last executing test programs: 7m45.260399111s ago: executing program 4 (id=5275): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m45.216891566s ago: executing program 4 (id=5276): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_rx_ntuple={0x35, {0xd, @esp_ip4_spec={@rand_addr=0x64010100, @empty, 0xc101, 0x6}, @esp_ip4_spec={@broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, 0x400, 0x7}, 0x4, 0x3, 0x6, 0x101, 0xfffffffffffffffe}}}) 7m45.019326715s ago: executing program 4 (id=5280): r0 = socket(0xb, 0x80000, 0xffffffff) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400180004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 7m44.887891037s ago: executing program 4 (id=5282): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59095004000000000000080000001000048009000500"], 0x24}}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r4, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) (async) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000180)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="97d7a005", @ANYRES16=r3, @ANYBLOB="00022abd7000fddbdf2508000000300004800c00078008000400eb0000000c00078008000300fcffffff1400078008000300ffffffff08000400001000003c00078008000200020000000c000300030000000000000008000200ff00000008000200070000000c000400ffff0000000000000800010005000000"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x44080) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, r5) (async) sendmsg$key(r5, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) 7m44.575882231s ago: executing program 4 (id=5286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @default, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) (async) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @default, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000240)=""/56, &(0x7f0000000280)=0x38) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f00000002c0)={'netdevsim0\x00', 0x600}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) getsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000480)={r0, &(0x7f0000000380)='netdevsim\x00', 0x42000, &(0x7f00000003c0)={@_ha_fsid={[0x1000, 0x37]}, {0x1ff, 0x7, 0xd0, 0x9}}, 0x4, &(0x7f0000000400), &(0x7f0000000440)=0x7fff}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000480)={r0, &(0x7f0000000380)='netdevsim\x00', 0x42000, &(0x7f00000003c0)={@_ha_fsid={[0x1000, 0x37]}, {0x1ff, 0x7, 0xd0, 0x9}}, 0x4, &(0x7f0000000400), &(0x7f0000000440)=0x7fff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f0000000500)={0x0, 0x8, 0x9, 0xc, @vifc_lcl_ifindex=r6, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000540)=""/203, &(0x7f0000000640)=0xcb) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x400c005) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, 0x1, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x6ed}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7237}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000008c0)={{r0}, 0x0, 0x8, 0x3}) (async) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000008c0)={{r0}, 0x0, 0x8, 0x3}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000a40), r5) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000a40), r5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001cc0)={&(0x7f0000000a80)="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", &(0x7f0000001a80)=""/184, &(0x7f0000001b40)="80af29443ec4cb6de62dd3af52870ff31f31b687042d53683bbbb99a9219bb16ea69140a993255ee0ac46c55a971f861eebd817c086d5a874cebbdce893741be7e9161517a550e6f7f1db35ab1253ab6f67ba64ab02f88381929259e662ec700614367ce46faa90231f7189c50521b4ff58fb4a2ca339f5613540dd08ec3a416aadd64d3b30969ec0efaf42607d2b545f0badc6c26c4a7847a95c1aff49512cdb8509c68505757bb9f36f9e4e456b33d6d2ffe0817a8b364f905e0655ea606e189278563e0e3096571674379ea7314ecb24f48c10d341023f9d9211e8d489bd85ac5239e3c33a166b57516ee31e4b651554f131e4c", &(0x7f0000001c40)="4301b48d1953ffcfcf7c88f53974ac9cd599a16438a7c1f30c28b99f511918838fe00f6ab2adb28fce4008db3767336d739bda542f35a57dc2846bfe59a6bda52333d3b6cb9a2309386fc5b96f809b6a", 0xbb, r5, 0x4}, 0x38) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000001e80)={{&(0x7f0000001d00)=[{0x0, 0x101, 0x6b, {0x800, 0x1ff}, 0x5, 0x5, 0xd}], 0x1, 0x40, 0x6, 0x2}, {&(0x7f0000001d40), 0x0, 0x10, 0xfffd}, {&(0x7f0000001d80), 0x0, 0x8, 0x0, 0xee4}, {&(0x7f0000001dc0)=[{0x100000001, 0x2, 0x6, 0x5, 0xffffffff}, {0x8, 0x6, 0xd, 0x4d6f, 0xb5b}], 0x2, 0x28, 0x8, 0x5}, {&(0x7f0000001e40)=[0x6, 0x1, 0x100000001], 0x3, 0x8, 0x7, 0x2}}) sendto$l2tp(r5, &(0x7f0000001f00)="ec93fde0fa44e94eb09c36ba9ac9053f960c648c505d0f58cb0be595453d3f267825f24aa750f944b1cb1f2d9e98652154f516a87c61ca096623d3be2c706f7245e8203d847788b82c4a34dedc0c94655c0556e58272ea957885eae4e4df5e335cf3769ec0c02c82b6d6c6294d7f4d056fe16add56ff1bc2e1200e16e0d821831dfe8073288c59f682405de63ed44fa6556b0e3190", 0x95, 0x40010, &(0x7f0000001fc0)={0x2, 0x0, @remote, 0x4}, 0x10) (async) sendto$l2tp(r5, &(0x7f0000001f00)="ec93fde0fa44e94eb09c36ba9ac9053f960c648c505d0f58cb0be595453d3f267825f24aa750f944b1cb1f2d9e98652154f516a87c61ca096623d3be2c706f7245e8203d847788b82c4a34dedc0c94655c0556e58272ea957885eae4e4df5e335cf3769ec0c02c82b6d6c6294d7f4d056fe16add56ff1bc2e1200e16e0d821831dfe8073288c59f682405de63ed44fa6556b0e3190", 0x95, 0x40010, &(0x7f0000001fc0)={0x2, 0x0, @remote, 0x4}, 0x10) r9 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r4, &(0x7f0000002000)={0x50002010}) (async) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r4, &(0x7f0000002000)={0x50002010}) r10 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$XFS_IOC_SET_RESBLKS(r10, 0xc0105872, &(0x7f0000002040)={0x8, 0x8}) 7m44.228256855s ago: executing program 4 (id=5291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r8, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000002600010025bd7000fcdbdf2506000000628a5364c55b666f8f4211bdd7b55981f4012f1e7ff6626b4d5cd271b85155459613867614c8a69ed4be63f023", @ANYRESOCT=r0, @ANYBLOB="4c0fbfd8c917a30b6e77f6d205f456f576adbcfce90c32cca95fc4e2af98729f3070a37829db4739dd61785b07e6d9ff146098cb024d79da2cab675f7d3c163407", @ANYRES16=r0, @ANYRES16=r8, @ANYRES16=r8], 0x14}}, 0x20006004) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$kcm(0x11, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$bt_hci(r8, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000002600010025bd7000fcdbdf2506000000628a5364c55b666f8f4211bdd7b55981f4012f1e7ff6626b4d5cd271b85155459613867614c8a69ed4be63f023", @ANYRESOCT=r0, @ANYBLOB="4c0fbfd8c917a30b6e77f6d205f456f576adbcfce90c32cca95fc4e2af98729f3070a37829db4739dd61785b07e6d9ff146098cb024d79da2cab675f7d3c163407", @ANYRES16=r0, @ANYRES16=r8, @ANYRES16=r8], 0x14}}, 0x20006004) (async) 7m29.100874289s ago: executing program 32 (id=5291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r8, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000002600010025bd7000fcdbdf2506000000628a5364c55b666f8f4211bdd7b55981f4012f1e7ff6626b4d5cd271b85155459613867614c8a69ed4be63f023", @ANYRESOCT=r0, @ANYBLOB="4c0fbfd8c917a30b6e77f6d205f456f576adbcfce90c32cca95fc4e2af98729f3070a37829db4739dd61785b07e6d9ff146098cb024d79da2cab675f7d3c163407", @ANYRES16=r0, @ANYRES16=r8, @ANYRES16=r8], 0x14}}, 0x20006004) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$kcm(0x11, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$bt_hci(r8, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000002600010025bd7000fcdbdf2506000000628a5364c55b666f8f4211bdd7b55981f4012f1e7ff6626b4d5cd271b85155459613867614c8a69ed4be63f023", @ANYRESOCT=r0, @ANYBLOB="4c0fbfd8c917a30b6e77f6d205f456f576adbcfce90c32cca95fc4e2af98729f3070a37829db4739dd61785b07e6d9ff146098cb024d79da2cab675f7d3c163407", @ANYRES16=r0, @ANYRES16=r8, @ANYRES16=r8], 0x14}}, 0x20006004) (async) 2m51.925610888s ago: executing program 1 (id=8104): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x1b, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x98}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e0003002f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000140)=@getae={0x4c, 0x1f, 0x400, 0x70bd2a, 0x25dfdbfb, {{@in6=@empty, 0x4d2, 0xa, 0xff}, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, 0xfffffc01, 0x3504}, [@mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8084}, 0x22008040) 2m51.706524017s ago: executing program 1 (id=8108): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f0000000200)=0x18) (async) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r5, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) (async) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) (async) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000000)='v', 0x23}], 0x1) (async) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000001"], 0xa) (async) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) sendto$inet6(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @private0, 0x409}, 0x1c) socket$netlink(0x10, 0x3, 0x2a) 2m51.478305102s ago: executing program 1 (id=8110): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000002800018014000400ff010000000000000000000000000001080007"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 2m51.395656849s ago: executing program 1 (id=8112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x60000000, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x400}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000600)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @local, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @empty, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0xd, 0x0, [{0x0, 0x7, "4289b015b1"}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 2m51.127691969s ago: executing program 1 (id=8116): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x5c}}, 0x8000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x30}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2m50.964316743s ago: executing program 1 (id=8121): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) connect$rxrpc(r0, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 2m14.741047469s ago: executing program 33 (id=8121): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) connect$rxrpc(r0, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 2.944481444s ago: executing program 2 (id=9500): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@deltaction={0x130, 0x31, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x2000c801}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.645655046s ago: executing program 2 (id=9504): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x5b8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000200000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000101010101010000080026006c0900"], 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000a00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x20, 0x70bc27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044885}, 0x40800) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000000180)) r10 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf250a00000008003a000e00000005002d000100000005002f0001"], 0x2c}, 0x1, 0x0, 0x0, 0x44851}, 0x4c01c) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="f7ad94a38fff48f3be52163448412ba8b0a3c27a7b0800000000000000506d0f1530fa2304649c13b1423affec1af5d0aedc1633aef8835ad2c153e660cb6f9e8c0bedbf3a343aad1f2fa32dc49953ef33789df6fe80a8a4e196f5b6933e0bc96ed427586b4ac8a8eed7867d431f7a09275e75d68e42ce64a57a78b06ca608b4baeb060db1c6d810eb2be5af9c6d8874793911b1e755fe776d97678699389be10b909a4211ee9ef3c49354f52178b07f7b9242574a807d2fc241bc5d86ebfcfc2e0361c8889aa8383c201e376fe886f87e", 0xd1}, {&(0x7f0000000800)="6be3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efdde0054a863f3d5cfee7d39479b9fa6935849e6098ed884e7cb37b4fe0b20d0000873048af02158c79519eca9f1da89269da4b9eef18ae24b4852c5d0be3cd6fdfffdc51911341aa201b330508b353e6405059e97da02a736e2fc1a99fe484c625633e904410b7fcc0cf4127eb9c4a0c3a8a92676c170526c3ce81ef7a965d2be7890e72b44846f9f60f6a235f9760cfb91fbb03d52453a374f4853f5a472c87bff341bf41a0538c8bf9a8d03861513c26f4c86094a6bcd3afc926bf1867e915e06baa135700309a7d327937fbe670d234339be6779aa28e8a353a7f9d0fb23e929dbe3a5ac480e10078968d61f7bc17", 0x113}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x40840) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000b00)={0xa, 0x4e22, 0xffbffffe, @mcast1, 0x8}, 0x1c) setsockopt$sock_int(r11, 0x1, 0x14, &(0x7f0000000040), 0x50) sendmsg$NL80211_CMD_DEL_PMKSA(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002bbd7000fedb7cb1d5b900000c009900020000003500000014005500f5d5fda5686450d57447beeb9811096a0a00060030605dc1c86a0000"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x80) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000a80)={'pimreg\x00'}) 2.403783037s ago: executing program 3 (id=9506): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvmsg$can_bcm(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001680)=""/196, 0xc4}], 0x1}, 0x40000061) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xc3, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES16=r1], 0xa4}, 0x1, 0x0, 0x0, 0x400040d5}, 0x4c000) (async) r5 = socket(0x1e, 0x4, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async) r7 = socket$inet6(0xa, 0x805, 0x0) (async) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={r9, 0x38, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x40, @empty, 0x4}, @in6={0xa, 0x4e24, 0xffffff0e, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}]}, &(0x7f0000000140)=0x10) (async) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000002c0)='batadv_slave_1\x00') (async) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) (async) sendmsg$tipc(r5, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000000)="b6", 0x1}], 0x1, 0x0, 0x0, 0x8008001}, 0x4800) 2.158220816s ago: executing program 3 (id=9507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x5e38b282e414372c, @default, @bpq0, 0x4, 'syz0\x00', @bcast, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f67001400028006000140000000000600a0f2000900000900010073797a30000000000900020073797a3200000000140000001100010000"], 0x78}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x5e38b282e414372c, @default, @bpq0, 0x4, 'syz0\x00', @bcast, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f67001400028006000140000000000600a0f2000900000900010073797a30000000000900020073797a3200000000140000001100010000"], 0x78}}, 0x0) (async) 2.099158952s ago: executing program 5 (id=9508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000d0601020000000000000000020000080500010007000000050005000000000016000300686173683a6e61742c706f72742c6e6574000000fea81182e51c636021f7e2250723ede5682cf6526f9b5d1900fcff65a5d513317236aacd313edf734c3952d521f7637c1c1e3ebefa3f888ba6b248b3715e761f09fa9f7356f0b68c42daf7120a354ac9000000000000000000000000000000347f713071339db530e310df"], 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x40880) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa8a0a63cdec5908060001080006"], 0x0) close(0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x48}}, 0x0) 1.887929078s ago: executing program 3 (id=9509): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) write$ppp(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc00090009000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x5f, 0x0, 0x0, 0x2663}, 0x0) 1.856561248s ago: executing program 5 (id=9510): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r2 = socket$can_raw(0x1d, 0x3, 0x1) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, &(0x7f0000000000), 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, &(0x7f0000000000), 0x4) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) (async) 1.799319736s ago: executing program 2 (id=9511): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x1fffffffffffffa8, &(0x7f0000000080)=[{}, {}]}) bind$x25(r0, &(0x7f0000000080), 0x12) close(r0) 1.720419655s ago: executing program 6 (id=9512): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000019c0)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x40001, &(0x7f00000001c0)={@align=0x5, {0xb4a8, 0x7, 0xf7, 0xe}}, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x2}, 0x7, &(0x7f00000018c0)=[{0x3, 0x6, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="cf19ff264d0418706ff9c4402e0505339397f9bac085", 0x16, 0x32}, {0x1, 0xf178, &(0x7f0000000300)='\x00', &(0x7f0000000340)="a7dd293144f34e31f0ba099c0aa8fcf9558787b16cf9c529a7f09bf0cbe4043f33398f6aa915458324142540fcdd0c05c4c0dfd687063eea3cb71dc32f8543bd4cb0dc5a89d6506056bc225ad246c2bd95b16b260b5aa81fb8b11a58d96f05c824ddb2976af7fed8bdabb971c1b7", 0x6e, 0x8}, {0x1, 0x8, &(0x7f00000003c0)='\xac[\xb7^$-\x00', &(0x7f0000000500)="67cce6cdeb57e9f0da883ca0a0d6b03140a38ddf76be6e420937ba4613d03f6a2bf413618c766710680849f002e3b960c83d629080e510d715e86a4fba630d34e83ee6ab009e4468e1c1181587240ac7c1494a26e663f11fbba6e049482d34898af197dc78dcf827d532a4a03b60a83062dc7f068bbadc20dc0f5e2a8b4f19e61761077b20a1aa3bc5c7d8066ee3430f5f746f42a17d1faabb1a8871af2b125d7a95e3a40f6919320e6ad49706e5ee67f9adae69547bf507438b9a885eda32190278c45a74303d05bb2fa48fd6c6b0c397e5548401e54294193fc18426ba68dda1fbc7ebaa56641b8d927ecf252e0ca9722607d4d63e27ec780f297338bca03cc593ca6fa7d437169c05c9d461e2dfe5be568407d9c95a9d000b524b52cdc32c50d895ebc19180b6a0bd9fd7801423fbd2aa2eb9b27285e3d00edb14821bf5d94f91d1eeea08b6dc4aa9c8eab9f0f96a13526e609d482e577720c72697f926369c7a78c6b2c4da7ba2371b9b1978e1e5c475111a6f4d105a57d5fa0e540fdb5cbe81152d02cf9bf2f0f60e85788f678a55102548aa25a7decf5dc193c6f34c5185a7d0980d75ed4f129db1baa6c088735db96e118710a9bc9f7b79aa94460427c7cdf0c28197744e19647b092f3b04635ef6c7f64a2f39da0f642b9ee45d4d612f91ab7d2cf281325ffd4300b75f49d286b6414b0fbf7ca5186a9f8393e60de3317964f2108d5cea1bfd52e6bfe999fac59ce32ac563f792e8e3c88769124e05f119fea4c08be4b2766f101a6f2f805b9747d66ea86c4af177573ce0eee92f8aaf5c375eb21c7407fe05cf884475076fb1073afd6445a023920372084186616037fa205ab8873908dfb4c068fc472a67da295aef842106e3b35c7e2e6c59e20cdad7d79e91d65d7863a1c5fcf10d6fa4992012961212a7b1db5a45c8e885c450c83cbc26e7ee8e899fe77348b7d1bb0d9acfceb6fbff94a8f5f2e7f9e7da491365f595e7ed80377eee431cb50b3d77670346d47c7d5db8505d788f075849211cc46672e798f56bffa2e86b9981286dadd59fd34cfb4b9c3c4de86ef32bc9bcc4686a5b51b429f28b0fec02a569824d0790dfe3b86d06959f76b585b0c1f2039b7389f6585a0369b3c18d729e4d1ad5e5ea459e008a031ffdf138f436d5d80d21575e3381c50d88d884f526620efa93a1b0b6310d9cd908ed1727780844e5b1cc027b76e1d29c5b3d295cd7d4eb216b20b6bb02fa2412243a1431001335c0747b406f151b8105d7a7a05234fe439055b5b60991891017b92e873fb54718e7e7be356b0ffd9fc9eff15aa445feb9e2f0d7a2379c5a6e164505aa670e0b42de0757881396807ad57a36e0108e0072c8c00d88770f0534fddb8e53e95270c4e79a35e81973d64b1850a8476bfd0796c0d3772deaae1c0d3fd33a5d637b328dce79f255a638e0c1e99aafdafea215b4b43d197dd67be2615de59107899797ec6ea914d581a16450e254af04f2bfb5ecc65562923a7f418794dd7818ed2b57fc9b7c057695c3caf20b357ffa3538ab951faa94d898a9424042b3a0432479ba491cddc41a14a9429bf8c424ea6a0d38f2dddf7768e6a53c45c92e4420f2e341e639265d39b560c38608c49baa244c7043b61b0bc217ddbe88ccf74ffedd3222e8721a0412ee6744a5851eb83356c7fabd205698c6706974423fed82f4cdac87851a4227d2c39255e1a81f25ba6acf0a536c46e181e3021ba281b92d935e3ffb5a55d59ae55f15a0dc91763f3019e6437e348b3456fbaf86e9f3c92c038c34e68d5a109bb4ea10960b9bc97321d0ab330348db13c2235c33e056918fa2c1f889f0fdc7a30e13bd696398dcd4d5243ea2d563d5ac5ba9fd1ec20832b22793f917ff0ee21ac804221737f3947f618387ad7f6a4952a54ae2bf158f4783676929647552e412fe34ea5e6c32cdc28d46c9e23c96236ea4fdcd174831983bda701bcf2af57952005f3f003fae7cf0d19291315bbc1e11a2d7b5eac6a605b6d39e5a214850d7736af598a3cb10a47b44253f411d7b13cbbb43fb031eae7235dfac5f0bdf6fec59143c513b109d7c17decca197a8f03bf9e3d4bdb66705e23356ba7e05cbc7e7865196fe83207a285a80c75d828baf0a8ba477e926b796c0fd7ee561ff2b65f2c09f66f84e4fd8e424d0488beec87e32b3d351447fac50a173da2fdced120ba0642658a4d7095a8c72a030c26a52b00b501a1e18f1673e272fbe2794038a6f99bec5ce80493712b17a1e259b90d7d386100477202f570b2df1e2dcb5147bf85c9ef8dd2ba4a8b03e2281097fdd18b36b62e97a174cbc52c4d54c24deb651e5abf8ef46621df99de09c2d9926079580570b8c80a0c7951c2794ddfdea8ecdd8c295a766a1a8f6fc2500ec0c4af041f3e4b00c1338d8e57fb1e89fbee0885dfb402edf648697fce2d25da0ede551e9bee65540ba7897053fe29d09c10d88d1cf4d74ae439743be2ca18c57a22bc1bbe7d3aa9e2f54874f17c92737b2e945f4a6b31c790bbb8fabd64ef45445e01f1f82feb93009da3b8e3c5ad9f27dd010090ba5057665a62527cb765cdea93a2f5a58ec214729734659c2881fd1df2c1cbf284bf1b02fbef483dd7e5849a46b133715a3f0b975556a3c013eb507520c29eae86f3afb150d2bca217e4ec28e10b95d570c1fc154110bfa3940e0e37a936fdbe0577a75a7e37ae4982799f98bc7b319269206a2ed6524262c4f073026b02615789b200fae98d8ba299c881864aa69f8162a67df8925b7373d7f8c691570bf422506e3e4f672a40bb2413e2e69a01c1f8069e42cad7bcec8951daccebbbc0f466211e7b580bab845822fb3309bf36944efe0f04c642e5ee9c4e2742ab2c47312935a3d9f36d22097f4930e4d77f407c108716e60750fd93e1d0c2da0b351bf8f0cdc12f58245ead90b5439a693157801440589d9331b0d2b09fecc165caf06f642df3eb846ad94c0821d08e72e62b7cccab3ef689a55768a44dafc3daaa396792ad64356b2c3a44221260ffe9241d5a71d9c428b3f95ba7c6c94587e9e7c22c4febb3377652c1a6587ace011a5e4e620e73172998d994ab90cc8e5c18e8e5122b3e458d523369c37d8a66d2dcbb688f99b89a0972fdeefe3e71b7f65ce79266255b422450a2ecd6776600096e8f38973ae87ef5efb422ef7cf878e630c1ff102ca79592a8ecb746ca8324b45f4c252909e6e9e67564750d46c170db01a29c04107858756ee0d245a0fc4ce8074a20566f7436651d70fb79f49dc33cc2d005102023651d2e60d0cbc107bac1a85043a7d76621ccc6e1a4a29bba85dfbb31ce6474fb8b4cd7177da39cc95556f411e6aedcaed7d6d0ccdfcac8aa954bbd174575d7fe72dfa242a014cd8382f421dc9c21977e3074c31ed51e19dfb188dcea34ae14d2212a73165bc85f2c87302b9cdd77bb120025cebab85ddeea77dc03dc2a40e6bd9e2a257811c283764118a2da1c667c5a49ecd2a8d729e758dadc039f4a17168d684b5a55ba9106136dd0d7587d77d6e74757756152907a757437a2a58ce6acb29fd96417527c61e6981192ac0391894d11c468fb3f2a0bcb06271f61bd8cb2cbe7d4dff2e017971f52f725b8321d76b6e64117ba54462d99b2ee4f034e42b6cda275dc37c1a69e1870b9c6d4a20d26ce662fe4eb5d5a1d9bd4967d7954b9d8f5d179d872660cc596ed8f9ee1d60d6283f0518fcd0619e1c41bf0733b530fd48078cb43f2c65f13f99f7ccafd8365fceee47a30afd681e5805d9e293dd58cef58ad98a911bc65d35d6a1aca247a58ee6d6fc46c33e91c684bfdfd0b1bfc41a5befd848097f6c08faf68fac22f58e6ec25b417cf8ce0c610233a2bb2dc41af03d08fb5091cfd094c4858b40010f9bbf0daa61c44b5fd715a5b9b57b8a974cd538a2ebdba3717bb0b38868e95f1078b69b3dc28a2f8c2f348e032a0fa87ce2edfceda6407d2ceaca472ade2e287f147454cc56ad2bef11e994f05afdec81e5778b8db46e40480cbbc2da3216d77aa892b35c3923a0f174e9f16feb18bc5f4cea4cc611f1cac2227ed425033e292926ea0b2dc56de4d7fbcde3671ff222af5e675bb095f325202a7062eac134aa391b2840af5964c3f6cbaecd726524cc01db389620c12eb016b9789904205fe7ce5bce30125647a4db45810593d155c8898ff4479aa46ebe9d785e5bda2e20ee1bad8e07d85ce416062bf7b14fb2602079530e56ef5666a6f91ae4993276c084f0dd92d444552c3de3b06d8fdd125ae44cf0e9e22052922907e5c9dd18bc6e496112fdf63bffd787294f69583048a6ac041fe38f7ee01a0c4cb466999f8d58b16fe3a8919bbad1cdf0ca6058f4ea1822caf07c4ad882fb08d400721f72fecf84c3fe54eb01050b846950b41206555c6fa6e473bbb0f27b99c8b89252738915d8f578e1bc680da0a4bc63de2f3697f95902f452a9897ac59be6516cc213d97a764486cad6c0c211986a83040c90cfb2688e648803680c1ce1dd60ac36d90fd36fecd3481ef91e0fe486b89336e36cf7f4336cea2c48afdd6e04a89ff0de8cc072295fb7344cb3a03e1f3b949f1be261d61f19f596938d9c117bf76b90a91b623956d922fc9e9260630f1873ea7314099dddbfd21cadcee6470440e6443189b4a189dad7bfde6615d1bace6989bce96d2e0d7b6eedce840957f3314960e7dd6b9c3a72e13ed1fad8e818adb79a3c5abb1ccc5f20b18ceb4ba09e848fe5e435ec27be89fe26ab9ccd5be0e9a62cd5ee8867d09937f6d7dca87c001a033c7befb56ce75c7fb17e3b2207c8fc46967d823292bbe275cf63a98acd8f87aa080e65bf796d76491fff37a6b5adcfe65d1c10c6fc5cbb12588b2f025aa52645df3ea7a62d112117e43c8bac0e55c7521c21f2cb33bcd7200e30eae8d206058cb8392196201b1d7718f1b593b56ad18c0610d1af6fd190bb68c93fd9c1698f9e7f61508c9bf2475aa4eff85093dd29c5ddf6cde863148e6f42bdcc43761d87b2780ad2fcd8f8acf0e473f573c28d86467a1686513d307e2272644d24b34a192a43b7ddd789db9c82464ab39a0f82ebe3991248fde4ef48c9d19437a1d103fd47e910fcdfabfa5e346506b8292f510c146cf73e193818a76b1e793ec6d540aac7bee94337ea7ace8f72f6ae64d2cb69733484229bb98bcbecfe9198476ebc2f96e623d634a1756374108934777a97efdf9ff32688896aeac021a2fb407bb51fef585beb958afab0a6145d96b36caa59384c349a164d1184ddc8d7b72475c6e71ac5a536cbc1ab9d94891cd08fa535e534c34f337a98156ec60193b7517a06d6939fe08b47f3f69b677b2adbd844446d9b2f4e14b91bff7a4bc2b00cda2ef38a5f9fedc93dd5375dad6861ccb1c92fb0be95e401c72f44e3d838945163776b2c772407d6f97a9de8b26e25058c43efdeb8452518b3f7a2d13216d4e6c41507ed7b8cb5748154bd11456764f59bb0e976e7bafe1a9abd6bcd7be134ed002d6f385045f5ace0a312ef674a848e1081a3a93383a756724465e8bb5ef6ff05570415ca5a11efbed62c6d0abdf96980601c74c9d241dff30001961500fbd5d415fe27d4c4d5df4e461368106cbe705620645b4cc446e353662431a77ef10613b387ad95b43bea07fea991365b03f9bfed710d7e9748d8c986a4206df732a69e1e2ce0ed43280face80e5e8dc638396cff4aec34b0b0a687a3ae09f3f2aa2d367d6a8a4cd9d7f541ca3c175e874e5d1a2ff646a68091b9fdf9ad576cdd534a", 0x1000, 0x30}, {0x2, 0x1ff, &(0x7f0000001500)='\x00', &(0x7f0000001540)="46ca0b58507caeffc6f5d38d5e1a96b2b3a53ffd75210f2579a23ecccb715a9dd896e32d540233a76cb8389ceff28cfaf293695bb2eed7a7af8eb3b5b367cb47ea11213561cc98a9415a9acdedea617fe04de1e82f0511910e8843e8afdda30ed4ad1ff53e9ef59a3b845e645ddacf218bed5e35fb1bb9240526211393cc03ee1766ee7e868aab854596cb2c1a35087dcdcd34b3a49d2c55d8df1dfae21ad6d7a393c9968fc7f34b687b1c08f3a26e7c793eea1830f6", 0xb6, 0xa}, {0x1, 0x6, &(0x7f0000001600)='@#[*\\\'^]\\,\'-/\\\x00', &(0x7f0000001640)="aee3efd49c037eb92a3113385013bd8e8140a10da4dc9714133ca93d6672d37b5786440b636ebcac2e4fcdb3208abf262de9536d2c9e6cb93b97730ff39096b5cfe5709b69f631d4f4532a36764193463f3a1e1abb2bd9ba3ec4c287fad4a387d124ed3039531313031477831e13ff03ebd6a61676be756451246392bf645ca294904b25fb451e5b", 0x88, 0x28}, {0x2, 0x9, &(0x7f0000001700)='\x00', &(0x7f0000001740)="7ac233b5ef129b9c32adddf4e755f30a94aed000d354883174ac85efe5da3581617c7ad4ff182ccc00be205ce2d055c0b8f7ac7fe33c3fa0179a197d6bfe8b73efab55b4fcd20f579b11218e6c57126c7becece48574e32ffe6045ee96a8552480e31ec80439132f4c011bb58a46a7c9d7192196dedaf6c8ed3febf9d98d47bb9ae058475a657da88e04af96", 0x8c, 0x8}, {0x1, 0x5, &(0x7f0000001800)='\x00', &(0x7f0000001840)="606ee9ff6e9c3f57d3eee84f163677f2720b826e45086712eeb3cf71858fcde04b5052879719c0be986daac5b7bab68094350e286578e5e34230cf012aba46bf1467904a004984c1ea37ab56e7fd47516dc8eed6b848062a11d924d063f5b45fb72261b55a17a1", 0x67, 0xa}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001ac0)={'ip6_vti0\x00', &(0x7f0000001a40)={'ip6_vti0\x00', 0x0, 0x29, 0xd6, 0x10, 0x9, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x700, 0x34, 0x9}}) r2 = socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x6a, 0x2, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x38, 0x2100) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x7, 0x2, 0x9505, r0, 0x9a49, '\x00', r1, r0, 0x0, 0x1, 0x3, 0x8, @value=r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18c30000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000190000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x90) 1.696483538s ago: executing program 0 (id=9513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0xc008}, 0x4008010) 1.696229764s ago: executing program 5 (id=9514): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffd}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xa9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000020101010000000000822c0203ada9"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x814) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x11) 1.623271597s ago: executing program 6 (id=9515): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="144b002c00"/20], 0x14}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x412441, 0x0, 0xf, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r3, 0x0) unshare(0x22020400) (async) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r4, &(0x7f0000000200)=""/196, 0xc4) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r8, 0x0) (async) getsockopt$ax25_int(r7, 0x101, 0xc, 0x0, &(0x7f0000000080)) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r9) (async) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESHEX=r9, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40440c5}, 0x24040004) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000000100), 0xff1d, 0x24008880, &(0x7f00000001c0)={0xa, 0x2, 0xfffffff4, @loopback, 0x1}, 0xffffffffffffffde) 1.572534177s ago: executing program 3 (id=9516): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) close(r2) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)="189d679800d4c33d92a5bf43a971197d414448b9f5f932f5cb8789a4da36d2969c97006a03f9089e1ba46e664ddaa9b46a5cdc8b6cec375f9abec64ba7c6c46e76ddd26154facaf9d5dc375f4ece5d81f22062b7cd", 0x55}], 0x1, 0xf, 0x8) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r5}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r6}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 1.500150557s ago: executing program 0 (id=9517): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) (async) close(r3) recvmmsg(r1, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) pread64(r0, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) 1.487771183s ago: executing program 6 (id=9518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x24, r4, 0xf81, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1000000}, @val={0x8}, @void}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = epoll_create(0x4) epoll_pwait(r6, &(0x7f0000000740)=[{}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r8 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x4c}, 0x4c}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x2008c054) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x2}, {0x0}, &(0x7f0000001880)=[{0x0}], 0x1}}], 0x48, 0x24080080}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x38, r11, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x7fff, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.39955756s ago: executing program 2 (id=9519): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r1, 0x1) (async) setsockopt(r1, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) r2 = socket(0x11, 0x80a, 0x0) getpeername$llc(r2, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) 1.378608686s ago: executing program 0 (id=9520): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x5}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) pipe(&(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f00000000c0), 0x0}, 0x20) r3 = socket$packet(0x11, 0x0, 0x300) sendto$packet(r3, &(0x7f0000000100)="7add57615aa8e4ff0560fc5c67f6e758358f18569530dd3bb0fc70c371bce162e0d71e5ac807f81a2d552094b47af9b3fe414b0828da21444e431f519a6e11b7e0868875278685eb38a20b5f344ea15c29ac19e48f6127eed5727c6caaa3e51593dda97eb5c1d36f68e4", 0x6a, 0x4004000, &(0x7f0000000180)={0x11, 0x1a, 0x0, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB="5975e2dd", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf250100000018000180140002006970766c616e31000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r6, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40895}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000040)={r8}, &(0x7f0000001080)=0x8) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0x3, 0x4) 1.302078581s ago: executing program 0 (id=9521): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r4, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r5, 0x29, 0x13, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1c}, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a916a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d", 0x9a}, {&(0x7f0000001300)="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", 0xc9c}, {&(0x7f00000006c0)="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", 0x157}, {&(0x7f0000000440)="3ea19d23fdff85b98167afea622d36dd6e11d4df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16c886cf6c2f29efe80b9278733906d142aff5d2926a9a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6d67734e44835fcd6d23a0d7e00b73ac7", 0xe0}, {&(0x7f00000008c0)="a5ca8683d601768d343ca112b53e7aa9b7692478467c2525cc9cef426e1540e3b29380122d838019715ede6740900e4a5b9097b6713ba207b45f64e07e8d44f24c842b84e2c5c3d4175f2c59ef949b2cfb2b1722cf08388fed3e7ff321", 0x5d}, {&(0x7f0000000540)="ae1eb08e76da55a98d02457c4fdf96e71875cb9ab00c0e59fe9195c3f978c60984a60dcec25b9da5fc995d7be8ca47a6116cd5238dc093c79cd266e36f7cdf9da2", 0x41}], 0x6}, 0x8bb3a301eb085f) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r9, @ANYBLOB="8000260b0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) 1.015716556s ago: executing program 2 (id=9522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe4, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfe}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4048814}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180"], 0x78}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000000ff00000000000c0016800800020006000000060015000a"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x40080) 1.014944285s ago: executing program 5 (id=9523): r0 = socket(0x2, 0x3, 0xff) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}, 0xf5ffffff}], 0x1, 0x0) 1.010522622s ago: executing program 3 (id=9524): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x6, 0x4, 0x8, {0x7, 0x0, 0x6, 0x80, 0x2}, {0x0, 0x1, 0x1, 0xc05, 0x77}, 0x2, 0x5, 0xffffffff}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltclass={0xb8, 0x29, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xb, 0xfff1}, {0x3, 0xfff3}, {0x8, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x9}}, @TCA_RATE={0x6, 0x5, {0x87, 0x7}}, @TCA_RATE={0x0, 0x5, {0x31, 0xff}}, @TCA_RATE={0x6, 0x5, {0xa0, 0x7}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200008c2}, 0x8800) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x40047452, 0x0) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x6, 0x4, 0x8, {0x7, 0x0, 0x6, 0x80, 0x2}, {0x0, 0x1, 0x1, 0xc05, 0x77}, 0x2, 0x5, 0xffffffff}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltclass={0xb8, 0x29, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xb, 0xfff1}, {0x3, 0xfff3}, {0x8, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x9}}, @TCA_RATE={0x6, 0x5, {0x87, 0x7}}, @TCA_RATE={0x0, 0x5, {0x31, 0xff}}, @TCA_RATE={0x6, 0x5, {0xa0, 0x7}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200008c2}, 0x8800) (async) socket$packet(0x11, 0x3, 0x300) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x40047452, 0x0) (async) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) (async) 862.975384ms ago: executing program 5 (id=9525): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x64, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c70fd630fb25a4612477bd2c3a9377dcb8d4a8b0cf83d71230b50640980ef758"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x7}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x64, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c70fd630fb25a4612477bd2c3a9377dcb8d4a8b0cf83d71230b50640980ef758"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x7}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(r5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01"], 0x1c}}, 0x0) 739.578513ms ago: executing program 6 (id=9526): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x8090) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x58, r0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x4ee4, 0x8, 0x40]}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/102, 0x66}], 0x1}, 0x2041) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@jmp={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0}], {0x95, 0x0, 0x0, 0x1a03d3}}, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 735.353789ms ago: executing program 0 (id=9527): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000080060a0904000000000000000002000000300004802c0001800b0001006e756d67656e00001c00028008000240000000040800034000000001080001400000000809000100737942917a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090025bd7000000000000400000008001a"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8020, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r0, 0xa5bf8000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 214.458766ms ago: executing program 6 (id=9528): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x10c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x203}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x10c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x203}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socket$kcm(0xa, 0x5, 0x0) 107.398627ms ago: executing program 3 (id=9529): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @mcast2, 0x1}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x884) 105.9876ms ago: executing program 2 (id=9530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x3, 0xe, 0xa2}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x0, 0x10000]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x44, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x20}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000180)=""/200) 72.017056ms ago: executing program 5 (id=9531): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002600010026bdf0fddbdf2505020000e18c54ba7eb59715739138942e0866cc1d7177946914fe9b0dcb269074b48496d62804ec82773775ff5f2ef129c142bbaa34158404f31bb41870175a0100"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r2 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000840)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000a006472416c4974a29786df125cfe694bd17c3dbdfa538fbd8d062d208b6dfef43e3b19a2cad994f9d67c796c98e218aa111df640ad95a1e81fac82f7d0b7c62452be50984e25d34d185af2aec1ab76b75f27410db06fe40048e9e1e06b025aca2e140ad89c1ebfb4726cb4919850d3d0a392ab5d73669491987a83cacd3796377f00000000000000eeef7b753732ea5db790dbb188d721a73606a46bd5ce37906fecd6de935d52c0a7084ec050606aaabc7db66f461ca7b3e201993fbfcde39e044773071cc90e1fb2e95e5a623b553cb8ce2f8cf7af9a041716e600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e9141a0a0b9bef84337dc55b07b7afef6dfb59abc37055d6ae83c8007fe09d3d5da059366493f1eb7dcf869cf34493a3cbfe1858297b600551a94c4d0e08e74470f59f8f260b3bdefebf2cafce80966f8936519342a0906f8a4b6045e5af8e47164747adda162ffb87b745421a78012add29ac968d977e3bfc56c50234e39ccdff8c4af1831ccd4163e189f12f5fc315b46cb069"], 0x48) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@ipv6_deladdr={0x34, 0x15, 0x300, 0x70bd2a, 0x25dfdbfc, {0xa, 0x78, 0xde, 0xfd}, [@IFA_TARGET_NETNSID={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0xf, 0x50d1, 0xff}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x8812) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008001) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff3}, {0x1, 0xfff1}, {0x2, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x807f9, 0xb6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x800, 0x0, 0x1, 0x1, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x800, 0x0, 0xff}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r7, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)=ANY=[@ANYBLOB="1c0000000c0601030000000000000000000000000500011007000000"], 0x1c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x4004000) 50.052734ms ago: executing program 0 (id=9532): r0 = socket(0x1a, 0x3, 0xff) close(r0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x83, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b70500000000000061103000000000001fa00000000000009500000000000000f0d9a99cb9f8c4b2fed932bbd1412a027ba7c6ecff0bd91d19b73f537677bae25db3bd3d96610a039a40966ad9e5f40a9648cc929767e64b07a273f8f61d2f76ea0351f414d2a48925745d787bc137a762a0c222b1fb9b99cd82af2af6df42a68663a836307fffbdeeb56d0e5075b4fb9cf93f680650e4fa558a1f16c679f3c8f401e5ef86bb71c53a30df90395a3d37080db73b276f4d43b27d648d71c8a4cf26b8eb82aa5a61806ce0e50089edee66797f35"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000140)={0x48, r6, 0xf21, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x5c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) sendto$inet(0xffffffffffffffff, &(0x7f0000000680)="0f83b07ef75b5ff0f2d163c7c8a0d8fb8ab88f5b134df9ffffffffcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd0e9e56c09b32b72354a696e94319f06ac0dd877aa14164c3b43f0ecedff96dcd9806d6c2806887a178cddbb852631d491efd8f552ccb4c364fac1109aad421358bb770cc42c580f63b3092925c9fb490487aa3a22ea0c69c7d1781d244456c8c4d638e59abeda376c286a4de9270c432bd169cd", 0xad, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @private=0xa010101}, 0x10) 0s ago: executing program 6 (id=9533): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet6(0xa, 0x5, 0x87de) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socket$inet6(0xa, 0x5, 0x87de) (async) kernel console output (not intermixed with test programs): ocess `syz.1.7965'. [ 927.850348][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 931.694632][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.703537][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 936.970204][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 936.978285][ C1] lec:lec_tx_timeout: lec0 [ 937.360960][T18598] lec:lec_start_xmit: lec0:No lecd attached [ 942.970114][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5610 ms [ 942.978270][ C1] lec:lec_tx_timeout: lec0 [ 944.490401][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 944.513107][ T5160] block nbd0: Possible stuck request ffff888026860000: control (read@0,1024B). Runtime 30 seconds [ 944.525734][ T5160] block nbd0: Possible stuck request ffff888026860200: control (read@1024,1024B). Runtime 30 seconds [ 944.536942][ T5160] block nbd0: Possible stuck request ffff888026860400: control (read@2048,1024B). Runtime 30 seconds [ 944.547992][ T5160] block nbd0: Possible stuck request ffff888026860600: control (read@3072,1024B). Runtime 30 seconds [ 945.735086][ T2833] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 945.749620][ T2843] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 945.762032][ T2847] ipt_rpfilter: unknown options [ 946.128860][ T2871] syzkaller0: entered promiscuous mode [ 946.134990][ T2871] syzkaller0: entered allmulticast mode [ 946.281437][ T2882] IPv4: Oversized IP packet from 127.202.26.0 [ 946.291291][ T2882] wg1: entered promiscuous mode [ 946.296224][ T2882] wg1: entered allmulticast mode [ 946.313304][ T2886] __nla_validate_parse: 1 callbacks suppressed [ 946.313330][ T2886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7984'. [ 946.338289][ T2886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7984'. [ 946.349223][ T2886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7984'. [ 946.543277][ T2899] netlink: 'syz.3.7988': attribute type 3 has an invalid length. [ 946.560496][ T2899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7988'. [ 946.660191][ T2906] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.7989'. [ 946.844369][ T2919] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7994'. [ 946.861698][ T2914] lo speed is unknown, defaulting to 1000 [ 946.917844][ T2914] lo speed is unknown, defaulting to 1000 [ 946.924197][ T2919] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 946.971991][ T2914] lo speed is unknown, defaulting to 1000 [ 947.025576][ T2928] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 947.055625][ T2928] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 947.467679][ T2922] openvswitch: netlink: Message has 1 unknown bytes. [ 947.483541][ T2922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.683586][ T2946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8001'. [ 947.724524][ T2946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8001'. [ 947.893382][ T2914] infiniband s: set down [ 947.897907][T24973] lo speed is unknown, defaulting to 1000 [ 947.915427][ T2914] infiniband s: added lo [ 947.955788][ T2914] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 947.957943][ T2914] infiniband s: Couldn't open port 1 [ 947.998325][ T2914] RDS/IB: s: added [ 948.003671][ T2914] smc: adding ib device s with port count 1 [ 948.009944][ T2914] smc: ib device s port 1 has no pnetid [ 948.077763][ T10] lo speed is unknown, defaulting to 1000 [ 948.094308][ T2957] netlink: 'syz.0.8004': attribute type 2 has an invalid length. [ 948.143987][ T2914] lo speed is unknown, defaulting to 1000 [ 948.439556][ T2985] lo speed is unknown, defaulting to 1000 [ 948.460540][ T2992] syzkaller0: entered promiscuous mode [ 948.466097][ T2992] syzkaller0: entered allmulticast mode [ 948.756271][ T2985] lo speed is unknown, defaulting to 1000 [ 949.002673][ T3013] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8018'. [ 949.203432][ T2914] lo speed is unknown, defaulting to 1000 [ 949.328658][ T3029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8022'. [ 949.868604][ T2914] lo speed is unknown, defaulting to 1000 [ 950.031431][ T3068] netlink: 'syz.2.8033': attribute type 13 has an invalid length. [ 950.041974][ T3068] netlink: 'syz.2.8033': attribute type 58 has an invalid length. [ 950.279777][ T2914] lo speed is unknown, defaulting to 1000 [ 950.372311][ T3080] IPv6: sit3: Disabled Multicast RS [ 950.379147][ T3080] sit3: entered allmulticast mode [ 950.645787][ T2914] lo speed is unknown, defaulting to 1000 [ 950.956913][ T2914] lo speed is unknown, defaulting to 1000 [ 951.355078][ T3123] __nla_validate_parse: 9 callbacks suppressed [ 951.355101][ T3123] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8054'. [ 951.378540][ T3123] netlink: 'syz.5.8054': attribute type 1 has an invalid length. [ 951.465268][ T2914] lo speed is unknown, defaulting to 1000 [ 951.505843][ T3135] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8057'. [ 951.799518][ T2914] lo speed is unknown, defaulting to 1000 [ 951.927838][ T3155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8065'. [ 951.963037][ T3155] openvswitch: netlink: Unknown nsh attribute 0 [ 952.045203][ T3158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8067'. [ 952.054577][ T3158] netlink: 'syz.3.8067': attribute type 3 has an invalid length. [ 952.215921][ T3166] netlink: 'syz.2.8069': attribute type 4 has an invalid length. [ 952.224743][ T2914] lo speed is unknown, defaulting to 1000 [ 952.719881][ T3181] openvswitch: netlink: Actions may not be safe on all matching packets [ 952.745998][ T3181] netlink: 'syz.1.8075': attribute type 19 has an invalid length. [ 952.877907][ T3190] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 953.191425][ T3207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8082'. [ 953.209463][ T3209] netlink: 'syz.1.8083': attribute type 1 has an invalid length. [ 953.255047][ T3207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8082'. [ 953.442003][ T3225] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8088'. [ 953.577269][ T3229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8090'. [ 953.635594][ T3235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8091'. [ 954.286995][ T3265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8097'. [ 954.826978][ T3296] scsi_nl_rcv_msg: discarding partial skb [ 955.191579][ T3318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 955.442300][ T3330] vlan4: entered allmulticast mode [ 955.822250][ T3352] syzkaller0: entered promiscuous mode [ 955.827819][ T3352] syzkaller0: entered allmulticast mode [ 955.871271][ T3352] tc action pedit offset must be on 32 bit boundaries [ 956.354996][ T3370] netlink: 'syz.5.8128': attribute type 1 has an invalid length. [ 956.408712][ T3372] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20003 [ 956.491836][ T3375] syzkaller0: entered promiscuous mode [ 956.497383][ T3375] syzkaller0: entered allmulticast mode [ 956.868325][ T3393] __nla_validate_parse: 3 callbacks suppressed [ 956.868348][ T3393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8136'. [ 956.901813][ T3393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8136'. [ 956.920626][ T3393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8136'. [ 957.021869][ T3405] veth0: entered promiscuous mode [ 957.027684][ T3405] veth0: left promiscuous mode [ 957.096736][ T3407] netlink: 640 bytes leftover after parsing attributes in process `syz.3.8139'. [ 957.116182][ T3407] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 957.295636][ T3416] xt_HMARK: spi-set and port-set can't be combined [ 957.318844][ T3417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8141'. [ 957.446151][ T3428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8144'. [ 957.583421][ T3438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8148'. [ 957.619645][ T3438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8148'. [ 957.635358][ T3438] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8148'. [ 957.656594][ T3438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8148'. [ 958.738416][ T3504] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 958.896885][ T3518] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 958.905122][ T3517] netlink: 'syz.3.8173': attribute type 10 has an invalid length. [ 959.412295][ T3544] : renamed from bond0 (while UP) [ 959.498397][ T3545] netlink: set zone limit has 4 unknown bytes [ 959.665845][ T3562] netlink: 'syz.5.8185': attribute type 1 has an invalid length. [ 959.904161][ T3570] netlink: 'syz.3.8188': attribute type 1 has an invalid length. [ 959.979899][ T3575] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 960.196942][ T3582] netlink: 'syz.0.8195': attribute type 1 has an invalid length. [ 960.303316][ T3588] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 960.388436][ T3593] "syz.5.8198" (3593) uses obsolete ecb(arc4) skcipher [ 960.950692][ T3626] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 961.048935][ T3633] ieee802154 phy1 wpan1: encryption failed: -90 [ 961.339568][ T3650] syzkaller0: entered promiscuous mode [ 961.349043][ T3650] syzkaller0: entered allmulticast mode [ 961.856333][ T3696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.872743][ T3696] netlink: 'syz.3.8231': attribute type 10 has an invalid length. [ 961.891950][ T3696] wlan1: mtu less than device minimum [ 961.897407][ T3696] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 961.941532][ T3691] __nla_validate_parse: 18 callbacks suppressed [ 961.941556][ T3691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8229'. [ 961.960201][ T3691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8229'. [ 961.978228][ T3691] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8229'. [ 962.271491][ T3714] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8236'. [ 962.282143][ T3715] netlink: 'syz.2.8237': attribute type 62 has an invalid length. [ 962.292463][ T3710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8236'. [ 962.395223][ T3721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8239'. [ 962.719326][ T3740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8247'. [ 962.753694][ T30] audit: type=1800 audit(1775959562.683:5): pid=3741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8247" name="memory.events" dev="tmpfs" ino=2108 res=0 errno=0 [ 962.785328][ T30] audit: type=1804 audit(1775959562.713:6): pid=3741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.8247" name="/newroot/410/memory.events" dev="tmpfs" ino=2108 res=1 errno=0 [ 962.994847][ T3755] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8249'. [ 962.994846][ T3751] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8249'. [ 962.994875][ T3751] openvswitch: netlink: Flow key attr not present in new flow. [ 963.010371][ T3755] openvswitch: netlink: Flow key attr not present in new flow. [ 964.672691][ T3750] netlink: 'syz.3.8249': attribute type 4 has an invalid length. [ 964.691600][ T3758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 964.780352][ T3769] SET target dimension over the limit! [ 964.825514][ T3775] syzkaller0: entered promiscuous mode [ 964.849412][ T3775] syzkaller0: entered allmulticast mode [ 965.122832][ T3792] : left promiscuous mode [ 965.554016][ T3805] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8264'. [ 965.681233][ T3805] lo speed is unknown, defaulting to 1000 [ 965.689151][ T3805] lo speed is unknown, defaulting to 1000 [ 965.822124][ T3815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.838130][ T3817] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 965.848421][ T3817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.865516][ T3815] netlink: 'syz.2.8267': attribute type 11 has an invalid length. [ 966.045310][ T3822] lo speed is unknown, defaulting to 1000 [ 966.077007][ T3822] lo speed is unknown, defaulting to 1000 [ 966.371372][ T3834] SET target dimension over the limit! [ 967.200890][ T3872] IPv6: addrconf: prefix option has invalid lifetime [ 967.240705][ T3873] IPv6: addrconf: prefix option has invalid lifetime [ 967.456569][ T3884] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 967.542673][ T3890] __nla_validate_parse: 3 callbacks suppressed [ 967.542689][ T3890] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8290'. [ 968.050356][ T3924] netlink: 'syz.0.8299': attribute type 11 has an invalid length. [ 968.059506][ T3924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8299'. [ 968.456470][ T3954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8306'. [ 968.475711][ T3954] hsr_slave_1: left promiscuous mode [ 968.485264][ T3955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8308'. [ 968.692808][ T3968] netlink: zone id is out of range [ 968.698006][ T3968] netlink: del zone limit has 4 unknown bytes [ 968.713916][ T3972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8310'. [ 968.808643][ T3979] netlink: 'syz.3.8314': attribute type 1 has an invalid length. [ 968.824948][ T3979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8314'. [ 969.138777][ T3999] syzkaller1: entered promiscuous mode [ 969.145809][ T3999] syzkaller1: entered allmulticast mode [ 969.187703][ T3997] syzkaller0: entered promiscuous mode [ 969.194732][ T3997] syzkaller0: entered allmulticast mode [ 969.253224][ T4003] bridge0: port 1(0x9) entered blocking state [ 969.259779][ T4003] bridge0: port 1(0x9) entered forwarding state [ 969.308229][ T4003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 969.415094][ T4014] netlink: 'syz.0.8324': attribute type 1 has an invalid length. [ 969.423407][ T4014] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8324'. [ 969.722603][ T4034] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 969.732546][ T4034] team0: Device macvlan3 is already an upper device of the team interface [ 969.776604][ T4035] netlink: 'syz.0.8329': attribute type 1 has an invalid length. [ 969.844551][ T4041] xt_nfacct: accounting object `syz1' does not exist [ 969.854255][ T4043] xt_ecn: cannot match TCP bits for non-tcp packets [ 974.571751][ T5160] block nbd0: Connection timed out, retrying (0/1 alive) [ 974.579532][ T5160] block nbd0: Connection timed out, retrying (0/1 alive) [ 974.588431][ T5160] block nbd0: Connection timed out, retrying (0/1 alive) [ 974.597245][ T5160] block nbd0: Connection timed out, retrying (0/1 alive) [ 974.605382][ T25] block nbd0: Dead connection, failed to find a fallback [ 977.247973][ T5195] udevd[5195]: worker [1981] /devices/virtual/block/nbd0 is taking a long time [ 979.050373][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 991.883426][ T4059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8336'. [ 991.932162][ T4060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8336'. [ 992.007441][T21212] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 992.029355][T21212] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 992.039425][T21212] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 992.053607][ T4057] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8338'. [ 992.076379][T21212] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 992.094982][T21212] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 992.202972][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 992.214200][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 992.222477][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 992.232282][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 992.241587][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 992.304260][ T4074] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8343'. [ 992.324830][ T4078] netlink: 'syz.5.8342': attribute type 1 has an invalid length. [ 992.358993][ T4062] lo speed is unknown, defaulting to 1000 [ 992.406478][ T4062] lo speed is unknown, defaulting to 1000 [ 992.509562][ T4085] netlink: 'syz.5.8345': attribute type 25 has an invalid length. [ 992.569945][ T4087] netlink: 'syz.0.8346': attribute type 1 has an invalid length. [ 992.618278][ T4087] bond8: entered promiscuous mode [ 992.624372][ T4087] 8021q: adding VLAN 0 to HW filter on device bond8 [ 992.643329][ T4092] bond0: (slave bond_slave_1): Enslaving as a backup interface with an up link [ 992.646833][ T4087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8346'. [ 992.689002][ T4087] bond8: entered allmulticast mode [ 992.768790][ T4099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8349'. [ 992.780119][ T4098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8349'. [ 992.789663][ T4098] bridge0: left allmulticast mode [ 992.989577][ T4103] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 993.146296][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.155288][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 993.244224][ T4121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8355'. [ 993.488729][ T4062] chnl_net:caif_netlink_parms(): no params data found [ 993.788929][ T4062] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.797430][ T4062] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.805234][ T4062] bridge_slave_0: entered allmulticast mode [ 993.813673][ T4062] bridge_slave_0: entered promiscuous mode [ 993.824561][ T4062] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.832343][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.839967][ T4062] bridge_slave_1: entered allmulticast mode [ 993.848392][ T4062] bridge_slave_1: entered promiscuous mode [ 993.923221][ T4062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.955814][ T4062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.099310][ T4062] team0: Port device team_slave_0 added [ 994.124761][ T4062] team0: Port device team_slave_1 added [ 994.206545][ T4062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.220051][ T4062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.267688][ T4062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.291379][ T4180] IPv6: NLM_F_CREATE should be specified when creating new route [ 994.299271][ T4180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8375'. [ 994.314202][ T4062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.321569][ T4062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.331000][ T5838] Bluetooth: hci0: command tx timeout [ 994.355262][ T4180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8375'. [ 994.367496][ T4062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.618228][ T4062] hsr_slave_0: entered promiscuous mode [ 994.625637][ T4062] hsr_slave_1: entered promiscuous mode [ 994.636316][ T4062] debugfs: 'hsr0' already exists in 'hsr' [ 994.642931][ T4062] Cannot create hsr debugfs directory [ 994.738486][ T4195] erspan0: entered promiscuous mode [ 994.747851][ T4195] erspan0: left promiscuous mode [ 994.767762][ T4195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.805092][ T4195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.843865][ T4195] netlink: 'syz.0.8378': attribute type 1 has an invalid length. [ 994.916419][ T4204] netlink: 'syz.0.8382': attribute type 24 has an invalid length. [ 995.286576][ T4062] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 995.304873][ T4062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 995.319594][ T4062] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 995.331830][ T4062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 995.340660][ T4062] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 995.366354][ T4062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 995.383767][ T4062] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 995.398318][ T4062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 995.407163][ T4232] SET target dimension over the limit! [ 995.415052][ T4232] SET target dimension over the limit! [ 995.425123][ T4232] SET target dimension over the limit! [ 995.433817][ T4232] SET target dimension over the limit! [ 995.441739][ T4232] SET target dimension over the limit! [ 995.447919][ T4232] SET target dimension over the limit! [ 995.456315][ T4232] SET target dimension over the limit! [ 995.462946][ T4232] SET target dimension over the limit! [ 995.569827][ T4062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.598960][ T4062] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.628957][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.636332][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.675532][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.682844][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.741312][ T4250] netlink: 'syz.2.8393': attribute type 25 has an invalid length. [ 995.758172][ T30] audit: type=1107 audit(1775959595.683:7): pid=4249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 995.765499][ T4252] netlink: 'syz.2.8393': attribute type 25 has an invalid length. [ 995.990497][ T4259] netlink: 'syz.0.8395': attribute type 51 has an invalid length. [ 996.018247][ T4259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.026631][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.061965][ T4259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.069830][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.252349][ T4270] netlink: 'syz.3.8398': attribute type 1 has an invalid length. [ 996.410401][ T5838] Bluetooth: hci0: command tx timeout [ 996.751601][ T4264] bridge_slave_0: left allmulticast mode [ 996.897642][ T4277] __nla_validate_parse: 10 callbacks suppressed [ 996.897668][ T4277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8400'. [ 996.914482][ T4277] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 997.601838][ T4264] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 997.687982][ T4264] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 997.720152][ T4264] ipvlan2: left allmulticast mode [ 997.725269][ T4264] batadv_slave_1: left allmulticast mode [ 997.798990][ T4264] gtp0: left promiscuous mode [ 997.807392][ T4264] gtp0: left allmulticast mode [ 997.831248][ T4264] bridge2: left promiscuous mode [ 997.846690][ T4264] bridge2: left allmulticast mode [ 997.861218][ T4264] sit2: left promiscuous mode [ 997.865983][ T4264] sit2: left allmulticast mode [ 998.021286][ T4264] bond0: left promiscuous mode [ 998.026140][ T4264] bridge5: left promiscuous mode [ 998.150313][T14383] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.170636][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 998.178718][ C1] lec:lec_tx_timeout: lec0 [ 998.190681][T14383] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.206910][T14383] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 998.228563][T14383] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.249067][T14383] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.276865][T14383] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 998.299452][ T4306] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 998.325975][T14383] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.356965][T14383] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.373132][T14383] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 998.388973][ T4312] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8403'. [ 998.398745][T14383] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.414938][T14383] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.424901][T14383] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 998.446097][ T4062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.490543][ T5838] Bluetooth: hci0: command tx timeout [ 999.040745][T31135] bond5 (unregistering): (slave xfrm1): Releasing backup interface [ 999.215615][T31135] dvmrp0 (unregistering): left allmulticast mode [ 999.263657][T31135] bond0 (unregistering): (slave geneve2): Releasing active interface [ 999.679016][T31135] bond1 (unregistering): Released all slaves [ 999.704545][T31135] bond2 (unregistering): Released all slaves [ 999.728305][T31135] bond0 (unregistering): Released all slaves [ 999.755686][T31135] bond3 (unregistering): (slave veth3): Releasing active interface [ 999.769894][T31135] bond3 (unregistering): Released all slaves [ 999.800893][T31135] bond4 (unregistering): Released all slaves [ 999.820164][T31135] bond5 (unregistering): Released all slaves [ 999.848462][T31135] bond6 (unregistering): Released all slaves [ 999.876550][T31135] bond7 (unregistering): Released all slaves [ 999.900824][T31135] bond8 (unregistering): Released all slaves [ 999.918733][T31135] bond9 (unregistering): Released all slaves [ 999.944242][T31135] bond10 (unregistering): Released all slaves [ 999.971185][T31135] bond11 (unregistering): Released all slaves [ 999.989734][T31135] bond12 (unregistering): Released all slaves [ 1000.015568][T31135] bond13 (unregistering): Released all slaves [ 1000.106856][ T4345] bridge4: entered promiscuous mode [ 1000.139300][ T4345] bridge4: entered allmulticast mode [ 1000.163259][ T4345] team0: Port device bridge4 added [ 1000.382302][ T4389] netlink: 260 bytes leftover after parsing attributes in process `syz.3.8413'. [ 1000.485639][ T4398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8413'. [ 1000.572121][ T5838] Bluetooth: hci0: command tx timeout [ 1000.926874][ T4062] veth0_vlan: entered promiscuous mode [ 1000.947470][ T4410] netlink: 'syz.2.8416': attribute type 3 has an invalid length. [ 1001.056798][ T4417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8419'. [ 1001.230543][ T4420] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8420'. [ 1001.249936][T18598] lec:lec_start_xmit: lec0:No lecd attached [ 1001.254276][ T4062] veth1_vlan: entered promiscuous mode [ 1001.400668][ T4427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8423'. [ 1001.409732][ T4427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8423'. [ 1001.458755][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8420'. [ 1001.672824][ T4434] sctp: [Deprecated]: syz.3.8426 (pid 4434) Use of int in maxseg socket option. [ 1001.672824][ T4434] Use struct sctp_assoc_value instead [ 1001.834351][ T4062] veth0_macvtap: entered promiscuous mode [ 1001.865477][ T4062] veth1_macvtap: entered promiscuous mode [ 1001.947860][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8429'. [ 1001.969145][ T4062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.994410][ T4062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.057177][T31131] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.069953][T31131] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.168874][T31130] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.243664][T31135] hsr_slave_0: left promiscuous mode [ 1002.269712][T31135] hsr_slave_1: left promiscuous mode [ 1002.876924][T31127] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.147786][ T4487] netlink: 244 bytes leftover after parsing attributes in process `syz.5.8437'. [ 1003.191372][T31127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.214897][T31127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.326861][ T4494] netlink: 'syz.2.8440': attribute type 2 has an invalid length. [ 1003.334941][ T4494] netlink: 'syz.2.8440': attribute type 2 has an invalid length. [ 1003.355380][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8440'. [ 1003.377751][ T4499] netlink: 'syz.5.8442': attribute type 4 has an invalid length. [ 1003.386250][T31127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.398116][T31127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.436309][T31135] IPVS: stop unused estimator thread 0... [ 1005.597778][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8448'. [ 1005.694305][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8451'. [ 1005.798680][ T4532] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1005.844735][ T4535] netlink: 'syz.6.8449': attribute type 9 has an invalid length. [ 1005.892755][ T4303] IPVS: starting estimator thread 0... [ 1005.988249][ T4547] IPVS: using max 27 ests per chain, 64800 per kthread [ 1006.200421][ T4565] sctp: [Deprecated]: syz.2.8458 (pid 4565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1006.200421][ T4565] Use struct sctp_sack_info instead [ 1006.473585][ T4583] netlink: 'syz.0.8462': attribute type 1 has an invalid length. [ 1006.628933][T21212] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1006.642286][T21212] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1006.651411][T21212] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1006.659540][T21212] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1006.669485][T21212] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1006.770671][ T4593] veth0: entered promiscuous mode [ 1006.854896][ T4592] veth0: left promiscuous mode [ 1006.885159][ T4589] lo speed is unknown, defaulting to 1000 [ 1006.912581][ T4589] lo speed is unknown, defaulting to 1000 [ 1006.970448][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5720 ms [ 1006.978553][ C1] lec:lec_tx_timeout: lec0 [ 1007.102531][ T4608] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8465'. [ 1007.467393][ T4618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8469'. [ 1007.663854][ T4623] netlink: 'syz.6.8471': attribute type 3 has an invalid length. [ 1007.790268][ T4629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8473'. [ 1007.821475][ T4625] bridge0: port 1(0x9) entered disabled state [ 1007.864115][ T4625] x9 (unregistering): left allmulticast mode [ 1007.874565][ T4625] x9 (unregistering): left promiscuous mode [ 1007.893841][ T4625] bridge0: port 1(0x9) entered disabled state [ 1008.558085][ T4589] chnl_net:caif_netlink_parms(): no params data found [ 1008.740367][T21212] Bluetooth: hci7: command tx timeout [ 1008.809906][ T4677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8485'. [ 1008.886160][ T4589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.912426][ T4589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.930457][ T4589] bridge_slave_0: entered allmulticast mode [ 1008.947829][ T4589] bridge_slave_0: entered promiscuous mode [ 1008.967620][ T4589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.984070][ T4589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.001112][ T4589] bridge_slave_1: entered allmulticast mode [ 1009.024104][ T4589] bridge_slave_1: entered promiscuous mode [ 1009.157577][ T4589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.212727][ T4589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.241098][ T4690] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1009.268310][ T4692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8488'. [ 1009.405955][ T4589] team0: Port device team_slave_0 added [ 1009.431199][ T4589] team0: Port device team_slave_1 added [ 1009.552703][ T4589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.583413][ T4589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.680229][ T4589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.709031][ T4716] SET target dimension over the limit! [ 1009.718176][ T4589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.756706][ T4589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.786633][ T4589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.894589][ T4722] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8497'. [ 1009.952692][ T4727] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8498'. [ 1009.971681][ T4713] lo speed is unknown, defaulting to 1000 [ 1009.992644][ T4713] lo speed is unknown, defaulting to 1000 [ 1010.042997][ T4589] hsr_slave_0: entered promiscuous mode [ 1010.049916][ T4589] hsr_slave_1: entered promiscuous mode [ 1010.056641][ T4589] debugfs: 'hsr0' already exists in 'hsr' [ 1010.070113][ T4589] Cannot create hsr debugfs directory [ 1010.265380][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8500'. [ 1010.366407][ T4737] bond11: option xmit_hash_policy: invalid value (64) [ 1010.415501][ T4737] bond11 (unregistering): Released all slaves [ 1010.486526][ T4742] xt_l2tp: unknown flags: 10 [ 1010.631879][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8502'. [ 1010.811464][T21212] Bluetooth: hci7: command tx timeout [ 1011.102319][ T4762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8507'. [ 1011.132250][ T4735] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1011.324700][ T4770] netlink: 'syz.2.8509': attribute type 12 has an invalid length. [ 1011.355838][ T4770] netlink: 'syz.2.8509': attribute type 29 has an invalid length. [ 1011.390534][ T4770] netlink: 'syz.2.8509': attribute type 2 has an invalid length. [ 1011.653596][ T4589] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1011.685053][ T4589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1011.703014][ T4589] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1011.735725][ T4589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1011.767731][ T4589] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1011.800809][ T4589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1011.813617][ T4589] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1011.814968][ T4801] netlink: 'syz.2.8516': attribute type 20 has an invalid length. [ 1011.849622][ T4589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1011.871838][ T4801] netlink: 'syz.2.8516': attribute type 20 has an invalid length. [ 1012.001774][ T4589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.027830][ T4589] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.044540][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.051773][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.089465][T31122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.096733][T31122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.137346][ T4816] __nla_validate_parse: 7 callbacks suppressed [ 1012.137368][ T4816] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8520'. [ 1012.158614][ T4817] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 1012.217354][ T4817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8519'. [ 1012.393632][ T4831] netlink: 'syz.6.8523': attribute type 1 has an invalid length. [ 1012.504320][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8526'. [ 1012.532046][ T4840] veth0_macvtap: left promiscuous mode [ 1012.662754][ T4853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8528'. [ 1012.694085][ T4850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1012.732669][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8527'. [ 1012.757278][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8527'. [ 1012.760253][ T4589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.893336][T21212] Bluetooth: hci7: command tx timeout [ 1013.122779][ T4874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8531'. [ 1013.580417][ T4589] veth0_vlan: entered promiscuous mode [ 1013.609916][ T4589] veth1_vlan: entered promiscuous mode [ 1013.664761][ T4902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8540'. [ 1013.693231][ T4589] veth0_macvtap: entered promiscuous mode [ 1013.739629][ T4589] veth1_macvtap: entered promiscuous mode [ 1013.788432][ T4908] syzkaller1: entered promiscuous mode [ 1013.795150][ T4908] syzkaller1: entered allmulticast mode [ 1013.824013][ T4589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.876421][ T4589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.906471][ T4918] netlink: 'syz.3.8543': attribute type 75 has an invalid length. [ 1013.950799][T31131] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.980623][T31131] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.063017][ T4924] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8545'. [ 1014.079882][ T4924] xt_policy: neither incoming nor outgoing policy selected [ 1014.121511][T31131] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.211687][T31131] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.294528][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8547'. [ 1014.412746][T31122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.433145][T31122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.636276][T31131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.673753][T31131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.799798][ T4952] netlink: 'syz.0.8555': attribute type 1 has an invalid length. [ 1014.970779][T21212] Bluetooth: hci7: command tx timeout [ 1015.124869][ T4978] delete_channel: no stack [ 1015.578016][ T4993] xt_hashlimit: size too large, truncated to 1048576 [ 1015.688750][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1015.718545][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1015.728442][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1015.751471][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1015.767994][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1015.967112][ T4994] lo speed is unknown, defaulting to 1000 [ 1015.976749][ T4994] lo speed is unknown, defaulting to 1000 [ 1016.213377][ T5019] netlink: 'syz.2.8575': attribute type 9 has an invalid length. [ 1016.233560][ T5021] tipc: Started in network mode [ 1016.238510][ T5021] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1016.243367][ T5019] netlink: 'syz.2.8575': attribute type 11 has an invalid length. [ 1016.279534][ T5021] tipc: Enabled bearer , priority 10 [ 1016.295351][ T5019] netlink: 'syz.2.8575': attribute type 12 has an invalid length. [ 1016.628197][ T5042] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1016.679345][ T5044] x_tables: duplicate underflow at hook 1 [ 1016.696921][ T5044] netlink: 'syz.2.8582': attribute type 32 has an invalid length. [ 1016.734245][ T5044] bond11: Setting coupled_control to off (0) [ 1016.926131][ T4994] chnl_net:caif_netlink_parms(): no params data found [ 1017.093410][ T5061] veth0_to_bond: entered allmulticast mode [ 1017.111926][ T5065] netlink: zone id is out of range [ 1017.112644][ T4994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.117278][ T5065] netlink: zone id is out of range [ 1017.117291][ T5065] netlink: zone id is out of range [ 1017.117303][ T5065] netlink: zone id is out of range [ 1017.117316][ T5065] netlink: zone id is out of range [ 1017.124777][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.142804][ T5065] netlink: zone id is out of range [ 1017.151831][ T4994] bridge_slave_0: entered allmulticast mode [ 1017.162316][ T5065] netlink: zone id is out of range [ 1017.175845][ T4994] bridge_slave_0: entered promiscuous mode [ 1017.181700][ T5065] netlink: zone id is out of range [ 1017.181733][ T5065] netlink: zone id is out of range [ 1017.181747][ T5065] netlink: zone id is out of range [ 1017.218841][ T4994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.236525][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.251961][ T4994] bridge_slave_1: entered allmulticast mode [ 1017.272342][ T4994] bridge_slave_1: entered promiscuous mode [ 1017.402529][ T4994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.444345][ T4994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.495814][ T4298] tipc: Node number set to 10136234 [ 1017.654210][ T4994] team0: Port device team_slave_0 added [ 1017.682352][ T4994] team0: Port device team_slave_1 added [ 1017.719320][ T5098] __nla_validate_parse: 16 callbacks suppressed [ 1017.719344][ T5098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8597'. [ 1017.794125][ T4994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.802387][ T4994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.852757][T21212] Bluetooth: hci2: command tx timeout [ 1017.879165][ T4994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.969794][ T4994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.997518][ T4994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.067897][ T4994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.181887][ T5117] xt_ecn: cannot match TCP bits for non-tcp packets [ 1018.208132][ T5116] xt_limit: Overflow, try lower: 271964/0 [ 1018.225277][ T4994] hsr_slave_0: entered promiscuous mode [ 1018.244276][ T4994] hsr_slave_1: entered promiscuous mode [ 1018.261506][ T4994] debugfs: 'hsr0' already exists in 'hsr' [ 1018.275113][ T4994] Cannot create hsr debugfs directory [ 1018.349057][ T5121] netlink: 'syz.6.8602': attribute type 8 has an invalid length. [ 1018.400760][ T5121] sch_fq: defrate 0 ignored. [ 1018.674391][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8606'. [ 1018.707323][ T5146] netlink: 'syz.6.8609': attribute type 10 has an invalid length. [ 1018.838452][ T5152] netlink: 'syz.5.8610': attribute type 21 has an invalid length. [ 1018.873425][ T5152] IPv6: NLM_F_CREATE should be specified when creating new route [ 1018.953570][ T5159] netlink: 'syz.6.8612': attribute type 2 has an invalid length. [ 1018.961608][ T5159] netlink: 'syz.6.8612': attribute type 8 has an invalid length. [ 1018.969514][ T5159] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8612'. [ 1018.996868][ T4994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.019493][ T4994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1019.034471][ T4994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.132253][ T5163] netlink: 'syz.5.8613': attribute type 2 has an invalid length. [ 1019.139660][ T5164] netlink: 'syz.5.8613': attribute type 2 has an invalid length. [ 1019.193126][ T5166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8614'. [ 1019.207142][ T4994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.225719][ T4994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1019.236583][ T4994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.368962][ T4994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.400288][ T4994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1019.415294][ T4994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.570624][ T4994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1019.602062][ T4994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1019.630198][ T4994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.652779][ T5200] Cannot find add_set index 0 as target [ 1019.677861][ T5199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1019.829862][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8623'. [ 1019.863990][ T5210] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8625'. [ 1019.888755][ T5208] xt_nat: multiple ranges no longer supported [ 1019.900154][ T5210] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8625'. [ 1019.930572][T21212] Bluetooth: hci2: command tx timeout [ 1020.064198][ T5222] netlink: 244 bytes leftover after parsing attributes in process `syz.6.8627'. [ 1020.103161][ T4994] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1020.133344][ T4994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1020.151690][ T4994] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1020.217644][ T4994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1020.261320][ T4994] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1020.295682][ T4994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1020.311390][ T4994] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1020.429556][ T4994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1020.483931][ T5242] tipc: Enabling of bearer rejected, failed to enable media [ 1020.495450][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8629'. [ 1020.887813][ T4994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.952787][ T4994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.979355][T31130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.986711][T31130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.028682][T31130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.036057][T31130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.093588][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8636'. [ 1021.146365][ T5269] netlink: 'syz.0.8636': attribute type 12 has an invalid length. [ 1021.677181][ T4994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.823217][ T4994] veth0_vlan: entered promiscuous mode [ 1021.868325][ T4994] veth1_vlan: entered promiscuous mode [ 1022.007862][ T4994] veth0_macvtap: entered promiscuous mode [ 1022.021747][T21212] Bluetooth: hci2: command tx timeout [ 1022.065396][ T4994] veth1_macvtap: entered promiscuous mode [ 1022.212819][ T4994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.321764][ T5325] netlink: 'syz.0.8648': attribute type 1 has an invalid length. [ 1022.465022][ T4994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.510276][T31130] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.560406][T31130] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.574941][ T5333] netlink: 'syz.6.8649': attribute type 11 has an invalid length. [ 1022.603655][T31130] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.634565][T31130] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.671262][T31130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.700380][T31130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.709173][T31130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.778651][T31130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.813387][ T5339] __nla_validate_parse: 11 callbacks suppressed [ 1022.813417][ T5339] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8651'. [ 1022.961083][ T5351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8652'. [ 1023.016131][ T5355] netlink: 'syz.0.8652': attribute type 61 has an invalid length. [ 1023.047688][ T5351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8652'. [ 1023.080598][T31130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.105379][T31130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.209531][T31130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.230167][T31130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.416515][ T5375] validate_nla: 2 callbacks suppressed [ 1023.416537][ T5375] netlink: 'syz.0.8658': attribute type 11 has an invalid length. [ 1023.588448][ T5385] netlink: 'syz.0.8660': attribute type 2 has an invalid length. [ 1023.618425][ T5385] netlink: 'syz.0.8660': attribute type 1 has an invalid length. [ 1023.632897][ T5386] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 1023.681395][ T5385] netlink: 'syz.0.8660': attribute type 1 has an invalid length. [ 1023.715763][ T5385] netlink: 'syz.0.8660': attribute type 2 has an invalid length. [ 1023.729459][ T5385] netlink: 'syz.0.8660': attribute type 2 has an invalid length. [ 1024.090785][T21212] Bluetooth: hci2: command tx timeout [ 1024.143430][ T5416] netlink: 'syz.6.8667': attribute type 30 has an invalid length. [ 1024.154692][ T5413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8666'. [ 1024.177769][ T5413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8666'. [ 1024.187101][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8666'. [ 1024.200663][ T5414] netlink: 'syz.6.8667': attribute type 30 has an invalid length. [ 1024.209658][ T5422] netlink: 'syz.0.8665': attribute type 11 has an invalid length. [ 1024.293115][ T5428] netlink: 'syz.2.8669': attribute type 11 has an invalid length. [ 1024.301603][ T5428] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8669'. [ 1024.367313][ T5414] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1024.523248][ T5439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8671'. [ 1024.574087][ T5441] netlink: 'syz.0.8672': attribute type 1 has an invalid length. [ 1024.579561][ T5439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8671'. [ 1024.607227][ T5445] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1024.666613][ T5441] bond14: entered promiscuous mode [ 1024.672461][ T5441] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1024.739940][ T5441] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1024.750329][ T5441] bond14: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1024.762808][ T5441] bond14: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1024.776751][ T5441] bond14: (slave ip6gre1): making interface the new active one [ 1024.784789][ T5441] ip6gre1: entered promiscuous mode [ 1024.793631][ T5441] bond14: (slave ip6gre1): Enslaving as an active interface with an up link [ 1024.802978][ T5445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.854756][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.868519][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8675'. [ 1025.293185][ T5475] syzkaller1: entered promiscuous mode [ 1025.298741][ T5475] syzkaller1: entered allmulticast mode [ 1025.469825][ T5495] net_ratelimit: 194 callbacks suppressed [ 1025.469846][ T5495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1025.878063][T31127] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.554787][ T5550] openvswitch: netlink: Flow actions attr not present in new flow. [ 1028.542714][ T5503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1028.753296][ T5564] Bluetooth: MGMT ver 1.23 [ 1028.784226][ T5574] __nla_validate_parse: 4 callbacks suppressed [ 1028.784248][ T5574] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8699'. [ 1028.825885][ T5577] ip6gre1: entered allmulticast mode [ 1028.861875][ T5564] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8697'. [ 1028.990692][ T5592] x_tables: unsorted entry at hook 1 [ 1029.038385][ T5592] netlink: 'syz.0.8703': attribute type 51 has an invalid length. [ 1029.491332][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8709'. [ 1029.506941][ T5616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8709'. [ 1030.015171][ T5651] netlink: 'syz.0.8719': attribute type 1 has an invalid length. [ 1030.088956][ T5654] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 1030.383011][ T5670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8725'. [ 1030.397852][ T5669] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8721'. [ 1030.417572][ T5667] netlink: 'syz.2.8725': attribute type 10 has an invalid length. [ 1030.417791][ T5670] netlink: 'syz.2.8725': attribute type 10 has an invalid length. [ 1030.439818][ T5670] mac80211_hwsim hwsim83 wlan1: left allmulticast mode [ 1030.626430][ T5685] sctp: [Deprecated]: syz.3.8729 (pid 5685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1030.626430][ T5685] Use struct sctp_sack_info instead [ 1030.661755][ T5687] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8731'. [ 1031.134395][ T5713] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1031.269708][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8742'. [ 1031.304122][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8742'. [ 1031.382182][ T5725] netlink: 'syz.3.8739': attribute type 3 has an invalid length. [ 1031.430811][ T5718] syzkaller0: entered promiscuous mode [ 1031.441603][ T5718] syzkaller0: entered allmulticast mode [ 1031.536069][ T5729] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1031.838807][ T5743] xt_hashlimit: size too large, truncated to 1048576 [ 1033.912273][ T5763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8754'. [ 1034.081982][ T5769] netlink: 'syz.5.8755': attribute type 142 has an invalid length. [ 1034.270428][ T5778] netlink: 'syz.0.8758': attribute type 7 has an invalid length. [ 1034.552556][ T5789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8762'. [ 1034.673946][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8766'. [ 1034.772968][ T5803] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.8765'. [ 1034.971548][ T5813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8769'. [ 1034.997792][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8768'. [ 1035.037663][ T5814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8768'. [ 1035.113506][ T3341] syz_tun (unregistering): left promiscuous mode [ 1035.120477][ T3341] bridge0: port 1(syz_tun) entered disabled state [ 1035.235770][ T5814] veth1_macvtap: default FDB implementation only supports local addresses [ 1035.265900][ T5825] netlink: 'syz.5.8771': attribute type 17 has an invalid length. [ 1035.274544][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8771'. [ 1035.285302][ T5825] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8771'. [ 1035.581686][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8777'. [ 1035.975972][ T5874] IPv6: NLM_F_CREATE should be specified when creating new route [ 1036.003880][ T5874] netlink: 'syz.6.8784': attribute type 1 has an invalid length. [ 1036.087700][ T5881] netlink: 'syz.2.8787': attribute type 1 has an invalid length. [ 1036.135528][ T5881] bond12: entered promiscuous mode [ 1036.141971][ T5881] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1036.226240][ T5886] ipvlan2: entered allmulticast mode [ 1036.233481][ T5886] bond12: entered allmulticast mode [ 1036.310949][ T5881] ipvlan3: entered allmulticast mode [ 1036.318114][T31127] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 36534 - 0 [ 1036.372733][ T5886] bond12: (slave bridge6): making interface the new active one [ 1036.382540][ T5886] bridge6: entered promiscuous mode [ 1036.388605][ T5886] bridge6: entered allmulticast mode [ 1036.398547][ T5886] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 1036.428482][T31135] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 36534 - 0 [ 1036.503256][T31135] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 36534 - 0 [ 1036.514093][ T5904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1036.565848][T31127] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 36534 - 0 [ 1036.639549][ T5904] bond3: entered promiscuous mode [ 1036.666697][ T5904] bond3: entered allmulticast mode [ 1036.674631][ T5904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1036.691170][T31122] veth5: left allmulticast mode [ 1036.696673][T31122] veth5: left promiscuous mode [ 1036.705461][T31122] bridge1: port 2(veth5) entered disabled state [ 1036.725972][T31122] veth3: left allmulticast mode [ 1036.731224][T31122] veth3: left promiscuous mode [ 1036.737732][T31122] bridge1: port 1(veth3) entered disabled state [ 1037.275050][T31122] bond3 (unregistering): (slave bridge0): Releasing backup interface [ 1037.430324][T31122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.443089][T31122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.456282][T31122] bond0 (unregistering): Released all slaves [ 1037.474866][T31122] bond1 (unregistering): Released all slaves [ 1037.499673][T31122] bond2 (unregistering): Released all slaves [ 1037.520942][T31122] bond3 (unregistering): Released all slaves [ 1037.538676][T31122] bond4 (unregistering): Released all slaves [ 1037.555697][T31122] bond5 (unregistering): (slave C): Releasing backup interface [ 1037.574430][T31122] bond5 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 1037.588376][T31122] bond5 (unregistering): Released all slaves [ 1037.607893][T31122] bond6 (unregistering): Released all slaves [ 1037.783904][T31122] tipc: Disabling bearer [ 1037.789692][T31122] tipc: Left network mode [ 1037.998059][ T5956] pim6reg527: entered allmulticast mode [ 1038.524630][T31122] hsr_slave_1: left promiscuous mode [ 1038.531371][T31122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.539333][T31122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.810620][T31122] team0 (unregistering): Port device team_slave_1 removed [ 1038.829797][T31122] team0 (unregistering): Port device team_slave_0 removed [ 1039.313659][T31122] IPVS: stop unused estimator thread 0... [ 1039.597265][ T5979] ipt_rpfilter: unknown options [ 1039.656334][ T5981] xt_limit: Overflow, try lower: 604147548/4200216962 [ 1039.857975][ T5927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1040.014670][ T5985] __nla_validate_parse: 3 callbacks suppressed [ 1040.014694][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8811'. [ 1040.092601][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8811'. [ 1040.128119][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8811'. [ 1040.358540][ T6002] bridge_slave_0: left allmulticast mode [ 1040.388222][ T6002] bridge_slave_0: left promiscuous mode [ 1040.413986][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.466304][ T6006] netlink: 'syz.5.8814': attribute type 1 has an invalid length. [ 1040.513583][ T6002] bridge_slave_1: left allmulticast mode [ 1040.546025][ T6002] bridge_slave_1: left promiscuous mode [ 1040.578462][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.697411][ T6002] bond0: (slave bond_slave_0): Releasing backup interface [ 1040.747188][ T6002] bond0: (slave bond_slave_1): Releasing backup interface [ 1040.802221][ T6002] team0: Port device team_slave_0 removed [ 1040.864525][ T6002] team0: Port device team_slave_1 removed [ 1040.892894][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.911324][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.923083][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.932998][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.944833][ T6002] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1041.071947][ T6018] team0: Mode changed to "activebackup" [ 1041.183461][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1041.318679][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8823'. [ 1041.328400][ T6047] netlink: 'syz.0.8823': attribute type 18 has an invalid length. [ 1041.340263][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8823'. [ 1041.371473][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8823'. [ 1041.389445][ T6050] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.8827'. [ 1041.414047][ T6050] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1041.414337][ T6051] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.8827'. [ 1041.430560][ T6047] netlink: 'syz.0.8823': attribute type 18 has an invalid length. [ 1041.438594][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8823'. [ 1041.481119][ T6051] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1041.514621][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8828'. [ 1041.795770][ T6072] netlink: 'syz.2.8832': attribute type 1 has an invalid length. [ 1041.954348][ T6072] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1041.974575][ T6084] bond13: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1041.997441][ T6084] bond13: entered allmulticast mode [ 1042.802795][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1043.137805][ T6160] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1043.733245][ T6191] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1044.342116][ T6223] nbd1: detected capacity change from 0 to 63 [ 1044.355596][T21212] block nbd1: Receive control failed (result -32) [ 1044.361562][ T5838] block nbd1: Receive control failed (result -32) [ 1044.382714][ T2966] block nbd1: Dead connection, failed to find a fallback [ 1044.409721][ T2966] block nbd1: shutting down sockets [ 1044.434963][ T2966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1044.497750][ T2966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1044.550622][ T2966] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1044.599540][ T2966] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1044.607927][ T2966] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1044.621520][ T2966] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1044.629385][ T2966] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1044.639283][ T2966] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1044.647192][ T2966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1044.659576][ T2966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1044.678124][ T2966] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1044.693731][ T5490] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1044.705976][ T2966] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1044.734160][ T2966] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1044.760412][ T2966] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1044.788601][ T2966] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1044.831167][ T2966] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1044.861076][ T2966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1044.890648][ T2966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1044.901921][ T2966] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1044.932071][ T2966] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1044.954544][ T2966] ldm_validate_partition_table(): Disk read failed. [ 1044.991389][ T2966] Dev nbd1: unable to read RDB block 0 [ 1044.997887][ T2966] nbd1: unable to read partition table [ 1045.076936][ T2966] ldm_validate_partition_table(): Disk read failed. [ 1045.110794][ T2966] Dev nbd1: unable to read RDB block 0 [ 1045.117010][ T2966] nbd1: unable to read partition table [ 1045.350995][ T6274] netlink: 'syz.6.8887': attribute type 1 has an invalid length. [ 1045.491364][ T6274] __nla_validate_parse: 12 callbacks suppressed [ 1045.491386][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8887'. [ 1045.588271][ T6288] netlink: 'syz.5.8888': attribute type 1 has an invalid length. [ 1045.621255][ T6288] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8888'. [ 1045.631352][ T6294] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8889'. [ 1045.655217][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8890'. [ 1045.660224][ T6288] netlink: 1 bytes leftover after parsing attributes in process `syz.5.8888'. [ 1045.719614][ T6288] netlink: 'syz.5.8888': attribute type 1 has an invalid length. [ 1045.774313][ T6288] netlink: 'syz.5.8888': attribute type 8 has an invalid length. [ 1045.832111][ T6288] netlink: 582 bytes leftover after parsing attributes in process `syz.5.8888'. [ 1045.937551][ T6300] bond16: entered promiscuous mode [ 1045.944498][ T6300] bond16: entered allmulticast mode [ 1045.963477][ T6307] xt_hashlimit: size too large, truncated to 1048576 [ 1046.048822][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8894'. [ 1046.108870][ T5490] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1046.538315][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8901'. [ 1046.848156][ T5941] IPVS: starting estimator thread 0... [ 1046.854916][ T6350] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1046.881285][ T6353] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 1046.940306][ T6351] IPVS: using max 24 ests per chain, 57600 per kthread [ 1047.285157][ T6373] netlink: 'syz.3.8910': attribute type 3 has an invalid length. [ 1047.300489][ T6373] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1047.485609][ T6378] lo: entered allmulticast mode [ 1047.514701][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1047.516068][ T6378] tunl0: entered allmulticast mode [ 1047.549309][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1047.561913][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1047.573367][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1047.581920][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1047.588014][ T6378] gre0: entered allmulticast mode [ 1047.631514][ T6378] gretap0: entered allmulticast mode [ 1047.675913][ T6378] erspan0: entered allmulticast mode [ 1047.688669][ T6378] ip_vti0: entered allmulticast mode [ 1047.723425][ T6378] ip6_vti0: entered allmulticast mode [ 1047.745756][ T6378] sit0: entered allmulticast mode [ 1047.756044][ T6393] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8914'. [ 1047.765566][ T6394] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8914'. [ 1047.765598][ T6378] ip6tnl0: entered allmulticast mode [ 1047.786197][ T6378] ip6gre0: entered allmulticast mode [ 1047.804839][ T6378] syz_tun: entered allmulticast mode [ 1047.817263][ T6378] ip6gretap0: entered allmulticast mode [ 1047.827654][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.835464][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.845961][ T6378] bridge0: entered allmulticast mode [ 1047.860878][ T6378] vcan0: entered allmulticast mode [ 1047.871809][ T6378] bond0: entered allmulticast mode [ 1047.877170][ T6378] bond_slave_0: entered allmulticast mode [ 1047.884327][ T6378] bond_slave_1: entered allmulticast mode [ 1047.896442][ T6378] team0: entered allmulticast mode [ 1047.901834][ T6378] team_slave_0: entered allmulticast mode [ 1047.907842][ T6378] team_slave_1: entered allmulticast mode [ 1047.922888][ T6378] dummy0: entered allmulticast mode [ 1047.957083][ T6378] nlmon0: entered allmulticast mode [ 1047.977439][ T6378] caif0: entered allmulticast mode [ 1047.991533][ T6378] batadv0: entered allmulticast mode [ 1048.004963][ T6378] vxcan0: entered allmulticast mode [ 1048.013910][ T6378] vxcan1: entered allmulticast mode [ 1048.022389][ T6378] veth0: entered allmulticast mode [ 1048.033615][ T6378] veth1: entered allmulticast mode [ 1048.043792][ T6378] wg0: entered allmulticast mode [ 1048.054345][ T6378] wg1: entered allmulticast mode [ 1048.076435][ T6378] wg2: entered allmulticast mode [ 1048.089109][ T6378] veth0_to_bridge: entered allmulticast mode [ 1048.104089][ T6378] veth1_to_bridge: entered allmulticast mode [ 1048.117702][ T6378] veth0_to_bond: entered allmulticast mode [ 1048.127713][ T6378] veth1_to_bond: entered allmulticast mode [ 1048.138026][ T6378] veth0_to_team: entered allmulticast mode [ 1048.152801][ T6378] veth1_to_team: entered allmulticast mode [ 1048.166647][ T6378] veth0_to_batadv: entered allmulticast mode [ 1048.178290][ T6378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.187302][ T6378] batadv_slave_0: entered allmulticast mode [ 1048.198159][ T6378] veth0_to_hsr: entered allmulticast mode [ 1048.209772][ T6378] hsr_slave_0: entered allmulticast mode [ 1048.219645][ T6378] veth1_to_hsr: entered allmulticast mode [ 1048.229809][ T6378] hsr_slave_1: entered allmulticast mode [ 1048.242043][ T6378] hsr0: entered allmulticast mode [ 1048.251795][ T6378] veth1_virt_wifi: entered allmulticast mode [ 1048.262692][ T6378] veth0_virt_wifi: entered allmulticast mode [ 1048.274689][ T6378] virt_wifi0: entered allmulticast mode [ 1048.281042][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805333cc00: rx timeout, send abort [ 1048.292879][ T6378] veth1_vlan: entered allmulticast mode [ 1048.304165][ T6378] veth0_vlan: entered allmulticast mode [ 1048.325582][ T6378] vlan0: entered allmulticast mode [ 1048.332375][ T6378] vlan1: entered allmulticast mode [ 1048.339012][ T6388] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1048.341562][ T6378] macvlan0: entered allmulticast mode [ 1048.378626][ T6378] macvlan1: entered allmulticast mode [ 1048.397090][ T6378] ipvlan0: entered allmulticast mode [ 1048.411155][ T6378] ipvlan1: entered allmulticast mode [ 1048.416942][ T6378] veth1_macvtap: entered allmulticast mode [ 1048.428147][ T6378] veth0_macvtap: entered allmulticast mode [ 1048.442584][ T6378] macvtap0: entered allmulticast mode [ 1048.452426][ T6378] macsec0: entered allmulticast mode [ 1048.462270][ T6378] geneve0: entered allmulticast mode [ 1048.473530][ T6378] geneve1: entered allmulticast mode [ 1048.483745][ T6378] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1048.495365][ T6378] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 1048.507139][ T6378] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 1048.528275][ T6378] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 1048.546550][ T6378] mac80211_hwsim hwsim107 wlan0: entered allmulticast mode [ 1048.554305][ T6378] mac80211_hwsim hwsim108 wlan1: entered allmulticast mode [ 1048.563609][ T6378] bond1: entered allmulticast mode [ 1048.570905][ T6378] vlan2: entered allmulticast mode [ 1048.576575][ T6378] ip6tnl1: entered allmulticast mode [ 1048.584963][ T6378] macsec1: entered allmulticast mode [ 1048.591003][ T6378] bond2: entered allmulticast mode [ 1048.596764][ T6378] gretap1: entered allmulticast mode [ 1048.603327][ T6378] ipip0: entered allmulticast mode [ 1048.610888][ T6378] bond3: left promiscuous mode [ 1048.617292][ T6378] syztnl0: entered allmulticast mode [ 1048.624696][ T6378] ip6tnl2: entered allmulticast mode [ 1048.633131][ T6378] syzkaller0: entered allmulticast mode [ 1048.639889][ T6382] dummy0: left allmulticast mode [ 1048.656345][ T6382] team0: Port device dummy0 removed [ 1048.672263][ T6382] bond0: (slave batadv0): Releasing backup interface [ 1048.685631][ T6382] batadv0: left promiscuous mode [ 1048.698259][ T6382] bridge_slave_0: left promiscuous mode [ 1048.704823][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.718006][ T6382] bridge_slave_1: left promiscuous mode [ 1048.724179][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.737095][ T6382] bond9: (slave veth0_to_bond): Releasing active interface [ 1048.748574][ T6382] bond0: (slave bond_slave_0): Releasing backup interface [ 1048.758586][ T6382] bond_slave_0: left promiscuous mode [ 1048.767232][ T6382] bond0: (slave bond_slave_1): Releasing backup interface [ 1048.776268][ T6382] bond_slave_1: left promiscuous mode [ 1048.778767][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805333c800: rx timeout, send abort [ 1048.791049][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805333cc00: abort rx timeout. Force session deactivation [ 1048.802336][ T6382] team0: Port device team_slave_0 removed [ 1048.823769][ T6382] team0: Port device team_slave_1 removed [ 1048.830856][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.839097][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.848112][ T6382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1048.867772][ T6386] team0: Mode changed to "random" [ 1048.917545][T27927] syz_tun (unregistering): left promiscuous mode [ 1048.965855][T31127] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.000670][T31127] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.014087][T31127] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.027548][T31127] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.174102][ T6383] lo speed is unknown, defaulting to 1000 [ 1049.192384][ T6383] lo speed is unknown, defaulting to 1000 [ 1049.289983][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88805333c800: abort rx timeout. Force session deactivation [ 1049.450297][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1049.609064][ T6430] lo speed is unknown, defaulting to 1000 [ 1049.694791][ T5838] Bluetooth: hci1: command tx timeout [ 1049.756926][ T6430] lo speed is unknown, defaulting to 1000 [ 1050.158771][ T6383] chnl_net:caif_netlink_parms(): no params data found [ 1050.198226][ T6468] tipc: Enabling of bearer rejected, failed to enable media [ 1050.466285][ T6383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.475859][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.484578][ T6383] bridge_slave_0: entered allmulticast mode [ 1050.498189][ T6383] bridge_slave_0: entered promiscuous mode [ 1050.523303][ T6383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.548526][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.559694][ T6383] bridge_slave_1: entered allmulticast mode [ 1050.603423][ T6383] bridge_slave_1: entered promiscuous mode [ 1050.807238][ T6493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1050.827159][ T6383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.845266][ T6383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.907980][ T6383] team0: Port device team_slave_0 added [ 1050.932494][ T6383] team0: Port device team_slave_1 added [ 1051.145376][ T6505] __nla_validate_parse: 6 callbacks suppressed [ 1051.145399][ T6505] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8945'. [ 1051.190083][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.199222][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.280721][ T6383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.294897][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.302392][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.329319][ T6383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.506951][ T6383] hsr_slave_0: entered promiscuous mode [ 1051.516502][ T6383] hsr_slave_1: entered promiscuous mode [ 1051.525164][ T6383] debugfs: 'hsr0' already exists in 'hsr' [ 1051.537505][ T6383] Cannot create hsr debugfs directory [ 1051.778296][ T5838] Bluetooth: hci1: command tx timeout [ 1051.823239][ T6532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8951'. [ 1052.030999][ T6538] netlink: 292 bytes leftover after parsing attributes in process `syz.5.8953'. [ 1052.052611][ T6546] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1052.066584][ T6544] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1052.183230][ T6383] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.245862][ T6551] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.8957'. [ 1052.341018][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8958'. [ 1052.403809][ T6383] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.469495][ T6559] syzkaller0: entered promiscuous mode [ 1052.475352][ T6559] syzkaller0: entered allmulticast mode [ 1052.581770][ T6383] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.640845][ T6541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.765434][ T6383] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.209130][ T6383] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1053.255881][ T6383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1053.291842][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8969'. [ 1053.365776][ T6383] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1053.381664][ T6602] netlink: 'syz.6.8972': attribute type 1 has an invalid length. [ 1053.404001][ T6383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1053.477120][ T6602] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1053.488200][ T6383] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1053.504917][ T6383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1053.513388][ T6383] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1053.525522][ T6383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1053.560450][ T6607] bond4: (slave geneve2): making interface the new active one [ 1053.572806][ T6607] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1053.618254][T31135] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.641524][T31135] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.666585][T31135] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.694407][T31135] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.816498][ T6623] netlink: 124 bytes leftover after parsing attributes in process `syz.3.8979'. [ 1053.848500][ T6623] netlink: 124 bytes leftover after parsing attributes in process `syz.3.8979'. [ 1053.851463][ T5838] Bluetooth: hci1: command tx timeout [ 1053.881158][ T6627] netlink: 7 bytes leftover after parsing attributes in process `syz.6.8978'. [ 1053.891385][ T6623] netlink: 124 bytes leftover after parsing attributes in process `syz.3.8979'. [ 1053.905425][ T6627] netlink: 'syz.6.8978': attribute type 1 has an invalid length. [ 1053.989070][ T6383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.018776][ T6632] IPVS: Scheduler module ip_vs_sip not found [ 1054.053987][ T6383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.072865][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.080142][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.129725][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.137102][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.324224][ T6646] openvswitch: netlink: Flow key attr not present in new flow. [ 1054.585030][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.594647][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1054.627764][ T6664] netlink: 'syz.2.8987': attribute type 1 has an invalid length. [ 1054.702981][ T6664] bond14: entered promiscuous mode [ 1054.708592][ T6664] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1054.729533][ T6383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.789518][ T6383] veth0_vlan: entered promiscuous mode [ 1054.862434][ T6383] veth1_vlan: entered promiscuous mode [ 1055.038196][ T6383] veth0_macvtap: entered promiscuous mode [ 1055.085713][ T6383] veth1_macvtap: entered promiscuous mode [ 1055.165652][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.214369][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.252499][T31135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.296262][T31135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.343307][T31135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.369100][T31135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.478242][ T6696] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1055.782345][T31131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.813151][T31131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.930946][ T5838] Bluetooth: hci1: command tx timeout [ 1055.976655][ T6719] x_tables: duplicate underflow at hook 1 [ 1056.014219][T31118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.026363][T31118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.252951][ T6740] ip6erspan0: entered allmulticast mode [ 1056.361748][ T6743] pim6reg1: entered promiscuous mode [ 1056.375258][ T6743] pim6reg1: entered allmulticast mode [ 1056.564048][ T6752] x_tables: duplicate underflow at hook 2 [ 1056.579590][ T6759] syzkaller0: entered promiscuous mode [ 1056.593716][ T6759] syzkaller0: entered allmulticast mode [ 1056.609481][ T6752] __nla_validate_parse: 34 callbacks suppressed [ 1056.609535][ T6752] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9012'. [ 1056.757455][ T6759] bond15: entered allmulticast mode [ 1056.779052][ T6769] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9016'. [ 1057.217273][ T6795] geneve2: entered promiscuous mode [ 1057.245645][ T6795] geneve2: entered allmulticast mode [ 1057.307909][ T49] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1057.333103][ T49] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1057.360789][ T49] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1058.476529][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9040'. [ 1058.542962][ T6862] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9040'. [ 1058.604101][ T6867] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.9041'. [ 1058.854645][ T6871] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 1058.873627][ T6871] bond5 (unregistering): Released all slaves [ 1058.921269][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9042'. [ 1058.978138][ T6873] bond16: option miimon: invalid value (18446744073709551585) [ 1059.008527][ T6873] bond16: option miimon: allowed values 0 - 2147483647 [ 1059.056655][ T6873] bond16 (unregistering): Released all slaves [ 1059.335789][ T6903] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9051'. [ 1059.678932][ T6916] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 1059.766750][ T6919] syzkaller1: entered promiscuous mode [ 1059.790383][ T6919] syzkaller1: entered allmulticast mode [ 1060.010077][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5410 ms [ 1060.018207][ C1] lec:lec_tx_timeout: lec0 [ 1060.218255][ T6946] xt_hashlimit: size too large, truncated to 1048576 [ 1060.530950][ T6963] tipc: Enabling of bearer rejected, failed to enable media [ 1060.956866][ T6963] syzkaller0: entered promiscuous mode [ 1060.984129][ T6963] syzkaller0: entered allmulticast mode [ 1062.324864][ T7029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9081'. [ 1063.778322][ T7040] syz.6.9083 uses old SIOCAX25GETINFO [ 1063.853036][ T7033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.863221][ T7033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.925032][ T7033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.950534][ T7033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.094852][ T7055] netlink: 156 bytes leftover after parsing attributes in process `syz.5.9088'. [ 1064.247601][T21212] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1064.259054][T21212] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1064.271079][T21212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1064.292382][T21212] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1064.301395][T21212] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1064.595751][ T7061] lo speed is unknown, defaulting to 1000 [ 1064.634030][ T7061] lo speed is unknown, defaulting to 1000 [ 1064.732278][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9090'. [ 1064.780234][ T7076] netlink: 'syz.0.9090': attribute type 18 has an invalid length. [ 1064.793522][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9090'. [ 1064.992566][T31130] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1065.020130][T31130] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1065.038342][T31130] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1065.108731][T31130] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1065.123841][ T7092] openvswitch: netlink: EtherType 50a is less than min 600 [ 1065.215801][ T7092] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.290111][ T7098] x_tables: duplicate underflow at hook 1 [ 1065.325118][ T7098] netlink: 'syz.3.9096': attribute type 22 has an invalid length. [ 1065.333848][T18598] lec:lec_start_xmit: lec0:No lecd attached [ 1065.404635][ T7092] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.457540][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9098'. [ 1065.483531][ T7103] block nbd2: Unsupported socket: should be TCP or UNIX. [ 1065.528511][ T7092] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.639856][ T7092] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.797594][T31118] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.844534][ T7061] chnl_net:caif_netlink_parms(): no params data found [ 1065.866250][ T13] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.887494][T31130] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.915266][T31130] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.271243][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.281873][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.289257][ T7061] bridge_slave_0: entered allmulticast mode [ 1066.298465][ T7061] bridge_slave_0: entered promiscuous mode [ 1066.331549][T21212] Bluetooth: hci3: command tx timeout [ 1066.339279][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.349877][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.371198][ T7061] bridge_slave_1: entered allmulticast mode [ 1066.379282][ T7061] bridge_slave_1: entered promiscuous mode [ 1066.406100][ T7126] netlink: 'syz.0.9105': attribute type 2 has an invalid length. [ 1066.419518][ T7126] netlink: 'syz.0.9105': attribute type 2 has an invalid length. [ 1066.468809][ T7061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.498163][ T7061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.517053][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9104'. [ 1066.578406][ T7061] team0: Port device team_slave_0 added [ 1066.596113][ T7128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.612743][ T7061] team0: Port device team_slave_1 added [ 1066.667358][ T7138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.708201][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.726483][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.767657][ T7061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.779047][ T7128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.789038][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.789062][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.789091][ T7061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.926563][ T7061] hsr_slave_0: entered promiscuous mode [ 1066.934150][ T7061] hsr_slave_1: entered promiscuous mode [ 1066.941932][ T7061] debugfs: 'hsr0' already exists in 'hsr' [ 1066.947804][ T7061] Cannot create hsr debugfs directory [ 1066.962600][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9110'. [ 1067.225352][ T7155] openvswitch: netlink: Multiple metadata blocks provided [ 1067.317788][ T7061] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1067.324542][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9114'. [ 1067.505108][ T7061] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1067.548755][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9116'. [ 1067.649554][ T7061] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1067.793663][ T7061] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1067.845675][ T7171] ip6t_srh: unknown srh match flags 5F28 [ 1068.166038][ T7061] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1068.194310][ T7061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1068.211119][ T7061] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1068.223981][ T7061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1068.258393][ T7061] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1068.324305][ T7061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1068.349382][ T7061] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1068.396248][ T7061] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1068.411818][T21212] Bluetooth: hci3: command tx timeout [ 1068.513689][ T7185] netlink: 'syz.6.9121': attribute type 83 has an invalid length. [ 1068.533883][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9124'. [ 1068.796250][ T7209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9127'. [ 1068.806892][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9126'. [ 1068.914101][ T7061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.923127][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9127'. [ 1069.043716][ T7061] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.094351][T31130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.101601][T31130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.192920][T31122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.200279][T31122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.813611][ T7250] netlink: 'syz.5.9137': attribute type 12 has an invalid length. [ 1069.837908][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9137'. [ 1069.857321][ T7061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1069.967655][ T7061] veth0_vlan: entered promiscuous mode [ 1070.016998][ T7061] veth1_vlan: entered promiscuous mode [ 1070.084111][ T7061] veth0_macvtap: entered promiscuous mode [ 1070.092296][ T7258] netlink: 'syz.0.9140': attribute type 1 has an invalid length. [ 1070.117112][ T7061] veth1_macvtap: entered promiscuous mode [ 1070.125731][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9140'. [ 1070.174529][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.199281][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.235935][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9142'. [ 1070.273572][T31122] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.299844][T31122] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.327076][T31122] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.376941][T31122] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.418053][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9144'. [ 1070.491422][T21212] Bluetooth: hci3: command tx timeout [ 1070.825184][ T7287] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9149'. [ 1070.840666][T31127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.879018][T31127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.970073][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 1070.978190][ C1] lec:lec_tx_timeout: lec0 [ 1071.024406][T31135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.060165][T31135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.742217][ T7348] bridge_slave_0: left promiscuous mode [ 1071.748236][ T7348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.759331][ T7346] netlink: 'syz.3.9164': attribute type 10 has an invalid length. [ 1071.775255][ T7348] bridge_slave_1: left promiscuous mode [ 1071.792476][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.842375][ T7348] bond0: (slave bond_slave_0): Releasing backup interface [ 1071.855167][ T7348] bond0: (slave bond_slave_1): Releasing backup interface [ 1071.869186][ T7348] team0: Port device team_slave_0 removed [ 1071.879362][ T7348] team0: Port device team_slave_1 removed [ 1071.890932][ T7348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.906730][ T7348] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1071.929251][ T7346] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1071.942391][T31135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.952081][T31135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.031004][ T7360] bond2: option mode: invalid value (133) [ 1072.065100][ T7360] bond2 (unregistering): Released all slaves [ 1072.183555][ T7352] lo speed is unknown, defaulting to 1000 [ 1072.202630][ T7352] lo speed is unknown, defaulting to 1000 [ 1072.211737][ T7372] netlink: 'syz.3.9172': attribute type 10 has an invalid length. [ 1072.317227][ T7377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1072.341278][T31118] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1072.570966][T21212] Bluetooth: hci3: command tx timeout [ 1072.975533][ T7412] xt_SECMARK: invalid mode: 9 [ 1073.545360][ T7434] __nla_validate_parse: 3 callbacks suppressed [ 1073.545385][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9189'. [ 1073.608248][ T7434] netlink: 'syz.2.9189': attribute type 1 has an invalid length. [ 1073.918858][ T7446] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 1073.935148][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9190'. [ 1074.255354][ T7465] netlink: 'syz.3.9195': attribute type 10 has an invalid length. [ 1074.366838][ T7465] team0: Device vxcan1 is of different type [ 1074.495539][ T7470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.584827][ T7476] mac80211_hwsim hwsim113 syzkaller0: entered promiscuous mode [ 1074.844132][ T7492] syzkaller1: entered promiscuous mode [ 1074.849716][ T7492] syzkaller1: entered allmulticast mode [ 1074.866718][ T7492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9205'. [ 1095.885766][ T5195] udevd[5195]: worker [1981] /devices/virtual/block/nbd0 timeout; kill it [ 1095.895696][ T5195] udevd[5195]: seq 37828 '/devices/virtual/block/nbd0' killed [ 1099.490799][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9211'. [ 1099.499736][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9211'. [ 1099.512271][ T7507] macvlan0: entered promiscuous mode [ 1099.913352][ T7534] syzkaller0: entered promiscuous mode [ 1099.936009][ T7534] syzkaller0: entered allmulticast mode [ 1100.040796][ T7538] syzkaller1: entered promiscuous mode [ 1100.046468][ T7538] syzkaller1: entered allmulticast mode [ 1100.217566][ T7552] lo: entered allmulticast mode [ 1100.266135][ T7552] tunl0: entered allmulticast mode [ 1100.332209][ T7552] gre0: entered allmulticast mode [ 1100.377898][ T7552] gretap0: entered allmulticast mode [ 1100.391745][ T7552] erspan0: entered allmulticast mode [ 1100.404096][ T7552] ip_vti0: entered allmulticast mode [ 1100.413644][ T7552] ip6_vti0: entered allmulticast mode [ 1100.423309][ T7552] sit0: entered allmulticast mode [ 1100.442038][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9228'. [ 1100.455616][ T7552] ip6tnl0: entered allmulticast mode [ 1100.512298][ T7552] ip6gre0: entered allmulticast mode [ 1100.542086][ T7552] syz_tun: entered allmulticast mode [ 1100.553633][ T7552] ip6gretap0: entered allmulticast mode [ 1100.564300][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.572116][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.605394][ T7552] bridge0: entered allmulticast mode [ 1100.621492][ T7552] bond0: entered allmulticast mode [ 1100.626693][ T7552] bond_slave_0: entered allmulticast mode [ 1100.632635][ T7552] bond_slave_1: entered allmulticast mode [ 1100.640795][ T7552] mac80211_hwsim hwsim113 wlan1: entered allmulticast mode [ 1100.674413][ T7552] team0: entered allmulticast mode [ 1100.680715][ T7552] team_slave_0: entered allmulticast mode [ 1100.686845][ T7552] team_slave_1: entered allmulticast mode [ 1100.701254][ T7552] dummy0: entered allmulticast mode [ 1100.759003][ T7552] nlmon0: entered allmulticast mode [ 1100.781529][ T7552] caif0: entered allmulticast mode [ 1100.798525][ T7552] vxcan0: entered allmulticast mode [ 1100.810746][ T7552] vxcan1: entered allmulticast mode [ 1100.816452][ T7552] veth0: entered allmulticast mode [ 1100.832168][ T7552] veth1: entered allmulticast mode [ 1100.863098][ T7552] wg0: entered allmulticast mode [ 1100.892829][ T7552] wg1: entered allmulticast mode [ 1100.908554][ T7552] wg2: entered allmulticast mode [ 1100.930754][ T7552] veth0_to_bridge: entered allmulticast mode [ 1100.959417][ T7552] veth1_to_bridge: entered allmulticast mode [ 1101.040636][ T7552] veth0_to_bond: entered allmulticast mode [ 1101.086362][ T7552] veth1_to_bond: entered allmulticast mode [ 1101.132750][ T7552] veth0_to_team: entered allmulticast mode [ 1101.177888][ T7552] veth1_to_team: entered allmulticast mode [ 1101.216834][ T7552] veth0_to_batadv: entered allmulticast mode [ 1101.233645][ T7552] batadv_slave_0: entered allmulticast mode [ 1101.250825][ T7552] veth1_to_batadv: entered allmulticast mode [ 1101.275094][ T7552] batadv_slave_1: entered allmulticast mode [ 1101.298146][ T7552] xfrm0: entered allmulticast mode [ 1101.312289][ T7552] veth0_to_hsr: entered allmulticast mode [ 1101.325108][ T7552] hsr_slave_0: entered allmulticast mode [ 1101.420673][ T7552] veth1_to_hsr: entered allmulticast mode [ 1101.451335][ T7552] hsr_slave_1: entered allmulticast mode [ 1101.464027][ T7552] hsr0: entered allmulticast mode [ 1101.476468][ T7552] veth1_virt_wifi: entered allmulticast mode [ 1101.494391][ T7552] veth0_virt_wifi: entered allmulticast mode [ 1101.504722][ T7552] virt_wifi0: entered allmulticast mode [ 1101.511289][ T7552] veth1_vlan: entered allmulticast mode [ 1101.523288][ T7552] veth0_vlan: entered allmulticast mode [ 1101.529171][ T7552] vlan0: entered allmulticast mode [ 1101.534760][ T7552] vlan1: entered allmulticast mode [ 1101.553949][ T7552] macvlan0: entered allmulticast mode [ 1101.572992][ T7552] macvlan1: entered allmulticast mode [ 1101.594050][ T7552] ipvlan0: entered allmulticast mode [ 1101.603008][ T7552] ipvlan1: entered allmulticast mode [ 1101.615426][ T7552] veth1_macvtap: entered allmulticast mode [ 1101.627804][ T7552] veth0_macvtap: entered allmulticast mode [ 1101.642491][ T7552] macvtap0: entered allmulticast mode [ 1101.682247][ T7552] macsec0: entered allmulticast mode [ 1101.694672][ T7552] geneve0: entered allmulticast mode [ 1101.704289][ T7552] geneve1: entered allmulticast mode [ 1101.714622][ T7552] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1101.727650][ T7552] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 1101.739231][ T7552] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 1101.754581][ T7552] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 1101.766076][ T7552] mac80211_hwsim hwsim112 wlan0: entered allmulticast mode [ 1101.785592][ T7552] wlan0.4: entered allmulticast mode [ 1101.802629][ T7552] bridge0.0: entered allmulticast mode [ 1101.808829][ T7552] sit1: entered allmulticast mode [ 1101.837200][ T7552] sit2: entered allmulticast mode [ 1101.843869][ T7552] geneve2: left promiscuous mode [ 1101.853463][ T7552] bridge1: entered allmulticast mode [ 1101.882149][ T7552] mac80211_hwsim hwsim113 syzkaller0: left promiscuous mode [ 1101.889666][ T7552] mac80211_hwsim hwsim113 syzkaller0: entered allmulticast mode [ 1101.952459][ T7552] virt_wifi0.1: entered allmulticast mode [ 1101.962572][ T7552] vxlan0: entered allmulticast mode [ 1102.053085][T31122] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.122605][T31122] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1102.151267][T31122] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.171248][T31122] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1102.206278][ T7582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9232'. [ 1102.226198][T31122] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.243173][T31122] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1102.278161][ T7588] netlink: 'syz.0.9234': attribute type 11 has an invalid length. [ 1102.289269][ T7585] netlink: 'syz.5.9233': attribute type 10 has an invalid length. [ 1102.298331][ T7588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9234'. [ 1102.363372][ T7585] team0: Port device dummy0 added [ 1102.898293][ T7624] netlink: 'syz.6.9248': attribute type 1 has an invalid length. [ 1102.908144][ T7626] bridge0: port 3(gretap0) entered blocking state [ 1102.926472][ T7626] bridge0: port 3(gretap0) entered disabled state [ 1102.937383][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9249'. [ 1102.948066][ T7626] gretap0: entered allmulticast mode [ 1102.956620][ T7626] gretap0: entered promiscuous mode [ 1102.963469][ T7626] bridge0: port 3(gretap0) entered blocking state [ 1102.970123][ T7626] bridge0: port 3(gretap0) entered forwarding state [ 1102.984398][ T7632] bridge_slave_0: left promiscuous mode [ 1102.997745][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.038766][ T7632] bridge_slave_1: left promiscuous mode [ 1103.066431][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.101180][ T7632] bond0: (slave bond_slave_0): Releasing backup interface [ 1103.139128][ T7632] bond0: (slave bond_slave_1): Releasing backup interface [ 1103.158417][ T7632] team0: Port device team_slave_0 removed [ 1103.169713][ T7632] team0: Port device team_slave_1 removed [ 1103.179354][ T7632] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1103.278588][ T7634] bond1: Invalid ad_actor_system MAC address. [ 1103.286195][ T7634] bond1: option ad_actor_system: invalid value (1) [ 1103.303653][ T7634] bond1 (unregistering): Released all slaves [ 1103.407602][ T7633] team0: Mode changed to "random" [ 1103.453873][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9249'. [ 1103.586863][ T7634] bond1: Invalid ad_actor_system MAC address. [ 1103.602429][ T7634] bond1: option ad_actor_system: invalid value (1) [ 1103.658239][ T7634] bond1 (unregistering): Released all slaves [ 1103.706543][ T7667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9253'. [ 1103.743520][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9249'. [ 1103.789665][ T7634] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1103.820901][ T7667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9253'. [ 1103.906613][ T7667] gretap1: entered promiscuous mode [ 1103.942727][ T7667] gretap1: entered allmulticast mode [ 1104.184201][ T7682] bond2: entered allmulticast mode [ 1104.229890][ T7682] bridge2: entered promiscuous mode [ 1104.236534][ T7682] bridge2: entered allmulticast mode [ 1104.281753][ T7682] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1104.295802][ T7695] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1104.306469][ T7697] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1104.312720][ T7692] netlink: zone id is out of range [ 1104.319246][ T7692] netlink: zone id is out of range [ 1104.335294][ T7688] wg1: entered promiscuous mode [ 1104.346082][ T7692] netlink: zone id is out of range [ 1104.369256][ T7688] wg1: entered allmulticast mode [ 1104.373041][ T7692] netlink: zone id is out of range [ 1104.379908][ T7692] netlink: zone id is out of range [ 1104.385802][ T7692] netlink: zone id is out of range [ 1104.395382][ T7692] netlink: zone id is out of range [ 1104.550601][ T7710] netlink: 'syz.5.9265': attribute type 28 has an invalid length. [ 1104.579030][ T7710] netlink: 'syz.5.9265': attribute type 3 has an invalid length. [ 1104.601751][ T7710] __nla_validate_parse: 2 callbacks suppressed [ 1104.601777][ T7710] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9265'. [ 1104.622936][ T7718] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9265'. [ 1104.646516][ T7710] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1105.292639][ T7749] netlink: 'syz.5.9275': attribute type 1 has an invalid length. [ 1105.383952][ T7748] bond4 (unregistering): Released all slaves [ 1105.508336][ T7763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.691178][ T7773] xt_recent: Unsupported userspace flags (000000b1) [ 1105.727069][ T7775] ip6erspan0: entered allmulticast mode [ 1106.243204][ T7792] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1106.403380][ T7794] sit0: entered promiscuous mode [ 1106.428851][ T7794] sit0: left allmulticast mode [ 1106.439123][ T7794] netlink: 'syz.3.9288': attribute type 1 has an invalid length. [ 1106.470132][ T7794] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9288'. [ 1106.543544][ T7799] C: renamed from lo (while UP) [ 1106.555133][ T7796] batman_adv: batadv0: Adding interface: dummy0 [ 1106.570857][ T7796] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.646343][ T7796] batman_adv: batadv0: Interface activated: dummy0 [ 1106.738290][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9291'. [ 1106.983072][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9294'. [ 1107.055486][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9295'. [ 1107.074951][ T7826] netlink: 'syz.0.9295': attribute type 10 has an invalid length. [ 1107.086829][ T7828] netlink: 'syz.0.9295': attribute type 10 has an invalid length. [ 1107.124074][ T7828] team0 (unregistering): Port device team_slave_0 removed [ 1107.158326][ T7829] netlink: 'syz.2.9297': attribute type 17 has an invalid length. [ 1107.167971][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9297'. [ 1107.179110][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9297'. [ 1107.213550][ T7828] team0 (unregistering): Port device team_slave_1 removed [ 1107.246236][ T7829] ip6gretap0: entered promiscuous mode [ 1107.254013][ T7829] syz_tun: entered promiscuous mode [ 1107.422879][ T7841] netlink: 'syz.0.9302': attribute type 1 has an invalid length. [ 1107.432493][ T7841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9302'. [ 1107.442968][ T7841] netlink: 'syz.0.9302': attribute type 4 has an invalid length. [ 1107.661758][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9306'. [ 1108.444948][ T7914] netlink: 'syz.2.9320': attribute type 2 has an invalid length. [ 1108.659538][ T7923] netlink: 'syz.5.9323': attribute type 2 has an invalid length. [ 1108.796173][ T7933] F: renamed from gretap0 (while UP) [ 1108.835063][ T7933] F: entered allmulticast mode [ 1108.887265][ T7933] netlink: 'syz.5.9326': attribute type 1 has an invalid length. [ 1108.919313][ T7933] vlan1: entered allmulticast mode [ 1108.930857][ T7933] bond0: entered allmulticast mode [ 1109.042725][ T7933] bond0 (unregistering): Released all slaves [ 1109.086041][ T7933] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20001 [ 1109.304606][ T7964] tipc: Started in network mode [ 1109.319876][ T7964] tipc: Node identity ac14140f, cluster identity 4711 [ 1109.344644][ T7964] tipc: New replicast peer: 255.255.255.255 [ 1109.391703][ T7964] tipc: Enabled bearer , priority 10 [ 1109.596872][ T7980] netlink: 'syz.3.9339': attribute type 1 has an invalid length. [ 1109.652424][ T7980] __nla_validate_parse: 13 callbacks suppressed [ 1109.652447][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9339'. [ 1109.675546][ T7984] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1109.696903][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9339'. [ 1109.699667][ T7979] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9338'. [ 1109.813289][ T5490] veth0_vlan: left promiscuous mode [ 1109.852873][ T5490] veth0_vlan: entered promiscuous mode [ 1109.919178][ T7990] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.9340'. [ 1109.960235][ T7990] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.9340'. [ 1110.560882][ T7577] tipc: Node number set to 2886997007 [ 1110.568451][ T8019] netem: change failed [ 1110.576874][ T8019] mac80211_hwsim hwsim113 syzkaller0: entered promiscuous mode [ 1110.702787][ T8028] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9349'. [ 1112.235889][ T8100] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1112.383373][ T8107] wireguard0: entered promiscuous mode [ 1112.388967][ T8107] wireguard0: entered allmulticast mode [ 1112.431227][ T8107] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9370'. [ 1112.449180][ T8108] wireguard1: entered promiscuous mode [ 1112.456387][ T8108] wireguard1: entered allmulticast mode [ 1112.605066][ T8122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9374'. [ 1112.782925][ T8129] Cannot find map_set index 65533 as target [ 1112.875830][ T8133] syzkaller0: refused to change device tx_queue_len [ 1112.886528][ T8133] syzkaller0: entered promiscuous mode [ 1112.898346][ T8133] syzkaller0: entered allmulticast mode [ 1112.908450][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9378'. [ 1112.949630][ T8135] Bluetooth: MGMT ver 1.23 [ 1113.015630][ T8139] netlink: 2108 bytes leftover after parsing attributes in process `syz.6.9380'. [ 1113.151189][ T8146] syzkaller1: entered promiscuous mode [ 1113.156947][ T8146] syzkaller1: entered allmulticast mode [ 1113.169400][ T8146] tipc: Enabling of bearer rejected, media not registered [ 1114.437428][ T8191] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1114.484108][ T8191] bond1 (unregistering): Released all slaves [ 1114.494253][ T8202] netlink: 'syz.0.9397': attribute type 3 has an invalid length. [ 1114.582274][ T8204] mac80211_hwsim hwsim113 syzkaller0: left allmulticast mode [ 1114.864611][ T8210] lo speed is unknown, defaulting to 1000 [ 1114.872938][ T8210] lo speed is unknown, defaulting to 1000 [ 1114.921439][ T8219] netlink: 'syz.6.9394': attribute type 2 has an invalid length. [ 1114.929261][ T8219] netlink: 'syz.6.9394': attribute type 8 has an invalid length. [ 1114.959189][ T8224] netlink: 'syz.3.9402': attribute type 15 has an invalid length. [ 1114.967804][ T8219] __nla_validate_parse: 2 callbacks suppressed [ 1114.967825][ T8219] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9394'. [ 1115.461497][ T8250] netlink: 'syz.6.9408': attribute type 10 has an invalid length. [ 1115.502776][ T8250] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9408'. [ 1115.678215][ T8267] net_ratelimit: 74 callbacks suppressed [ 1115.678238][ T8267] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1116.016729][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.025998][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 1116.115425][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9421'. [ 1116.564043][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9427'. [ 1117.146267][ T8336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9432'. [ 1119.174693][ T8290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1119.642426][ T8361] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.9441'. [ 1119.791953][ T8367] sctp: [Deprecated]: syz.2.9443 (pid 8367) Use of int in max_burst socket option. [ 1119.791953][ T8367] Use struct sctp_assoc_value instead [ 1119.832658][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9443'. [ 1119.923553][ T8377] netlink: 288 bytes leftover after parsing attributes in process `syz.6.9446'. [ 1120.079217][ T8382] IPv6: sit2: Disabled Multicast RS [ 1120.088164][ T8382] sit2: entered allmulticast mode [ 1120.125024][ T8386] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9450'. [ 1120.149892][ T8385] x_tables: duplicate underflow at hook 2 [ 1120.165940][ T8389] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1120.449758][ T8399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1120.477180][ T8402] netlink: 'syz.3.9456': attribute type 1 has an invalid length. [ 1120.720629][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9460'. [ 1120.788320][ T8420] bond0: option xmit_hash_policy: invalid value (64) [ 1120.822983][ T8425] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9462'. [ 1120.835632][ T8420] bond0 (unregistering): Released all slaves [ 1120.861977][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9461'. [ 1120.891899][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9463'. [ 1120.901483][ T8426] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1120.901517][ T8426] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1120.901711][ T8426] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9461'. [ 1120.994467][ T8429] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9463'. [ 1121.041117][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1121.049243][ C1] lec:lec_tx_timeout: lec0 [ 1121.056540][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9463'. [ 1121.154853][ T8429] macvlan0: entered promiscuous mode [ 1121.160620][ T8429] macvlan0: left allmulticast mode [ 1121.316148][ T8445] netlink: 'syz.6.9469': attribute type 1 has an invalid length. [ 1121.413255][ T8445] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1121.433733][ T8445] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9469'. [ 1121.446069][ T8448] bond5: entered allmulticast mode [ 1121.494862][ T8445] Cannot find map_set index 65533 as target [ 1121.597892][T24973] IPVS: starting estimator thread 0... [ 1121.692017][ T8462] IPVS: using max 27 ests per chain, 64800 per kthread [ 1121.835413][ T8478] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1121.906892][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9481'. [ 1122.121624][ T8500] syzkaller1: entered promiscuous mode [ 1122.127430][ T8500] syzkaller1: entered allmulticast mode [ 1122.137766][ T8500] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1122.147537][ T8501] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1122.272498][ T8503] mac80211_hwsim hwsim108 : renamed from wlan1 [ 1122.774762][ T8532] syzkaller0: entered promiscuous mode [ 1122.796549][ T8532] syzkaller0: entered allmulticast mode [ 1123.093222][ T8550] netlink: Conntrack attr has 3 unknown bytes [ 1123.372731][ T8548] netlink: 'syz.3.9497': attribute type 3 has an invalid length. [ 1123.774430][ T8565] netlink: Unknown conntrack attr (0) [ 1123.972143][ T8581] netlink: 'syz.5.9501': attribute type 9 has an invalid length. [ 1124.033448][ T8582] netlink: 'syz.2.9504': attribute type 11 has an invalid length. [ 1124.168865][ T8587] xt_hashlimit: size too large, truncated to 1048576 [ 1124.423944][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.499242][ T8598] bridge_slave_0 (unregistering): left allmulticast mode [ 1124.536978][ T8598] bridge_slave_0 (unregistering): left promiscuous mode [ 1124.560485][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.911348][ T8679] __nla_validate_parse: 9 callbacks suppressed [ 1125.911371][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9527'. [ 1126.978208][T31156] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 1126.986812][T31156] bridge4 (unregistering): left promiscuous mode [ 1127.056242][T31156] bond12 (unregistering): (slave bridge6): Releasing backup interface [ 1127.065873][T31156] bridge6 (unregistering): left promiscuous mode [ 1127.074034][T31156] bridge6 (unregistering): left allmulticast mode [ 1127.125238][T31156] bond0 (unregistering): Released all slaves [ 1127.137552][T31156] bond1 (unregistering): Released all slaves [ 1127.153127][T31156] bond2 (unregistering): Released all slaves [ 1127.172672][T31156] bond3 (unregistering): Released all slaves [ 1127.189263][T31156] bond4 (unregistering): Released all slaves [ 1127.216393][T31156] bond5 (unregistering): Released all slaves [ 1127.232073][T31156] bond6 (unregistering): Released all slaves [ 1127.247607][T31156] bond7 (unregistering): Released all slaves [ 1127.264560][T31156] bond8 (unregistering): Released all slaves [ 1127.285709][T31156] bond9 (unregistering): (slave veth9): Releasing active interface [ 1127.298131][T31156] bond9 (unregistering): (slave veth11): Releasing active interface [ 1127.329179][T31156] bond9 (unregistering): Released all slaves [ 1127.345612][T31156] bond10 (unregistering): Released all slaves [ 1127.361500][T31156] bond11 (unregistering): Released all slaves [ 1127.389779][T31156] bond12 (unregistering): Released all slaves [ 1127.414702][T31156] bond13 (unregistering): Released all slaves [ 1127.430580][T31156] bond14 (unregistering): Released all slaves [ 1127.445297][T31156] bond15 (unregistering): Released all slaves [ 1127.469483][ T8688] geneve2: entered promiscuous mode [ 1127.475145][ T8688] geneve2: entered allmulticast mode [ 1127.484918][ T8689] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1127.490312][ T8695] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9532'. [ 1127.531038][ T31] INFO: task kworker/1:0H:25 blocked for more than 143 seconds. [ 1127.543702][ T31] Not tainted syzkaller #0 [ 1127.559724][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1127.569277][ T8695] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9532'. [ 1127.578485][ T31] task:kworker/1:0H state:D stack:26504 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1127.593076][ T31] Workqueue: kblockd blk_mq_requeue_work [ 1127.598804][ T31] Call Trace: [ 1127.610234][ T31] [ 1127.613247][ T31] __schedule+0x15dd/0x52d0 [ 1127.617884][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1127.631428][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9532'. [ 1127.645189][ T31] ? __pfx___schedule+0x10/0x10 [ 1127.652847][T31113] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1127.666083][ T31] ? schedule+0x90/0x360 [ 1127.676456][T31113] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1127.687319][ T31] schedule+0x164/0x360 [ 1127.696513][ T31] schedule_timeout+0x158/0x2c0 [ 1127.702146][T31113] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1127.712010][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1127.717458][ T31] ? __pfx_process_timeout+0x10/0x10 [ 1127.739390][T31156] 9: left promiscuous mode [ 1127.748710][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1127.755162][ T31] ? prepare_to_wait_event+0x436/0x480 [ 1127.760908][ T31] nbd_queue_rq+0x857/0x1100 [ 1127.765653][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1127.771592][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1127.777813][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1127.783898][ T31] ? sbitmap_get+0x229/0x390 [ 1127.788630][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1127.794913][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1127.801199][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1127.807651][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1127.814715][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1127.820867][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1127.826186][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 1127.831795][ T31] blk_mq_run_hw_queues+0x26c/0x3f0 [ 1127.837046][ T31] blk_mq_requeue_work+0x71c/0x780 [ 1127.842313][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 1127.848003][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 1127.854503][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 1127.860831][ T31] process_scheduled_works+0xb6e/0x18c0 [ 1127.866482][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1127.872729][ T31] ? assign_work+0x3d5/0x5e0 [ 1127.877404][ T31] worker_thread+0xa53/0xfc0 [ 1127.882202][ T31] kthread+0x388/0x470 [ 1127.886649][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1127.892302][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.896945][ T31] ret_from_fork+0x51e/0xb90 [ 1127.901721][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1127.906882][ T31] ? __switch_to+0xc7d/0x1450 [ 1127.911753][ T31] ? __pfx_kthread+0x10/0x10 [ 1127.916463][ T31] ret_from_fork_asm+0x1a/0x30 [ 1127.921634][ T31] [ 1127.934781][ T31] [ 1127.934781][ T31] Showing all locks held in the system: [ 1127.942733][ T31] 1 lock held by pool_workqueue_/3: [ 1127.948065][ T31] 4 locks held by kworker/1:0H/25: [ 1127.955624][ T31] #0: ffff88801e2cbd48 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1127.967499][ T31] #1: ffffc900001f7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1127.981217][ T31] #2: ffff888022f0a698 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 1127.992770][ T31] #3: ffff888026860580 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1128.002074][ T31] 1 lock held by khungtaskd/31: [ 1128.007082][ T31] #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1128.017747][ T31] 2 locks held by getty/5586: [ 1128.022936][ T31] #0: ffff888031ec60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1128.033210][ T31] #1: ffffc900033262f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1128.043872][ T31] 3 locks held by kworker/1:51/24973: [ 1128.049263][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1128.060543][ T31] #1: ffffc900033bfc40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1128.074944][ T31] #2: ffffffff8ff4d4a8 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 1128.084818][ T31] 3 locks held by kworker/u8:5/31113: [ 1128.091653][ T31] #0: ffff888034e5e948 ((wq_completion)udp_tunnel_nic){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1128.104009][ T31] #1: ffffc90004e87c40 ((work_completion)(&utn->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1128.116756][ T31] #2: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: udp_tunnel_nic_device_sync_work+0x29/0xa10 [ 1128.128293][ T31] 6 locks held by kworker/u8:44/31156: [ 1128.134194][ T31] #0: ffff88801bade948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1128.145307][ T31] #1: ffffc90004f17c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1128.155993][ T31] #2: ffffffff8fbc2730 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1128.165759][ T31] #3: ffffffff8ff4d4a8 (ovs_mutex){+.+.}-{4:4}, at: ovs_exit_net+0xe4/0x7a0 [ 1128.176175][ T31] #4: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: internal_dev_destroy+0xf0/0x170 [ 1128.189066][ T31] #5: ffffffff8e7648b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1128.201179][ T31] 1 lock held by udevd/1981: [ 1128.205875][ T31] #0: ffff88802633e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1128.215770][ T31] [ 1128.218151][ T31] ============================================= [ 1128.218151][ T31] [ 1128.233181][ T31] NMI backtrace for cpu 1 [ 1128.233204][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1128.233228][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1128.233243][ T31] Call Trace: [ 1128.233252][ T31] [ 1128.233264][ T31] dump_stack_lvl+0xe8/0x150 [ 1128.233302][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1128.233328][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1128.233361][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1128.233391][ T31] sys_info+0x135/0x170 [ 1128.233413][ T31] watchdog+0xfd9/0x1030 [ 1128.233441][ T31] ? watchdog+0x21a/0x1030 [ 1128.233470][ T31] kthread+0x388/0x470 [ 1128.233493][ T31] ? __pfx_watchdog+0x10/0x10 [ 1128.233512][ T31] ? __pfx_kthread+0x10/0x10 [ 1128.233536][ T31] ret_from_fork+0x51e/0xb90 [ 1128.233569][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1128.233597][ T31] ? __switch_to+0xc7d/0x1450 [ 1128.233628][ T31] ? __pfx_kthread+0x10/0x10 [ 1128.233652][ T31] ret_from_fork_asm+0x1a/0x30 [ 1128.233703][ T31] [ 1128.233724][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1128.349710][ C0] NMI backtrace for cpu 0 [ 1128.349729][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1128.349750][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1128.349763][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1128.349794][ C0] Code: 6e 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 82 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1128.349811][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 1128.349828][ C0] RAX: 000000000039f7f3 RBX: ffffffff819a9d1a RCX: 0000000080000001 [ 1128.349842][ C0] RDX: 0000000000000001 RSI: ffffffff8defc649 RDI: ffffffff8c27d580 [ 1128.349854][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863399b R09: 1ffff110170c6733 [ 1128.349868][ C0] R10: dffffc0000000000 R11: ffffed10170c6734 R12: 0000000000000000 [ 1128.349882][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8 [ 1128.349894][ C0] FS: 0000000000000000(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 1128.349909][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1128.349926][ C0] CR2: 00007fe66abe92f8 CR3: 0000000076cc6000 CR4: 00000000003526f0 [ 1128.349943][ C0] Call Trace: [ 1128.349952][ C0] [ 1128.349960][ C0] default_idle+0x9/0x20 [ 1128.349981][ C0] default_idle_call+0x72/0xb0 [ 1128.350004][ C0] do_idle+0x36a/0x5f0 [ 1128.350032][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1128.350061][ C0] ? __pfx_do_idle+0x10/0x10 [ 1128.350097][ C0] cpu_startup_entry+0x43/0x60 [ 1128.350126][ C0] rest_init+0x2de/0x300 [ 1128.350146][ C0] start_kernel+0x385/0x3d0 [ 1128.350170][ C0] x86_64_start_reservations+0x24/0x30 [ 1128.350198][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1128.350225][ C0] common_startup_64+0x13e/0x147 [ 1128.350255][ C0] [ 1128.351923][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1128.351978][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1128.352053][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1128.352088][ T31] Call Trace: [ 1128.352120][ T31] [ 1128.352152][ T31] vpanic+0x56c/0xa60 [ 1128.352243][ T31] ? __pfx___schedule+0x10/0x10 [ 1128.352331][ T31] ? __pfx_vpanic+0x10/0x10 [ 1128.352458][ T31] panic+0xc5/0xd0 [ 1128.352543][ T31] ? __pfx_panic+0x10/0x10 [ 1128.352641][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1128.352732][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1128.352828][ T31] watchdog+0x1023/0x1030 [ 1128.352906][ T31] ? watchdog+0x21a/0x1030 [ 1128.353001][ T31] kthread+0x388/0x470 [ 1128.353066][ T31] ? __pfx_watchdog+0x10/0x10 [ 1128.353119][ T31] ? __pfx_kthread+0x10/0x10 [ 1128.353202][ T31] ret_from_fork+0x51e/0xb90 [ 1128.353322][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1128.353401][ T31] ? __switch_to+0xc7d/0x1450 [ 1128.353490][ T31] ? __pfx_kthread+0x10/0x10 [ 1128.353542][ T31] ret_from_fork_asm+0x1a/0x30 [ 1128.353683][ T31] [ 1128.645851][ T31] Kernel Offset: disabled [ 1128.650180][ T31] Rebooting in 86400 seconds..