9e21f8782152890c8d50c66871a0e07458bf8d963e6159b8f7f970baf085c0557b1c7bae8b25dc17a7a4ba3ae9f65ca2d83dd9bfec0562fb7e156da1a2a9cbf9f28c525b330bf4a2f32dc3e316", @ANYRESOCT=0x0], 0x78}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000001300)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0xc, 0x4, 0x3, 0x1b, 0xfdc, 0x66, 0x0, 0x2, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x36}, {[@lsrr={0x83, 0x13, 0x3b, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, @loopback]}, @generic={0x94, 0x8, "cdb6ce8e1646"}]}}, {0x4e24, 0x4e20, 0xfac, 0x0, @gue={{0x2, 0x0, 0x3, 0xd9, 0x100}, "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"}}}}, 0xfea) socket(0x10, 0x803, 0x0) 4.799652171s ago: executing program 4 (id=4131): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5820fc98ba9b013b0ae9d6dcd3292ea54c7be8bbd2dbb1632ea5704cae881ef915d374d77d4310ca5a090fd99e4da48a13e30bd4912aefcca5d96fe", 0x3f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 4.74462696s ago: executing program 0 (id=4133): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xe7be759}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x2, 0x6, 0x6, 0x1}, {0x5, 0x1, 0x1, 0xa, 0xd3d, 0x1}, 0x26, 0x4b3b, 0x19c5}}]}}]}, 0x60}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001981100fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket(0x1, 0x803, 0x0) accept(r3, 0x0, &(0x7f0000000080)) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3708d9a8}, 0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00100000010000002800128009000100766c616e0023d16225e1cd07f6ec000000180002800c0002001e0000001f000000060001", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x8000) 4.492486767s ago: executing program 2 (id=4134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='illinois', 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x10048, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) shutdown(r0, 0x1) 4.420048186s ago: executing program 4 (id=4135): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, r6, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r7, 0x0, 0x20000000002) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000140)={'sit0\x00', 0x0}) 4.369287458s ago: executing program 2 (id=4136): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001300010028bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="222800000000010008003300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32, @ANYBLOB], 0x30}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0x8001}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x90, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_U32_SEL={0x84, 0x5, {0xb, 0x1, 0x7, 0xd, 0x0, 0xcc, 0x4, 0x1, [{0x1, 0x0, 0xf82, 0x101}, {0x6, 0x1, 0x1, 0xc}, {0x4, 0xfffffffe, 0x2, 0x1}, {0x3, 0x5, 0x1, 0xfffffff1}, {0x9, 0x3, 0xfffffff9, 0x2}, {0xedf5, 0xc, 0x2, 0xffff}, {0x0, 0x0, 0x81, 0x8}]}}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x78, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x78}}, 0x804) sendto(r0, &(0x7f0000001300)="71bf2354c00706f0c349c0339d68347e0d0396f34a7c759ccdb1f1ce7034c4db9a64763d26e01ceaf85ba9d8aca5d6a9fdd38a1cf8c40ccaa07b5079d7e359720db2af8076f3e9854a12980c4c458368b7ac9454ecdfb1b6471a28563a93be651dc051161c2beb4dcc166be0fe7234d1f0a191eb1788e0d0be281d73a6dd9107cb7782439cfc7ec9b9ad885a798f8238251200672eae3cc33ec16e348315ca58fa56848cf272014895b2ef9249489d529a9975fbacdebed8019b69fe7880a00b0331019f7716a103546c1acaca50224cd3a152dd99ce3dc9337cf16f8f8d2e6e59897238da50414909bf358513e8a21b2987f58a5af5ed677e0abf41279ddcf35af615ae06226f4c49e9713f4642d96c0f654586fa30ee1d1a3c45927b29557edda282660284b92b6acd87fa94827bb0598b81c15cfa3c2a58959c5682ff326c6b8056a3fc26c665e5505d3d6fb8dfb2b4b94d61c78e4a61a0b939e8a5a8a0fa35ccbcd67eec27c697f9ce852d7fa8a7513a7ebe09751b81343273f7254f5b53a97b1d1763c1f8a2cf1b3ed86a77f224534565490f1d5d7f0e8bf748bc39299c236afee6163fe3c97546acb6c60bbb413579e6d0f64d753704ca3d224e1f7bdb5401aa9cc6dbda7408f6cd91225a07f956ab7883b5c00231b9be9a6edf3ad1ea2b6d5c4ad03e4d3e8769109666d46badfb18b51f696f57836e5a6341f21628e335b8ba10e3ce620b30051ed83d732f41f120def4469fdc27f90e7024b5e7d4f4cf4b4ebff55a06ac891acf24f9321bfa47dbdc2421225d414c9d01c587fcc240c1004787dd7101e635dcbdcd80fb2c1e9508dbf060fd9e96eecb8f617cf11c5172d80d0d69cd7e0eab60ecd651d927aefdcbbf0752f488f47889c83fbaf25a430bc878a59f265f13dcdd0b1f9dfbf95827339815dc6f8c981d209416bcc3e900d702c5dc3cf8a2a892a798448e40a1e148b8bfebc5c8f62be39e9ce6498470d801868f02fbe19a424e70aa3c9583f06c7de6ecc125a6ab989d2569736eb361d371d8ef147f338abcdf421913fe6273f7fd2cd58bf80c018bfff69e94ac302d65037fa4a7916ab8ed365decac8a8f69c37caab466efa2a664a699039658de7f3373f2bf550be8a2319414d83a75d834a8962129e78d33233a287b895fb228a17583b913b675626b6701812214ae2a17ebc8b68ba27dcad980f1f51de56b5dee8614aab6e113cf49e780600ad6a4565d2cb6b85e073e57eb994af0f368ffa75805518032c18b0c1ff3c2ff845cc235a3b4ce8c89d49fdb50b8a879348e1fcf6764d87dd6953ca2d572e97b5e04cf9c769db924648c6a875a4262cb8f3ded2f3ad6ad058e3ed7ed8f8e25b223ca66f22cc2137f4499771762ce75c267cf8bf0d69ae79bfd4f831d487ab4dcfed4eb61d8b418d721fe32ddb39947d68ad54d27ff9762fb12eccadcd677d2acac65a0677162deea509bf507a2bdb774803bcb056bbdc426477a41c916ae5b742a25f060d7d5deec7574160d1a5cef2e82b87547c26016f26bf925db72aba43911ef331dd69c8d39d97c26cde6d9c264c2152bd60d4ca482c76f70e0d609850fce5a589a9fdfa6f29ffd80eff743f6f084bfbd784a2c7704785461450375b31a15ed9b1ba19fe02da554e3e94d6c91c3c50b59847664b416146646a1c186956646b5894bedfc6db36e3692da38c43d79dddbf5ecede976c732cd5ae99506a34fa2e11614dd38a26d0ce13260e20717eef1ddbcc136378a8b24e3bfd72a3fac80e105ca8549fdce80b0d9bf0fb6659b49f2ba97d461afb7deb35ef7d4854540df1b1916ef08474f21e6d8b4c108ba156f93f6e9113f73e96eed4c7d9049f12d62b015bebc71e8a4b0e86c20ec62b3d4c5e899d9523349aece01f5a8a0c9f99e0942811ae83ebf8ceb7d6406276771a142cdbe206183d91c32e16ae7dfba1d37af104da494998af758e8b61117457ca288a62739d8cd13d16648aae622208c57ce2af998f221e04ea0ec0687857f2cf03d79c7153c902559f3e41bb74f504eedb3d8733670703e1b40b891311f21b27cb34bb11377d101a723958206dbc2b824474f81315218a4a1d4ce71254682e0f796b7a2886f192fb8d42f98ed5254a4079b4ab3125f7504c41460c4bf1090d3b8e10e01d432ea227ba515ed7c94819fe0f94dc2560e721ad41c6b1ee65117e711cf1c084850c6b64dde5fbec6434f2d6c3839f9e816d353f22e086563df5fbeb395313c0695575983a2006b896867168fd299d3fab1074c20d0cc33d25c3911d029de8fa8197fa1bb9fd84841dc9f391e4ea76d2592c361c46cced6728a9c7292b7eadc5310525db13ed22a8027c6a0f1cdae978710adacff46da5eb8007f10bada869f415a5237d3ba9a12e1f9302365022cade5ebd91e5f32700be89d2813b2b0c9044944bd14c0e2af29710728a6c24a0ea44bb25778f447211571fe1eb8a9a9070dfa7b7f8fa81a2930b729bb35fa0c8353bd2a0ffa5c5d2912823bbee568cca7a43788c42a1bd97aa66681972639fe96984cc22f57d6eadca7c7b458bf18bdd442ae44f7e8e106eac6077c57ba36b3b1331d268869245ac0921ea94a671b5e16f6ba1e4e5ede1712c73d8e1f0b3f959afcc14f9325d9347bbf7b40ce025f828d31a85c60bf2bd42fc30757a279f1eb42f57fb161cfc2a2788c094996b4a8b144917e6505add0b1b84b66bc7bc9d442cca999c4f9f60e99aaf317e2db9a66da6787e9bb5a5c7a003c83ff82f91d19fc5ba1887f1adf23501fa039486bd26632c04d0e68c5f550409d57eaa3bb5fc2c3fd6e99e3ceb56da999c040b684cb2f6871477c19c628de3df20738928a7686d3a39fff1b5cce309420b0b53656ab7374d499904d5068ed4178e062d289ac994040de15a7c6df6ad46bacc5883313d985b0a9101ec4d77b6b6ce2838a6d7d06683e0695c6e899bdb0780f0c8a5c4f51ee553aa33755413d53f3aee4724e520266112855302312723fdcd1d8cd62d7ec4d966e2eac710fcbef21f853fddfaefcac45e3401a7735db96f215151f3fb3490df48a454568aead22603fcf597703ede2aa2da752b8f8dbd8161b2bc57b2f5e057fd33ff11e7c980e05345b7ef86b6d00ad6239f1077a2c47330edf3993c947f88c03ba0720d57ffb99607cd8818a200da0e5e0d2ca89621f160fe286154d17ac9f517eeb417ff340d419e706577698ddfff9582ac5c56fb99baa07b7a345500d73e4fa51533089caa601aae65abcae9f21b985696caf9b5e4c617e8ae63c5c62458a22d2bc87c119fdddb3ed2ff65ee729fc5c6797b81e9c80dee1a24216260e753981155690b3e6e12f39c7bf575bd4411364b331b29e676675e9a357b61eaa0a49b11a5a3eecece542526ff49cd683e6e3315e0347f9a797e9acacbcf86cd1eef3273803593bc55df9916dd97667fb4111b1ceae8c086db47ee81ac0936103d8654cf5b0970feea054aa4ad1bac5f9024122d217f8b114cd8174298157eefa3155be9ab0334e5b0b3b6681b384b589ee0cb51cd6e377f788a2aa138d2a3b649f1f4be57f9a3b1b6a7ccc5d50e990e456391677e24f199e33ebfbc3a0bd50ff64e9b4b2863fc5ab3d9b2c00d5bd42abaefc6414307780a86ae04a16b8c0ef6eed30224a5fbdef38b5360439eaa8ff5ad0de6df18829315ada3d9438b85e5ed02fa515229076f510a3b9706b18c9eacaae7455dee38625d4979766907332cb2f6ed261b41b1ff31747c848724ff1f75f8820f178f9c5125799abca8683cd21862df602f5357eb365891a731929c360abd784ba0fd1c009b4d56983eebc2a64bc35e549060fece0fb1c99f1366cc2fa732c2e956f0822d6ebc078210c22be085c6830ed94e1e2e7d30c217e54d87e0433dd727035cf8bc94171205aa535fd92a91434511ecb8405d83657fb22177b0ce691467103dd5b7352379542478dafef0fb7952a34f47b5e1fd38e6af42e0ebdfd619edabb2cb386f9ba1dd4c0ca1cb6ceaf690384eaaf731a09e7b9cca0d9ce8f53cd02ecd4c2dc054897bd198702559eac4fcaaf707b690574c243ebae513b5ec987cfdae8003091bbab7114b069d75eaea8c5a80e6d51ccd6427dc04c21d2ede9f33bcd64b77d3f78c5532eafac533ce9aaf3ad00badf10354d98f97ce2b54a838a5d9aad531b33436abdb63050d1d5e4599910a085a7ebe40f31434518ffa6d09a987ab8ae534671053d49ed8b6d05bcde48f0aef40fbc2e13e816a8f841ee3f998ef0dcda897fbdb9cd3a4c454ff22705aa738e0b50263a028e341c9cf8d4bbc50200aad3f2ba561f71bbb5797fe54bde3c219bed4913a6e1e0130252a8f150da67412da6902ca047b8ec4c1d08ef5320388aee7b0f9135209f88447fa6a4da6585da6861a7fbbcb4fb47f6db3e6dae9fb3818710dd468215f50d0318e6abd8c2c6acff8a1a9cf07085e4a9fe51a0477e39561aaeac6d2ce8ac47d2f214855a12bdf6208f15bcac205836813b90c01d0b3d9b8a53f033767cff3dd6ae07241a579b7bd63115b94dc9855158dbb2e4ef98aded10a364beedb4d6d6801a1a804939377d97c6593f824a9fa57611476d78314fb49aabc69b0eb9788d3ae4eaf525ae5641b5c14ca867f99a6be3c97f6fe4428ec46f8f40129a30d3f6fdadf02677e1157c3398bf2690bef14a5f80592eb904cc12ed8bcf0e544856de7eafecac13e14d454472d90a8cc8ed02d10aae10223e6e492315799d4d1f9c916a5050e662c3550715b8bc80b290c6d485d729bbd82c83505e6e39de53b8d612c203c2d0b420a291ddfa6214dcc55c83bcf3289d4102f6bb285da9ed2b5b64b4f267fcb23e213a6609a1a7668a01a8766488c1c3ef5d97a7a694a91fa366ecf80f50cae38e1ff8125e675938cb3396873f2b4db373e4060cf64036897b91b434a394397c6cbf7395ee40351f6a5fc9873f5878c9280fe246eae8922f81000bebc749fe3160b4ffb36b17eb3e6061e7273a8e20d3a0185b57fc94d181f600f3164d991302f942dc3c178bc3847d57e70347cf82d57f10f2b601db83a335c10236625e2729c9527f85c141d1411492914369ebb5a98a5bd1fc39542e081d74de95fa13f9eeaab12f4b24ac9436561a59e9d6ba4378eb0c37e41266dff78340c5e2717eabe481db2d2e24502990fec5748b8b41e80daef1423e7f270e09f5bcd85fd664e47977a9442361b8894a35e447b0d1fb5750d276ac29e11933dd862a89edf60a2d9c28743700084e9066d39fade3d44ebe798241a17f223baddc4ec1409a9f26d725753a91059711dd27f901765e32f43481fba5158d439aae610716a69b7a53ddd2dce50603d500a43f4fd9378d26570a1b3d9e508a075b4a61bb5f9fbdd542b23b2a3c933288114e1f4b7b524bf2007d039ba630ece07c49b139542d681d614fcc0eb78e897c5b1a06eed4677947aacba05b1806193187dce0fa8c20cb2754e1da57e19d86bd86fd9601b7dfc25f7a82de3139759eda64bf2e672a115796c7e0ba5901896a7cd18c70b6748b2463caad65e94dee1ab9f45e7ed854a3f33b78eefceffb3687b059319ad2e3beaa6a847506b7e6f26738da56d669d175b10022e1b914287ec2e19e99e56e4cfe0fc41fc605c8acc5966e422ce31fa9b170e6961e739a25d37f79855089a1ab44fd8dc7c318286cf5b96241fe08825eb569c52fa673a3350c1f2fea003963b08d0a243b17cd30748cad977f1f48a53cd247ddf13b983b35b1aef16094169452e7dfe923f6251f31498a72bf", 0x1000, 0x0, 0x0, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, 0x0, &(0x7f0000000200)=0x54) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001300010028bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="222800000000010008003300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32, @ANYBLOB], 0x30}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0x8001}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x90, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xb}}, @TCA_U32_SEL={0x84, 0x5, {0xb, 0x1, 0x7, 0xd, 0x0, 0xcc, 0x4, 0x1, [{0x1, 0x0, 0xf82, 0x101}, {0x6, 0x1, 0x1, 0xc}, {0x4, 0xfffffffe, 0x2, 0x1}, {0x3, 0x5, 0x1, 0xfffffff1}, {0x9, 0x3, 0xfffffff9, 0x2}, {0xedf5, 0xc, 0x2, 0xffff}, {0x0, 0x0, 0x81, 0x8}]}}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x78, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x78}}, 0x804) (async) sendto(r0, &(0x7f0000001300)="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", 0x1000, 0x0, 0x0, 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, 0x0, &(0x7f0000000200)=0x54) (async) 4.311913712s ago: executing program 0 (id=4138): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207200902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x622400, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000100)={'pimreg1\x00'}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'geneve0\x00', &(0x7f0000000180)=@ethtool_gfeatures={0x19, 0x1, [{}]}}) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x1, 0xff, 0x7fff}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000018000000000a800000ff0300280000000014000100200107000000000000000800"/48], 0x30}}, 0x0) 4.173374416s ago: executing program 2 (id=4139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x56, 0xa, 0x9, 0x5b, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7800, 0x8000, 0x6, 0xad46693}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079106f00000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd9, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r8, 0x29, 0x3e, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe54a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80) close(r4) socket(0x10, 0x3, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)}, 0x4005) 3.816608409s ago: executing program 1 (id=4140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x703b}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x7, 0x6, @multicast}, 0x14) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x703b}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x7, 0x6, @multicast}, 0x14) (async) close(0xffffffffffffffff) (async) 3.518634743s ago: executing program 1 (id=4141): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@private1}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0x1f) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x1, 'vxcan1\x00', {}, 0xd}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0xe, 0x1, 0x2, 0x800, r4}, &(0x7f0000000200)=0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)=@req={0x28, &(0x7f0000000280)={'veth0_to_bridge\x00', @ifru_settings={0x9, 0x0, @cisco=&(0x7f0000000240)={0x10001, 0x7}}}}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001300)=@get={0x1, &(0x7f0000000300)=""/4096, 0x1}) 3.353629162s ago: executing program 3 (id=4142): unshare(0x2c020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/53, 0x35, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) 3.324510759s ago: executing program 4 (id=4143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c00188008000140000000040800034000000003080002400000000a240001801400018008000100e000000108000200e00000010c00028005000100"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.295882059s ago: executing program 1 (id=4144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) syz_extract_tcp_res(&(0x7f00000000c0), 0x4, 0x27) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x3, 0x80, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0xff09, 0x7800, 0xffff, 0xfffffffc}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000082000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1bc, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe55}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4a5d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1f6e}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3ff, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdda}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @mcast2}}}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x880}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) (async) syz_extract_tcp_res(&(0x7f00000000c0), 0x4, 0x27) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x3, 0x80, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0xff09, 0x7800, 0xffff, 0xfffffffc}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000082000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1bc, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe55}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4a5d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1f6e}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3ff, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdda}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @mcast2}}}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x880}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 3.18568637s ago: executing program 0 (id=4145): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 2.971681901s ago: executing program 1 (id=4146): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xde, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0xa8, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [@srh={0x33, 0xe, 0x4, 0x7, 0xff, 0x40, 0x9e98, [@private2, @loopback, @mcast2, @mcast2, @mcast1, @loopback, @mcast2]}]}}}}}}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bind$can_j1939(r1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x6c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x118, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "8789cdbcd6147a69648eb3e8d2d0e11752a592b5fcb604411fd6ee021f28a6b972da6335c48746f3862e4dcfbb6af427e795fd56b84b753c6f9524f149d413aa731176c96e2779dee89ddbcc085bee763f15f36f76a8c65eff281361a5de733a2b15c9b48cbadeaabc7d14c439cfe373906fd9cc819846e77b733f71eedc3c0d1f2c2b27e257f1567874cfb5a926a76041135806d7806cae95943261df80cf925c23642838082fbba0b75175d90ad533c1eb14fbf04aa7ad96"}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.365163676s ago: executing program 3 (id=4147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000e00)={{r2}, r3, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000001e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000580)={0xe0, r4, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0df688a665745f2332968d40e4c0b92e908248d4e6ae78f0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dfe6ada256438f9d7880f8d50e7c7a0825e34eefc695da4a"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) close(0x3) 244.74195ms ago: executing program 4 (id=4148): socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x5) (async) accept4(r0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0xff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)={0x14, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20048800) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) 242.767643ms ago: executing program 1 (id=4149): r0 = socket(0x2, 0x3, 0x100000001) sendmsg$nl_generic(r0, &(0x7f0000006100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000060c0)={&(0x7f0000002d40)=ANY=[@ANYBLOB="783300001800040025bd7000fcdbdf25030000002000608005005f000000000004007a8008001400000000000400488004004f80b225573f36f9e602e78e8f3ae9dbab076df7400da4374ce0286565dc0166ce2ea09d8add51e1c82ff6cdb08458a2eb515be10a4bf204d6d437f723fc8d28c451dd50d1978d2e08d3bdfffd5e3db12df92ec481d5043b7a340c03f8fc5f256a44b48567321ee4dc3c5eee7ff6f09974f41410af8004001e8019a0a059ceea6545f7e74283de198b8d013c797fff530259fb8f10cad3075bef87ab7e6b43b60c5330f3aeba2bcfd9cf559d0f71642e0d06ea9f3c2c13ddae25378e70ee8b437f882c3e75c1af5c31101e49ad24e3cec87701645e541f74ce4c9f440b5e09339bd9cb4133bbff6bfdf62881134845c521c08f0ec103c4ff7d6806b28632f79022c719827a052bc764231419892fb579cd25f0942297416127e52c12e42cf14647571efe8c74834d708ed725fa2ea24e0e53a9f39995667eb02c03d9d230eb18d89e3db5a684f5fb0ff83148494e555f96a47401a7d51124becbbc9b8a4a8a6aaa237559bb42525d5af263f10b7b1e90f947df12eaad06f17d5dabd4df2566ff0d33d08df78c96106ae5fd2df258691e467ff8c589221a63228ba1c6d980cbc20edc9ed94bba1455796fa7f4b52df75736a75f18f8bfc43d91e0f002af82eae8f9b2b69f558c40513c302d50a8b8c1bfb8bd46b0f121dce8b9a9112c7b372f928cfd454dd4cec133e522017c7214d060b30064262a939a73305b058bb009a18bd0732ce521c92df6687977dd06d658b5dcf2aa3b95dc709fe0879d49a116e68c72cf8549dca07c92203ceb05ed8ef6bdd31a8e1faf11faaeec660cb21b6508cbf4aa0ce75a2af49135453524d46f1657414951630ce5baefe211dfc0d88438300a9d126b41b57a48709ef32101674cf039d9c413e39993332689e830a28fd4c17b4ba2c01d369f0bc85195a3f7dbb38fc35f11205f8e19c4183da3fd2b50951b4c40adbc475f2755de5797a5bed5dff02c539123417ed8f932b5ce9574ab1d90cc2bb1a7b544c7b40f68dc8e88c9e2ebe2943a0383e81ef32056d1cea976a22704afa58934d03a6876bbe58aab7b8a31eb888c5518a7d61c236dcd80e8b5cbddb4e4f413e05562744286f815fc1437ae92ba13691234a7db1c9f08e8cb921ad83e093020fc4438a1b0ffd04a6e85e4ae037434e39dfc154adebf81f764f6c292969f5bc2dbae7df8a414e720fa602b2a8b84b8cdeb1f2972fa3bf8bc57cc00381e5acbcc6837ad1e12f72b69f08dfd0556fb3134038316a12e9db1d74ef3ad944857d7518866e603c2fdaee25f45dee215243e3c5683b45037cb2b67d3e3f48c2e0115b7a4548a28bd4a86ec4b81b02bbfc04155925983e5209af322f049408a14a2ac4c6693dc33eb95a7da11933c17d7ab3d9c54bc364511bb3dbbb4efc9f01eb222318f1af988d91e84c3271395e9a6fd752eac4e345df31881bf0a763d980e8a61d80f2cfd4f8ccb6282addf0d018413fdedd3a493f4553388a897e7fc3061485a68f55385e30c4af0b1a08d51d29584b92241d92df24ac12b4c829d1771ab49c208b25e30fb6de03cf30b35577593fbc586557621ad53aaa097299becfb9db769d997181692ec7218ff92b081dc2bc99660a8d8d78ea6af40cc80d61970d4db440ed57f1537de1aa39e6545b080afd77786628214d36aceafca486710d28c210b99664b15ea956df0ffd7e93a35d57f64229d5f436d3a9d0a5e7084b1bbc8d12b830a0ca1f38414bcf4893d3a7963d9b58fe6f9c702bdd4c6496ae554b7627a6b5bd2f4c8fe96a65e3596677e8c4f2fd381c0a8df11c67c1baf14bc2fe12954babd8dd4a312b48bbd4095ea6769eb9faea357e8252f055b60d72ecb70d92d36bbb2319b59a25d31c110727ad2dec59b4bdd511346a639dd189a2842b456823a0eeef37c41a3ad304cd7c70dcf03fa389edab0897b54683b6025a9d6130c5a870ea6dcb8ea64334cbf9cac61497eb5b0217c0e3ef43232f45ae491ac88bfe65ce992a5e07a878d76faaf5165851de408bfe20aebcaf3f75f11079527d847200b995235e07ab9e751efaa2a73919b5645eff6b990bd10258d2947ccd721598fa14bcd5a4b7e56646607faeb6e8908b6fa062f0621add09036ec0be736d182d13a2a3df6ccfd89006cb7258e48c76adca1b6c1df874400cac20e32198bf3ac8e65e678d54bd09d5c4c696730c4e8eea16ba94c1610bac4aca7adae89d6747c0c98ec1436331b11c4ac35716a6be247856ad30f6f68e06a5e9aec76ff3b6af091e8cddaf84a9c20c5bda13fadbd2c5b53f768ba3c28d934bb2ff0574e05a5de8e5b11ae06add9071fcbbe0e05b7d898205774e14b6fad3f97bcf45783a892aac70f1917cf9422017c22a6fb71e27f1d44a07f2b6cd3d3c549b9c37c4c69d63066a61172413ae638d334531d3ded9d6b42e591efc8578dcd6387e91845176e2f53c01e870fcf22a9833e8dbcf84db34d232501f3a631d92406a53287d005de5ee4fb09dbaf1c588bea34d4525197b7815948c18dbf0b9f6758af36ff8d9e1b548be73b1d0df471da6dbbc2e51b53c0c92cf38784d719b80b3a66aadaebe27fb1c0cdefb359b8043ed9699c36ebc34fd756c128d20efd35d8e58bf5a056bf2244c2f1c6a60437667710bdd083dd7ec8ba1f64698e83d75c629ce16db6fcdc9e56af0db4f68ee03a8ec0796f8541b66f917e3cff68972cdcde627fa2edd9759105cedb0aa67ca4120a7059cd67d15587574613ed6a2a163b5bde95bcce3e26390258538e72a8ad7681f695908b891c6dd0690581c1fbbc8e4f733459fcf350faf8f3508b6da8b3bbc1192224957a8f9524df753d2cc50401559edd221e69800d9aa90db8a7d421b9679b005484ec5622c366a3de13c6790f50ebfc3b6a7929ded78cf39bf66d3ac487b9475960731f3971997bdef4aeca05976797028ebc3dad4f6a77c0e1cf566f1c714161964875eb36abc7fcf6d506889574c575836dbd45211281fe1e9f0c8735459cb084e81e29fee679b3a52d493731391eefe90ed02b561f06dc3fda5475b8af06489e7be4cb3fc1585acb0648a5e7366d28f95bb5337b2a6a51359cb23da18b98f00c58bcbd1670a2eb790e5c0f70a55dcfcca23c46194014ede6b4c736001980d56a8b6a818cf9c10dca9a81e232b0e6ecdf902ffafb2c7bb4876ed4c4ae1b31425eb4cce81a506831d7dd55f3527e0e7aa83e0c3a5d34f98c0dc1e8057e7744d99401e99e523a2838257aa7e602205f7da1eec386896a78161f4eadb2e3843e197958179521bd1ee2644dfb08270fa2609f77e24e8d32b702eec4d17488d6f554fbdb708ad0756c6b6712a87b76c2a4c8329b26d3cf32b4a2ab122d9273c94917c61b253e9f6ad30ebe293f73e0e57b9c3d220372b5e62196c09a9f23a5ecfb040b3dce9a574aa78ab458925faf1e5ae03481fa958c0cb10cb4830a877e50d2a314bdab8d893c523d5f33d28b232c813847cc7a007f073648f0b175d41f2e75e0ac4b6bf6657da9a270be102ad3e18736d1472ac0319aaeb79caad510a3ac206c2d9500c178382be44bb44ab3272dbd1f1bd445d1b7f65a0eae7bef6063ab4b754bfdc56481702263b723fc43e314331317bb3aebf6a5c89be0d2f128dc97b1ea07bd5b94f08eeb3911dbddfd2517dd3b0dc952108871498c8b1808bd224a3338da2e0d072e0270e4c8f2c5261266f913bd7be90a33dd2e133f88cb1017761629b588bee93a7310c86925227e7d7005b491effafdcb9206c97cf9edc72d283fdc0f5d5c750c31c416448a9f378b3def89c048ea1e04ce0b885a0bc8afd1f17ff028a96c31415309a8e1bb0c9ffc43c65611d103cd9f0a3b70dd6cbb08d0bfdc052165f679e7f9badb7639e8a60d3e1d5eef7d76c2166c5ae87cc433c8d9d92a26b1b6126a8289f57abde54fbc4610d41ac8e3c97bece38a6180fef1eb3fbf1eca77d8925c4259e2d41d0b8a6005c17b18188843dea4955d08177e59fc5d64e99e9f813dc7e5b8b3923662b523d9c384917b37b857c16b4372a7e69f8b18575a3cefd9b16d60f0a32069e10b5b3b30c4db76e6696a3b278e7da5b0f7449d573f8e14a6193b445c16538ee66fce3176f4b717780e4753b2892f1716d70502bb897e0ca9841bbaea756a16780115d6cf88df54f1abe9a8c433b3da16fe280d8091ea6530d3ba947039729b03873e7176b9b18c4f7d3b64f6f6b4ba0f4d7f68465a8c713610a2377219fa9a1cdf9bed4c5c1a2825d8ac5f088f7b76165c8e930943289bbe17cd0cbdf70f410f24e2e733ba5fa7ac4b9f763396a9fdc86cce0d19b4e8d7737052b83e21ea95528a1518c0f86597f2d8126378a1d28592dfaa8e7aa12763837ea95c4d38cec628a82ddee59abbe5c9416e62946f4f3d0b7259cff92fb2267bf9318fed508e27f299c7b9d576761034ab6863bafe529c59416e0686a610d93b4aeadb5e8a45a0a2f4db59d16a57494e9210e10df7f7267f0f4c66e361fb75730cffd63eeb9b0bf513fc1de0f797475fb90c8c047600821f36235f0a08630e61f9d9ec18a8fca5a03c118e07934f654e3b0798c28379fb67139eb5889f6e394a39b7ae74bf5fd9dd8dcbf06efaec7b6c33dc343d3b96f387e30dc32d286b77849ae4dd241fd405154de7cb8292037186dd1c9c1746511b0abff6d46724e30914de8df27fdb776409686911d36fc5b9da410f5df4aefe56515a5bd4f4c619cb8d6bc00b1e54170b6e39ede9abd991a5da459516b736b493f9f18107090b4c72f733c3f8570e2d358dc8b969a314f795eff7e515194ed08d19ded886d79fee4ea291edc2458e1c5d27b94630829ebe981d1aef7f3966a2c4fa9e523f436f09d8861677c894a02d5adca2e90fea74dd322ecacd6b19b19381ab802b54771ce670f9cc19fd3025e0e18e7a725324e67e4977cc34017b954eac9de4da68ce95a8f67f8a7f63af1511606a354515a93fb7e748918c6938a4d675b1e290877aec07950087eec6a9a8520ff59dbadd4c0d7c5d236e43a910d7f9ea043e5b675d6cf8344541718cd689e154a249316c8e19b032864f4283e8349687b289d0af6c60e1fcca7c788277ef481a36ec48a7300fee3ea439cbc99a9aca2d67fccdf62cd4754fbda752530dc678c4b8dcd8b5c168b3f8be97aaf78e010bf6a25bd6d21d8ceb6b0642b0233603e423172ef6997f3d36e027b4f465631814af3dd147c1d2a9024217c7773db7072ccb6c277d37dafe55d31af4780b38e4dd39cc3572e23e9d9a592b605ababba8d8851b723a00cbee2d1b1b6230d4fc82c23922fd81f8f934c0ba9462a7928bc036f0a1793eacd325def7888f6c8c5ba63c916fb69b2876a4b52bf34868cb55d3afcb89ad00707e1134674e0d14f33caa2b714618fcc4e5af1bde56fd5a5b510d7d992716cc62faadd2476f4cd934105085486841ffb90cfd53fa6b3dfeb742480e74157d793eaa58db4d2fa6b1b5bd0ee3d0fe43b076cf9c8772d98916efe86f9fe07b4ec74f893046fb2cd94469995fe18283aeb040d9a471c7d64b8a2ad30666145e0b6da942e345c6ac169fa4d23459357e7203eb5f9809c44ce7c013ba7b2382e92abbf39a634fdc88acdd2e736c9b26bcee2e874226714d06ddecd01966196b01869e16f736338a50107574098c35f164f3f911a0b93cd0ac0924766318e0e9f2692d0397b8ccddd484e1e0f92e85308ff3b9811cdcfd650d0058002c8900183358c5869c54d7e3f5c1b3817de8545a4cb402788c65822d34680a44181c8bb9ebb86c21aa63f993ab8bfed5f1a0ba1a7e017e9bf7a2a351d1efb0884a22b0ef7ead56a8f8c4e49c8cf8a6375b19bdbf56a504f32bb1eedcd41e6c5b5e101dd86db820fd834cfaabe11c3227c7e15aa41ed7b624bc81648b3c9d661bf37ab484ccb51b3e5989d7f71719cf725e6a8d189e2fbada0923df1042249817931b4f9022c71933fb4e040093800400968004003000a90043800800fc00", @ANYRES32, @ANYBLOB="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"], 0x3378}, 0x1, 0x0, 0x0, 0x4004}, 0x44810) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) close(0x3) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0x14, &(0x7f0000000100)={&(0x7f00000000c0)="38e74961", 0x4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x401}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0x3f, 0xe3, &(0x7f0000000080)="248c46b1e198ae322ed7cfcc00677835dce6077fc552aacf83d7e2f3f501ada20c253cabf37603d582801c651aae9a83abae7ab1399493a7fd279823fe5eba", &(0x7f0000000240)=""/227, 0x4, 0x0, 0x9d, 0xf3, &(0x7f0000000400)="f3e846fcd7ca035248ad76ec6a8d9b2f5eca1d25190647dfa4ab7adf284d7b8afb8ad1e90c85a1dd9d1411b33424a4f52a0cef345e58daa789da3f8975749a59ca4a3612ed400d60746f3db546f7e6bf15f47cd808ed8776d0e39c2fdd429f92ba1e9840b4a2921182a984ff2b6d7054a4c57871ccc8f7aa3c5a427f6396eedb1657c88e15ad9afcb08e235f4170fb5b9040000e3438b4bfe04ed0d600", &(0x7f00000004c0)="ce92611737f259cae06e929f9cfbc69c052633ef5c4111a00862fefcd6f6e9fbe02e05852f89d10d3e6efcba4ee678ca898a966d4f5a4797e97108c65d6e1e3d4f1d7c11fcf33c5cf011c8dfd4882d292d16a2a1253ee34a458db49f005482aee032bcc78c6946f14fcfebd7f86f1ead0ef50361f2c9b5b1bea13db45b33bd272d059a38c81b4a767963c833246482ca29758c4f570058f3460779118f4eb98f42677e46916e4bfe0b1407bcea2b3c0d87b4ad8d9f9909ad6a1ee06469a6756dd9fde387e1e5ad32d5f26f3fb27dd8322e1451b710505c19b2cea1e09684090014c49d074bc3bbda45debca949827114b76d09", 0x3, 0x0, 0x6}, 0x50) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x7, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r1, &(0x7f00000032c0), 0x0, 0x0) (async) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000000)={0xff7b}) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x5}, 0x8) 217.193366ms ago: executing program 3 (id=4150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ifreq(r1, 0x8943, &(0x7f0000000040)={'dummy0\x00', @ifru_map={0x3, 0x0, 0x7, 0x6, 0x8e, 0x1}}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x5, 0x7fffffff, 0x3, 0x5}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r6 = accept4(r1, &(0x7f0000000140)=@pptp, &(0x7f00000001c0)=0x80, 0x0) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10004891) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r2], 0x84}}, 0x20008040) 216.589461ms ago: executing program 2 (id=4151): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2a}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={r2, @in={{0x2, 0x4e24, @private=0xa010101}}, 0xc, 0x3, 0x0, 0x7, 0x52, 0x7f, 0x7}, 0x9c) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x10) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000080)="757757c5f26d7699b13657f8dce6", 0xe, 0x44000, &(0x7f00000001c0)={0x11, 0xf8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 125.665165ms ago: executing program 0 (id=4152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000010000000000000002000000850000002f000000850000001600000095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 97.789069ms ago: executing program 4 (id=4153): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000001700)) syz_emit_ethernet(0x12, &(0x7f0000000080)={@link_local={0x3}, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@generic={0x8906}}}, 0x0) syz_emit_ethernet(0xcc, &(0x7f0000000000)=ANY=[@ANYBLOB="aaabaa30aaaa6cf6566994c681001000080049b400ba00000000a30690781414aa070f09e00000027f007f0000000000004e224001d8f1753d46d5e641d766f8d1e8ea5da63eebee8fa06bc99385dad2a4fba7c20c9e7a0995f2e04909081a1d8ad5d09108c43c5b1a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078000028c9624ac4c776def5799525026ef73263831c67303671b02526506d68f7957aa244e929321d1642b2236994419199859b2b80e7240fe84b92ea295cffc010e65b9419b0f892a3a019761a2f67901bd50070f4a5be55f260761f0f35f401e46e0ab3ff09e0b30cee48c8b49d03205044d626151b57b834e7f22d4b6d3e45af82f2d6"], 0x0) 1.676637ms ago: executing program 1 (id=4154): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@private1}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0x1f) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x1, 'vxcan1\x00', {}, 0xd}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0xe, 0x1, 0x2, 0x800, r4}, &(0x7f0000000200)=0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)=@req={0x28, &(0x7f0000000280)={'veth0_to_bridge\x00', @ifru_settings={0x9, 0x0, @cisco=&(0x7f0000000240)={0x10001, 0x7}}}}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001300)=@get={0x1, &(0x7f0000000300)=""/4096, 0x1}) 0s ago: executing program 3 (id=4155): socket(0x1d, 0x2, 0x6) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) (async) socket(0x18, 0xa, 0x6) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) kernel console output (not intermixed with test programs): promiscuous mode [ 423.594719][T17010] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 423.768361][T17022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2910'. [ 423.792557][T17024] netlink: 'syz.1.2909': attribute type 1 has an invalid length. [ 423.915132][T17020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2909'. [ 423.934511][T16941] chnl_net:caif_netlink_parms(): no params data found [ 424.022775][T17024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2909'. [ 424.422046][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2912'. [ 424.432747][T17038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2912'. [ 424.535190][ T5835] Bluetooth: hci2: command tx timeout [ 424.709221][T17050] ip6t_srh: unknown srh match flags 4000 [ 424.990787][T17041] gre0 speed is unknown, defaulting to 1000 [ 425.109377][T16941] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.139111][T16941] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.146483][T16941] bridge_slave_0: entered allmulticast mode [ 425.172740][T16941] bridge_slave_0: entered promiscuous mode [ 425.190076][T16941] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.208510][T16941] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.215839][T16941] bridge_slave_1: entered allmulticast mode [ 425.255346][T16941] bridge_slave_1: entered promiscuous mode [ 425.497283][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.996294][ T44] team0 (unregistering): Port device team_slave_1 removed [ 426.118452][T16941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.135897][ T8062] lo speed is unknown, defaulting to 1000 [ 426.149906][ T8062] sqz0: Port: 1 Link DOWN [ 426.155538][T17041] lo speed is unknown, defaulting to 1000 [ 426.165059][T16941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.197377][ T8062] lo speed is unknown, defaulting to 1000 [ 426.262992][T16941] team0: Port device team_slave_0 added [ 426.274391][T16941] team0: Port device team_slave_1 added [ 426.311746][T17078] netlink: 'syz.3.2919': attribute type 4 has an invalid length. [ 426.354360][T16941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.375851][T17080] netlink: 'syz.3.2919': attribute type 4 has an invalid length. [ 426.383636][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.383673][T16941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.440137][T16941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.451284][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.486971][T16941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.607598][ T5835] Bluetooth: hci2: command tx timeout [ 426.792663][T16011] smc: removing ib device sqz0 [ 426.795195][T17092] __nla_validate_parse: 3 callbacks suppressed [ 426.795214][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2920'. [ 426.882583][T17094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2920'. [ 427.527295][T17107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2921'. [ 427.644711][T16013] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 427.667351][T16013] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 427.927976][T17107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.962050][T16013] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 427.986962][T16013] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 428.204164][T16941] hsr_slave_0: entered promiscuous mode [ 428.226820][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 428.227760][T16941] hsr_slave_1: entered promiscuous mode [ 428.235104][ C1] lec:lec_tx_timeout: lec0 [ 428.235211][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 428.268370][T16941] debugfs: 'hsr0' already exists in 'hsr' [ 428.274296][T16941] Cannot create hsr debugfs directory [ 428.298670][T17117] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2923'. [ 428.692269][ T5835] Bluetooth: hci2: command tx timeout [ 428.753005][T17122] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2924'. [ 429.198392][T17125] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2925'. [ 429.426350][ T44] IPVS: stop unused estimator thread 0... [ 429.894638][T17147] netlink: 'syz.4.2929': attribute type 1 has an invalid length. [ 429.911245][T17147] netlink: 'syz.4.2929': attribute type 11 has an invalid length. [ 429.933102][T17147] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2929'. [ 429.960689][T17147] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 429.967858][T17147] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 429.974752][T17147] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 429.981709][T17147] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 429.988562][T17147] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 429.995341][T17147] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 430.002252][T17147] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 430.009235][T17147] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 430.016174][T17147] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 430.023149][T17147] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 430.054780][ T1738] block nbd2: Possible stuck request ffff8880269b8000: control (read@0,1024B). Runtime 90 seconds [ 430.065589][ T1738] block nbd2: Possible stuck request ffff8880269b8200: control (read@1024,1024B). Runtime 90 seconds [ 430.076960][ T1738] block nbd2: Possible stuck request ffff8880269b8400: control (read@2048,1024B). Runtime 90 seconds [ 430.088130][ T1738] block nbd2: Possible stuck request ffff8880269b8600: control (read@3072,1024B). Runtime 90 seconds [ 430.151639][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2929'. [ 431.049659][T17170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2931'. [ 431.111228][T17173] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 431.142253][T17173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2933'. [ 431.912238][T17170] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 431.954770][T17169] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 432.399118][T17215] netlink: 'syz.4.2942': attribute type 1 has an invalid length. [ 432.418212][T17209] __nla_validate_parse: 1 callbacks suppressed [ 432.418233][T17209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2941'. [ 433.072314][T17241] team0 (unregistering): Port device team_slave_0 removed [ 433.095536][T17241] team0 (unregistering): Port device team_slave_1 removed [ 433.154337][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2949'. [ 433.194882][T17252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2949'. [ 433.212852][T16941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 433.237089][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 433.245214][ C1] lec:lec_tx_timeout: lec0 [ 433.251932][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 433.274962][T16941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 433.337384][T16941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 433.370513][T16941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 433.433672][T17263] netlink: 'syz.1.2952': attribute type 13 has an invalid length. [ 433.460037][T17272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2953'. [ 433.543244][T17282] netlink: 64563 bytes leftover after parsing attributes in process `syz.1.2952'. [ 433.831563][T17291] dvmrp1: entered allmulticast mode [ 434.014234][T16941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.024421][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2955'. [ 434.081223][T16941] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.115269][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.122560][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.164928][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.172112][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.786664][T17339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2964'. [ 434.796169][T16941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.861627][T17337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2964'. [ 434.896030][T17343] netlink: 'syz.4.2965': attribute type 2 has an invalid length. [ 434.924762][T17343] !©9: entered promiscuous mode [ 434.935381][T16941] veth0_vlan: entered promiscuous mode [ 434.987137][T16941] veth1_vlan: entered promiscuous mode [ 435.081149][T16941] veth0_macvtap: entered promiscuous mode [ 435.096112][T16941] veth1_macvtap: entered promiscuous mode [ 435.144798][T16941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.167100][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.178827][T16941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.206300][T17349] xt_hashlimit: size too large, truncated to 1048576 [ 435.213130][T16001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.213334][T16001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.233969][ T5835] block nbd1: Receive control failed (result -32) [ 435.275309][T16001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.285041][T16001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.470407][T17360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2969'. [ 435.524113][T16011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.577117][T16011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.850988][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.908027][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.444610][T17392] xt_recent: Unsupported userspace flags (000000b1) [ 436.808598][T17403] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2977'. [ 436.899079][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 436.910688][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 436.919093][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 436.928618][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 436.936837][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 437.164629][T17411] gre0 speed is unknown, defaulting to 1000 [ 437.384350][T17431] netlink: 'syz.2.2981': attribute type 61 has an invalid length. [ 437.576582][ T5832] syz_tun (unregistering): left allmulticast mode [ 437.675853][T17446] netlink: 'syz.0.2985': attribute type 2 has an invalid length. [ 437.745432][T17446] !©9: entered promiscuous mode [ 437.807829][T17446] netlink: 'syz.0.2985': attribute type 2 has an invalid length. [ 437.815720][T17446] !©9: left promiscuous mode [ 437.866977][T17456] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 437.952898][T17458] IPv6: sit1: Disabled Multicast RS [ 438.088765][T17452] __nla_validate_parse: 4 callbacks suppressed [ 438.088790][T17452] netlink: 916 bytes leftover after parsing attributes in process `syz.0.2985'. [ 438.107425][T17452] netlink: 916 bytes leftover after parsing attributes in process `syz.0.2985'. [ 438.267151][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 438.275262][ C1] lec:lec_tx_timeout: lec0 [ 438.281506][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 438.398724][T17482] net_ratelimit: 3319 callbacks suppressed [ 438.398747][T17482] openvswitch: netlink: Key type 511 is out of range max 32 [ 438.616462][T17488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2994'. [ 438.938574][T17411] chnl_net:caif_netlink_parms(): no params data found [ 439.020262][ T5835] Bluetooth: hci1: command tx timeout [ 439.260427][T17474] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2991'. [ 439.443284][T17411] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.469200][T17411] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.500593][T17411] bridge_slave_0: entered allmulticast mode [ 439.525844][T17411] bridge_slave_0: entered promiscuous mode [ 439.556431][T17411] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.579225][T17411] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.600680][T17411] bridge_slave_1: entered allmulticast mode [ 439.619749][T17411] bridge_slave_1: entered promiscuous mode [ 439.643163][T17531] tipc: Enabling of bearer rejected, failed to enable media [ 439.717899][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2999'. [ 439.876047][T17411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.915932][T17411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.045058][T17411] team0: Port device team_slave_0 added [ 440.071250][T17411] team0: Port device team_slave_1 added [ 440.178100][T17411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.213968][T17411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.267105][T17411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.280197][T17411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.289236][T17411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.319492][T17411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.395759][T17411] hsr_slave_0: entered promiscuous mode [ 440.402942][T17411] hsr_slave_1: entered promiscuous mode [ 440.410513][T17411] debugfs: 'hsr0' already exists in 'hsr' [ 440.416581][T17411] Cannot create hsr debugfs directory [ 440.946348][T17411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 440.959714][T17411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 440.974524][T17411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 440.990340][T17411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 441.088404][ T5835] Bluetooth: hci1: command tx timeout [ 441.156418][T17411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.180953][T17411] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.194482][T16011] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.201726][T16011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.225921][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.233218][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.548616][T17411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.604407][T17411] veth0_vlan: entered promiscuous mode [ 441.618483][T17411] veth1_vlan: entered promiscuous mode [ 441.669703][T17411] veth0_macvtap: entered promiscuous mode [ 441.680821][T17411] veth1_macvtap: entered promiscuous mode [ 441.713217][T17411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.738942][T17411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.761595][T14245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.781269][T14245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.801296][T14245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.873552][T14245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.908066][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.917545][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.965906][T16011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.981192][T16011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.150019][T17595] netlink: 'syz.3.2974': attribute type 4 has an invalid length. [ 443.167483][ T5835] Bluetooth: hci1: command tx timeout [ 443.306879][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 443.315043][ C1] lec:lec_tx_timeout: lec0 [ 443.320139][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 444.951325][ T5194] udevd[5194]: worker [13295] /devices/virtual/block/nbd2 is taking a long time [ 445.247281][ T5835] Bluetooth: hci1: command tx timeout [ 449.246816][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5930 ms [ 449.254903][ C1] lec:lec_tx_timeout: lec0 [ 449.260730][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 454.266877][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 454.274961][ C1] lec:lec_tx_timeout: lec0 [ 454.279795][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 455.668637][ T13] vlan2: left allmulticast mode [ 455.688093][ T13] dummy0: left allmulticast mode [ 455.693506][ T13] vlan2: left promiscuous mode [ 455.699637][ T13] dummy0: left promiscuous mode [ 455.706793][ T13] bridge0: port 3(vlan2) entered disabled state [ 455.951178][ T13] bond3 (unregistering): (slave erspan1): Releasing active interface [ 455.959506][ T13] erspan1 (unregistering): left promiscuous mode [ 455.993865][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 456.032197][ T13] bond8 (unregistering): (slave geneve3): Releasing active interface [ 456.361167][ T13] .` (unregistering): Released all slaves [ 456.372493][ T13] bond1 (unregistering): Released all slaves [ 456.385891][ T13] bond2 (unregistering): Released all slaves [ 456.401393][ T13] bond3 (unregistering): Released all slaves [ 456.415599][ T13] bond4 (unregistering): Released all slaves [ 456.431860][ T13] bond5 (unregistering): Released all slaves [ 456.447581][ T13] bond6 (unregistering): Released all slaves [ 456.476407][ T13] bond7 (unregistering): Released all slaves [ 456.492867][ T13] bond8 (unregistering): Released all slaves [ 456.505938][ T13] bond9 (unregistering): Released all slaves [ 456.522050][ T13] bond0 (unregistering): Released all slaves [ 456.710257][ T13] tipc: Disabling bearer [ 456.728545][ T13] tipc: Left network mode [ 457.224492][ T13] hsr_slave_0: left promiscuous mode [ 457.230699][ T13] hsr_slave_1: left promiscuous mode [ 457.237481][ T13] batman_adv: batadv0: Removing interface: ipvlan0 [ 457.686052][ T13] IPVS: stop unused estimator thread 0... [ 459.286898][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 459.294965][ C1] lec:lec_tx_timeout: lec0 [ 459.299623][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 460.130976][ T1738] block nbd2: Possible stuck request ffff8880269b8000: control (read@0,1024B). Runtime 120 seconds [ 460.141946][ T1738] block nbd2: Possible stuck request ffff8880269b8200: control (read@1024,1024B). Runtime 120 seconds [ 460.153020][ T1738] block nbd2: Possible stuck request ffff8880269b8400: control (read@2048,1024B). Runtime 120 seconds [ 460.164113][ T1738] block nbd2: Possible stuck request ffff8880269b8600: control (read@3072,1024B). Runtime 120 seconds [ 462.032311][T17658] netlink: 'syz.2.3011': attribute type 1 has an invalid length. [ 462.052287][T17658] netlink: 'syz.2.3011': attribute type 2 has an invalid length. [ 462.252636][T17669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.336262][T17670] gre0 speed is unknown, defaulting to 1000 [ 462.412268][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3016'. [ 462.421312][T17676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3016'. [ 462.453538][T17676] ip6tnl1: entered promiscuous mode [ 462.487408][T17676] ip6tnl1: entered allmulticast mode [ 462.572327][T17680] netlink: 'syz.3.3017': attribute type 21 has an invalid length. [ 462.775328][T17688] netlink: 'syz.4.3019': attribute type 2 has an invalid length. [ 462.784062][T17688] netlink: 'syz.4.3019': attribute type 298 has an invalid length. [ 463.094025][T17685] gre0 speed is unknown, defaulting to 1000 [ 464.307103][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 464.315249][ C1] lec:lec_tx_timeout: lec0 [ 464.319924][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 464.616447][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.630284][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 464.642420][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 464.652212][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 464.661455][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 464.887459][T17738] gre0 speed is unknown, defaulting to 1000 [ 465.519439][T17746] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3028'. [ 466.244988][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3031'. [ 466.665560][T17786] netlink: 'syz.1.3035': attribute type 1 has an invalid length. [ 466.766430][T17786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.774109][ T5835] Bluetooth: hci3: command tx timeout [ 466.920275][T17786] vlan2: entered allmulticast mode [ 466.925482][T17786] bond1: entered allmulticast mode [ 467.146994][T17792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.274646][T17738] chnl_net:caif_netlink_parms(): no params data found [ 467.495363][T17820] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 467.527297][T17821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3040'. [ 467.545657][T17821] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3040'. [ 467.561344][T17820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3040'. [ 467.576660][T17825] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 467.669563][T17820] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3040'. [ 467.735824][T17831] syzkaller0: entered promiscuous mode [ 467.743645][T17831] syzkaller0: entered allmulticast mode [ 467.749534][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c53800: rx timeout, send abort [ 467.798951][T17738] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.810981][T17738] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.820524][T17738] bridge_slave_0: entered allmulticast mode [ 467.830910][T17738] bridge_slave_0: entered promiscuous mode [ 467.842177][T17738] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.850597][T17738] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.868497][T17738] bridge_slave_1: entered allmulticast mode [ 467.881000][T17738] bridge_slave_1: entered promiscuous mode [ 467.966962][T17738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.979069][T17840] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 467.999996][T17738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.037848][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3044'. [ 468.094656][T17843] bond0: option lp_interval: invalid value (0) [ 468.112809][T17843] bond0: option lp_interval: allowed values 1 - 2147483647 [ 468.133118][T17738] team0: Port device team_slave_0 added [ 468.152607][T17738] team0: Port device team_slave_1 added [ 468.159866][T17846] team0: No ports can be present during mode change [ 468.231169][T17738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.245194][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c52400: rx timeout, send abort [ 468.248734][T17738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.254045][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c53800: abort rx timeout. Force session deactivation [ 468.308258][T17738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.346197][T17738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.364852][T17738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.407956][T17738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.575375][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'. [ 468.600416][T17738] hsr_slave_0: entered promiscuous mode [ 468.621568][T17738] hsr_slave_1: entered promiscuous mode [ 468.636053][T17738] debugfs: 'hsr0' already exists in 'hsr' [ 468.657570][T17738] Cannot create hsr debugfs directory [ 468.753484][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c52400: abort rx timeout. Force session deactivation [ 468.857999][ T5835] Bluetooth: hci3: command tx timeout [ 468.934561][T17880] gre0 speed is unknown, defaulting to 1000 [ 468.951045][T17886] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3055'. [ 469.613250][T17909] netlink: 'syz.1.3059': attribute type 1 has an invalid length. [ 469.621540][T17909] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3059'. [ 469.644946][T17911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3060'. [ 469.979495][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3063'. [ 470.092391][T17931] netlink: 'syz.1.3065': attribute type 21 has an invalid length. [ 470.366782][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6050 ms [ 470.374853][ C1] lec:lec_tx_timeout: lec0 [ 470.381311][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 470.930662][ T5835] Bluetooth: hci3: command tx timeout [ 471.241301][T17738] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 471.269689][T17738] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 471.311418][T17738] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 471.327880][T17975] netlink: 'syz.2.3071': attribute type 13 has an invalid length. [ 471.348934][T17738] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 471.533795][T17977] ip6erspan0: entered allmulticast mode [ 471.589163][ T5835] Bluetooth: hci2: link tx timeout [ 471.595110][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 471.634420][T17985] bridge_slave_1: Caught tx_queue_len zero misconfig [ 471.685817][T17995] netlink: 'syz.0.3074': attribute type 4 has an invalid length. [ 471.845512][T17738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.889995][T17999] tipc: Started in network mode [ 471.902789][T17999] tipc: Node identity aaade41ea492, cluster identity 4711 [ 471.920841][T17999] tipc: Enabled bearer , priority 0 [ 471.950753][T17738] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.988962][T17998] tipc: Disabling bearer [ 472.045420][T16011] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.052755][T16011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.083121][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.090480][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.730000][T17738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.019558][T18053] netlink: 'syz.1.3083': attribute type 7 has an invalid length. [ 473.023780][ T5826] Bluetooth: hci3: command tx timeout [ 473.185207][T18053] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 473.446041][T18072] 8021q: VLANs not supported on ip_vti0 [ 473.653839][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 473.716561][T17738] veth0_vlan: entered promiscuous mode [ 473.735476][T17738] veth1_vlan: entered promiscuous mode [ 473.801533][T17738] veth0_macvtap: entered promiscuous mode [ 473.808958][T18082] __nla_validate_parse: 3 callbacks suppressed [ 473.808977][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3086'. [ 473.812767][T17738] veth1_macvtap: entered promiscuous mode [ 473.896594][T18086] netlink: 'syz.1.3089': attribute type 1 has an invalid length. [ 473.921471][T17738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.003579][T17738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.080086][T18096] bond2: (slave bridge1): making interface the new active one [ 474.092017][T18096] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 474.193717][T15999] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.236106][T15999] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.256983][T10267] IPVS: starting estimator thread 0... [ 474.264258][T15999] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.319334][T15999] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.357080][T18109] IPVS: using max 26 ests per chain, 62400 per kthread [ 474.655921][T18122] netlink: 'syz.2.3095': attribute type 5 has an invalid length. [ 474.664549][T14247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.681509][T14247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.718591][T18122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3095'. [ 474.742600][T18130] netlink: 'syz.0.3098': attribute type 1 has an invalid length. [ 474.859105][T18122] team0: Port device team_slave_0 removed [ 474.894873][T18130] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 474.933375][T16013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.954416][T16013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.029322][T18143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3100'. [ 475.384583][T18156] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 475.427588][T18166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3105'. [ 475.458596][T18163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3104'. [ 475.588819][T18164] gre0 speed is unknown, defaulting to 1000 [ 475.634445][T18175] netlink: 'syz.4.3106': attribute type 21 has an invalid length. [ 475.697154][T18175] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3106'. [ 475.929760][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'. [ 475.980886][T18181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3108'. [ 476.126930][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 476.135182][ C1] lec:lec_tx_timeout: lec0 [ 476.140502][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 476.150630][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'. [ 476.208957][T18187] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3109'. [ 476.272753][T18181] team0: Port device team_slave_0 removed [ 476.318608][T18175] netlink: 'syz.4.3106': attribute type 1 has an invalid length. [ 476.379847][T18175] nbd: couldn't find device at index -427251215 [ 476.545663][T18199] syzkaller1: entered promiscuous mode [ 476.551839][T18199] syzkaller1: entered allmulticast mode [ 476.683952][T18202] IPv6: sit1: Disabled Multicast RS [ 476.785562][T18214] sch_fq: defrate 53322 ignored. [ 477.296510][T18219] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.555929][T18219] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.725315][T18219] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.844585][T18220] delete_channel: no stack [ 477.952009][T18219] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.329960][T18269] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.384623][T18284] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 478.398409][T18284] team0 (unregistering): Port device team_slave_1 removed [ 478.475970][T18282] gre0 speed is unknown, defaulting to 1000 [ 478.779063][T14243] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.916894][T18270] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.988450][T18270] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.066067][T18356] __nla_validate_parse: 12 callbacks suppressed [ 480.066090][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3143'. [ 480.793865][T18385] gre0 speed is unknown, defaulting to 1000 [ 480.981960][T18393] vlan0: entered promiscuous mode [ 481.001758][T18397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3152'. [ 481.039972][T18398] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3151'. [ 481.050843][T18393] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3150'. [ 481.077642][T18393] team_slave_1: entered promiscuous mode [ 481.096545][T18400] syz_tun: entered allmulticast mode [ 481.119067][T18394] syz_tun: left allmulticast mode [ 481.146804][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 481.154992][ C1] lec:lec_tx_timeout: lec0 [ 481.160284][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 481.343015][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'. [ 482.489096][T18452] openvswitch: netlink: Message has 592 unknown bytes. [ 482.496049][T18452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.669790][T18460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3164'. [ 482.682770][T18464] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 482.870788][T18471] gre0 speed is unknown, defaulting to 1000 [ 482.901297][T18479] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 483.142415][T18487] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3172'. [ 483.584475][T18495] gre0 speed is unknown, defaulting to 1000 [ 483.597142][T18497] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3175'. [ 483.644356][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'. [ 483.741096][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3177'. [ 484.306567][T18526] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 484.760136][T18542] gre0 speed is unknown, defaulting to 1000 [ 484.835646][T18545] geneve2: entered promiscuous mode [ 484.843321][T18545] geneve2: entered allmulticast mode [ 485.073456][T18548] __nla_validate_parse: 1 callbacks suppressed [ 485.073479][T18548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3192'. [ 485.215441][T18555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3194'. [ 485.242152][T18553] netlink: 'syz.3.3193': attribute type 1 has an invalid length. [ 485.255197][T18553] netlink: 'syz.3.3193': attribute type 5 has an invalid length. [ 485.271555][T18553] netlink: 'syz.3.3193': attribute type 4 has an invalid length. [ 485.329751][T18567] netlink: 'syz.0.3196': attribute type 1 has an invalid length. [ 485.488440][T18567] bond8: entered promiscuous mode [ 485.493985][T18567] 8021q: adding VLAN 0 to HW filter on device bond8 [ 485.635038][T18582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3199'. [ 485.664648][T18585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'. [ 485.690884][T18590] netlink: 'syz.4.3199': attribute type 10 has an invalid length. [ 485.735112][T18590] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.748099][T18590] bond0: (slave team0): Enslaving as an active interface with an up link [ 485.828459][T18596] gre0 speed is unknown, defaulting to 1000 [ 485.956299][T18601] netlink: 'syz.0.3203': attribute type 3 has an invalid length. [ 485.982084][T18601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3203'. [ 486.000810][T18606] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3205'. [ 486.041804][T18606] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 486.069044][T18607] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 486.166773][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 486.174886][ C1] lec:lec_tx_timeout: lec0 [ 486.179736][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 486.262764][T18618] netlink: 'syz.3.3207': attribute type 3 has an invalid length. [ 486.361869][T18618] nbd: couldn't find device at index 0 [ 486.418696][T18618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 486.500715][T18631] netlink: 268 bytes leftover after parsing attributes in process `syz.0.3209'. [ 486.531029][T18631] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 486.681851][T18638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.191555][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3216'. [ 487.627219][T18669] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 488.004540][T18690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3227'. [ 488.087855][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3231'. [ 488.183468][T18697] syzkaller0: entered promiscuous mode [ 488.191727][T18697] syzkaller0: entered allmulticast mode [ 488.456840][T18707] gre0 speed is unknown, defaulting to 1000 [ 488.825166][T18732] netlink: 'syz.1.3240': attribute type 1 has an invalid length. [ 489.398654][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 489.424976][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 489.434866][T18744] gre0 speed is unknown, defaulting to 1000 [ 489.447306][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.474116][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.487635][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.758068][T18763] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.765936][T18763] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.926988][T18741] gre0 speed is unknown, defaulting to 1000 [ 490.208615][ T1738] block nbd2: Possible stuck request ffff8880269b8000: control (read@0,1024B). Runtime 150 seconds [ 490.219612][ T1738] block nbd2: Possible stuck request ffff8880269b8200: control (read@1024,1024B). Runtime 150 seconds [ 490.239034][ T1738] block nbd2: Possible stuck request ffff8880269b8400: control (read@2048,1024B). Runtime 150 seconds [ 490.251003][ T1738] block nbd2: Possible stuck request ffff8880269b8600: control (read@3072,1024B). Runtime 150 seconds [ 490.595591][T18757] gre0 speed is unknown, defaulting to 1000 [ 490.961081][T18789] gre0 speed is unknown, defaulting to 1000 [ 491.160483][T18804] 8021q: VLANs not supported on vxcan0 [ 491.186768][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 491.194864][ C1] lec:lec_tx_timeout: lec0 [ 491.199975][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 491.322370][T18807] __nla_validate_parse: 18 callbacks suppressed [ 491.322394][T18807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3261'. [ 491.567382][ T5835] Bluetooth: hci4: command tx timeout [ 491.838875][T16000] dvmrp1: left allmulticast mode [ 491.880646][T18815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3264'. [ 491.903061][T16000] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 491.918679][T16000] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 492.066961][T18269] smc: removing ib device syz1 [ 492.419417][T16000] bond0 (unregistering): (slave bridge3): Releasing backup interface [ 492.427761][T16000] bridge3 (unregistering): left promiscuous mode [ 492.548736][T16000] bond1 (unregistering): Released all slaves [ 492.574256][T16000] bond2 (unregistering): Released all slaves [ 492.656357][T16000] bond3 (unregistering): Released all slaves [ 492.703678][T16000] bond4 (unregistering): Released all slaves [ 492.756235][T16000] bond0 (unregistering): Released all slaves [ 492.792947][T16000] bond6 (unregistering): Released all slaves [ 492.851274][T16000] bond5 (unregistering): Released all slaves [ 492.887280][T16000] bond7 (unregistering): Released all slaves [ 492.911596][T16000] bond8 (unregistering): Released all slaves [ 493.464257][T18757] chnl_net:caif_netlink_parms(): no params data found [ 493.604489][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3266'. [ 493.647712][ T5835] Bluetooth: hci4: command tx timeout [ 493.672846][T18831] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.3267'. [ 493.686201][T18830] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3268'. [ 493.725519][T18827] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3267'. [ 493.838715][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3267'. [ 493.935223][T18831] batadv_slave_1: entered promiscuous mode [ 493.964303][T18825] batadv_slave_1: left promiscuous mode [ 494.215769][T18852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3272'. [ 494.351985][T18757] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.379727][T18757] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.397106][T18757] bridge_slave_0: entered allmulticast mode [ 494.445343][T18757] bridge_slave_0: entered promiscuous mode [ 494.455958][T18757] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.490925][T18757] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.500137][T18757] bridge_slave_1: entered allmulticast mode [ 494.509297][T18871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3276'. [ 494.521161][T18757] bridge_slave_1: entered promiscuous mode [ 494.825160][T18757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.899899][T18757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.312867][T18757] team0: Port device team_slave_0 added [ 495.354881][T18757] team0: Port device team_slave_1 added [ 495.410196][T18898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3281'. [ 495.427845][T16000] hmac(sha224): left promiscuous mode [ 495.486588][T18757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.493953][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.537026][T18757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.555774][T18757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.570156][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.622372][T18757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.637519][T16000] tipc: Disabling bearer [ 495.643214][T16000] tipc: Left network mode [ 495.707177][T18905] syzkaller1: entered promiscuous mode [ 495.714426][T18905] syzkaller1: entered allmulticast mode [ 495.727610][ T5835] Bluetooth: hci4: command tx timeout [ 496.056049][T18757] hsr_slave_0: entered promiscuous mode [ 496.081183][T18757] hsr_slave_1: entered promiscuous mode [ 496.103494][T18757] debugfs: 'hsr0' already exists in 'hsr' [ 496.118602][T18757] Cannot create hsr debugfs directory [ 496.140002][T18923] team0: entered promiscuous mode [ 496.154420][T18923] team_slave_0: entered promiscuous mode [ 496.172092][T18923] team_slave_1: entered promiscuous mode [ 496.187647][T18923] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 496.206867][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 496.215122][ C1] lec:lec_tx_timeout: lec0 [ 496.219945][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 496.265119][T18921] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.323991][T18927] bond3: option mode: unable to set because the bond device is up [ 496.430431][T18940] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 496.530626][T18931] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.538510][T18931] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.553501][T18949] __nla_validate_parse: 2 callbacks suppressed [ 496.553523][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 496.607362][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 496.688887][T18956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.764220][T18931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.784016][T18931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.916184][T18949] ip6erspan0: entered allmulticast mode [ 496.961656][ T86] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.982502][ T86] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.056015][ T86] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.083125][ T86] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.807730][ T5835] Bluetooth: hci4: command tx timeout [ 498.453847][T16000] hsr_slave_0: left promiscuous mode [ 498.486342][T16000] hsr_slave_1: left promiscuous mode [ 498.612721][T16000] pim6reg (unregistering): left allmulticast mode [ 499.124985][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3308'. [ 499.134088][T19043] nbd: must specify a size in bytes for the device [ 499.141388][T19043] nbd: couldn't find device at index 0 [ 499.159767][T19046] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 499.643076][T19025] netlink: 'syz.2.3308': attribute type 3 has an invalid length. [ 499.664460][T19027] pim6reg: entered allmulticast mode [ 499.676027][T19029] pim6reg: left allmulticast mode [ 499.995001][T19057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3315'. [ 500.285324][T18757] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 500.293201][T19070] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3318'. [ 500.330355][T18757] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 500.353704][T18757] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 500.394166][T18757] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 500.505634][T16000] IPVS: stop unused estimator thread 0... [ 500.789905][T18757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.839604][T19094] netlink: 'syz.3.3321': attribute type 1 has an invalid length. [ 500.874877][T18757] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.899506][T19093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3322'. [ 500.917182][T19093] openvswitch: netlink: Flow actions attr not present in new flow. [ 500.955899][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.963159][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.995360][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.002814][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.062729][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3325'. [ 501.181451][T19102] bond2: option all_slaves_active: invalid value (5) [ 501.226836][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 501.234936][ C1] lec:lec_tx_timeout: lec0 [ 501.239609][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 501.251749][T19102] bond2 (unregistering): Released all slaves [ 501.302890][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3327'. [ 501.371747][T19106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.420768][T19125] vlan3: entered promiscuous mode [ 501.425970][T19125] bridge0: entered promiscuous mode [ 501.948711][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3331'. [ 502.040175][T19149] FAULT_INJECTION: forcing a failure. [ 502.040175][T19149] name failslab, interval 1, probability 0, space 0, times 0 [ 502.066928][T19149] CPU: 1 UID: 0 PID: 19149 Comm: syz.1.3331 Not tainted syzkaller #0 PREEMPT(full) [ 502.066965][T19149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 502.067002][T19149] Call Trace: [ 502.067011][T19149] [ 502.067020][T19149] dump_stack_lvl+0xe8/0x150 [ 502.067055][T19149] should_fail_ex+0x412/0x560 [ 502.067091][T19149] should_failslab+0xa8/0x100 [ 502.067132][T19149] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 502.067157][T19149] ? __alloc_skb+0x1d0/0x7d0 [ 502.067180][T19149] ? __local_bh_enable_ip+0xd0/0x130 [ 502.067210][T19149] __alloc_skb+0x1d0/0x7d0 [ 502.067234][T19149] ? netlink_ack_tlv_len+0x6c/0x210 [ 502.067258][T19149] netlink_ack+0x146/0xa50 [ 502.067277][T19149] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.067309][T19149] ? __lock_acquire+0x6b5/0x2cf0 [ 502.067348][T19149] netlink_rcv_skb+0x2b6/0x4b0 [ 502.067371][T19149] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.067400][T19149] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.067443][T19149] ? down_read+0x272/0x2e0 [ 502.067461][T19149] ? genl_rcv+0xd/0x40 [ 502.067488][T19149] genl_rcv+0x28/0x40 [ 502.067522][T19149] netlink_unicast+0x80f/0x9b0 [ 502.067564][T19149] ? __pfx_netlink_unicast+0x10/0x10 [ 502.067597][T19149] ? netlink_sendmsg+0x650/0xb40 [ 502.067618][T19149] ? skb_put+0x11b/0x210 [ 502.067645][T19149] netlink_sendmsg+0x813/0xb40 [ 502.067679][T19149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.067706][T19149] ? aa_sock_msg_perm+0xf1/0x1b0 [ 502.067737][T19149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 502.067760][T19149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.067784][T19149] __sys_sendto+0x672/0x710 [ 502.067811][T19149] ? __pfx___sys_sendto+0x10/0x10 [ 502.067831][T19149] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 502.067877][T19149] ? __fget_files+0x3a0/0x420 [ 502.067917][T19149] ? ksys_write+0x242/0x270 [ 502.067942][T19149] ? __pfx_ksys_write+0x10/0x10 [ 502.067971][T19149] __x64_sys_sendto+0xde/0x100 [ 502.067996][T19149] do_syscall_64+0x14d/0xf80 [ 502.068022][T19149] ? trace_irq_disable+0x3b/0x150 [ 502.068040][T19149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.068061][T19149] ? clear_bhb_loop+0x40/0x90 [ 502.068086][T19149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.068106][T19149] RIP: 0033:0x7f23c9f5d04e [ 502.068127][T19149] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 502.068145][T19149] RSP: 002b:00007f23cadcfe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 502.068169][T19149] RAX: ffffffffffffffda RBX: 00007f23cadd16c0 RCX: 00007f23c9f5d04e [ 502.068184][T19149] RDX: 0000000000000028 RSI: 00007f23cadd0000 RDI: 0000000000000004 [ 502.068196][T19149] RBP: 0000000000000000 R08: 00007f23cadcff04 R09: 000000000000000c [ 502.068209][T19149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 502.068221][T19149] R13: 00007f23cadcff58 R14: 00007f23cadd0000 R15: 0000000000000000 [ 502.068253][T19149] [ 502.661673][T19160] FAULT_INJECTION: forcing a failure. [ 502.661673][T19160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.712589][T18757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.769748][T19160] CPU: 0 UID: 0 PID: 19160 Comm: syz.2.3333 Not tainted syzkaller #0 PREEMPT(full) [ 502.769780][T19160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 502.769793][T19160] Call Trace: [ 502.769801][T19160] [ 502.769811][T19160] dump_stack_lvl+0xe8/0x150 [ 502.769846][T19160] should_fail_ex+0x412/0x560 [ 502.769881][T19160] _copy_from_user+0x2d/0xb0 [ 502.769906][T19160] __sys_bind+0x1c6/0x410 [ 502.769932][T19160] ? __pfx___sys_bind+0x10/0x10 [ 502.769967][T19160] ? __pfx_ksys_write+0x10/0x10 [ 502.770000][T19160] __x64_sys_bind+0x7a/0x90 [ 502.770023][T19160] do_syscall_64+0x14d/0xf80 [ 502.770052][T19160] ? trace_irq_disable+0x3b/0x150 [ 502.770070][T19160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.770091][T19160] ? clear_bhb_loop+0x40/0x90 [ 502.770116][T19160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.770136][T19160] RIP: 0033:0x7fb90e79c819 [ 502.770156][T19160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.770174][T19160] RSP: 002b:00007fb90f5c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 502.770196][T19160] RAX: ffffffffffffffda RBX: 00007fb90ea15fa0 RCX: 00007fb90e79c819 [ 502.770212][T19160] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 502.770225][T19160] RBP: 00007fb90f5c0090 R08: 0000000000000000 R09: 0000000000000000 [ 502.770236][T19160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.770248][T19160] R13: 00007fb90ea16038 R14: 00007fb90ea15fa0 R15: 00007ffda6bc3a68 [ 502.770280][T19160] [ 503.060402][T19174] netlink: 'syz.1.3334': attribute type 32 has an invalid length. [ 503.086242][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3334'. [ 503.250212][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3334'. [ 503.682243][T18757] veth0_vlan: entered promiscuous mode [ 503.857474][T18757] veth1_vlan: entered promiscuous mode [ 503.881608][T19212] netlink: 'syz.2.3342': attribute type 13 has an invalid length. [ 503.905925][T19212] netlink: 'syz.2.3342': attribute type 17 has an invalid length. [ 504.336032][T19209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.349948][T19209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.911422][T19212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.922392][T19212] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.941515][T19212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 504.991902][ T73] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.011010][ T73] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.103901][ T73] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.129070][ T73] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.324216][T18757] veth0_macvtap: entered promiscuous mode [ 505.335629][T18757] veth1_macvtap: entered promiscuous mode [ 505.485250][T18757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.515959][T18757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.642186][ T151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.659781][ T151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.706192][ T151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.781820][ T151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.813220][T19273] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3352'. [ 505.823487][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3350'. [ 506.216665][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.224830][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.246847][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 506.254915][ C1] lec:lec_tx_timeout: lec0 [ 506.259599][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 506.372523][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.393522][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.073420][T19314] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3359'. [ 507.165185][T19314] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 507.944385][T19334] lo: Caught tx_queue_len zero misconfig [ 507.989295][T19334] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3364'. [ 508.052076][T19339] netlink: 'syz.4.3367': attribute type 1 has an invalid length. [ 508.129504][T19334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3364'. [ 508.174054][T19347] gretap1: entered allmulticast mode [ 508.193188][T19347] bond1: (slave gretap1): making interface the new active one [ 508.242252][T19347] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 508.955216][T19363] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 509.029060][T19363] bond1 (unregistering): Released all slaves [ 509.122946][T19369] bridge_slave_1: left allmulticast mode [ 509.129007][T19369] bridge_slave_1: left promiscuous mode [ 509.139082][T19369] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.272642][T19369] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 509.452419][T19375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3377'. [ 509.725441][T19383] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 509.768057][T19383] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 509.783919][T19381] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) ! [ 510.237413][T19405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3385'. [ 510.549325][T19414] bond4: Removing last ns target with arp_interval on [ 510.944563][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3391'. [ 511.021564][T19218] Set syz1 is full, maxelem 65536 reached [ 511.266814][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 511.275027][ C1] lec:lec_tx_timeout: lec0 [ 511.279746][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 511.659394][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 511.669423][T19467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3399'. [ 511.742752][T19467] bond2: entered promiscuous mode [ 511.750423][T19467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 511.807509][T19470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 511.814572][T19470] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 511.831081][T19470] bond2: (slave vti0): Error -95 calling set_mac_address [ 511.903275][T19481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3406'. [ 511.981635][T19484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3407'. [ 512.011321][T19484] vlan4: entered promiscuous mode [ 512.020250][T19484] erspan0: entered promiscuous mode [ 512.343496][T19500] pimreg9: entered allmulticast mode [ 512.552414][T19516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.832821][T19534] __nla_validate_parse: 1 callbacks suppressed [ 512.832845][T19534] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.3423'. [ 512.853302][T19535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.882903][T19537] netlink: 'syz.2.3424': attribute type 10 has an invalid length. [ 512.902233][T19534] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.3423'. [ 512.936197][T19537] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 512.970086][T19544] batadv_slave_1: entered promiscuous mode [ 513.046284][T19542] batadv_slave_1: left promiscuous mode [ 513.122992][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3427'. [ 513.247031][T19559] netlink: 'syz.3.3430': attribute type 1 has an invalid length. [ 513.264498][T19559] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3430'. [ 513.362988][T19566] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 513.518438][T19573] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3434'. [ 513.547919][T19576] macvtap0: entered promiscuous mode [ 513.631090][T19581] netlink: 'syz.4.3437': attribute type 4 has an invalid length. [ 513.903885][T19591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'. [ 513.930960][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'. [ 513.959445][T19591] bridge_slave_1: left allmulticast mode [ 513.965181][T19591] bridge_slave_1: left promiscuous mode [ 513.979048][T19591] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.995660][T19591] bridge_slave_0: left allmulticast mode [ 514.016896][T19591] bridge_slave_0: left promiscuous mode [ 514.023353][T19591] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.035191][T19586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.052226][T19597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3440'. [ 515.394892][T19631] netlink: 'syz.4.3449': attribute type 2 has an invalid length. [ 515.507542][T19632] netlink: 'syz.1.3450': attribute type 1 has an invalid length. [ 515.526990][T19632] netlink: 'syz.1.3450': attribute type 2 has an invalid length. [ 515.632735][T19642] syzkaller0: entered promiscuous mode [ 515.642953][T19642] syzkaller0: entered allmulticast mode [ 515.655428][T19646] netlink: 'syz.1.3456': attribute type 10 has an invalid length. [ 515.675691][T19642] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 515.694578][T19646] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.702559][T19646] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.871512][T19656] netlink: 'syz.2.3458': attribute type 21 has an invalid length. [ 515.896582][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3458'. [ 516.002658][T19646] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.010311][T19646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.018095][T19646] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.025350][T19646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.062812][T19646] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 516.074938][T19642] tipc: Enabled bearer , priority 0 [ 516.082848][T19656] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 516.097864][T19661] netlink: 'syz.1.3456': attribute type 1 has an invalid length. [ 516.106580][T19661] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3456'. [ 516.191893][T19658] veth1_macvtap: renamed from veth0_vlan [ 516.212821][T19641] tipc: Resetting bearer [ 516.240967][T19641] tipc: Disabling bearer [ 516.286926][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 516.295098][ C1] lec:lec_tx_timeout: lec0 [ 516.300483][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 516.431555][T19670] syzkaller0: entered promiscuous mode [ 516.462383][T19670] syzkaller0: entered allmulticast mode [ 517.110469][T19721] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 517.463974][T19721] bond1: entered promiscuous mode [ 517.503697][T19721] bond1: entered allmulticast mode [ 517.530156][T19721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.907873][T19750] __nla_validate_parse: 5 callbacks suppressed [ 517.907894][T19750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3472'. [ 517.957027][T19743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3472'. [ 517.976860][T19743] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3472'. [ 518.009490][T19750] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3472'. [ 518.069640][ T5489] veth1_macvtap: left promiscuous mode [ 518.135490][ T5489] veth1_macvtap: entered promiscuous mode [ 518.201116][T19758] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3476'. [ 518.220030][T19756] nbd3: detected capacity change from 0 to 63 [ 518.349358][T19758] netlink: 'syz.0.3476': attribute type 10 has an invalid length. [ 518.389802][T19758] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.407936][T19758] bond0: (slave team0): Enslaving as an active interface with an up link [ 518.616211][T19778] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 518.667355][T19784] sctp: [Deprecated]: syz.1.3480 (pid 19784) Use of int in maxseg socket option. [ 518.667355][T19784] Use struct sctp_assoc_value instead [ 518.704856][T19781] sctp: [Deprecated]: syz.1.3480 (pid 19781) Use of int in maxseg socket option. [ 518.704856][T19781] Use struct sctp_assoc_value instead [ 518.791618][T16095] IPVS: starting estimator thread 0... [ 518.886979][T19796] IPVS: using max 29 ests per chain, 69600 per kthread [ 519.092253][T19802] pim6reg: entered allmulticast mode [ 519.111121][T19802] pim6reg: left allmulticast mode [ 520.287462][ T1738] block nbd2: Possible stuck request ffff8880269b8000: control (read@0,1024B). Runtime 180 seconds [ 520.298420][ T1738] block nbd2: Possible stuck request ffff8880269b8200: control (read@1024,1024B). Runtime 180 seconds [ 520.309735][ T1738] block nbd2: Possible stuck request ffff8880269b8400: control (read@2048,1024B). Runtime 180 seconds [ 520.320806][ T1738] block nbd2: Possible stuck request ffff8880269b8600: control (read@3072,1024B). Runtime 180 seconds [ 521.124511][T19756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.172445][ T5835] block nbd3: Receive control failed (result -104) [ 521.307093][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 521.315223][ C1] lec:lec_tx_timeout: lec0 [ 521.320403][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 521.389495][T19853] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 521.650768][T19869] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3496'. [ 521.672264][T19863] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3492'. [ 521.764899][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3496'. [ 521.828034][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'. [ 521.860002][T19876] netlink: 'syz.1.3497': attribute type 3 has an invalid length. [ 521.909187][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'. [ 522.698321][T19899] syzkaller0: entered promiscuous mode [ 522.710152][T19899] syzkaller0: entered allmulticast mode [ 523.129403][T19930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.254336][T19933] __nla_validate_parse: 3 callbacks suppressed [ 523.254361][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3511'. [ 524.182894][ T5194] udevd[5194]: worker [13295] /devices/virtual/block/nbd2 timeout; kill it [ 524.197692][ T5194] udevd[5194]: seq 24231 '/devices/virtual/block/nbd2' killed [ 525.325030][T19942] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 526.510213][T19981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3522'. [ 526.714602][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3526'. [ 526.745792][T19993] bond0: Unable to set down delay as MII monitoring is disabled [ 527.296978][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3535'. [ 527.326757][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6010 ms [ 527.335013][ C1] lec:lec_tx_timeout: lec0 [ 527.340653][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 527.365199][T20023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3535'. [ 527.391219][T20023] No such timeout policy "syz1" [ 527.486543][T20029] openvswitch: netlink: Key type 29 is not supported [ 527.593966][T20035] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3540'. [ 527.702051][T20045] netlink: 'syz.1.3542': attribute type 28 has an invalid length. [ 527.721691][T20045] netlink: 'syz.1.3542': attribute type 3 has an invalid length. [ 527.771902][T20045] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3542'. [ 527.984686][T20057] tipc: Started in network mode [ 527.990631][T20057] tipc: Node identity 080211, cluster identity 4711 [ 528.004219][T20057] tipc: Enabled bearer , priority 0 [ 528.161032][T20064] tunl0: Caught tx_queue_len zero misconfig [ 528.262372][T20067] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3550'. [ 528.392943][T20076] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 528.471563][T20080] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 528.489898][T20083] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 528.494445][T20081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3552'. [ 529.128006][ T9] tipc: Node number set to 134353152 [ 529.211960][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3561'. [ 529.250260][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3561'. [ 529.511073][T20130] gre0: entered promiscuous mode [ 529.525236][T20130] gre0: entered allmulticast mode [ 529.833198][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3569'. [ 529.894486][T20149] netlink: 'syz.2.3571': attribute type 1 has an invalid length. [ 529.898801][T20150] netlink: 'syz.4.3569': attribute type 1 has an invalid length. [ 529.974411][T20146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.990309][T20146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.017915][T20156] syz.3.3572: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 530.062116][T20156] CPU: 0 UID: 0 PID: 20156 Comm: syz.3.3572 Not tainted syzkaller #0 PREEMPT(full) [ 530.062150][T20156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 530.062163][T20156] Call Trace: [ 530.062172][T20156] [ 530.062181][T20156] dump_stack_lvl+0xe8/0x150 [ 530.062218][T20156] warn_alloc+0x249/0x340 [ 530.062246][T20156] ? stack_trace_save+0xa9/0x100 [ 530.062274][T20156] ? __pfx_warn_alloc+0x10/0x10 [ 530.062308][T20156] ? kasan_save_track+0x4f/0x80 [ 530.062330][T20156] ? kasan_save_track+0x3e/0x80 [ 530.062351][T20156] ? __kasan_kmalloc+0x93/0xb0 [ 530.062375][T20156] ? __kmalloc_cache_noprof+0x31c/0x660 [ 530.062397][T20156] ? xskq_create+0x56/0x170 [ 530.062422][T20156] ? xsk_setsockopt+0x54c/0x990 [ 530.062445][T20156] ? do_sock_setsockopt+0x17c/0x1b0 [ 530.062472][T20156] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 530.062496][T20156] ? do_syscall_64+0x14d/0xf80 [ 530.062531][T20156] __vmalloc_node_range_noprof+0x132/0x1730 [ 530.062592][T20156] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 530.062624][T20156] ? __kasan_kmalloc+0x93/0xb0 [ 530.062654][T20156] vmalloc_user_noprof+0xad/0xe0 [ 530.062678][T20156] ? xskq_create+0xbf/0x170 [ 530.062706][T20156] xskq_create+0xbf/0x170 [ 530.062736][T20156] xsk_init_queue+0x8a/0xe0 [ 530.062767][T20156] xsk_setsockopt+0x54c/0x990 [ 530.062807][T20156] ? __pfx_xsk_setsockopt+0x10/0x10 [ 530.062831][T20156] ? __pfx_aa_sk_perm+0x10/0x10 [ 530.062863][T20156] ? aa_sock_opt_perm+0xff/0x1a0 [ 530.062896][T20156] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 530.062919][T20156] ? __pfx_xsk_setsockopt+0x10/0x10 [ 530.062956][T20156] do_sock_setsockopt+0x17c/0x1b0 [ 530.062990][T20156] __x64_sys_setsockopt+0x13d/0x1b0 [ 530.063024][T20156] do_syscall_64+0x14d/0xf80 [ 530.063053][T20156] ? trace_irq_disable+0x3b/0x150 [ 530.063072][T20156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.063093][T20156] ? clear_bhb_loop+0x40/0x90 [ 530.063121][T20156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.063141][T20156] RIP: 0033:0x7fd616b9c819 [ 530.063163][T20156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.063180][T20156] RSP: 002b:00007fd61797a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 530.063204][T20156] RAX: ffffffffffffffda RBX: 00007fd616e16180 RCX: 00007fd616b9c819 [ 530.063220][T20156] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 530.063233][T20156] RBP: 00007fd616c32c91 R08: 0000000000000004 R09: 0000000000000000 [ 530.063247][T20156] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.063260][T20156] R13: 00007fd616e16218 R14: 00007fd616e16180 R15: 00007ffe6b0d30e8 [ 530.063297][T20156] [ 530.063332][T20156] Mem-Info: [ 530.102453][T20158] netlink: 'syz.4.3569': attribute type 1 has an invalid length. [ 530.107260][T20159] netlink: 'syz.2.3571': attribute type 10 has an invalid length. [ 530.135654][T20160] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3572'. [ 530.141013][T20159] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3571'. [ 530.151316][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3572'. [ 530.167591][T20156] active_anon:6569 inactive_anon:0 isolated_anon:0 [ 530.167591][T20156] active_file:3408 inactive_file:40121 isolated_file:0 [ 530.167591][T20156] unevictable:768 dirty:133 writeback:0 [ 530.167591][T20156] slab_reclaimable:12924 slab_unreclaimable:139369 [ 530.167591][T20156] mapped:34911 shmem:1426 pagetables:1423 [ 530.167591][T20156] sec_pagetables:0 bounce:0 [ 530.167591][T20156] kernel_misc_reclaimable:0 [ 530.167591][T20156] free:1280617 free_pcp:10510 free_cma:0 [ 530.245891][T20160] netlink: 'syz.3.3572': attribute type 1 has an invalid length. [ 530.258527][T20156] Node 0 active_anon:26276kB inactive_anon:0kB active_file:13632kB inactive_file:160276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143744kB dirty:532kB writeback:0kB shmem:4168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15288kB pagetables:5552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 530.264787][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3571'. [ 530.270051][T20156] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 530.515295][T20156] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 530.563910][T20156] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 530.579658][T20156] Node 0 DMA32 free:1173376kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26076kB inactive_anon:0kB active_file:13632kB inactive_file:160276kB unevictable:1536kB writepending:532kB zspages:0kB present:3129332kB managed:2552324kB mlocked:0kB bounce:0kB free_pcp:43084kB local_pcp:21936kB free_cma:0kB [ 530.617783][T20156] lowmem_reserve[]: 0 0 0 0 0 [ 530.624040][T20156] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 530.694179][T20156] lowmem_reserve[]: 0 0 0 0 0 [ 530.704334][T20156] Node 1 Normal free:3941440kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 530.734432][T20149] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.766252][T20156] lowmem_reserve[]: 0 0 0 0 0 [ 530.775427][T20156] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 530.793422][T20156] Node 0 DMA32: 6680*4kB (UME) 3909*8kB (UME) 1269*16kB (UME) 244*32kB (UME) 244*64kB (UME) 493*128kB (UME) 453*256kB (UME) 310*512kB (UM) 217*1024kB (UM) 98*2048kB (UME) 76*4096kB (UM) = 1173720kB [ 530.815071][T20150] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 530.848963][T20156] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 530.888425][T20156] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 11*16kB (UM) 8*32kB (UM) 9*64kB (UM) 7*128kB (UM) 5*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 960*4096kB (M) = 3941504kB [ 530.906244][T20156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 530.923308][T20153] bond2: (slave veth3): Enslaving as an active interface with a down link [ 530.945337][T20157] bond2: (slave dummy0): making interface the new active one [ 530.959323][T20157] dummy0: entered promiscuous mode [ 530.965111][T20157] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 530.977277][T20156] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.003271][T20159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.007211][T20156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.030471][T20159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.036909][T20156] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.041811][T20159] hsr0: entered promiscuous mode [ 531.065086][T20159] bridge0: port 3(hsr0) entered blocking state [ 531.067117][T20156] 46476 total pagecache pages [ 531.076091][T20156] 0 pages in swap cache [ 531.097078][T20159] bridge0: port 3(hsr0) entered disabled state [ 531.101242][T20156] Free swap = 124996kB [ 531.103522][T20159] hsr0: entered allmulticast mode [ 531.117353][T20156] Total swap = 124996kB [ 531.121074][T20159] hsr_slave_0: entered allmulticast mode [ 531.128230][T20159] hsr_slave_1: entered allmulticast mode [ 531.131971][T20156] 2097051 pages RAM [ 531.138920][T15999] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.146888][T20156] 0 pages HighMem/MovableOnly [ 531.157164][T20156] 427136 pages reserved [ 531.161376][T20156] 0 pages cma reserved [ 531.166091][T15999] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.182045][T15999] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.193457][T20168] ip6tnl0: Caught tx_queue_len zero misconfig [ 531.380369][T20178] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.409058][T20184] netlink: 'syz.4.3576': attribute type 13 has an invalid length. [ 531.436953][T20184] netlink: 'syz.4.3576': attribute type 17 has an invalid length. [ 531.601295][T20200] netlink: 'syz.3.3581': attribute type 1 has an invalid length. [ 531.622708][T20178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.651620][T20178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.671532][T20203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.716634][T20178] veth1_macvtap: left promiscuous mode [ 531.747176][T10266] IPVS: starting estimator thread 0... [ 531.847195][T20206] IPVS: using max 29 ests per chain, 69600 per kthread [ 531.854695][T15999] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.876942][T15999] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.056552][T20184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.100913][T20184] team0: left promiscuous mode [ 532.105796][T20184] team_slave_0: left promiscuous mode [ 532.111837][T20184] team_slave_1: left promiscuous mode [ 532.129934][T20184] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.161005][T20184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 532.278122][T20200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.329159][T15999] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.355890][T15999] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.375468][T15999] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.601835][T20246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3589'. [ 533.086766][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 533.094847][ C1] lec:lec_tx_timeout: lec0 [ 533.100443][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 533.470643][T20293] xt_cgroup: path and classid specified [ 533.609109][T20288] __nla_validate_parse: 1 callbacks suppressed [ 533.609131][T20288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3598'. [ 533.705110][T20304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3601'. [ 533.749562][T20304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3601'. [ 533.831996][T20305] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3601'. [ 533.877339][T20305] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3601'. [ 533.944208][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.986898][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.995788][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.067344][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.171652][T20323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3604'. [ 534.199238][T20323] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3604'. [ 535.029743][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3614'. [ 535.039076][T20357] validate_nla: 1 callbacks suppressed [ 535.039094][T20357] netlink: 'syz.0.3614': attribute type 34 has an invalid length. [ 535.462669][T20374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3620'. [ 535.768550][T20390] tipc: Enabling of bearer rejected, failed to enable media [ 536.366318][T20412] syzkaller1: entered promiscuous mode [ 536.385258][T20412] syzkaller1: entered allmulticast mode [ 536.997851][T20435] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 537.505299][T20449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3638'. [ 537.695518][T20457] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 537.894467][T20467] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 537.906265][T20471] syzkaller1: entered promiscuous mode [ 537.921228][T20471] syzkaller1: entered allmulticast mode [ 537.955626][T20471] netlink: 'syz.4.3645': attribute type 1 has an invalid length. [ 537.970613][T20471] sch_fq: defrate 1 ignored. [ 538.126829][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 538.135201][ C1] lec:lec_tx_timeout: lec0 [ 538.139942][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 538.278334][T20486] nft_compat: unsupported protocol 5 [ 538.427424][T20497] netlink: 'syz.0.3651': attribute type 2 has an invalid length. [ 538.509358][T20493] netlink: 'syz.3.3654': attribute type 13 has an invalid length. [ 538.696488][T20493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.720083][T20493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 538.980822][T20511] __nla_validate_parse: 1 callbacks suppressed [ 538.980843][T20511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3657'. [ 539.032001][T20522] bridge0: port 3(gretap0) entered blocking state [ 539.038922][T20522] bridge0: port 3(gretap0) entered disabled state [ 539.045846][T20522] gretap0: entered allmulticast mode [ 539.062841][T20522] gretap0: entered promiscuous mode [ 539.100456][T20522] bridge0: port 3(gretap0) entered blocking state [ 539.107254][T20522] bridge0: port 3(gretap0) entered forwarding state [ 539.248056][ T8062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.742311][T20542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3665'. [ 539.909176][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3667'. [ 539.962845][T20554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3667'. [ 540.084435][T20564] x_tables: duplicate underflow at hook 2 [ 540.164840][T20559] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 540.287150][ T8062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.607096][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.648724][T20588] syzkaller0: entered promiscuous mode [ 540.664683][T20588] syzkaller0: entered allmulticast mode [ 540.690737][T20565] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3669'. [ 541.333340][ T6034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.053907][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.379028][ T8062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.081596][T20609] @0Ù: renamed from bond_slave_1 [ 543.119027][T20615] netlink: 'syz.2.3676': attribute type 4 has an invalid length. [ 543.146760][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 543.155041][ C1] lec:lec_tx_timeout: lec0 [ 543.160388][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 543.318530][T18268] dummy0: left promiscuous mode [ 543.407296][ T6034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.559749][T20654] netlink: 'syz.0.3682': attribute type 12 has an invalid length. [ 543.579778][T20654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3682'. [ 543.647258][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.224174][T20666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.449453][ T6034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.464084][T20678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3690'. [ 544.483074][T20678] ipvlan2: entered allmulticast mode [ 544.488878][T20678] syz_tun: entered allmulticast mode [ 544.611906][T20687] x_tables: unsorted entry at hook 3 [ 544.635654][T20689] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3694'. [ 544.648294][T20689] xt_TCPMSS: Only works on TCP SYN packets [ 544.655131][T20689] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3694'. [ 544.659290][T20691] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3695'. [ 544.666239][T20689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3694'. [ 544.767132][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 545.487155][ T6034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.097143][T20619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.116148][T20689] netlink: 'syz.2.3694': attribute type 1 has an invalid length. [ 546.150866][T20689] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3694'. [ 546.172096][T20689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3694'. [ 546.649703][T20722] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3703'. [ 546.674741][T20722] nbd: must specify at least one socket [ 546.765208][T20735] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 546.797652][T20735] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 546.899279][T20741] tipc: Started in network mode [ 546.904229][T20741] tipc: Node identity 7e61ebffe8f8, cluster identity 4711 [ 546.912747][T20741] tipc: Enabled bearer , priority 0 [ 546.936506][T20741] tipc: Disabling bearer [ 547.056135][T20752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3712'. [ 547.179358][T20758] IPVS: Scheduler module ip_vs_ not found [ 547.188417][T20758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3714'. [ 547.442151][T20766] netlink: 'syz.4.3717': attribute type 16 has an invalid length. [ 547.450655][T20766] netlink: 'syz.4.3717': attribute type 17 has an invalid length. [ 547.462039][T20766] netlink: 'syz.4.3717': attribute type 27 has an invalid length. [ 547.763981][T20788] xt_connbytes: Forcing CT accounting to be enabled [ 548.166748][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 548.175127][ C1] lec:lec_tx_timeout: lec0 [ 548.180212][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 548.447385][ T1769] block nbd3: Possible stuck request ffff8880269ea400: control (read@0,1024B). Runtime 30 seconds [ 548.458490][ T1769] block nbd3: Possible stuck request ffff8880269ea600: control (read@1024,1024B). Runtime 30 seconds [ 548.470285][ T1769] block nbd3: Possible stuck request ffff8880269ea800: control (read@2048,1024B). Runtime 30 seconds [ 548.481525][ T1769] block nbd3: Possible stuck request ffff8880269eaa00: control (read@3072,1024B). Runtime 30 seconds [ 548.808747][T20850] bridge0: entered promiscuous mode [ 548.844250][T20844] netlink: 'syz.0.3738': attribute type 2 has an invalid length. [ 549.114052][ T6034] hid-generic 0005:9C3F:0006.0001: item fetching failed at offset 0/2 [ 549.149159][ T6034] hid-generic 0005:9C3F:0006.0001: probe with driver hid-generic failed with error -22 [ 549.564503][T20891] __nla_validate_parse: 8 callbacks suppressed [ 549.564526][T20891] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3752'. [ 549.591005][T20891] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3752'. [ 549.594423][T20884] netlink: 396 bytes leftover after parsing attributes in process `syz.2.3750'. [ 549.602963][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3752'. [ 549.635915][T20892] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3751'. [ 549.661417][T20892] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 549.755816][T20891] netlink: 'syz.1.3752': attribute type 1 has an invalid length. [ 549.796092][T20891] netlink: 'syz.1.3752': attribute type 2 has an invalid length. [ 550.042562][T20896] nbd5: detected capacity change from 0 to 127 [ 550.083671][ T5835] block nbd5: Receive control failed (result -32) [ 550.083678][ T5826] block nbd5: Receive control failed (result -104) [ 550.367756][ T1738] block nbd2: Possible stuck request ffff8880269b8000: control (read@0,1024B). Runtime 210 seconds [ 550.379110][ T1738] block nbd2: Possible stuck request ffff8880269b8200: control (read@1024,1024B). Runtime 210 seconds [ 550.390914][ T1738] block nbd2: Possible stuck request ffff8880269b8400: control (read@2048,1024B). Runtime 210 seconds [ 550.402823][ T1738] block nbd2: Possible stuck request ffff8880269b8600: control (read@3072,1024B). Runtime 210 seconds [ 550.634895][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3764'. [ 550.930843][T20953] syzkaller0: entered promiscuous mode [ 550.947229][T20953] syzkaller0: entered allmulticast mode [ 551.012749][T20967] vlan1: entered promiscuous mode [ 551.335982][T20980] xfrm0: Caught tx_queue_len zero misconfig [ 551.345619][T20978] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3776'. [ 551.552063][T20993] IPVS: set_ctl: invalid protocol: 0 172.20.20.66:20002 [ 551.736115][T21003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.818105][T21019] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3785'. [ 551.899097][T21021] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3787'. [ 551.932869][T21021] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3787'. [ 552.378206][T21049] netlink: 'syz.3.3795': attribute type 4 has an invalid length. [ 552.410177][T21049] .`: renamed from bond0 (while UP) [ 552.812355][T21074] netlink: 'syz.2.3800': attribute type 2 has an invalid length. [ 552.820709][T21080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.827766][T21074] !: entered promiscuous mode [ 552.847726][T21074] netlink: 'syz.2.3800': attribute type 2 has an invalid length. [ 552.877797][T21080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.939995][T21080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.057805][T21086] netlink: 'syz.4.3804': attribute type 10 has an invalid length. [ 553.079837][T21086] batadv0: entered promiscuous mode [ 553.085120][T21086] batadv0: entered allmulticast mode [ 553.092497][T21086] bridge0: port 2(batadv0) entered blocking state [ 553.114003][T21086] bridge0: port 2(batadv0) entered disabled state [ 553.160406][T21100] netlink: 'syz.1.3806': attribute type 6 has an invalid length. [ 553.176808][T21100] netlink: 'syz.1.3806': attribute type 5 has an invalid length. [ 553.186799][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 553.195024][ C1] lec:lec_tx_timeout: lec0 [ 553.201626][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 553.202496][ T44] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 553.217079][ T44] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 553.250710][T21100] netlink: 'syz.1.3806': attribute type 6 has an invalid length. [ 553.409438][T21113] Bluetooth: MGMT ver 1.23 [ 553.511699][T21117] bridge0: Caught tx_queue_len zero misconfig [ 553.655891][T21124] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 553.948577][T21148] validate_nla: 1 callbacks suppressed [ 553.948598][T21148] netlink: 'syz.2.3819': attribute type 1 has an invalid length. [ 554.517625][T21179] syzkaller1: entered promiscuous mode [ 554.523356][T21179] syzkaller1: entered allmulticast mode [ 554.872251][T21187] __nla_validate_parse: 12 callbacks suppressed [ 554.872274][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3831'. [ 554.952006][T21189] syzkaller0: entered promiscuous mode [ 554.983557][T21189] syzkaller0: entered allmulticast mode [ 555.084617][T21189] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 555.122667][T21187] tipc: Started in network mode [ 555.144167][T21187] tipc: Node identity 6ae6ea736041, cluster identity 4711 [ 555.179357][T21187] tipc: Enabled bearer , priority 0 [ 555.197196][T21186] tipc: Resetting bearer [ 555.244778][T21186] tipc: Disabling bearer [ 555.287994][T21201] ipt_ECN: cannot use operation on non-tcp rule [ 555.442130][T21213] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3838'. [ 555.487182][T21213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3838'. [ 555.506917][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3839'. [ 555.748599][T21231] netlink: 'syz.1.3842': attribute type 27 has an invalid length. [ 555.818696][T21230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3841'. [ 555.821611][T21240] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3840'. [ 555.834403][T21236] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 555.852003][T21231] bridge0: port 3(gretap0) entered disabled state [ 555.986659][T21251] No such timeout policy "syz1" [ 555.998487][T21231] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.005883][T21231] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.069527][T21255] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3846'. [ 556.072475][T21231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.098374][T21231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.151430][T21256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3846'. [ 556.176390][T21231] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 556.184383][T21231] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 556.193424][T21231] vlan2: left allmulticast mode [ 556.198434][T21231] bond1: left allmulticast mode [ 556.209801][T21231] ip6erspan0: left allmulticast mode [ 556.215311][T21231] vlan3: left promiscuous mode [ 556.222980][T21231] bridge0: left promiscuous mode [ 556.251837][T21223] ip6tnl1: entered allmulticast mode [ 556.274104][T21240] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.285842][T21240] .` (unregistering): (slave 4@0Ù): Releasing backup interface [ 556.298904][T21240] .` (unregistering): Released all slaves [ 556.315560][T21252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3845'. [ 556.360990][T21245] bridge0: port 3(gretap0) entered blocking state [ 556.367759][T21245] bridge0: port 3(gretap0) entered forwarding state [ 556.381711][T21245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.418107][T21245] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.440305][T21245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.476191][T16010] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.494365][T21264] nbd: couldn't find a device at index 0 [ 556.508073][T16010] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.060003][T21283] xt_l2tp: missing protocol rule (udp|l2tpip) [ 557.094491][T16010] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.104002][T16010] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.113216][T16010] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.122347][T16010] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.142300][T21284] Cannot find add_set index 3 as target [ 557.191675][T21285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3852'. [ 557.223907][T16010] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.259558][T16010] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.532428][T21305] netlink: 'syz.3.3857': attribute type 1 has an invalid length. [ 557.629192][T21305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.687732][T21307] bond0: (slave dummy0): making interface the new active one [ 557.696276][T21307] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 557.763225][T21312] bond0 (unregistering): (slave dummy0): Releasing active interface [ 557.780686][T21312] bond0 (unregistering): Released all slaves [ 558.216758][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 558.224972][ C1] lec:lec_tx_timeout: lec0 [ 558.230078][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 558.479047][T21351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.698823][T21391] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 559.961326][T21402] netlink: 'syz.0.3881': attribute type 32 has an invalid length. [ 560.027094][ T8062] IPVS: starting estimator thread 0... [ 560.139718][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 560.149163][T21408] IPVS: using max 30 ests per chain, 72000 per kthread [ 560.190520][T21411] netlink: 'syz.0.3884': attribute type 1 has an invalid length. [ 560.202504][T21413] netlink: 'syz.1.3885': attribute type 7 has an invalid length. [ 560.246852][T21413] netlink: 'syz.1.3885': attribute type 8 has an invalid length. [ 560.254245][T21411] bond2: entered promiscuous mode [ 560.260472][T21411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 560.279840][T21413] __nla_validate_parse: 2 callbacks suppressed [ 560.279860][T21413] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.3885'. [ 560.321071][T21421] netlink: 'syz.2.3886': attribute type 4 has an invalid length. [ 560.389845][T21411] 8021q: adding VLAN 0 to HW filter on device bond3 [ 560.419152][T21411] bond2: (slave bond3): making interface the new active one [ 560.440067][T21411] bond3: entered promiscuous mode [ 560.446551][T21411] bond2: (slave bond3): Enslaving as an active interface with an up link [ 560.612971][T21434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3888'. [ 560.626015][T21433] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3889'. [ 560.640629][T21433] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3889'. [ 560.654305][T21434] unsupported nlmsg_type 40 [ 560.832238][T21447] netlink: 'syz.0.3890': attribute type 13 has an invalid length. [ 560.840420][T21447] netlink: 'syz.0.3890': attribute type 17 has an invalid length. [ 560.853715][T21448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3892'. [ 560.862888][T21448] block nbd6: Unsupported socket: should be TCP or UNIX. [ 561.063687][T21447] gre0: left promiscuous mode [ 561.077084][T21447] gre0: left allmulticast mode [ 561.220166][T21447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.246279][T21447] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.320707][T21447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 561.355876][T21463] lo: Caught tx_queue_len zero misconfig [ 562.048522][T21494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.859558][T21515] syzkaller0: entered promiscuous mode [ 562.894150][T21515] syzkaller0: entered allmulticast mode [ 563.245080][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 563.253298][ C1] lec:lec_tx_timeout: lec0 [ 563.257949][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 565.189983][T21556] netlink: 'syz.1.3919': attribute type 7 has an invalid length. [ 565.419236][T21568] netlink: 'syz.2.3922': attribute type 21 has an invalid length. [ 565.494788][T21572] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3923'. [ 565.613955][T21580] netlink: 'syz.2.3922': attribute type 21 has an invalid length. [ 565.652464][T21568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3922'. [ 565.669577][T21568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3922'. [ 565.718714][T21583] bridge0: entered promiscuous mode [ 565.734566][T21583] vlan2: entered promiscuous mode [ 565.760780][T21580] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3922'. [ 565.770629][T21580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3922'. [ 565.957746][T21592] netlink: 'syz.3.3931': attribute type 1 has an invalid length. [ 565.988569][T21592] netlink: 'syz.3.3931': attribute type 2 has an invalid length. [ 566.039184][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3929'. [ 566.074611][T21597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3929'. [ 566.095081][T21597] netlink: 'syz.0.3929': attribute type 14 has an invalid length. [ 566.115486][T21600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3932'. [ 566.129180][T21597] netlink: 'syz.0.3929': attribute type 12 has an invalid length. [ 566.191332][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3929'. [ 566.201117][T18268] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.222210][T18268] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.240986][T21597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3929'. [ 566.257489][T18268] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.297847][T21597] netlink: 'syz.0.3929': attribute type 14 has an invalid length. [ 566.302894][T18268] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.313876][T21597] netlink: 'syz.0.3929': attribute type 12 has an invalid length. [ 566.598671][T21635] netlink: 'syz.1.3938': attribute type 1 has an invalid length. [ 566.688108][T21635] 8021q: adding VLAN 0 to HW filter on device bond5 [ 566.866649][T21633] bond0: (slave batadv_slave_0): Error: Device is in use and cannot be enslaved [ 566.874681][ T29] audit: type=1800 audit(1775085743.707:7): pid=21659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3945" name="memory.events" dev="tmpfs" ino=981 res=0 errno=0 [ 566.941498][ T29] audit: type=1804 audit(1775085743.747:8): pid=21659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3945" name="/newroot/188/memory.events" dev="tmpfs" ino=981 res=1 errno=0 [ 567.270970][T21682] syzkaller0: entered promiscuous mode [ 567.276615][T21682] syzkaller0: entered allmulticast mode [ 567.551513][T21694] bond6: Removing last ns target with arp_interval on [ 567.754648][T21701] syzkaller0: entered promiscuous mode [ 567.762994][T21701] syzkaller0: entered allmulticast mode [ 567.857923][T21718] Cannot find add_set index 3 as target [ 568.266792][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.274913][ C1] lec:lec_tx_timeout: lec0 [ 568.280274][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 568.410160][T21737] syzkaller0: entered promiscuous mode [ 568.415856][T21737] syzkaller0: entered allmulticast mode [ 568.605459][T21741] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 568.645354][T21741] bond4 (unregistering): Released all slaves [ 568.835465][ T5826] Bluetooth: hci2: link tx timeout [ 568.840945][ T5826] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 569.217084][T21782] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 569.488394][T21791] x_tables: duplicate entry at hook 2 [ 569.649536][T21800] lo: entered allmulticast mode [ 569.685415][T21802] syzkaller0: entered promiscuous mode [ 569.711425][T21802] syzkaller0: entered allmulticast mode [ 569.793839][T21805] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 569.807195][T21805] team0: Failed to send options change via netlink (err -105) [ 569.821661][T21805] team0: Port device dummy0 added [ 570.556593][T21842] __nla_validate_parse: 14 callbacks suppressed [ 570.556626][T21842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3989'. [ 570.593707][T21847] pimreg: entered allmulticast mode [ 570.628074][T21842] bond0: (slave team0): Releasing backup interface [ 570.676259][T21842] team0: Port device dummy0 removed [ 570.693744][T21842] bridge0: port 2(batadv0) entered disabled state [ 570.705417][T21842] bridge_slave_0: left allmulticast mode [ 570.711858][T21842] bridge_slave_0: left promiscuous mode [ 570.718749][T21842] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.817414][T21842] bond0: (slave bond_slave_0): Releasing backup interface [ 570.841867][T21842] bond0: (slave bond_slave_1): Releasing backup interface [ 570.890556][T21842] team0: Port device team_slave_0 removed [ 570.909146][T21842] team0: Port device team_slave_1 removed [ 570.915432][T21842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.930392][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 570.954793][T21842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.969800][T21842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 571.443070][T21893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4001'. [ 571.758395][T21909] Cannot find del_set index 1536 as target [ 571.835547][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880333e1400: rx timeout, send abort [ 571.844617][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880333e1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 572.040068][T21918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4006'. [ 572.071493][T21913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4007'. [ 572.253021][T21922] openvswitch: netlink: IP tunnel dst address not specified [ 572.326049][T21925] syzkaller0: entered promiscuous mode [ 572.353287][T21925] syzkaller0: entered allmulticast mode [ 572.693853][T21949] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 572.718637][T21949] bond3 (unregistering): Released all slaves [ 572.918328][T21959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4017'. [ 573.031719][T21969] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 573.039369][T21969] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 573.233579][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4022'. [ 573.286779][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 573.294894][ C1] lec:lec_tx_timeout: lec0 [ 573.299696][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 573.305785][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4022'. [ 573.370855][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4022'. [ 573.391272][T21981] tunl0: Caught tx_queue_len zero misconfig [ 573.430246][T21974] validate_nla: 2 callbacks suppressed [ 573.430268][T21974] netlink: 'syz.4.4022': attribute type 1 has an invalid length. [ 573.476829][T21974] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4022'. [ 573.790838][T21999] syzkaller0: entered promiscuous mode [ 573.821156][T21999] syzkaller0: entered allmulticast mode [ 574.255127][T22024] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4030'. [ 574.663489][T22044] x_tables: duplicate underflow at hook 1 [ 574.690594][T22047] netlink: 'syz.3.4036': attribute type 58 has an invalid length. [ 574.888300][T22058] netlink: 'syz.4.4039': attribute type 1 has an invalid length. [ 575.105849][T22058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 575.144840][T22066] set match dimension is over the limit! [ 575.264975][T22067] bond3: (slave geneve2): making interface the new active one [ 575.305991][T22067] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 575.347407][T16002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.367628][T16002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.401812][T16002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.456555][T16002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.550187][T22080] syzkaller0: entered promiscuous mode [ 575.555761][T22080] syzkaller0: entered allmulticast mode [ 575.714068][T22108] __nla_validate_parse: 1 callbacks suppressed [ 575.714090][T22108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4047'. [ 575.903741][T22114] syzkaller1: entered promiscuous mode [ 575.905146][T22112] netlink: 'syz.4.4049': attribute type 8 has an invalid length. [ 575.922104][T22114] syzkaller1: entered allmulticast mode [ 575.951583][T22108] tipc: Started in network mode [ 575.956519][T22108] tipc: Node identity , cluster identity 4711 [ 575.987228][T22108] tipc: Failed to obtain node identity [ 575.992964][T22108] tipc: Enabling of bearer rejected, failed to enable media [ 576.199996][T22110] syzkaller0: entered promiscuous mode [ 576.216090][T22110] syzkaller0: entered allmulticast mode [ 578.307380][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 578.315559][ C1] lec:lec_tx_timeout: lec0 [ 578.320215][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 578.547053][ T1769] block nbd3: Possible stuck request ffff8880269ea400: control (read@0,1024B). Runtime 60 seconds [ 578.558079][ T1769] block nbd3: Possible stuck request ffff8880269ea600: control (read@1024,1024B). Runtime 60 seconds [ 578.569116][ T1769] block nbd3: Possible stuck request ffff8880269ea800: control (read@2048,1024B). Runtime 60 seconds [ 578.580283][ T1769] block nbd3: Possible stuck request ffff8880269eaa00: control (read@3072,1024B). Runtime 60 seconds [ 579.233289][T22154] bond7: entered allmulticast mode [ 579.258554][T22154] 8021q: adding VLAN 0 to HW filter on device bond7 [ 579.376766][T22168] syzkaller0: entered promiscuous mode [ 579.382407][T22168] syzkaller0: entered allmulticast mode [ 579.576595][T22175] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4062'. [ 579.627797][ T6034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.821298][T22189] netlink: 'syz.4.4065': attribute type 4 has an invalid length. [ 580.357632][T22217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 580.397090][T22209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4071'. [ 580.448985][ T1738] block nbd5: Connection timed out, retrying (0/2 alive) [ 580.457610][ T1738] block nbd5: Connection timed out, retrying (0/2 alive) [ 580.464745][ T1738] block nbd5: Connection timed out, retrying (0/2 alive) [ 580.472890][ T1738] block nbd5: Connection timed out, retrying (0/2 alive) [ 580.483909][T22221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4071'. [ 580.484334][ T1738] block nbd2: Possible stuck request ffff8880269b8000: control (read@0,1024B). Runtime 240 seconds [ 580.505217][ T11] block nbd5: Dead connection, failed to find a fallback [ 580.513508][ T11] block nbd5: shutting down sockets [ 580.520929][ T11] blk_print_req_error: 136 callbacks suppressed [ 580.520948][ T11] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 580.545052][ T1738] block nbd2: Possible stuck request ffff8880269b8200: control (read@1024,1024B). Runtime 240 seconds [ 580.558731][ T11] buffer_io_error: 138 callbacks suppressed [ 580.558747][ T11] Buffer I/O error on dev nbd5, logical block 3, async page read [ 580.572852][ T1738] block nbd2: Possible stuck request ffff8880269b8400: control (read@2048,1024B). Runtime 240 seconds [ 580.584486][ T11] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 580.596610][ T1738] block nbd2: Possible stuck request ffff8880269b8600: control (read@3072,1024B). Runtime 240 seconds [ 580.608363][ T11] Buffer I/O error on dev nbd5, logical block 2, async page read [ 580.616220][ T11] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 580.626212][ T11] Buffer I/O error on dev nbd5, logical block 1, async page read [ 580.634350][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 580.644687][ T11] Buffer I/O error on dev nbd5, logical block 0, async page read [ 580.654496][T13605] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 580.665862][T13605] Buffer I/O error on dev nbd5, logical block 0, async page read [ 580.673928][T13605] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 580.683697][T13605] Buffer I/O error on dev nbd5, logical block 1, async page read [ 580.692406][T13605] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 580.703240][T13605] Buffer I/O error on dev nbd5, logical block 2, async page read [ 580.711280][T13605] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 580.721183][T13605] Buffer I/O error on dev nbd5, logical block 3, async page read [ 580.729199][T13605] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 580.738898][T13605] Buffer I/O error on dev nbd5, logical block 0, async page read [ 580.746955][T13605] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 580.756586][T13605] Buffer I/O error on dev nbd5, logical block 1, async page read [ 580.765272][T13605] ldm_validate_partition_table(): Disk read failed. [ 580.772793][T13605] Dev nbd5: unable to read RDB block 0 [ 580.779047][T13605] nbd5: unable to read partition table [ 580.793885][T13605] ldm_validate_partition_table(): Disk read failed. [ 580.801335][T13605] Dev nbd5: unable to read RDB block 0 [ 580.807746][T13605] nbd5: unable to read partition table [ 580.837250][T22228] netlink: 'syz.4.4076': attribute type 9 has an invalid length. [ 580.852454][T22228] netlink: 'syz.4.4076': attribute type 6 has an invalid length. [ 580.863534][T22230] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4075'. [ 580.897066][T22228] netlink: 'syz.4.4076': attribute type 7 has an invalid length. [ 580.943381][T22235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4077'. [ 580.957836][T22234] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4076'. [ 580.978743][T22228] netlink: 'syz.4.4076': attribute type 8 has an invalid length. [ 580.993054][T22233] bond0: (slave rose0): Enslaving as an active interface with an up link [ 581.069952][T22228] macvlan0: entered promiscuous mode [ 581.081625][T22228] netlink: 'syz.4.4076': attribute type 2 has an invalid length. [ 581.123250][T22244] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 581.336032][T22255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4080'. [ 581.416446][T22255] 8021q: adding VLAN 0 to HW filter on device bond4 [ 581.438412][T22258] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 581.478455][T22258] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 581.561330][T22261] bond4: entered promiscuous mode [ 581.566517][T22261] bond4: entered allmulticast mode [ 581.594174][T22261] 8021q: adding VLAN 0 to HW filter on device bond4 [ 581.614659][T22271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.617675][T22261] team0: Port device bond4 added [ 581.681041][T22255] vxcan3: entered promiscuous mode [ 581.686643][T22255] bond4: (slave vxcan3): refused to change device type [ 581.725853][T22268] batman_adv: batadv0: Adding interface: dummy0 [ 581.732688][T22268] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.807004][T22268] batman_adv: batadv0: Interface activated: dummy0 [ 581.847749][T22277] batadv0: mtu less than device minimum [ 581.865573][T22277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.878892][T22277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.891559][T22277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.903699][T22277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.915777][T22277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.928140][T22277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.939774][T22277] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.011880][T22286] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 582.391883][T22296] pim6reg: entered allmulticast mode [ 582.461530][T22296] pim6reg: left allmulticast mode [ 583.016488][T22342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4101'. [ 583.046311][T22342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4101'. [ 583.155901][T22349] netlink: 'syz.3.4103': attribute type 1 has an invalid length. [ 583.333345][T22354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4103'. [ 583.401537][T22349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4103'. [ 583.458623][T22354] bond0: (slave bridge4): making interface the new active one [ 583.481597][T22354] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 583.517303][T22349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.528696][T22366] tipc: Resetting bearer [ 583.758078][T22376] netlink: 'syz.3.4107': attribute type 1 has an invalid length. [ 583.870953][T22376] bond3: entered promiscuous mode [ 583.877258][T22376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 584.018326][T22376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 584.035624][T22376] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 584.046195][T22376] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 584.076963][T22376] bond3: (slave ip6gre1): making interface the new active one [ 584.096816][T22376] ip6gre1: entered promiscuous mode [ 584.104300][T22376] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 584.286748][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5970 ms [ 584.294864][ C1] lec:lec_tx_timeout: lec0 [ 584.300564][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 584.530916][ T13] tipc: Resetting bearer [ 584.628664][T22407] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4113'. [ 585.504241][T22455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4125'. [ 585.600590][T22455] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 585.617843][T22463] net_ratelimit: 14 callbacks suppressed [ 585.617864][T22463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.872880][T22479] __nla_validate_parse: 1 callbacks suppressed [ 585.872903][T22479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4129'. [ 585.966898][T22479] openvswitch: netlink: Invalid VLAN frame [ 586.025119][T22436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 586.275466][T22482] netlink: 'syz.4.4131': attribute type 1 has an invalid length. [ 586.372940][T22489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4133'. [ 586.382241][T22489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4133'. [ 586.408778][T22482] bond5: entered promiscuous mode [ 586.414815][T22482] 8021q: adding VLAN 0 to HW filter on device bond5 [ 586.429501][T22488] bridge0: Device is already in use. [ 586.438331][T22485] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 586.446401][T22485] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 586.455299][T22485] tipc: Resetting bearer [ 586.562398][T22496] wg2: Caught tx_queue_len zero misconfig [ 586.584666][T22496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4136'. [ 586.630974][T22498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 586.679203][ T5835] block nbd6: Receive control failed (result -1) [ 587.287411][T22514] syzkaller0: entered promiscuous mode [ 587.298702][T22514] syzkaller0: entered allmulticast mode [ 588.145697][T22566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4143'. [ 590.128089][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 590.136172][ C1] lec:lec_tx_timeout: lec0 [ 590.828661][T22590] syzkaller0: entered promiscuous mode [ 590.834844][T22590] syzkaller0: entered allmulticast mode [ 590.893997][ T5835] [ 590.896398][ T5835] ====================================================== [ 590.903453][ T5835] WARNING: possible circular locking dependency detected [ 590.910497][ T5835] syzkaller #0 Not tainted [ 590.914945][ T5835] ------------------------------------------------------ [ 590.921997][ T5835] kworker/u9:3/5835 is trying to acquire lock: [ 590.928184][ T5835] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 590.938766][ T5835] [ 590.938766][ T5835] but task is already holding lock: [ 590.946161][ T5835] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 590.956486][ T5835] [ 590.956486][ T5835] which lock already depends on the new lock. [ 590.956486][ T5835] [ 590.966898][ T5835] [ 590.966898][ T5835] the existing dependency chain (in reverse order) is: [ 590.976004][ T5835] [ 590.976004][ T5835] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 590.984096][ T5835] down_write+0x96/0x200 [ 590.988877][ T5835] kernfs_add_one+0x41/0x5c0 [ 590.993996][ T5835] kernfs_create_dir_ns+0xde/0x130 [ 590.999646][ T5835] internal_create_group+0x425/0x1180 [ 591.005557][ T5835] cpuhp_invoke_callback+0x445/0x860 [ 591.011373][ T5835] cpuhp_issue_call+0x430/0x7a0 [ 591.016756][ T5835] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 591.023354][ T5835] __cpuhp_setup_state+0x3f/0x60 [ 591.028908][ T5835] do_one_initcall+0x250/0x8d0 [ 591.034262][ T5835] do_initcall_level+0x104/0x190 [ 591.039743][ T5835] do_initcalls+0x59/0xa0 [ 591.044746][ T5835] kernel_init_freeable+0x2a6/0x3e0 [ 591.050509][ T5835] kernel_init+0x1d/0x1d0 [ 591.055471][ T5835] ret_from_fork+0x51e/0xb90 [ 591.060591][ T5835] ret_from_fork_asm+0x1a/0x30 [ 591.065888][ T5835] [ 591.065888][ T5835] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 591.073717][ T5835] [ 591.073717][ T5835] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 591.081563][ T5835] cpus_read_lock+0x42/0x160 [ 591.086687][ T5835] static_key_slow_inc+0x12/0x30 [ 591.092156][ T5835] setup_udp_tunnel_sock+0x2fd/0x510 [ 591.097977][ T5835] l2tp_tunnel_register+0xda0/0x1460 [ 591.103875][ T5835] pppol2tp_connect+0x8b7/0x17c0 [ 591.109608][ T5835] __sys_connect+0x312/0x450 [ 591.114740][ T5835] __x64_sys_connect+0x7a/0x90 [ 591.120206][ T5835] do_syscall_64+0x14d/0xf80 [ 591.125364][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.131815][ T5835] [ 591.131815][ T5835] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 591.139577][ T5835] lock_sock_nested+0x41/0x100 [ 591.144879][ T5835] inet_shutdown+0x6a/0x390 [ 591.150085][ T5835] nbd_mark_nsock_dead+0x2e9/0x560 [ 591.155930][ T5835] recv_work+0x1c7f/0x1d90 [ 591.161058][ T5835] process_scheduled_works+0xb6e/0x18c0 [ 591.167307][ T5835] worker_thread+0xa53/0xfc0 [ 591.172445][ T5835] kthread+0x388/0x470 [ 591.177049][ T5835] ret_from_fork+0x51e/0xb90 [ 591.182298][ T5835] ret_from_fork_asm+0x1a/0x30 [ 591.187621][ T5835] [ 591.187621][ T5835] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 591.195381][ T5835] __mutex_lock+0x19f/0x1300 [ 591.200523][ T5835] nbd_queue_rq+0x37b/0x1100 [ 591.205680][ T5835] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 591.211879][ T5835] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 591.218797][ T5835] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 591.225367][ T5835] blk_mq_run_hw_queue+0x348/0x4f0 [ 591.231035][ T5835] blk_mq_dispatch_list+0xd16/0xe10 [ 591.236789][ T5835] blk_mq_flush_plug_list+0x48d/0x570 [ 591.243131][ T5835] __blk_flush_plug+0x3ed/0x4d0 [ 591.248518][ T5835] __submit_bio+0x28d/0x580 [ 591.253640][ T5835] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 591.259809][ T5835] block_read_full_folio+0x599/0x830 [ 591.265644][ T5835] filemap_read_folio+0x137/0x3b0 [ 591.271203][ T5835] do_read_cache_folio+0x358/0x590 [ 591.276849][ T5835] read_part_sector+0xb6/0x2b0 [ 591.282161][ T5835] adfspart_check_ICS+0xa5/0xa40 [ 591.287722][ T5835] bdev_disk_changed+0x7ba/0x1550 [ 591.293271][ T5835] blkdev_get_whole+0x380/0x510 [ 591.298660][ T5835] bdev_open+0x31e/0xd30 [ 591.303431][ T5835] blkdev_open+0x470/0x610 [ 591.308465][ T5835] do_dentry_open+0x785/0x14e0 [ 591.313771][ T5835] vfs_open+0x3b/0x340 [ 591.318366][ T5835] path_openat+0x2e08/0x3860 [ 591.323490][ T5835] do_file_open+0x23e/0x4a0 [ 591.328523][ T5835] do_sys_openat2+0x113/0x200 [ 591.333732][ T5835] __x64_sys_openat+0x138/0x170 [ 591.339123][ T5835] do_syscall_64+0x14d/0xf80 [ 591.344243][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.350662][ T5835] [ 591.350662][ T5835] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 591.357890][ T5835] __mutex_lock+0x19f/0x1300 [ 591.363014][ T5835] nbd_queue_rq+0xc6/0x1100 [ 591.368045][ T5835] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 591.374123][ T5835] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 591.380989][ T5835] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 591.387495][ T5835] blk_mq_run_hw_queue+0x348/0x4f0 [ 591.393130][ T5835] blk_mq_dispatch_list+0xd16/0xe10 [ 591.398856][ T5835] blk_mq_flush_plug_list+0x48d/0x570 [ 591.404754][ T5835] __blk_flush_plug+0x3ed/0x4d0 [ 591.410132][ T5835] __submit_bio+0x28d/0x580 [ 591.415163][ T5835] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 591.421322][ T5835] block_read_full_folio+0x599/0x830 [ 591.427143][ T5835] filemap_read_folio+0x137/0x3b0 [ 591.432695][ T5835] do_read_cache_folio+0x358/0x590 [ 591.438428][ T5835] read_part_sector+0xb6/0x2b0 [ 591.443718][ T5835] adfspart_check_ICS+0xa5/0xa40 [ 591.449189][ T5835] bdev_disk_changed+0x7ba/0x1550 [ 591.454742][ T5835] blkdev_get_whole+0x380/0x510 [ 591.460121][ T5835] bdev_open+0x31e/0xd30 [ 591.464888][ T5835] blkdev_open+0x470/0x610 [ 591.469830][ T5835] do_dentry_open+0x785/0x14e0 [ 591.475123][ T5835] vfs_open+0x3b/0x340 [ 591.479729][ T5835] path_openat+0x2e08/0x3860 [ 591.484843][ T5835] do_file_open+0x23e/0x4a0 [ 591.489868][ T5835] do_sys_openat2+0x113/0x200 [ 591.495074][ T5835] __x64_sys_openat+0x138/0x170 [ 591.500454][ T5835] do_syscall_64+0x14d/0xf80 [ 591.506016][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.512522][ T5835] [ 591.512522][ T5835] -> #4 (set->srcu){.+.+}-{0:0}: [ 591.519672][ T5835] __synchronize_srcu+0xca/0x300 [ 591.525144][ T5835] elevator_switch+0x1e8/0x7a0 [ 591.530525][ T5835] elevator_change+0x2cc/0x450 [ 591.535822][ T5835] elevator_set_default+0x36c/0x430 [ 591.541544][ T5835] blk_register_queue+0x366/0x430 [ 591.547108][ T5835] __add_disk+0x677/0xd50 [ 591.551965][ T5835] add_disk_fwnode+0xfb/0x480 [ 591.557182][ T5835] nbd_dev_add+0x72c/0xb50 [ 591.562120][ T5835] nbd_init+0x168/0x1f0 [ 591.566798][ T5835] do_one_initcall+0x250/0x8d0 [ 591.572089][ T5835] do_initcall_level+0x104/0x190 [ 591.577548][ T5835] do_initcalls+0x59/0xa0 [ 591.582407][ T5835] kernel_init_freeable+0x2a6/0x3e0 [ 591.588143][ T5835] kernel_init+0x1d/0x1d0 [ 591.592998][ T5835] ret_from_fork+0x51e/0xb90 [ 591.598255][ T5835] ret_from_fork_asm+0x1a/0x30 [ 591.603551][ T5835] [ 591.603551][ T5835] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 591.611382][ T5835] __mutex_lock+0x19f/0x1300 [ 591.616505][ T5835] elevator_change+0x1b3/0x450 [ 591.621790][ T5835] elevator_set_none+0xb5/0x140 [ 591.627169][ T5835] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 591.633595][ T5835] nbd_start_device+0x17f/0xb10 [ 591.639122][ T5835] nbd_genl_connect+0x165b/0x1cf0 [ 591.644760][ T5835] genl_family_rcv_msg_doit+0x22a/0x330 [ 591.651294][ T5835] genl_rcv_msg+0x61c/0x7a0 [ 591.656329][ T5835] netlink_rcv_skb+0x232/0x4b0 [ 591.661618][ T5835] genl_rcv+0x28/0x40 [ 591.666127][ T5835] netlink_unicast+0x80f/0x9b0 [ 591.671509][ T5835] netlink_sendmsg+0x813/0xb40 [ 591.676807][ T5835] ____sys_sendmsg+0x972/0x9f0 [ 591.682221][ T5835] ___sys_sendmsg+0x2a5/0x360 [ 591.687881][ T5835] __x64_sys_sendmsg+0x1bd/0x2a0 [ 591.693373][ T5835] do_syscall_64+0x14d/0xf80 [ 591.698504][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.704939][ T5835] [ 591.704939][ T5835] -> #2 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 591.713580][ T5835] blk_alloc_queue+0x546/0x680 [ 591.718875][ T5835] __blk_mq_alloc_disk+0x197/0x390 [ 591.724533][ T5835] nbd_dev_add+0x499/0xb50 [ 591.729582][ T5835] nbd_init+0x168/0x1f0 [ 591.734305][ T5835] do_one_initcall+0x250/0x8d0 [ 591.739647][ T5835] do_initcall_level+0x104/0x190 [ 591.745493][ T5835] do_initcalls+0x59/0xa0 [ 591.750453][ T5835] kernel_init_freeable+0x2a6/0x3e0 [ 591.756370][ T5835] kernel_init+0x1d/0x1d0 [ 591.761328][ T5835] ret_from_fork+0x51e/0xb90 [ 591.766467][ T5835] ret_from_fork_asm+0x1a/0x30 [ 591.772400][ T5835] [ 591.772400][ T5835] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 591.779625][ T5835] fs_reclaim_acquire+0x71/0x100 [ 591.785099][ T5835] kmem_cache_alloc_noprof+0x40/0x650 [ 591.791087][ T5835] __kernfs_iattrs+0xdf/0x340 [ 591.796294][ T5835] kernfs_iop_setattr+0xea/0x3f0 [ 591.801851][ T5835] notify_change+0xc1a/0xf40 [ 591.806967][ T5835] do_truncate+0x1c2/0x250 [ 591.812093][ T5835] path_openat+0x2f89/0x3860 [ 591.817307][ T5835] do_file_open+0x23e/0x4a0 [ 591.822616][ T5835] do_sys_openat2+0x113/0x200 [ 591.828000][ T5835] __x64_sys_openat+0x138/0x170 [ 591.833379][ T5835] do_syscall_64+0x14d/0xf80 [ 591.838499][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.844919][ T5835] [ 591.844919][ T5835] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 591.853460][ T5835] __lock_acquire+0x15a5/0x2cf0 [ 591.858846][ T5835] lock_acquire+0xf0/0x2e0 [ 591.863789][ T5835] down_write+0x96/0x200 [ 591.868556][ T5835] kernfs_unlink_sibling+0x71/0x180 [ 591.874293][ T5835] __kernfs_remove+0x3e7/0x660 [ 591.879636][ T5835] kernfs_remove_by_name_ns+0xaf/0x130 [ 591.885654][ T5835] sysfs_unmerge_group+0xd4/0x140 [ 591.891310][ T5835] dpm_sysfs_remove+0x76/0xd0 [ 591.896630][ T5835] device_del+0x250/0x8f0 [ 591.901515][ T5835] device_unregister+0x21/0xf0 [ 591.906958][ T5835] hci_conn_del+0xc36/0x1230 [ 591.912257][ T5835] hci_abort_conn_sync+0xdd0/0x1190 [ 591.918085][ T5835] hci_cmd_sync_work+0x213/0x400 [ 591.923548][ T5835] process_scheduled_works+0xb6e/0x18c0 [ 591.929714][ T5835] worker_thread+0xa53/0xfc0 [ 591.934834][ T5835] kthread+0x388/0x470 [ 591.939521][ T5835] ret_from_fork+0x51e/0xb90 [ 591.944641][ T5835] ret_from_fork_asm+0x1a/0x30 [ 591.949959][ T5835] [ 591.949959][ T5835] other info that might help us debug this: [ 591.949959][ T5835] [ 591.960263][ T5835] Chain exists of: [ 591.960263][ T5835] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 591.960263][ T5835] [ 591.974737][ T5835] Possible unsafe locking scenario: [ 591.974737][ T5835] [ 591.982468][ T5835] CPU0 CPU1 [ 591.988096][ T5835] ---- ---- [ 591.993652][ T5835] lock(&root->kernfs_rwsem); [ 591.998443][ T5835] lock(cpuhp_state_mutex); [ 592.005677][ T5835] lock(&root->kernfs_rwsem); [ 592.013254][ T5835] lock(&root->kernfs_iattr_rwsem); [ 592.018570][ T5835] [ 592.018570][ T5835] *** DEADLOCK *** [ 592.018570][ T5835] [ 592.026745][ T5835] 5 locks held by kworker/u9:3/5835: [ 592.032053][ T5835] #0: ffff888034c31148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 592.043060][ T5835] #1: ffffc90003d77c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 592.056053][ T5835] #2: ffff888047784ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 592.065935][ T5835] #3: ffff8880477840c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 592.075815][ T5835] #4: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 592.086645][ T5835] [ 592.086645][ T5835] stack backtrace: [ 592.092986][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 592.093006][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 592.093017][ T5835] Workqueue: hci3 hci_cmd_sync_work [ 592.093038][ T5835] Call Trace: [ 592.093047][ T5835] [ 592.093055][ T5835] dump_stack_lvl+0xe8/0x150 [ 592.093078][ T5835] print_circular_bug+0x2e1/0x300 [ 592.093104][ T5835] check_noncircular+0x12e/0x150 [ 592.093129][ T5835] __lock_acquire+0x15a5/0x2cf0 [ 592.093151][ T5835] ? __lock_acquire+0x6b5/0x2cf0 [ 592.093175][ T5835] lock_acquire+0xf0/0x2e0 [ 592.093193][ T5835] ? kernfs_unlink_sibling+0x71/0x180 [ 592.093213][ T5835] down_write+0x96/0x200 [ 592.093227][ T5835] ? kernfs_unlink_sibling+0x71/0x180 [ 592.093243][ T5835] ? __pfx_down_write+0x10/0x10 [ 592.093257][ T5835] ? kernfs_root+0x1c/0x230 [ 592.093278][ T5835] ? kernfs_root+0x1c/0x230 [ 592.093297][ T5835] ? kernfs_root+0x1c/0x230 [ 592.093319][ T5835] ? kernfs_root+0x1ea/0x230 [ 592.093340][ T5835] kernfs_unlink_sibling+0x71/0x180 [ 592.093357][ T5835] __kernfs_remove+0x3e7/0x660 [ 592.093374][ T5835] kernfs_remove_by_name_ns+0xaf/0x130 [ 592.093446][ T5835] sysfs_unmerge_group+0xd4/0x140 [ 592.093471][ T5835] dpm_sysfs_remove+0x76/0xd0 [ 592.093494][ T5835] device_del+0x250/0x8f0 [ 592.093518][ T5835] ? klist_iter_exit+0xc1/0x100 [ 592.093542][ T5835] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 592.093558][ T5835] ? __pfx_device_del+0x10/0x10 [ 592.093576][ T5835] ? __pfx_autoremove_wake_function+0x10/0x10 [ 592.093596][ T5835] device_unregister+0x21/0xf0 [ 592.093615][ T5835] hci_conn_del+0xc36/0x1230 [ 592.093639][ T5835] ? hci_abort_conn_sync+0xa7b/0x1190 [ 592.093660][ T5835] hci_abort_conn_sync+0xdd0/0x1190 [ 592.093684][ T5835] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 592.093706][ T5835] ? abort_conn_sync+0x26/0x210 [ 592.093722][ T5835] ? abort_conn_sync+0x26/0x210 [ 592.093735][ T5835] ? abort_conn_sync+0x19c/0x210 [ 592.093749][ T5835] ? __pfx_abort_conn_sync+0x10/0x10 [ 592.093763][ T5835] hci_cmd_sync_work+0x213/0x400 [ 592.093781][ T5835] ? process_scheduled_works+0xa8d/0x18c0 [ 592.093801][ T5835] process_scheduled_works+0xb6e/0x18c0 [ 592.093831][ T5835] ? __pfx_process_scheduled_works+0x10/0x10 [ 592.093852][ T5835] ? assign_work+0x3d5/0x5e0 [ 592.093873][ T5835] worker_thread+0xa53/0xfc0 [ 592.093902][ T5835] kthread+0x388/0x470 [ 592.093917][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 592.093936][ T5835] ? __pfx_kthread+0x10/0x10 [ 592.093951][ T5835] ret_from_fork+0x51e/0xb90 [ 592.093977][ T5835] ? __pfx_ret_from_fork+0x10/0x10 [ 592.093996][ T5835] ? __switch_to+0xc7d/0x1450 [ 592.094014][ T5835] ? __pfx_kthread+0x10/0x10 [ 592.094028][ T5835] ret_from_fork_asm+0x1a/0x30 [ 592.094057][ T5835] [ 592.399857][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 592.529943][T22598] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4156'. [ 595.445170][ T5194] udevd[5194]: worker [16898] /devices/virtual/block/nbd3 is taking a long time