last executing test programs: 6m43.766080135s ago: executing program 2 (id=2052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x20000000}}], 0x30}}], 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x3, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xf4, 0x2], 0x1, [0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x1, 0x1000, 0xfd, 0x3, 0x7583}}}}]}, 0x78}}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f00000002c0)="bada30fbc99b5400040000ea0756a85d86dd775a2c78c540624409ab09f4ac40ab420e89", 0x24, 0x48041, &(0x7f00000001c0)={0x11, 0x10, r12, 0x1, 0xd8, 0x6, @local}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 6m42.999861377s ago: executing program 2 (id=2062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "485a622930c361e2", "98936c1d393cfe5fb1556361cbcef6fed3c7bd0ecd0041e5b3cf02640a50cdbb", "be88042f", "788b11ccd982bc1f"}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) 6m41.642077406s ago: executing program 2 (id=2077): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000150001032dbd7000000000000c1600000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xd}}}]}, 0x38}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x4044c40) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r12, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2={0xff, 0x6}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}}, 0x0) ioctl$sock_SIOCINQ(r11, 0x541b, &(0x7f00000003c0)) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x15c0, 0x2c, 0x100, 0x30bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x8, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x5}}]}}, @filter_kind_options=@f_basic={{0xa}, {0x156c, 0x2, [@TCA_BASIC_POLICE={0x20, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]}, @TCA_BASIC_ACT={0x1548, 0x3, [@m_skbmod={0xe0, 0x16, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="c97f0602413b"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8001, 0x100, 0x6, 0x1ff, 0x9}, 0xc}}]}, {0x6c, 0x6, "f621b8b867636196b2fbffc59e361fbe7cabbbcbb08d07acccf8642f3d8e38fe1fb7f91db289ef8b6745a9de9efe9ff995269b27eaa96ebf928d62c60c23ec284e29e7188aa97c4c7e494c7533ebab0fd296ef4019f57071a4635816df9aea651f18e83538eb3e7d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x18c, 0x1c, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x3, 0x0, 0x4e4680be, 0x776b}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4, 0x2, 0x9, 0x6817}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6e000000, 0x20000000, 0x8, 0x4}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5fb, 0x5, 0x6, 0xff, 0x1}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7fff, 0x6, 0x3000000, 0x9}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xd, 0x20000000, 0x4, 0x7ff}, 0x6, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x4a84, 0x0, 0x5a, 0x8}, 0x1, r10}}]}, {0x7f, 0x6, "84f99cd0feaa86ab31343201c02a38ec2515ff190e2cd515f50f68713d5c727d022c5d31b0ec77401ceeac95b270b422cdaef6815442b8ca671bc5d6629c53ddfc27f0b4feee2f8617d68451e2f66f88d6a5230e88470c510b2d4bcf8a1bc890f3bc091a80cadee2e49e9be871deee6315b8d83ff8cf1d78459c6f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0xfc, 0x18, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x82d78059}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0xb1a9, 0x5, 0xffffe2b1, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfff}]}, {0x90, 0x6, "358fef191b7ad0b283bfeb665d2d894a0c451548b9017c8c10f0181dfd836fea14e246eb65cc44c2ca97cb6fcccf3808fb1733d9618d970491cf4f545cbda2f596dcfffd46df08dea6203945f9fc92a5d3853ce4bfa8f65e8a9dcca67ab255782decac39ab597b57d55c5012fd0ede37f75702a28ba1c35e3c66ac0ca4ae5a87f6039ca1a195a404e3b0cf1e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x10b4, 0x0, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x76ca, 0x7, 0x4, 0x9}, 0x10}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="d7dd0bed30d3"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffd}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xed33b32cdcc13b4, 0x3}}}}, @m_tunnel_key={0x128, 0x17, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffd, 0x10, 0x3, 0x5, 0x7f}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000001}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0xbb, 0x6, "e4b1b657ec811e67df74c704ac208a3795aa6bdabea045541b91c807c6548650bfc1e82cff962286dce06948d6cac60d431933b69eaf4237ec0caf4f8d16bed177f630a489d078f3fe406c4729f46d57f752ffe39673c331b9a6c360e725ebc4e7463b2d47086de0c7155f38c352d556753b9a5345cbca81ec54a6d81b510608f669259ed013d9a95331bd1a45cecadd74544c174ad87d5c7888f4abc14e178f3fecea0eae3984fbec9ec7de0e6c4d790367f43e40f61c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x98f2a813ebfe7ab4, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}]}, 0x15c0}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r9, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r13, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x67}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x8040) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 6m41.597263457s ago: executing program 0 (id=2078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x5, 0x4}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r8, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet6(r9, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180500000000000000000000000000001801000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feff586302000008000000b703000000000000850000001900000095000000000000007ebcf9d40c71dc61f0fda95c5b3a7efde047c86c31fc6797ea675ccd11ed2c68ac37a113d753e0f41e6dba8bf2bbe3ba69d0fb3bc7d5615fa33bdf712dbd6803cab0cf6e5475f7ef26ff57d66933aeb8a9"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 6m41.481035449s ago: executing program 1 (id=2079): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 6m40.982993506s ago: executing program 3 (id=2081): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x1403, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@mcast1, @in6=@remote, 0x3c, 0x0, 0x0, 0x3501, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in=@private=0xa010102, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@mcast1, @in6=@remote, 0x3c, 0x0, 0x0, 0x3501, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in=@private=0xa010102, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m40.973092565s ago: executing program 1 (id=2082): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@gettfilter={0x0, 0x2e, 0x4, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xfff3, 0xffff}, {0xd, 0x9}}, [{0x0, 0xb, 0x100}, {0x0, 0xb, 0x6}, {0x0, 0xb, 0x6}, {0x0, 0xb, 0xfffff4db}, {0x0, 0xb, 0x9}, {0x0, 0xb, 0x9}, {0x0, 0xb, 0x8008000}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc831}, 0x45) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/248, 0x1a, 0xf8, 0x1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) bind$netlink(r2, &(0x7f00000002c0), 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r3, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0], 0x138) (async) r4 = socket$kcm(0x10, 0x2, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000200)) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030004010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}, {&(0x7f0000000580)="eafba073aa3f80cec81915dc181ccb359c907c945d25b22e66263e5bf6406152bd66864ae05ff1d130bb84883dd21fe42b8f51d67caab5f8bb96a53a0582f6d16e1da58e5cb8597da8f42c4b57c4f982679b574bcd672bf9d7ca23a4f858ef62c3ecf6439cf3250221df97b03eacbe87b1395f247ac014b152dc94f655a3cdf91ba92834864cab728e200a6bbf7fe27fe218361dfbf7b8304aaedc996983bfaac07747d3c4931f", 0xa7}, {&(0x7f0000000640)="4a5d7101ba99d65fbf68f5f5c09bce62137775535f076a54aea593285b6eb827fc239cef0c9e13b5ac065be902db76485d60e6f0280be2247b45078d04bd84f0a4b66b1a374929caa9ef5fe5", 0x4c}], 0x3}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) socket(0x1a, 0x80000, 0xfffffc00) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x1a, 0xf, &(0x7f0000000440)=@ringbuf, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x1c}, 0x90) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0xa17, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 6m40.646531747s ago: executing program 3 (id=2083): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) sendmmsg$inet6(r0, &(0x7f0000002780), 0x0, 0x20040060) 6m40.646159226s ago: executing program 4 (id=2084): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180400000000000000000000000000007110a0000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf}, 0x90) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "75318d0d59569795", "cdf54b29db7365b3c7063adb715a1965", "2b9a381b", "b318029d90be5680"}, 0x28) r2 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r2, &(0x7f0000003b40)=[{{&(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000001b00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000037c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0x10001}}], 0x10}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc4}}], 0x3, 0x40000) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6(0x2d, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xf2, 0xb, 0x0, {0x5, 0x4, 0x0, 0x6, 0x100, 0x1065, 0xf30, 0x4, 0x62, 0x4, @multicast2, @multicast2}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4, 0x25dfdbfd, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x11d, 0x76, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 6m40.524968189s ago: executing program 0 (id=2085): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0xa, @local, 0xfffffe4a}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000200)=""/203, &(0x7f0000000000)=0xcb) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 6m40.514782394s ago: executing program 2 (id=2086): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000100000000000000400000000000", @ANYRES32=0x0, @ANYRES64=r0], 0x40}}, 0x0) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89b0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0xb2, 0x0, 0x2}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000040)) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x0, 0x0, {0xa, 0x4e21, 0x2, @loopback, 0x9}}}, 0x3a) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000040000"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0x0, 0x0}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r7], 0x128}, 0x20004000) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa8}, 0x20) 6m40.366245928s ago: executing program 1 (id=2087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e00010000000000000000000400198004e41280529ea082ce8301385c3e9c77aab6c10e7772583a44796844167f3eab59e06d4858091a5b197ba0df5dfb35e3e73344315e68f987993e31a1d41eefe575815003d18e3dd7c0e7ce12d6bfbfee2a113f5bff50d757623592f4093fbfc2a2f6586c1e620148e01dc7f6fd121566f89609b2271ec0ac628fc46246e6bacd3bb38be96d7098e8c67fa0bab5bfd7ba191514fd4ae1661e5fbd68664767ea6f"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711247000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000380)={@bcast, @bcast, 0x5, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) sendmmsg$unix(r4, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18, 0x8800}}], 0x1, 0x0) accept(r2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 6m40.364868353s ago: executing program 3 (id=2088): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x1000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60b3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000013002f0a2bbd7000001e000007006800", @ANYRES32=r1, @ANYBLOB="400900006522020018001a8009000100766c616e000000000800048004000380"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x8014) 6m40.299550061s ago: executing program 4 (id=2089): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x8}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000600000004e00000000000070000000004000000000000080000000000000000010000850000000000000000020000000000000000000000da00"], 0x0, 0x4e}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0xfffd, @multicast2}, 0x4}}, 0x2e) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 6m40.195213348s ago: executing program 0 (id=2090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) accept(r4, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000000)=0x6) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0xb0, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:dmidecode_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40040}, 0x800) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)='G', 0x1}, {&(0x7f00000005c0)="db176c746675173be357dafa5864a7ab07e3701bb91ddd222ab83c5379862e9c946a", 0x22}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000000000000840000000800000018"], 0x28}, 0x41) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x4000804) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=@gettaction={0x94, 0x32, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5129}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x800) 6m39.96130308s ago: executing program 2 (id=2091): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7c05}, @in6={0xa, 0x4e20, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000013000100000002bbe968af0000800000", @ANYRES32=0x0, @ANYBLOB="00020000000000004c001a80480002804400018005001e005d03000008000b0074000000080020001cf4000043fd1d000000000008000500d5d9af1108001600090000000800150050000000080019000200000014003500776c616e3100"/104], 0x80}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000001a000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512da90b5b42128aa090a79507df719af36349f298129da4871307b534bf901115e17392ac66ad022186a8929d1c000006146001e04aeacea799a22a2fa030000c412f6cae80043eb27d533ccaa01f2a6eac4994fed13cf19d0ad229e5752548300000000dbc2777df150dd488318b5790bee7ebd4745b7cdd77b85b941092314fd085f028f4e09d63781987af2abd55a87ac0394b2f92ffab7d153d62058d0a413b217369ca8b6712f000000001b1df65b3e1b9bf115646914ce53d13d0ccacda1ef16fdcceaede34677470b29a47fc813ce3d32cfc7a504c271d6d6f4ea6bf97f2f1be2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de7940b0000db8db03d4b7745fef1d00ec633dee254a6d491b8496da787e814c4fdf0b4a387b4c8149d18c1020029a18986252a70f8f92eb6f0e8c7db000068fbaa2e2a27efd9104297f2c58159f02d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa909ac06b5747932"], 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100ab10000000000000250000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000100)={r12, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x3}, &(0x7f0000000040)=0x8) 6m39.960902056s ago: executing program 4 (id=2092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x0, 0x30, 0x0, &(0x7f000000a500)=0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x2, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0x4, 0x9, 0x5, 0x80, 0x1}, @map_idx={0x18, 0xc022cd2408a81ec4, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xee, &(0x7f0000000200)=""/238, 0x41100, 0x4, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r0, r0, r4, r0, r5, r0], &(0x7f0000000440)=[{0x2, 0x4, 0x0, 0x5}], 0x10, 0xcd}, 0x94) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r0, 0x0, &(0x7f0000000540)=""/57, 0x4}, 0x20) 6m39.950976404s ago: executing program 3 (id=2093): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200400c5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016801800018014000a00ff03acb172310000000008e7ffffffff08001b"], 0x44}}, 0x0) 6m39.805846711s ago: executing program 1 (id=2094): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x140a, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8051}, 0x800) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) 6m39.538331614s ago: executing program 0 (id=2095): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcf99cff}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c624a77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b20677b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0xe978638e58d18b54}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x34, 0xc, 0x0, 0x1, [{0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7673fa71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe163}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5927f3eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b56ff71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4422}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x44011}, 0x4004040) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030004080000050003000600faff05000300000000000500030000f3000008000100ffffffff080002"], 0x50}}, 0x0) 6m39.537587813s ago: executing program 4 (id=2096): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000008000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a31000000000800054000000001ffdddf1dd4acad174fa2570900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018005000100d1000000140000001100010000000000000000000100000ab82c26709b5f89adf5d448ecebb2147b49eccdee9f1ea3760e87700c12dd72a804d7e00ac64c970dc1593651c0eb30f55597ca2bb7d36188de7e5e8314e707162a48985058317a1706"], 0xa4}}, 0x40) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r2, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000025c0)=@newtaction={0x510, 0x30, 0x400, 0x70bd25, 0x25dfdbff, {}, [{0x4}, {0x4f8, 0x1, [@m_ipt={0xd0, 0x7, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x40}, @TCA_IPT_TARG={0x2a, 0x6, {0x2, 'raw\x00', 0x4, 0x9}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0x21, 0x6, "66cb723123f926242ba9ca0ccd0a60391d78106e230823d6557b99b89a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_ipt={0x200, 0x0, 0x0, 0x0, {{0x8}, {0x100, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x40, 0x6, {0x0, 'security\x00', 0x84, 0xffe4, "52e9dcd55ad8dd8fbf9f1230a239163a968d0097b803"}}, @TCA_IPT_TARG={0xbc, 0x6, {0x2, 'filter\x00', 0x8, 0x1, "b430d256967df07086e8941857578367c600644dcf7012f2a6fb2e856d664cdfd5769940e2ce50a33866015ad1971155e8ec92c5981608ba995e1e43e099c663f99959bf2f7b12c6990539ee0a096528f68e3d2cbc32688bd9cc408302307250bd813fc9d497c33d97464348a45c1c3782d23041946c4b10235bac00ad29c8ca7e70f75982c4b1e513c98512d8fc66be0897"}}]}, {0xd9, 0x6, "ab0aeb231dfbe603ffdaeaa5f46028651e41981e869da45d6b25d71a0f452c707985f6ff576a1d8f755a7dd3663952ffb489575ae7c8206d7b358a10311d3f67644ec16f9bc8130457d084a3ef65cde1e7b7839062cfcbdad72bbebc4e7f5cdd75b0bc603e6fbac72617dc4bc7f3b2c7b538d2790b78f014ff75c688c94a3de07a77631b66e5d6fba54683db80fe663841e853a1d0e7f90fa8144bb7e996a9e01215448aeea34ce3c0f0bb241afe7f783974eb2980ada3d303a8b8d69312453add498ad37ba84189d5a3f9107e572fb6cf0da5d41b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x2c, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xc8, 0x10, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xc}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TARG={0x2a, 0x6, {0x2, 'security\x00', 0xf7, 0x2}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x40, 0x6, "4e47ce27c2e99db7262e224c0beb0db3d658b1c05866a183e45f5c809520f71e4cabd7fabbd21ca07d1c3edcd5cdf67ff4fe326dc4d305f4c3057d5e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x50, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0xe0, 0x4, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9c}, @TCA_IPT_TARG={0x2c, 0x6, {0xc000, 'nat\x00', 0xb8, 0xe, "0257"}}]}, {0x84, 0x6, "f4a2f29097f5e6b66f8358f98cb129f51673598267e8b17c9aa512876ff4b8b46fc002c27a2170ce93246dd19371aff19f4e11ac619348ae7960ddb3d5d1e9e4e49f0c6dc6e14c52f683b07e8698f7a5121cedf3b104c5add7ebb1f6bc2154fc2207563a24101b515bb8bdd032c0c69cb2ec773f86462ebc02212979846ad62d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x510}, 0x1, 0x0, 0x0, 0x5}, 0x24048014) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {0x0}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) shutdown(r6, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r7, 0x8, 0x70bd2b, 0x25dfdc02, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c080}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r8, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xa6e092d806b0c6d8}, 0x4008800) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 6m39.53691178s ago: executing program 1 (id=2097): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x1, 0x7800, 0x3, 0x101, {{0x11, 0x4, 0x1, 0x2d, 0x44, 0x65, 0x0, 0x2, 0x29, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x5, [{@broadcast, 0xfffffffc}, {@multicast1, 0xfd}]}, @rr={0x7, 0x17, 0x5a, [@dev={0xac, 0x14, 0x14, 0x32}, @multicast1, @remote, @local, @rand_addr=0x64010101]}, @generic={0x86, 0x2}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0}, 0x94) 6m39.41170944s ago: executing program 3 (id=2098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%-010d \x00'}, 0x20) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000003c0)={@val={0x1c}, @val={0x0, 0x5, 0x0, 0x300}, @ipv6=@udp={0x0, 0x6, '\'\vB', 0x18, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @local}, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}, 0x4e) 6m39.207823745s ago: executing program 1 (id=2099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0xb) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000001800)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x249d}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002ea6e6c383032313100"], 0x20}}, 0x0) recvmmsg(r8, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x10000, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000000000, 0x40}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r10, 0x20, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/17, 0x11}}, 0x10) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r10}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000140)={'tunl0\x00', r6, 0x20, 0x700, 0x1e, 0x1, {{0xa, 0x4, 0x3, 0x0, 0x28, 0xe7, 0x0, 0x5, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x13, 0xb9, [@remote, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x2}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r5, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x24040800) 6m39.206060326s ago: executing program 0 (id=2100): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x80c00) 6m39.115519473s ago: executing program 4 (id=2101): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x6e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x94) 6m35.807944698s ago: executing program 3 (id=2102): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) 6m32.768627341s ago: executing program 0 (id=2103): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x3) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='\x00!G', 0x3}], 0x1, 0x7fffffff, 0x0) 6m30.656630656s ago: executing program 4 (id=2104): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r0) (async) r1 = socket$inet(0x2, 0x4, 0x800) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x9, 0x8000}) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f00000000c0)={0x3d7c, 0x200, 0x6, @remote, 'syz_tun\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000240)={0x9, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}]}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x7, 0x8, 0x7ca8, 0x6, {{0x24, 0x4, 0x1, 0x23, 0x90, 0x68, 0x0, 0x1, 0x4, 0x0, @broadcast, @rand_addr=0x64010102, {[@lsrr={0x83, 0x1f, 0x3f, [@remote, @dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010102, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x24}, @loopback]}, @timestamp_addr={0x44, 0xc, 0x11, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x7}]}, @end, @timestamp_addr={0x44, 0x3c, 0xc1, 0x1, 0xf, [{@broadcast, 0x100}, {@private=0xa010100, 0x3}, {@multicast2, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x5}, {@empty, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote}]}, @generic={0x82, 0x11, "785471adf086d0023db08ab18c2896"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', r5, 0x2f, 0xd, 0x8, 0x9, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7800, 0x8, 0x5, 0x7}}) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000500)={0x974, r7, 0x2, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xaf3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8, 0x1, r6}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x89}}}]}}, {{0x8, 0x1, r6}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfba}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x39c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xba}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0xfb, 0xa, 0xfffffffc}, {0x9ab, 0xe, 0x7, 0x4}, {0x1000, 0x7, 0x0, 0xcf90}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10fa}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0x974}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) (async) r9 = getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0, 0x0}, &(0x7f0000001100)=0xc) (async, rerun: 64) r11 = getpid() (rerun: 64) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001140)=0x0) r13 = getgid() (async) r14 = accept$inet(r2, &(0x7f0000001180)={0x2, 0x0, @empty}, &(0x7f00000011c0)=0x10) sendmmsg$unix(r2, &(0x7f0000001280)=[{{&(0x7f0000000f00)=@file={0xe90e20c02dbdbf4e, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f80)="d01f47f96f36ee2b80065fcccdfdc70c38b73cc9598fb7ffe4d69a35df29449f52c3fc85790de70f3171d24b65b44a2a18734698638735187562faa4283ecf0b64ef7275b458b2ce427842310b7058f5b4d63917518309cd70fdafd763f7c12f1d75f32b491f55e725a97ec7a30c42322ba4adb985d99fb10095c1b3d7aa4bcb80154913e958c178cd4f916df275975da4e34f992300859e7d58ae0bd863a6f61a", 0xa1}, {&(0x7f0000001040)="af503ee30339e42632349b8eb77f3716d714832279a4ba2ffa6b766348e454dde6d46c9ba003f65c6a096db87203", 0x2e}], 0x2, &(0x7f0000001200)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r14, r3]}}], 0x58, 0x48001}}], 0x1, 0x4000111) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b8, 0x0, 0x158, 0x330, 0x330, 0x98, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, &(0x7f00000012c0), {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x40}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x2}}}, {{@ip={@loopback, @rand_addr=0x64010100, 0xff000000, 0xffffffff, 'veth1\x00', 'vlan1\x00', {}, {}, 0x6c, 0x0, 0x2d}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x3, 0x6, 0x1, 0x4, 0x2], 0x0, 0x4}}}, @common=@icmp={{0x28}, {0xd, '~R'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x5, @ipv4=@multicast2, 0x4e21}}}, {{@ip={@loopback, @local, 0x0, 0xff, 'ip6gre0\x00', 'veth1_to_bridge\x00', {0x101}, {0xff}, 0x6c, 0x2, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xf7}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}, {[0x1d56, 0x2e], 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) (rerun: 32) sendto$x25(r2, &(0x7f0000001880)="d516f7797449117f1f2f2df2c223a9e0b6bcbf11c65c9bb0ba7b091498830d5a0bef0549759da36a738b5aaae1bfa6fee2847a08118890ffd9ae40508f8fd2c2c093192ae9f97e136dbcc1d1dd5004b989d0d3004ac0642ce88f43264905d2dcb65b72ee34ea3e19974276bf10206db25fb7984886cc9777ecf83787abc30469db29f2ab2f6b69177f7009b15eec1f608590e6a82521ab61a95f746a72fade75e20e1d8dd27ab896e0d50b22b4c0bffcc2f9f2ecdc4a7a4dfa4d6fd5c0675516497ed567a2fa4a500564482ef8ad87d6cce11a63992635da5f6c313d47b5a82efdda1a0201a5a4", 0xe7, 0x0, &(0x7f0000001980)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000001ac0)={0x8, &(0x7f00000019c0)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}]}) (async) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) sendmsg$nl_route(r2, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)=@delneigh={0x2c, 0x1d, 0x400, 0x70bd2a, 0x25dfdbfc, {0x1b, 0x0, 0x0, r5, 0x20}, [@NDA_VLAN={0x6}, @NDA_FLAGS_EXT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000040) (async) r15 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r15, 0x8940, &(0x7f0000001c40)=@add_del={0x2, &(0x7f0000001c00)}) getsockopt$IP_VS_SO_GET_INFO(r14, 0x0, 0x481, &(0x7f0000001c80), &(0x7f0000001cc0)=0xc) (async, rerun: 32) shutdown(r2, 0x1) (rerun: 32) 6m26.53429155s ago: executing program 2 (id=2105): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08000140000001"], 0x80}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 6m15.006682576s ago: executing program 32 (id=2099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0xb) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000001800)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x249d}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002ea6e6c383032313100"], 0x20}}, 0x0) recvmmsg(r8, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x10000, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000000000, 0x40}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r10, 0x20, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/17, 0x11}}, 0x10) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r10}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000140)={'tunl0\x00', r6, 0x20, 0x700, 0x1e, 0x1, {{0xa, 0x4, 0x3, 0x0, 0x28, 0xe7, 0x0, 0x5, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x13, 0xb9, [@remote, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x2}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r5, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x24040800) 5m10.917625577s ago: executing program 33 (id=2103): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x3) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='\x00!G', 0x3}], 0x1, 0x7fffffff, 0x0) 3m41.580397657s ago: executing program 34 (id=2105): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08000140000001"], 0x80}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 2m59.456243003s ago: executing program 35 (id=2102): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) 2m52.749522262s ago: executing program 36 (id=2104): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r0) (async) r1 = socket$inet(0x2, 0x4, 0x800) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x9, 0x8000}) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f00000000c0)={0x3d7c, 0x200, 0x6, @remote, 'syz_tun\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000240)={0x9, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}]}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x7, 0x8, 0x7ca8, 0x6, {{0x24, 0x4, 0x1, 0x23, 0x90, 0x68, 0x0, 0x1, 0x4, 0x0, @broadcast, @rand_addr=0x64010102, {[@lsrr={0x83, 0x1f, 0x3f, [@remote, @dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010102, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x24}, @loopback]}, @timestamp_addr={0x44, 0xc, 0x11, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x7}]}, @end, @timestamp_addr={0x44, 0x3c, 0xc1, 0x1, 0xf, [{@broadcast, 0x100}, {@private=0xa010100, 0x3}, {@multicast2, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x5}, {@empty, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote}]}, @generic={0x82, 0x11, "785471adf086d0023db08ab18c2896"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', r5, 0x2f, 0xd, 0x8, 0x9, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7800, 0x8, 0x5, 0x7}}) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000500)={0x974, r7, 0x2, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xaf3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8, 0x1, r6}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x89}}}]}}, {{0x8, 0x1, r6}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfba}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x39c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xba}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0xfb, 0xa, 0xfffffffc}, {0x9ab, 0xe, 0x7, 0x4}, {0x1000, 0x7, 0x0, 0xcf90}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10fa}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}]}, 0x974}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) (async) r9 = getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0, 0x0}, &(0x7f0000001100)=0xc) (async, rerun: 64) r11 = getpid() (rerun: 64) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001140)=0x0) r13 = getgid() (async) r14 = accept$inet(r2, &(0x7f0000001180)={0x2, 0x0, @empty}, &(0x7f00000011c0)=0x10) sendmmsg$unix(r2, &(0x7f0000001280)=[{{&(0x7f0000000f00)=@file={0xe90e20c02dbdbf4e, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f80)="d01f47f96f36ee2b80065fcccdfdc70c38b73cc9598fb7ffe4d69a35df29449f52c3fc85790de70f3171d24b65b44a2a18734698638735187562faa4283ecf0b64ef7275b458b2ce427842310b7058f5b4d63917518309cd70fdafd763f7c12f1d75f32b491f55e725a97ec7a30c42322ba4adb985d99fb10095c1b3d7aa4bcb80154913e958c178cd4f916df275975da4e34f992300859e7d58ae0bd863a6f61a", 0xa1}, {&(0x7f0000001040)="af503ee30339e42632349b8eb77f3716d714832279a4ba2ffa6b766348e454dde6d46c9ba003f65c6a096db87203", 0x2e}], 0x2, &(0x7f0000001200)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r14, r3]}}], 0x58, 0x48001}}], 0x1, 0x4000111) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b8, 0x0, 0x158, 0x330, 0x330, 0x98, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, &(0x7f00000012c0), {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x40}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x2}}}, {{@ip={@loopback, @rand_addr=0x64010100, 0xff000000, 0xffffffff, 'veth1\x00', 'vlan1\x00', {}, {}, 0x6c, 0x0, 0x2d}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x3, 0x6, 0x1, 0x4, 0x2], 0x0, 0x4}}}, @common=@icmp={{0x28}, {0xd, '~R'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x5, @ipv4=@multicast2, 0x4e21}}}, {{@ip={@loopback, @local, 0x0, 0xff, 'ip6gre0\x00', 'veth1_to_bridge\x00', {0x101}, {0xff}, 0x6c, 0x2, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xf7}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}, {[0x1d56, 0x2e], 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) (rerun: 32) sendto$x25(r2, &(0x7f0000001880)="d516f7797449117f1f2f2df2c223a9e0b6bcbf11c65c9bb0ba7b091498830d5a0bef0549759da36a738b5aaae1bfa6fee2847a08118890ffd9ae40508f8fd2c2c093192ae9f97e136dbcc1d1dd5004b989d0d3004ac0642ce88f43264905d2dcb65b72ee34ea3e19974276bf10206db25fb7984886cc9777ecf83787abc30469db29f2ab2f6b69177f7009b15eec1f608590e6a82521ab61a95f746a72fade75e20e1d8dd27ab896e0d50b22b4c0bffcc2f9f2ecdc4a7a4dfa4d6fd5c0675516497ed567a2fa4a500564482ef8ad87d6cce11a63992635da5f6c313d47b5a82efdda1a0201a5a4", 0xe7, 0x0, &(0x7f0000001980)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000001ac0)={0x8, &(0x7f00000019c0)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}]}) (async) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) sendmsg$nl_route(r2, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)=@delneigh={0x2c, 0x1d, 0x400, 0x70bd2a, 0x25dfdbfc, {0x1b, 0x0, 0x0, r5, 0x20}, [@NDA_VLAN={0x6}, @NDA_FLAGS_EXT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000040) (async) r15 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r15, 0x8940, &(0x7f0000001c40)=@add_del={0x2, &(0x7f0000001c00)}) getsockopt$IP_VS_SO_GET_INFO(r14, 0x0, 0x481, &(0x7f0000001c80), &(0x7f0000001cc0)=0xc) (async, rerun: 32) shutdown(r2, 0x1) (rerun: 32) 2m17.608318133s ago: executing program 6 (id=2107): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000080)={0x0, 0x5, 0xfffffffffffffff5, 0x1}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000480)={r4, 0x3ff, 0x5, 0x1}) r5 = socket(0x28, 0xa, 0x60) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8d3, 0x6b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r5, 0x10f, 0x83, &(0x7f0000000980), &(0x7f00000009c0)=0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x0, r5}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x3, 0x10009}, [@FRA_DST={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x240000c4) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r7, 0xc038943b, &(0x7f0000000bc0)={0xffffffff, 0x40, '\x00', 0x0, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000c00)={0x0, 0x20400000}, &(0x7f0000000c40)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000c80)={r8, 0x3c6a, 0xc12}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000cc0)={r8, 0x3}, 0x8) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0xb68a466ede90d3a7}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0xc24}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x30}}, 0x6000) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f40)={'ipvlan1\x00', &(0x7f0000000f00)=@ethtool_stats={0x1d, 0x1, [0xf]}}) getsockopt(r2, 0x1, 0x3, &(0x7f0000000f80)=""/197, &(0x7f0000001080)=0xc5) connect$pppoe(r5, &(0x7f00000010c0)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000011c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001200)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r9, &(0x7f0000001440)={&(0x7f0000001100), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x64, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c041) 1m15.304018472s ago: executing program 9 (id=2110): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r4, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x828}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x12, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r7, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) socket$packet(0x11, 0x2, 0x300) 26.403160853s ago: executing program 5 (id=2106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x20) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa4}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 0s ago: executing program 5 (id=2106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, 0x0, 0x20) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa4}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): [ 120.690600][ T7112] IPVS: using max 25 ests per chain, 60000 per kthread [ 120.797009][ T7124] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.315'. [ 120.832076][ T7124] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 121.062357][ T7136] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 121.076380][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 121.097453][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 121.398957][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.323'. [ 121.482433][ T7156] bridge1: port 1(veth0_to_bond) entered blocking state [ 121.506980][ T7156] bridge1: port 1(veth0_to_bond) entered disabled state [ 121.556191][ T7156] veth0_to_bond: entered allmulticast mode [ 121.565431][ T7156] veth0_to_bond: entered promiscuous mode [ 121.602255][ T7164] xt_hashlimit: overflow, try lower: 3/0 [ 121.631712][ T7165] xt_hashlimit: overflow, try lower: 3/0 [ 121.883367][ T7176] netlink: 'syz.0.328': attribute type 8 has an invalid length. [ 121.973540][ T7176] netlink: 'syz.0.328': attribute type 8 has an invalid length. [ 121.987691][ T7185] macvtap0: Device is already in use. [ 122.177215][ T7181] xt_CT: No such helper "snmp_trap" [ 122.513281][ T7206] : entered promiscuous mode [ 122.574448][ T7217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.630172][ T7226] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 122.754711][ T7234] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20004 [ 122.993836][ T7245] netlink: 'syz.0.347': attribute type 1 has an invalid length. [ 123.033224][ T7244] macsec1: entered promiscuous mode [ 123.091960][ T7248] dvmrp0: entered allmulticast mode [ 124.080909][ T7293] openvswitch: netlink: Missing key (keys=40, expected=100) [ 124.217423][ T7299] wireguard: wg2: Could not create IPv4 socket [ 124.237943][ T7301] 8021q: VLANs not supported on gre0 [ 124.366302][ T7306] pimreg: entered allmulticast mode [ 124.400852][ T7305] pimreg: left allmulticast mode [ 124.474336][ T7308] tipc: Enabled bearer , priority 0 [ 124.483376][ T7308] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 124.574837][ T7307] tipc: Disabling bearer [ 124.857562][ T7332] netlink: 'syz.3.378': attribute type 27 has an invalid length. [ 124.885117][ T7335] ipt_ECN: cannot use operation on non-tcp rule [ 124.909451][ T7336] __nla_validate_parse: 11 callbacks suppressed [ 124.909470][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 125.024474][ T7340] netlink: 'syz.0.380': attribute type 4 has an invalid length. [ 125.071328][ T7340] netlink: 'syz.0.380': attribute type 4 has an invalid length. [ 125.141521][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 125.181828][ T7342] netlink: 32 bytes leftover after parsing attributes in process `syz.3.382'. [ 125.230589][ T7353] netlink: 'syz.2.384': attribute type 4 has an invalid length. [ 125.247239][ T7353] netlink: 17 bytes leftover after parsing attributes in process `syz.2.384'. [ 125.289076][ T7355] netlink: 'syz.0.385': attribute type 83 has an invalid length. [ 125.423197][ T7361] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 125.442605][ T7363] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 125.634279][ T7373] netlink: 108 bytes leftover after parsing attributes in process `syz.4.388'. [ 125.952826][ T7366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.968200][ T7366] bond2: (slave bond3): making interface the new active one [ 125.997719][ T7366] bond2: (slave bond3): Enslaving as an active interface with an up link [ 126.145621][ T7391] netlink: 96 bytes leftover after parsing attributes in process `syz.0.395'. [ 132.979616][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 30 seconds [ 132.991412][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 30 seconds [ 133.002540][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 30 seconds [ 133.015857][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 30 seconds [ 138.100691][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.107808][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 162.786415][ T5205] udevd[5205]: worker [5884] /devices/virtual/block/nbd1 is taking a long time [ 163.058626][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 60 seconds [ 163.069403][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 60 seconds [ 163.081413][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 60 seconds [ 163.092455][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 60 seconds [ 165.814838][ T5966] IPVS: starting estimator thread 0... [ 165.885765][ T7427] IPVS: sh: FWM 3 0x00000003 - no destination available [ 165.907529][ T7426] Illegal XDP return value 818728993 on prog (id 143) dev N/A, expect packet loss! [ 165.927184][ T7423] IPVS: using max 27 ests per chain, 64800 per kthread [ 166.020549][ T7415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.038771][ T7415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.167277][ T7415] bond1: left promiscuous mode [ 166.172169][ T7415] bond1: left allmulticast mode [ 166.178401][ T7415] ip6gre1: left allmulticast mode [ 166.191286][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 166.206686][ T5966] wg1 speed is unknown, defaulting to 1000 [ 166.207501][ T3547] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.221493][ T5966] syz2: Port: 1 Link DOWN [ 166.286356][ T3547] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.308168][ T3547] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.347906][ T3547] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.397854][ T7439] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 166.405597][ T7439] netlink: 'syz.3.409': attribute type 2 has an invalid length. [ 166.425937][ T7439] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 166.461011][ T7439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.409'. [ 166.481414][ T7444] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 166.498966][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 166.528439][ T7446] geneve1: mtu less than device minimum [ 166.531795][ T7444] netlink: 224 bytes leftover after parsing attributes in process `syz.3.409'. [ 167.340837][ T7492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.393218][ T7495] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.425'. [ 168.369947][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 168.387519][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 168.412066][ T7540] syz.0.439: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 168.448406][ T7540] CPU: 0 UID: 0 PID: 7540 Comm: syz.0.439 Not tainted syzkaller #0 PREEMPT(full) [ 168.448436][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.448457][ T7540] Call Trace: [ 168.448467][ T7540] [ 168.448476][ T7540] dump_stack_lvl+0x189/0x250 [ 168.448521][ T7540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.448548][ T7540] ? __pfx__printk+0x10/0x10 [ 168.448580][ T7540] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.448603][ T7540] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.448629][ T7540] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 168.448655][ T7540] warn_alloc+0x214/0x310 [ 168.448684][ T7540] ? __pfx_warn_alloc+0x10/0x10 [ 168.448722][ T7540] ? kasan_save_track+0x4f/0x80 [ 168.448741][ T7540] ? kasan_save_track+0x3e/0x80 [ 168.448759][ T7540] ? __kasan_kmalloc+0x93/0xb0 [ 168.448779][ T7540] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 168.448798][ T7540] ? xskq_create+0x56/0x170 [ 168.448829][ T7540] ? xsk_setsockopt+0x4dc/0x8d0 [ 168.448854][ T7540] ? do_sock_setsockopt+0x17c/0x1b0 [ 168.448876][ T7540] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 168.448897][ T7540] ? do_syscall_64+0xfa/0xf80 [ 168.448924][ T7540] __vmalloc_node_range_noprof+0x134/0x16a0 [ 168.448979][ T7540] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.449009][ T7540] ? __kasan_kmalloc+0x93/0xb0 [ 168.449038][ T7540] vmalloc_user_noprof+0xad/0xf0 [ 168.449059][ T7540] ? xskq_create+0xbf/0x170 [ 168.449093][ T7540] xskq_create+0xbf/0x170 [ 168.449126][ T7540] xsk_init_queue+0xb0/0x110 [ 168.449159][ T7540] xsk_setsockopt+0x4dc/0x8d0 [ 168.449191][ T7540] ? __pfx_xsk_setsockopt+0x10/0x10 [ 168.449222][ T7540] ? __pfx_aa_sk_perm+0x10/0x10 [ 168.449250][ T7540] ? aa_sock_opt_perm+0xff/0x1a0 [ 168.449281][ T7540] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 168.449300][ T7540] ? __pfx_xsk_setsockopt+0x10/0x10 [ 168.449330][ T7540] do_sock_setsockopt+0x17c/0x1b0 [ 168.449359][ T7540] __x64_sys_setsockopt+0x13f/0x1b0 [ 168.449388][ T7540] do_syscall_64+0xfa/0xf80 [ 168.449410][ T7540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.449430][ T7540] ? clear_bhb_loop+0x60/0xb0 [ 168.449455][ T7540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.449474][ T7540] RIP: 0033:0x7fb8d958f749 [ 168.449502][ T7540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.449519][ T7540] RSP: 002b:00007fb8da386038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.449541][ T7540] RAX: ffffffffffffffda RBX: 00007fb8d97e5fa0 RCX: 00007fb8d958f749 [ 168.449555][ T7540] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 168.449568][ T7540] RBP: 00007fb8d9613f91 R08: 0000000000000004 R09: 0000000000000000 [ 168.449580][ T7540] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.449593][ T7540] R13: 00007fb8d97e6038 R14: 00007fb8d97e5fa0 R15: 00007fffe1c56ef8 [ 168.449627][ T7540] [ 168.451927][ T7540] Mem-Info: [ 168.802957][ T7540] active_anon:7538 inactive_anon:0 isolated_anon:0 [ 168.802957][ T7540] active_file:2440 inactive_file:39893 isolated_file:0 [ 168.802957][ T7540] unevictable:768 dirty:40 writeback:0 [ 168.802957][ T7540] slab_reclaimable:10278 slab_unreclaimable:127165 [ 168.802957][ T7540] mapped:29090 shmem:3264 pagetables:1167 [ 168.802957][ T7540] sec_pagetables:0 bounce:0 [ 168.802957][ T7540] kernel_misc_reclaimable:0 [ 168.802957][ T7540] free:1295397 free_pcp:16287 free_cma:0 [ 168.858411][ T7540] Node 0 active_anon:29252kB inactive_anon:0kB active_file:9760kB inactive_file:159372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116360kB dirty:156kB writeback:0kB shmem:10720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12992kB pagetables:4544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.960400][ T7548] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.439'. [ 168.961090][ T7540] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 169.086882][ T7540] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.160883][ T7540] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 169.170039][ T7540] Node 0 DMA32 free:1295276kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22252kB inactive_anon:0kB active_file:9760kB inactive_file:159372kB unevictable:1536kB writepending:164kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:43524kB local_pcp:23028kB free_cma:0kB [ 169.179452][ T7558] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 169.236248][ T7559] tipc: Started in network mode [ 169.241502][ T7559] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 169.264683][ T7559] tipc: Enabled bearer , priority 2 [ 169.287505][ T7558] netlink: 568 bytes leftover after parsing attributes in process `syz.2.443'. [ 169.296746][ T7540] lowmem_reserve[]: 0 0 1 1 1 [ 169.301827][ T7540] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.363397][ T7540] lowmem_reserve[]: 0 0 0 0 0 [ 169.458139][ T7540] Node 1 Normal free:3880708kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18852kB local_pcp:10308kB free_cma:0kB [ 169.495765][ T7568] netlink: 'syz.3.446': attribute type 11 has an invalid length. [ 169.511620][ T7540] lowmem_reserve[]: 0 0 0 0 0 [ 169.516377][ T7540] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.547651][ T7568] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.446'. [ 169.558296][ T7540] Node 0 DMA32: 2450*4kB (UM) 941*8kB (UM) 368*16kB (UM) 422*32kB (UME) 42*64kB (UME) 12*128kB (UME) 9*256kB (UME) 3*512kB (UME) 6*1024kB (ME) 6*2048kB (UM) 301*4096kB (M) = 1296112kB [ 169.636547][ T7540] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 169.665760][ T7540] Node 1 Normal: 179*4kB (UME) 57*8kB (UME) 35*16kB (UME) 64*32kB (UME) 27*64kB (UME) 11*128kB (UME) 8*256kB (UME) 6*512kB (UME) 2*1024kB (ME) 0*2048kB 944*4096kB (M) = 3880708kB [ 169.688724][ T7540] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.698909][ T7540] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.710128][ T7540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.722681][ T7540] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.732500][ T7540] 43697 total pagecache pages [ 169.737806][ T7540] 0 pages in swap cache [ 169.742074][ T7540] Free swap = 124996kB [ 169.747060][ T7540] Total swap = 124996kB [ 169.751509][ T7540] 2097051 pages RAM [ 169.755493][ T7540] 0 pages HighMem/MovableOnly [ 169.760908][ T7540] 425122 pages reserved [ 169.765168][ T7540] 0 pages cma reserved [ 169.902560][ T7582] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 169.962029][ T7582] veth3: entered promiscuous mode [ 170.140533][ T7593] syzkaller1: entered promiscuous mode [ 170.158886][ T7593] syzkaller1: entered allmulticast mode [ 170.387408][ T5899] tipc: Node number set to 10463914 [ 170.845225][ T7623] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 170.894209][ T7627] netlink: zone id is out of range [ 170.910837][ T7627] netlink: zone id is out of range [ 170.929059][ T7627] netlink: zone id is out of range [ 170.943156][ T7627] netlink: zone id is out of range [ 170.965378][ T7627] netlink: zone id is out of range [ 170.983541][ T7627] netlink: zone id is out of range [ 170.994516][ T7627] netlink: zone id is out of range [ 171.006144][ T7627] netlink: zone id is out of range [ 171.015240][ T7627] netlink: zone id is out of range [ 171.021385][ T7627] netlink: zone id is out of range [ 171.227745][ T7643] tipc: Enabling of bearer rejected, failed to enable media [ 171.243782][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.251970][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.285923][ T7652] __nla_validate_parse: 1 callbacks suppressed [ 171.286105][ T7652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.475'. [ 171.302612][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 171.315541][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 171.325231][ T7648] netlink: 'syz.1.474': attribute type 3 has an invalid length. [ 171.422399][ T7657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.476'. [ 171.559843][ T7664] netlink: 64 bytes leftover after parsing attributes in process `syz.1.478'. [ 171.630632][ T7623] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 172.028095][ T7698] wg1 speed is unknown, defaulting to 1000 [ 172.187522][ T7704] IPVS: length: 217 != 24 [ 172.205539][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 172.481213][ T7721] netlink: 96 bytes leftover after parsing attributes in process `syz.4.495'. [ 172.531342][ T7721] 8021q: VLANs not supported on gre0 [ 172.615520][ T7732] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.497'. [ 172.836437][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'. [ 173.196437][ T7764] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 173.235569][ T7764] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 173.282794][ T5838] Bluetooth: hci4: link tx timeout [ 173.289223][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.333190][ T7776] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 173.351497][ T7776] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 173.360308][ T7776] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 173.368006][ T7776] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 173.417756][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 173.722534][ T7465] udevd[7465]: failed to send result of seq 12898 to main daemon: Connection refused [ 174.014739][ T7806] netlink: 'syz.0.520': attribute type 12 has an invalid length. [ 174.023246][ T7806] netlink: 'syz.0.520': attribute type 29 has an invalid length. [ 174.055052][ T7806] netlink: 'syz.0.520': attribute type 1 has an invalid length. [ 174.075250][ T7806] netlink: 'syz.0.520': attribute type 2 has an invalid length. [ 174.470389][ T7834] netlink: 'syz.0.526': attribute type 21 has an invalid length. [ 174.497713][ T7834] netlink: 'syz.0.526': attribute type 22 has an invalid length. [ 174.536763][ T7834] netlink: 'syz.0.526': attribute type 23 has an invalid length. [ 174.549842][ T7834] netlink: 'syz.0.526': attribute type 25 has an invalid length. [ 175.213949][ T7874] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 175.377191][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 175.410144][ T7884] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 175.850665][ T7898] netlink: 'syz.1.543': attribute type 29 has an invalid length. [ 175.923992][ T7883] infiniband !yz!: set down [ 175.936937][ T7883] infiniband !yz!: added team_slave_0 [ 175.950036][ T7883] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 175.954179][ T7883] infiniband !yz!: Couldn't open port 1 [ 176.027879][ T7883] RDS/IB: !yz!: added [ 176.033509][ T7902] netlink: 'syz.1.543': attribute type 29 has an invalid length. [ 176.034959][ T7883] smc: adding ib device !yz! with port count 1 [ 176.077646][ T7883] smc: ib device !yz! port 1 has no pnetid [ 176.143925][ T7904] gtp0: entered promiscuous mode [ 176.173252][ T7908] Cannot find del_set index 4 as target [ 176.177987][ T7904] gtp0: entered allmulticast mode [ 176.455103][ T7915] __nla_validate_parse: 13 callbacks suppressed [ 176.455131][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'. [ 176.509821][ T7917] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 176.543122][ T7918] x_tables: duplicate entry at hook 3 [ 176.690933][ T7920] netlink: 766 bytes leftover after parsing attributes in process `syz.1.550'. [ 177.051119][ T7931] C: renamed from lo (while UP) [ 177.093370][ T7931] net_ratelimit: 48 callbacks suppressed [ 177.093388][ T7931] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 177.328256][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'. [ 177.383787][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 177.399890][ T7939] netlink: 44 bytes leftover after parsing attributes in process `syz.1.556'. [ 177.416792][ T7939] netlink: 43 bytes leftover after parsing attributes in process `syz.1.556'. [ 177.436163][ T7939] netlink: 43 bytes leftover after parsing attributes in process `syz.1.556'. [ 177.605647][ T7946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.660712][ T7949] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 177.780094][ T7946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.877662][ T7946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.975926][ T7946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.115828][ T1115] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.172160][ T3878] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.210745][ T3731] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.262269][ T3731] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.498829][ T7970] netlink: 666 bytes leftover after parsing attributes in process `syz.2.565'. [ 178.860880][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 178.894262][ T7981] netlink: 56 bytes leftover after parsing attributes in process `syz.0.569'. [ 179.504091][ T4552] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.524240][ T4552] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.561089][ T4552] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.595304][ T4552] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.032023][ T8028] validate_nla: 8 callbacks suppressed [ 180.032045][ T8028] netlink: 'syz.3.584': attribute type 1 has an invalid length. [ 180.161256][ T8028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.194722][ T8033] bond2: (slave geneve2): making interface the new active one [ 180.204471][ T8033] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 180.279520][ T8040] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 180.285576][ T8040] syzkaller1: linktype set to 823 [ 180.738798][ T8074] netlink: 'syz.3.597': attribute type 1 has an invalid length. [ 180.791006][ T8074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.899945][ T8083] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 181.209574][ T8105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.485331][ T8126] tipc: Started in network mode [ 181.490827][ T8126] tipc: Node identity 06c6760c5f93, cluster identity 4711 [ 181.499291][ T8126] tipc: Enabled bearer , priority 0 [ 181.506041][ T8123] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 181.527843][ T8124] syzkaller0: entered promiscuous mode [ 181.553215][ T8124] syzkaller0: entered allmulticast mode [ 181.615751][ T8127] tipc: Resetting bearer [ 181.669181][ T8127] tipc: Disabling bearer [ 181.683897][ T8131] netlink: 'syz.0.615': attribute type 5 has an invalid length. [ 181.702997][ T8133] netlink: 'syz.0.615': attribute type 5 has an invalid length. [ 181.832245][ T8137] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 181.876297][ T8137] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 181.901736][ T8147] __nla_validate_parse: 13 callbacks suppressed [ 181.901772][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 181.940948][ T8149] netlink: 'syz.1.623': attribute type 10 has an invalid length. [ 181.951378][ T8149] bridge0: port 3(dummy0) entered disabled state [ 181.958095][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.974201][ T8149] bridge0: port 3(dummy0) entered blocking state [ 181.980883][ T8149] bridge0: port 3(dummy0) entered forwarding state [ 181.987786][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.995012][ T8149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.004027][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 182.018684][ T8149] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 182.030857][ T8151] bridge0: port 4(syz_tun) entered blocking state [ 182.038340][ T8151] bridge0: port 4(syz_tun) entered disabled state [ 182.045346][ T8151] syz_tun: entered allmulticast mode [ 182.054155][ T8151] syz_tun: entered promiscuous mode [ 182.089126][ T8151] bridge0: port 4(syz_tun) entered blocking state [ 182.096028][ T8151] bridge0: port 4(syz_tun) entered forwarding state [ 182.163747][ T8150] netlink: 44 bytes leftover after parsing attributes in process `syz.0.622'. [ 182.524364][ T8181] netlink: 144 bytes leftover after parsing attributes in process `syz.3.632'. [ 182.569845][ T8185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.633'. [ 182.651961][ T8170] netlink: 'syz.4.628': attribute type 10 has an invalid length. [ 182.678594][ T8170] team0: Port device dummy0 added [ 182.771125][ T8195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.635'. [ 183.005706][ T8206] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 183.031716][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.643'. [ 183.096490][ T8210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.643'. [ 183.497916][ T8249] batadv0: entered promiscuous mode [ 183.503384][ T8249] batadv0: entered allmulticast mode [ 183.521002][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.652'. [ 183.573456][ T3547] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 183.626658][ T8257] netlink: 'syz.4.654': attribute type 12 has an invalid length. [ 183.671879][ T8256] netlink: 'syz.4.654': attribute type 12 has an invalid length. [ 183.735452][ T8255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.655'. [ 183.978555][ T8275] bond4: entered promiscuous mode [ 183.983740][ T8275] bond4: entered allmulticast mode [ 183.992641][ T8275] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.629619][ T8318] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 184.763238][ T8336] syzkaller1: entered promiscuous mode [ 184.769259][ T8336] syzkaller1: entered allmulticast mode [ 184.867448][ T3547] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 185.344503][ T8353] netlink: 'syz.1.682': attribute type 4 has an invalid length. [ 185.725184][ T8372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.741216][ T8372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.764474][ T8372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.772955][ T8372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.806080][ T8376] wg1 speed is unknown, defaulting to 1000 [ 186.122121][ T8397] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 186.252785][ T8404] tipc: Started in network mode [ 186.260631][ T8404] tipc: Node identity ca1f47a5a032, cluster identity 4711 [ 186.270356][ T8404] tipc: Enabled bearer , priority 0 [ 186.278239][ T8404] syzkaller0: entered promiscuous mode [ 186.283930][ T8404] syzkaller0: entered allmulticast mode [ 186.313776][ T8405] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 186.377710][ T8410] IPVS: persistence engine module ip_vs_pe_ not found [ 186.391966][ T8404] tipc: Resetting bearer [ 186.435720][ T8401] tipc: Resetting bearer [ 186.480248][ T8401] tipc: Disabling bearer [ 186.494820][ T8418] openvswitch: netlink: Message has 4 unknown bytes. [ 186.790283][ T8431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.852814][ T8443] IPVS: set_ctl: invalid protocol: 0 172.20.20.32:20002 [ 187.110624][ T8431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.214574][ T8463] __nla_validate_parse: 49 callbacks suppressed [ 187.214595][ T8463] netlink: 44 bytes leftover after parsing attributes in process `syz.4.713'. [ 187.336766][ T8467] IPVS: set_ctl: invalid protocol: 0 172.20.20.13:20001 [ 187.357084][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 187.378906][ T8431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.402270][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 187.434249][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 187.443723][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 187.453550][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 187.465503][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 187.476088][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 187.487822][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 187.497446][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 187.561037][ T8431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.611611][ T8475] tipc: Enabling of bearer rejected, already enabled [ 187.723992][ T1168] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.750749][ T1168] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.775007][ T1168] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.800477][ T1168] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.982275][ T8492] tipc: Enabled bearer , priority 0 [ 188.153714][ T8493] syzkaller0: entered promiscuous mode [ 188.162382][ T8493] syzkaller0: entered allmulticast mode [ 188.174445][ T8493] tipc: Resetting bearer [ 188.243158][ T8493] tipc: Resetting bearer [ 188.582650][ T8518] netlink: 'syz.1.728': attribute type 2 has an invalid length. [ 188.780593][ T8532] SET target dimension over the limit! [ 189.489830][ T8493] tipc: Disabling bearer [ 189.500106][ T8508] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 189.508011][ T8518] : entered promiscuous mode [ 189.527494][ T8534] netlink: 'syz.4.731': attribute type 11 has an invalid length. [ 189.651921][ T8542] netlink: 'syz.2.734': attribute type 8 has an invalid length. [ 189.667621][ T8539] xt_CONNSECMARK: invalid mode: 0 [ 190.076091][ T8576] bridge0: port 4(syz_tun) entered disabled state [ 190.082862][ T8576] bridge0: port 3(dummy0) entered disabled state [ 190.089437][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.413118][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.421040][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.677055][ T8596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.692750][ T8596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.737829][ T8613] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 190.854459][ T1168] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.864684][ T8617] netlink: 'syz.2.753': attribute type 1 has an invalid length. [ 190.884636][ T1168] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.916902][ T1168] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.951434][ T1168] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.347834][ T8656] x_tables: duplicate underflow at hook 2 [ 191.537441][ T8671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.196204][ T8714] netlink: 'syz.4.781': attribute type 1 has an invalid length. [ 192.297161][ T8718] netlink: 'syz.0.786': attribute type 2 has an invalid length. [ 192.530766][ T8727] netlink: 'syz.2.788': attribute type 1 has an invalid length. [ 192.545417][ T8727] __nla_validate_parse: 35 callbacks suppressed [ 192.545438][ T8727] netlink: 224 bytes leftover after parsing attributes in process `syz.2.788'. [ 192.647835][ T8729] netlink: 'syz.0.789': attribute type 2 has an invalid length. [ 192.863288][ T8747] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 192.869790][ T8747] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 192.879269][ T8747] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.795'. [ 192.988644][ T8753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.021025][ T8754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.138818][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 90 seconds [ 193.152613][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 90 seconds [ 193.166897][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 90 seconds [ 193.178031][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 90 seconds [ 193.427614][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 193.455512][ T8777] hsr_slave_0: left promiscuous mode [ 193.468627][ T8777] hsr_slave_1: left promiscuous mode [ 193.643990][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 193.654019][ T8792] netlink: 76 bytes leftover after parsing attributes in process `syz.1.809'. [ 193.663314][ T8793] netlink: 76 bytes leftover after parsing attributes in process `syz.1.809'. [ 193.903913][ T8807] netlink: 211792 bytes leftover after parsing attributes in process `syz.4.815'. [ 193.927531][ T8807] IPv6: Can't replace route, no match found [ 193.934608][ T8807] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 194.068093][ T8817] netlink: 1 bytes leftover after parsing attributes in process `syz.3.813'. [ 194.181686][ T8811] team0 (unregistering): Port device team_slave_0 removed [ 194.195550][ T8811] team0 (unregistering): Port device team_slave_1 removed [ 194.276882][ T8802] syzkaller0: entered promiscuous mode [ 194.282579][ T8802] syzkaller0: entered allmulticast mode [ 195.496240][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 195.642056][ T8857] netlink: 'syz.0.824': attribute type 10 has an invalid length. [ 195.771885][ T8870] netlink: 'syz.4.829': attribute type 3 has an invalid length. [ 195.821535][ T8873] bond4 (unregistering): Released all slaves [ 195.840200][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'. [ 196.193961][ T8897] netlink: 'syz.1.834': attribute type 1 has an invalid length. [ 196.225257][ T8897] openvswitch: netlink: Missing key (keys=40, expected=80) [ 196.574107][ T8924] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 196.762494][ T8933] x_tables: duplicate underflow at hook 1 [ 197.162303][ T8962] netlink: 'syz.3.855': attribute type 23 has an invalid length. [ 197.316455][ T8970] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 197.593369][ T8982] netlink: 'syz.3.861': attribute type 3 has an invalid length. [ 197.724441][ T8997] netlink: 'syz.2.864': attribute type 21 has an invalid length. [ 197.745383][ T8997] __nla_validate_parse: 18 callbacks suppressed [ 197.745402][ T8997] netlink: 152 bytes leftover after parsing attributes in process `syz.2.864'. [ 198.112819][ T9016] tipc: Enabling of bearer rejected, failed to enable media [ 198.339566][ T9034] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 198.364983][ T9035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.874'. [ 198.445936][ T9034] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.509718][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 198.867108][ T9050] netlink: 'syz.4.878': attribute type 1 has an invalid length. [ 198.874818][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.878'. [ 199.319756][ T9071] netlink: 'syz.4.884': attribute type 3 has an invalid length. [ 199.343318][ T9071] netlink: 'syz.4.884': attribute type 1 has an invalid length. [ 199.370281][ T9071] netlink: 224 bytes leftover after parsing attributes in process `syz.4.884'. [ 199.535032][ T9082] netlink: 'syz.4.888': attribute type 19 has an invalid length. [ 199.555198][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.561836][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.571998][ T9077] syzkaller1: entered promiscuous mode [ 199.575685][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 199.600239][ T9077] syzkaller1: entered allmulticast mode [ 199.750761][ T3507] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.787223][ T3507] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.819491][ T3507] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.857129][ T3507] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.975959][ T9089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.154838][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 200.224515][ T9097] syzkaller0: entered promiscuous mode [ 200.237454][ T9097] syzkaller0: entered allmulticast mode [ 200.249731][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 200.308372][ T9097] netlink: 52 bytes leftover after parsing attributes in process `syz.2.893'. [ 200.346182][ T1168] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.359965][ T1168] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.376351][ T1168] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.550942][ T1168] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.572536][ T9113] openvswitch: netlink: IP tunnel dst address not specified [ 200.721707][ T9127] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 200.855522][ T9134] syzkaller1: entered promiscuous mode [ 200.868468][ T9134] syzkaller1: entered allmulticast mode [ 201.358150][ T9167] openvswitch: netlink: Message has 8 unknown bytes. [ 201.427939][ T9170] netlink: 104 bytes leftover after parsing attributes in process `syz.2.917'. [ 201.542914][ T9173] netlink: 'syz.4.918': attribute type 1 has an invalid length. [ 201.637603][ T9177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.678991][ T9173] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.727604][ T9175] macvlan3: entered promiscuous mode [ 201.735991][ T9175] macvlan3: entered allmulticast mode [ 201.748026][ T9175] bond6: entered allmulticast mode [ 201.764269][ T9175] bond6: entered promiscuous mode [ 201.791351][ T9175] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 201.821376][ T9175] team0: Port device macvlan3 added [ 201.910220][ T9195] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 201.972728][ T9195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.254168][ T9216] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 202.273609][ T9216] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 202.463256][ T9228] netlink: 'syz.4.931': attribute type 1 has an invalid length. [ 202.565117][ T9228] 8021q: adding VLAN 0 to HW filter on device bond7 [ 202.573903][ T9234] netlink: 'syz.3.933': attribute type 12 has an invalid length. [ 202.588660][ T9234] netlink: 'syz.3.933': attribute type 29 has an invalid length. [ 202.597410][ T9234] netlink: 'syz.3.933': attribute type 2 has an invalid length. [ 202.619873][ T9234] netlink: 'syz.3.933': attribute type 3 has an invalid length. [ 202.935159][ T9255] __nla_validate_parse: 9 callbacks suppressed [ 202.935179][ T9255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.938'. [ 202.965382][ T9253] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 203.011574][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 203.023932][ T9257] netlink: 2 bytes leftover after parsing attributes in process `syz.4.939'. [ 203.036682][ T9218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.565039][ T9309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.950'. [ 203.761251][ T9323] netlink: 'syz.4.956': attribute type 4 has an invalid length. [ 203.769983][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.956'. [ 203.783817][ T9323] xt_l2tp: invalid flags combination: 8 [ 203.791250][ T9323] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 203.825245][ T9325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.957'. [ 203.974309][ T9337] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.959'. [ 203.984841][ T9337] openvswitch: netlink: Message has 6 unknown bytes. [ 204.227456][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 204.237151][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 204.312559][ T9360] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 204.321217][ T9360] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 204.340055][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.431751][ T9365] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 204.457913][ T9365] Bluetooth: MGMT ver 1.23 [ 204.469009][ T9365] : renamed from veth1_vlan [ 204.545678][ T9373] netlink: 116 bytes leftover after parsing attributes in process `syz.0.967'. [ 205.239878][ T9404] netlink: 'syz.3.976': attribute type 1 has an invalid length. [ 205.255431][ T9404] ip6t_srh: unknown srh match flags 4000 [ 205.401511][ T9410] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 205.424949][ T9410] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 205.442596][ T9410] gretap1: entered promiscuous mode [ 205.448223][ T9410] gretap1: entered allmulticast mode [ 205.490458][ T9410] syzkaller0: entered promiscuous mode [ 205.504971][ T9410] syzkaller0: entered allmulticast mode [ 205.587924][ T9423] netlink: 'syz.2.982': attribute type 2 has an invalid length. [ 205.726436][ T9433] IPv6: sit1: Disabled Multicast RS [ 205.733272][ T9433] sit1: entered allmulticast mode [ 207.219948][ T9523] validate_nla: 1 callbacks suppressed [ 207.219968][ T9523] netlink: 'syz.0.1008': attribute type 10 has an invalid length. [ 207.266817][ T9523] dummy0: entered promiscuous mode [ 207.273345][ T9523] bridge0: port 3(dummy0) entered blocking state [ 207.297258][ T9523] bridge0: port 3(dummy0) entered disabled state [ 207.317440][ T9523] dummy0: entered allmulticast mode [ 207.357759][ T9523] netlink: 'syz.0.1008': attribute type 2 has an invalid length. [ 207.430247][ T9530] netlink: 'syz.0.1008': attribute type 29 has an invalid length. [ 207.440187][ T9542] Bluetooth: MGMT ver 1.23 [ 207.451397][ T9530] netlink: 'syz.0.1008': attribute type 29 has an invalid length. [ 207.462912][ T9544] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.470861][ T9530] netlink: 'syz.0.1008': attribute type 29 has an invalid length. [ 207.481073][ T9530] netlink: 'syz.0.1008': attribute type 29 has an invalid length. [ 207.490125][ T9530] netlink: 'syz.0.1008': attribute type 29 has an invalid length. [ 207.538441][ T9530] netlink: 'syz.0.1008': attribute type 29 has an invalid length. [ 208.013650][ T9580] __nla_validate_parse: 8 callbacks suppressed [ 208.013667][ T9580] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1023'. [ 208.059521][ T9579] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1023'. [ 208.170270][ T9586] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1026'. [ 208.261951][ T9596] netlink: 'syz.1.1027': attribute type 6 has an invalid length. [ 208.298491][ T9596] bond6: entered allmulticast mode [ 208.304224][ T9596] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.484180][ T9612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'. [ 208.863343][ T9635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1037'. [ 208.949515][ T9636] bond8: option miimon: invalid value (18446744073709551585) [ 208.957292][ T9636] bond8: option miimon: allowed values 0 - 2147483647 [ 208.979808][ T9636] bond8 (unregistering): Released all slaves [ 209.130155][ T9652] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 209.207703][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 209.223356][ T9657] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1045'. [ 209.332229][ T9666] tipc: Enabled bearer , priority 0 [ 209.357263][ T9667] tipc: Enabling of bearer rejected, already enabled [ 209.387207][ T9665] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 209.399617][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1049'. [ 209.406108][ T9665] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 209.422962][ T9666] netem: change failed [ 209.429112][ T9667] tipc: Resetting bearer [ 209.578907][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'. [ 209.604052][ T9682] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1053'. [ 210.892251][ T9753] xt_cgroup: invalid path, errno=-2 [ 211.200915][ T9767] sctp: [Deprecated]: syz.1.1076 (pid 9767) Use of int in max_burst socket option. [ 211.200915][ T9767] Use struct sctp_assoc_value instead [ 211.762725][ T9791] syzkaller1: entered allmulticast mode [ 211.860231][ T5155] Bluetooth: hci3: command 0x0406 tx timeout [ 211.861387][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.872731][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 211.872773][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 211.945034][ T9806] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 212.501545][ T9842] validate_nla: 2 callbacks suppressed [ 212.501564][ T9842] netlink: 'syz.0.1098': attribute type 6 has an invalid length. [ 212.531148][ T9842] netlink: 'syz.0.1098': attribute type 6 has an invalid length. [ 212.592561][ T9847] netlink: 'syz.2.1100': attribute type 6 has an invalid length. [ 212.762222][ T9850] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 212.905515][ T9856] veth0_macvtap: left promiscuous mode [ 213.057463][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 213.198664][ T9886] __nla_validate_parse: 7 callbacks suppressed [ 213.198684][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 213.244539][ T9886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1112'. [ 213.603849][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1117'. [ 213.626191][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'. [ 213.715075][ T9912] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 213.746471][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 213.766266][ T9912] bond3 (unregistering): Released all slaves [ 213.774314][ T9922] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1119'. [ 213.804487][ T9924] netlink: 'syz.4.1120': attribute type 3 has an invalid length. [ 213.950622][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 213.978428][ T9936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1122'. [ 214.103980][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 214.183443][ T9947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1127'. [ 214.192752][ T9952] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 214.241994][ T9957] netlink: 'syz.2.1129': attribute type 11 has an invalid length. [ 214.354066][ T9959] vxcan4: entered allmulticast mode [ 214.561362][ T9980] openvswitch: netlink: Message has -2 unknown bytes. [ 214.569486][ T9980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.589960][ T9972] bond8: option all_slaves_active: invalid value (222) [ 214.601389][ T9972] bond8 (unregistering): Released all slaves [ 214.688688][ T9980] bond4: option miimon: invalid value (18446744073709551585) [ 214.696244][ T9980] bond4: option miimon: allowed values 0 - 2147483647 [ 214.712436][ T9980] bond4 (unregistering): Released all slaves [ 214.892116][ T9990] netlink: 'syz.4.1139': attribute type 1 has an invalid length. [ 215.048447][T10002] netlink: 'syz.1.1142': attribute type 4 has an invalid length. [ 215.111838][T10006] ipvlan0: entered promiscuous mode [ 215.279194][T10016] SET target dimension over the limit! [ 215.331053][T10015] openvswitch: netlink: Missing valid actions attribute. [ 215.338318][T10015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.554858][T10033] 8021q: VLANs not supported on ipvlan1 [ 215.833876][T10053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.383964][T10083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.394793][T10085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.457840][T10087] syzkaller1: entered promiscuous mode [ 216.463593][T10087] syzkaller1: entered allmulticast mode [ 216.794468][T10097] tipc: Enabling of bearer rejected, failed to enable media [ 216.812873][T10100] netlink: 'syz.0.1174': attribute type 23 has an invalid length. [ 216.883598][T10103] netlink: 'syz.4.1173': attribute type 4 has an invalid length. [ 217.141468][T10115] tipc: Enabled bearer , priority 0 [ 217.164898][T10115] syzkaller0: MTU too low for tipc bearer [ 217.196298][T10115] tipc: Disabling bearer [ 217.229271][T10121] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 217.726089][ T1115] bond0: (slave bridge0): link status definitely down, disabling slave [ 217.898308][T10164] netlink: 'syz.0.1191': attribute type 1 has an invalid length. [ 217.984149][T10164] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.029084][T10163] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 218.040973][T10163] bond5 (unregistering): Released all slaves [ 218.084567][T10172] delete_channel: no stack [ 218.092309][T10172] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 218.102719][T10174] netlink: 'syz.3.1193': attribute type 10 has an invalid length. [ 218.124168][T10174] batadv0: left promiscuous mode [ 218.141566][T10174] batadv0: left allmulticast mode [ 218.169747][T10174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.192010][T10174] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 218.231461][T10182] __nla_validate_parse: 20 callbacks suppressed [ 218.234545][T10182] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1195'. [ 218.258194][T10182] block nbd0: not configured, cannot reconfigure [ 218.270485][T10181] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1195'. [ 218.293964][T10181] block nbd0: not configured, cannot reconfigure [ 218.380390][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 218.410837][T10181] netlink: 'syz.2.1195': attribute type 4 has an invalid length. [ 218.419215][T10181] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1195'. [ 218.442250][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'. [ 218.560658][T10194] netlink: 'syz.1.1200': attribute type 1 has an invalid length. [ 218.612891][T10194] bond7: entered promiscuous mode [ 218.622692][T10194] bond7: entered allmulticast mode [ 218.633946][T10194] 8021q: adding VLAN 0 to HW filter on device bond7 [ 218.646385][T10196] gtp1: entered promiscuous mode [ 218.803465][T10213] openvswitch: netlink: IP tunnel dst address not specified [ 218.850746][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 218.857661][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1206'. [ 218.883450][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1206'. [ 218.916172][T10217] bridge0: port 4(vlan2) entered blocking state [ 218.925325][T10217] bridge0: port 4(vlan2) entered disabled state [ 218.935304][T10217] vlan2: entered allmulticast mode [ 218.942273][T10217] bridge0: entered allmulticast mode [ 218.953734][T10217] vlan2: left allmulticast mode [ 218.958859][T10217] bridge0: left allmulticast mode [ 219.002239][T10220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1208'. [ 219.134862][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 219.241531][T10238] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20001 [ 219.352959][T10244] xfrm1: entered promiscuous mode [ 219.358573][T10244] xfrm1: entered allmulticast mode [ 219.704990][T10263] netlink: 'syz.0.1223': attribute type 16 has an invalid length. [ 219.718752][T10263] netlink: 'syz.0.1223': attribute type 17 has an invalid length. [ 219.747674][T10263] bridge0: port 3(dummy0) entered blocking state [ 219.754233][T10263] bridge0: port 3(dummy0) entered listening state [ 219.761032][T10263] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.768271][T10263] bridge0: port 2(bridge_slave_1) entered listening state [ 219.775715][T10263] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.782994][T10263] bridge0: port 1(bridge_slave_0) entered listening state [ 219.803781][T10263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.234240][T10294] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 220.244457][T10293] netlink: 'syz.2.1233': attribute type 21 has an invalid length. [ 220.248617][T10294] netlink: 'syz.0.1231': attribute type 4 has an invalid length. [ 220.307870][T10297] netlink: 'syz.0.1231': attribute type 4 has an invalid length. [ 220.467246][T10303] vcan0 (unregistering): left allmulticast mode [ 220.554308][T10309] netlink: 'syz.4.1238': attribute type 3 has an invalid length. [ 220.949405][T10337] dvmrp6: entered allmulticast mode [ 221.181885][T10353] bond8 (unregistering): Released all slaves [ 221.610525][T10386] netem: unknown loss type 0 [ 221.625644][T10386] netem: change failed [ 221.803768][T10391] can: request_module (can-proto-0) failed. [ 221.826895][T10392] can: request_module (can-proto-0) failed. [ 221.978018][T10406] tipc: Can't bind to reserved service type 2 [ 222.264114][T10426] syzkaller0: entered promiscuous mode [ 222.270246][T10426] syzkaller0: entered allmulticast mode [ 222.295946][T10426] tipc: Enabled bearer , priority 0 [ 222.325190][T10424] tipc: Resetting bearer [ 222.352636][T10424] tipc: Disabling bearer [ 222.377141][T10437] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 223.057399][T10475] validate_nla: 1 callbacks suppressed [ 223.057418][T10475] netlink: 'syz.2.1291': attribute type 9 has an invalid length. [ 223.201956][T10486] netlink: 'syz.1.1293': attribute type 3 has an invalid length. [ 223.227728][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 120 seconds [ 223.238567][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 120 seconds [ 223.250012][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 120 seconds [ 223.261171][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 120 seconds [ 223.491239][T10500] tipc: Enabling of bearer rejected, already enabled [ 223.511792][T10500] __nla_validate_parse: 20 callbacks suppressed [ 223.511811][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'. [ 223.652871][T10508] netlink: 'syz.2.1299': attribute type 10 has an invalid length. [ 223.662352][T10506] sctp: [Deprecated]: syz.3.1298 (pid 10506) Use of int in maxseg socket option. [ 223.662352][T10506] Use struct sctp_assoc_value instead [ 223.752367][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1302'. [ 223.783279][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 223.793230][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 224.016011][T10528] veth0: entered promiscuous mode [ 224.030309][T10526] veth0: left promiscuous mode [ 224.842861][T10582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.901053][T10584] netlink: 'syz.0.1323': attribute type 10 has an invalid length. [ 224.925715][T10584] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.943261][T10584] bridge_slave_1: left allmulticast mode [ 224.949263][T10584] bridge_slave_1: left promiscuous mode [ 224.955181][T10584] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.970735][T10584] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 224.991749][T10586] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1322'. [ 225.010881][T10586] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 225.055975][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 225.066794][T10591] netlink: 'syz.0.1325': attribute type 2 has an invalid length. [ 225.257906][T10599] syzkaller0: entered promiscuous mode [ 225.263439][T10599] syzkaller0: entered allmulticast mode [ 225.285627][T10599] tipc: Started in network mode [ 225.290791][T10599] tipc: Node identity ee80a6c5b95d, cluster identity 4711 [ 225.303164][T10599] tipc: Enabled bearer , priority 0 [ 225.312751][T10598] tipc: Resetting bearer [ 225.337149][T10598] tipc: Disabling bearer [ 225.534914][T10611] tipc: Enabling of bearer rejected, failed to enable media [ 225.780472][T10628] netlink: 'syz.4.1335': attribute type 2 has an invalid length. [ 225.806915][T10628] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 225.902933][T10634] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1339'. [ 225.915710][T10634] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1339'. [ 226.281638][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1345'. [ 226.560617][T10680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1351'. [ 226.813144][T10689] raw_sendmsg: syz.2.1355 forgot to set AF_INET. Fix it! [ 227.114271][T10715] netlink: 'syz.4.1361': attribute type 3 has an invalid length. [ 227.200035][T10720] netlink: 'syz.0.1364': attribute type 1 has an invalid length. [ 250.098266][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 250.106640][ C1] bridge0: port 3(dummy0) entered learning state [ 253.297268][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 150 seconds [ 253.308154][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 150 seconds [ 253.319261][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 150 seconds [ 253.330855][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 150 seconds [ 254.039652][T10732] netlink: 'syz.1.1367': attribute type 83 has an invalid length. [ 254.158976][T10744] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 254.219093][T10750] __nla_validate_parse: 39 callbacks suppressed [ 254.219111][T10750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1371'. [ 254.245506][T10744] bond5: entered promiscuous mode [ 254.254736][T10744] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.267591][T10748] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.272842][T10750] bond5: entered allmulticast mode [ 254.327418][T10744] bond5: (slave bridge5): making interface the new active one [ 254.335173][T10744] bridge5: entered promiscuous mode [ 254.340795][T10744] bridge5: entered allmulticast mode [ 254.347675][T10744] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 254.461451][T10757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1374'. [ 254.489807][T10757] IPVS: Unknown mcast interface: vcan0 [ 254.538548][T10769] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 254.546858][T10769] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 254.554632][T10769] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 254.565694][T10769] netlink: 'syz.0.1378': attribute type 2 has an invalid length. [ 254.573671][T10769] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1378'. [ 254.601003][T10764] bond8: Unable to set up delay as MII monitoring is disabled [ 254.613137][T10764] bond8 (unregistering): Released all slaves [ 254.642213][T10772] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1376'. [ 254.667733][T10769] veth0: entered promiscuous mode [ 254.674503][T10769] 8021q: VLANs not supported on syzkaller1 [ 254.683348][T10769] bond_slave_1: entered promiscuous mode [ 254.915998][T10787] tipc: Failed to remove unknown binding: 66,1,1/0:3892345437/3892345439 [ 254.951165][T10787] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1383'. [ 255.065737][T10795] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1385'. [ 255.110459][T10795] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1385'. [ 255.370729][T10818] bond5: entered allmulticast mode [ 255.376427][T10768] bond_slave_1: left promiscuous mode [ 255.383680][T10768] veth0: left promiscuous mode [ 255.769745][T10845] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 255.802068][T10847] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20001 [ 255.803762][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 255.819889][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 255.835872][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 256.152152][T10862] netlink: 'syz.1.1401': attribute type 6 has an invalid length. [ 256.687286][T10885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.204381][T10923] netlink: 'syz.0.1417': attribute type 2 has an invalid length. [ 257.686444][T10958] netlink: 'syz.1.1428': attribute type 7 has an invalid length. [ 257.706930][T10958] netlink: 'syz.1.1428': attribute type 7 has an invalid length. [ 257.986848][T10977] veth5: entered promiscuous mode [ 258.000002][T10977] veth5: entered allmulticast mode [ 258.645454][T11002] xt_bpf: check failed: parse error [ 259.588318][T11061] validate_nla: 2 callbacks suppressed [ 259.588338][T11061] netlink: 'syz.1.1452': attribute type 7 has an invalid length. [ 259.603536][T11062] tipc: New replicast peer: 255.255.255.255 [ 259.614786][T11062] tipc: Enabled bearer , priority 10 [ 259.628352][T11065] __nla_validate_parse: 2 callbacks suppressed [ 259.628371][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 259.649651][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1453'. [ 259.710464][T11061] netlink: 'syz.1.1452': attribute type 7 has an invalid length. [ 259.823198][T11072] netlink: 'syz.2.1456': attribute type 15 has an invalid length. [ 259.847207][T11072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1456'. [ 260.158779][T11092] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1461'. [ 260.200611][T11095] team0: Device ip6gre2 is up. Set it down before adding it as a team port [ 260.222422][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1464'. [ 260.242637][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1464'. [ 260.727341][ T981] tipc: Node number set to 1498773004 [ 260.981331][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.987946][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.174243][T11147] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1473'. [ 261.190008][T11141] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1473'. [ 261.229712][T11152] netlink: 'syz.0.1477': attribute type 3 has an invalid length. [ 261.260287][T11152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1477'. [ 261.410710][T11158] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 261.591223][T11174] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.669776][T11178] netlink: 'syz.0.1483': attribute type 10 has an invalid length. [ 261.693662][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1482'. [ 261.712802][T11181] ipt_ECN: cannot use operation on non-tcp rule [ 261.740512][T11178] team0: Port device geneve0 added [ 261.781658][ T38] tipc: Subscription rejected, illegal request [ 261.813341][T11183] IPVS: Unknown mcast interface: pimreg0 [ 262.089716][T11204] bond0: entered promiscuous mode [ 262.118602][T11204] bond_slave_0: entered promiscuous mode [ 262.146534][T11204] bond_slave_1: entered promiscuous mode [ 262.191526][T11204] bridge0: entered promiscuous mode [ 262.235476][T11204] ip6gretap0: entered promiscuous mode [ 262.269794][T11204] hsr1: entered promiscuous mode [ 262.275161][T11205] tipc: Enabling of bearer rejected, failed to enable media [ 262.675628][T11234] netlink: 'syz.2.1497': attribute type 2 has an invalid length. [ 262.727289][T11240] netlink: 'syz.4.1498': attribute type 11 has an invalid length. [ 263.252865][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.339034][T11272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.409009][T11272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.439922][T11272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.481044][T11272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.539890][T11272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.560643][T11272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.602017][T11272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.635570][T11272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.663401][T11272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.706487][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.720737][T11272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.741351][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.792938][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.832763][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.079109][T11309] tipc: Enabled bearer , priority 23 [ 264.293436][T11317] netlink: 'syz.2.1513': attribute type 1 has an invalid length. [ 264.478681][T11331] netlink: 'syz.4.1517': attribute type 7 has an invalid length. [ 264.486485][T11331] netlink: 'syz.4.1517': attribute type 8 has an invalid length. [ 264.498316][T11329] wg1: entered promiscuous mode [ 264.503256][T11329] wg1: entered allmulticast mode [ 264.770500][T11346] validate_nla: 1 callbacks suppressed [ 264.770517][T11346] netlink: 'syz.3.1522': attribute type 16 has an invalid length. [ 264.832465][T11346] netlink: 'syz.3.1522': attribute type 17 has an invalid length. [ 264.982663][T11346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.991454][T11346] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.015586][T11346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.144586][T11366] __nla_validate_parse: 18 callbacks suppressed [ 265.144604][T11366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1525'. [ 265.175814][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'. [ 265.370996][T11379] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1528'. [ 265.495611][T11387] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1530'. [ 265.513752][T11387] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1530'. [ 265.527848][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 265.537019][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 265.546101][T11387] netlink: 'syz.0.1530': attribute type 3 has an invalid length. [ 265.593608][T11392] tipc: Enabling of bearer rejected, failed to enable media [ 265.606116][T11392] netlink: 'syz.1.1531': attribute type 1 has an invalid length. [ 265.694456][T11395] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1534'. [ 265.847714][T11410] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 265.880251][T11412] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1537'. [ 265.935617][T11412] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1537'. [ 265.975266][T11412] openvswitch: netlink: IP tunnel dst address not specified [ 266.008716][T11419] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 266.209920][T11431] netlink: 'syz.0.1542': attribute type 1 has an invalid length. [ 266.292518][ T38] tipc: Subscription rejected, illegal request [ 266.449397][T11447] netlink: 'syz.0.1550': attribute type 1 has an invalid length. [ 266.534490][T11452] bond6: (slave gretap1): making interface the new active one [ 266.543809][T11452] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 266.671157][T11458] netlink: 'syz.3.1553': attribute type 21 has an invalid length. [ 266.680098][T11458] netlink: 'syz.3.1553': attribute type 21 has an invalid length. [ 266.865338][T11472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.893353][T11475] pimreg3: entered allmulticast mode [ 267.065206][T11483] batadv1: entered allmulticast mode [ 267.199814][T11491] netlink: 'syz.1.1567': attribute type 2 has an invalid length. [ 267.503938][T11502] ip6gretap0: entered allmulticast mode [ 267.647949][ T5909] IPVS: starting estimator thread 0... [ 267.745400][T11505] wg1 speed is unknown, defaulting to 1000 [ 267.751032][T11507] IPVS: using max 31 ests per chain, 74400 per kthread [ 268.177462][T11527] openvswitch: netlink: EtherType 50a is less than min 600 [ 268.470003][T11540] netlink: 'syz.4.1583': attribute type 6 has an invalid length. [ 268.499357][T11544] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 268.728058][T11544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.741724][T11544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.754393][T11544] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 268.786950][T11544] bond0 (unregistering): Released all slaves [ 269.017983][T11546] bond7: (slave gre0): Device is not bonding slave [ 269.036732][T11546] bond7: option active_slave: invalid value (gre0) [ 269.044946][T11546] bond7 (unregistering): Released all slaves [ 269.120594][T11567] SET target dimension over the limit! [ 269.293124][ T30] audit: type=1107 audit(1766205679.290:2): pid=11578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 269.353554][T11585] bond_slave_1: entered allmulticast mode [ 269.950409][T11625] smc: net device geneve0 applied user defined pnetid SYZ0 [ 270.073269][T11633] xt_hashlimit: size too large, truncated to 1048576 [ 270.327496][T11639] __nla_validate_parse: 29 callbacks suppressed [ 270.327516][T11639] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1612'. [ 270.643981][T11653] validate_nla: 1 callbacks suppressed [ 270.644000][T11653] netlink: 'syz.4.1617': attribute type 30 has an invalid length. [ 270.683361][T11653] bond8: option arp_missed_max: invalid value (0) [ 270.691926][T11653] bond8: option arp_missed_max: allowed values 1 - 255 [ 270.715658][T11653] bond8 (unregistering): Released all slaves [ 271.068201][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1621'. [ 271.175159][T11684] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1625'. [ 271.530005][T11705] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1633'. [ 271.600875][T11707] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1633'. [ 271.774931][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1637'. [ 271.803244][T11718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1638'. [ 271.833446][T11720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'. [ 272.544217][T11758] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1648'. [ 272.987903][T11783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.039759][T11789] netlink: 'syz.0.1657': attribute type 1 has an invalid length. [ 273.118953][T11790] bond7 (unregistering): Released all slaves [ 273.173145][T11789] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 273.419335][T11814] xt_CONNSECMARK: invalid mode: 0 [ 273.444437][T11814] netlink: 'syz.2.1664': attribute type 83 has an invalid length. [ 273.474822][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1664'. [ 273.762693][T11835] netlink: 'syz.3.1667': attribute type 39 has an invalid length. [ 274.152011][T11850] ip6gre1: entered allmulticast mode [ 274.363432][T11862] veth0: entered promiscuous mode [ 274.493613][T11856] veth0: left promiscuous mode [ 274.670721][T11878] x_tables: duplicate underflow at hook 1 [ 275.770015][T11938] syzkaller0: entered promiscuous mode [ 275.805592][T11938] syzkaller0: entered allmulticast mode [ 275.883501][T11957] netlink: 'syz.3.1707': attribute type 11 has an invalid length. [ 275.901712][T11957] netlink: 'syz.3.1707': attribute type 11 has an invalid length. [ 275.910160][T11957] netlink: 'syz.3.1707': attribute type 11 has an invalid length. [ 275.948220][T11958] __nla_validate_parse: 4 callbacks suppressed [ 275.948241][T11958] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1707'. [ 275.976460][T11957] netlink: 'syz.3.1707': attribute type 11 has an invalid length. [ 275.993392][T11957] netlink: 'syz.3.1707': attribute type 11 has an invalid length. [ 275.997189][T11958] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1707'. [ 276.014209][T11957] netlink: 'syz.3.1707': attribute type 11 has an invalid length. [ 276.023747][T11957] netlink: 'syz.3.1707': attribute type 11 has an invalid length. [ 276.038719][T11957] netlink: 'syz.3.1707': attribute type 11 has an invalid length. [ 276.059325][T11958] netlink: 'syz.3.1707': attribute type 6 has an invalid length. [ 276.071425][T11957] netlink: 'syz.3.1707': attribute type 11 has an invalid length. [ 276.071793][T11958] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1707'. [ 276.206051][T11971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.637706][T12011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.761224][T12018] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1722'. [ 277.831791][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1724'. [ 277.909616][T12026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1723'. [ 277.944386][T12021] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 277.951055][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 277.962345][T12026] bond0: entered promiscuous mode [ 277.996632][T12026] bond_slave_0: entered promiscuous mode [ 278.006749][T12031] openvswitch: netlink: nsh attr 12336 is out of range max 3 [ 278.015656][T12026] bond_slave_1: entered promiscuous mode [ 278.053390][T12026] bridge_slave_1: entered promiscuous mode [ 278.076498][T12026] ip6gretap0: entered promiscuous mode [ 278.086280][T12026] debugfs: 'hsr1' already exists in 'hsr' [ 278.116932][T12026] Cannot create hsr debugfs directory [ 278.122594][T12026] hsr1: entered promiscuous mode [ 278.230371][T12047] tc_dump_action: action bad kind [ 279.051636][T12073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1736'. [ 279.591343][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1742'. [ 279.623459][T12096] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1740'. [ 279.736368][T12095] bond8: (slave bridge3): making interface the new active one [ 279.788512][T12095] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 280.182187][ C1] bridge0: port 3(dummy0) entered forwarding state [ 280.188841][ C1] bridge0: topology change detected, propagating [ 280.195724][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.203025][ C1] bridge0: topology change detected, propagating [ 280.317275][T12115] syzkaller1: entered promiscuous mode [ 280.322821][T12115] syzkaller1: entered allmulticast mode [ 281.467327][T12156] validate_nla: 42 callbacks suppressed [ 281.467347][T12156] netlink: 'syz.1.1757': attribute type 1 has an invalid length. [ 281.605771][T12148] wg1 speed is unknown, defaulting to 1000 [ 281.927835][T12168] netlink: 'syz.2.1761': attribute type 7 has an invalid length. [ 281.976799][T12168] __nla_validate_parse: 2 callbacks suppressed [ 281.976820][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 282.118748][ T1115] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.127694][T12168] netlink: 'syz.2.1761': attribute type 7 has an invalid length. [ 282.161824][ T1115] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.173459][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 282.206669][ T1115] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.233111][ T1115] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.433951][T12180] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1765'. [ 282.457220][T12180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1765'. [ 282.475221][T12182] netlink: 'syz.1.1764': attribute type 2 has an invalid length. [ 282.519821][T12182] netlink: 'syz.1.1764': attribute type 2 has an invalid length. [ 282.576159][T12182] netlink: 'syz.1.1764': attribute type 2 has an invalid length. [ 282.619880][T12182] netlink: 'syz.1.1764': attribute type 2 has an invalid length. [ 282.671079][T12182] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 282.722141][T12182] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 282.855232][T12182] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 283.032335][T12198] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1768'. [ 283.217427][T12202] syzkaller1: entered promiscuous mode [ 283.222994][T12202] syzkaller1: entered allmulticast mode [ 283.389808][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 180 seconds [ 283.400913][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 180 seconds [ 283.415167][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 180 seconds [ 283.426371][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 180 seconds [ 283.686406][T12213] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1771'. [ 283.915153][T12218] team0: Device macvlan3 failed to change mtu [ 284.821689][T12244] bond7: entered promiscuous mode [ 284.899596][T12244] bond7: entered allmulticast mode [ 284.968433][T12244] 8021q: adding VLAN 0 to HW filter on device bond7 [ 284.982671][T12258] openvswitch: netlink: IP tunnel dst address not specified [ 285.013727][T12258] openvswitch: netlink: IP tunnel dst address not specified [ 285.407472][T12268] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1784'. [ 285.556424][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1786'. [ 285.587758][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1786'. [ 286.188392][T12278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1788'. [ 286.201795][T12279] ip6t_srh: unknown srh invflags 4000 [ 287.530108][T12319] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 287.783960][T12327] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 287.952190][T12336] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 288.172896][T12344] __nla_validate_parse: 1 callbacks suppressed [ 288.172916][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'. [ 288.723164][T12360] tipc: Enabling of bearer rejected, already enabled [ 288.744128][T12364] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 288.839114][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 288.952768][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1810'. [ 289.208854][T12377] netlink: 73 bytes leftover after parsing attributes in process `syz.1.1812'. [ 289.712329][T12394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1815'. [ 289.877480][T12404] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1818'. [ 289.934683][T12404] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1818'. [ 290.006313][T12413] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 290.263289][T12424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1822'. [ 290.463410][T12427] bond8 (unregistering): Released all slaves [ 290.801351][T12433] syz.4.1825 (12433) used greatest stack depth: 17688 bytes left [ 301.096605][ C1] sched: DL replenish lagged too much [ 313.457526][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 210 seconds [ 313.468440][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 210 seconds [ 313.479661][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 210 seconds [ 313.492465][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 210 seconds [ 317.738944][T12468] xt_ct_set_helper: 55 callbacks suppressed [ 317.738965][T12468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.803789][T12468] lo: entered promiscuous mode [ 317.825013][T12468] validate_nla: 3 callbacks suppressed [ 317.825033][T12468] netlink: 'syz.3.1833': attribute type 2 has an invalid length. [ 317.866174][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 317.894864][T12468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.554194][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'. [ 318.770591][T12511] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1840'. [ 319.354343][T12531] netlink: 'syz.4.1847': attribute type 1 has an invalid length. [ 319.717209][T12546] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1852'. [ 319.919176][T12549] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1852'. [ 319.953633][T12551] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1853'. [ 320.196191][T12555] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1854'. [ 320.228410][T12554] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1854'. [ 320.531303][T12562] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1855'. [ 320.586968][T12570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1857'. [ 321.047426][T12594] netlink: 'syz.2.1863': attribute type 19 has an invalid length. [ 321.191193][T12594] syzkaller0: entered promiscuous mode [ 321.239790][T12594] syzkaller0: entered allmulticast mode [ 322.200665][T12626] netlink: 'syz.4.1873': attribute type 15 has an invalid length. [ 322.601111][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.638948][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.676254][T12638] bond8: Removing last ns target with arp_interval on [ 322.827608][T12641] bond8: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 322.917795][T12641] bond8 (unregistering): Released all slaves [ 323.098851][T12661] __nla_validate_parse: 3 callbacks suppressed [ 323.098871][T12661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1882'. [ 323.259842][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'. [ 323.718876][T12666] bond9: Unable to set down delay as MII monitoring is disabled [ 323.772914][T12666] bond9 (unregistering): Released all slaves [ 324.078804][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1890'. [ 324.172945][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'. [ 324.214060][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1893'. [ 324.426350][T12699] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1892'. [ 324.510516][T12699] netlink: 'syz.1.1892': attribute type 1 has an invalid length. [ 325.167044][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'. [ 325.238086][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1898'. [ 325.442685][T12731] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1899'. [ 325.455305][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1901'. [ 325.573784][T12730] netlink: 'syz.0.1901': attribute type 15 has an invalid length. [ 325.998685][T12738] bond8: Invalid ad_actor_system MAC address. [ 326.033342][T12738] bond8: option ad_actor_system: invalid value (1) [ 326.192767][T12738] bond8 (unregistering): Released all slaves [ 326.459970][T12750] tipc: Enabled bearer , priority 0 [ 326.491512][T12758] tipc: Enabling of bearer rejected, media not registered [ 326.557987][T12742] tipc: Resetting bearer [ 326.624613][T12749] tipc: Disabling bearer [ 327.229817][T12781] tipc: Enabling of bearer rejected, media not registered [ 327.365933][T12789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.408435][T12789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.441126][T12789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.780744][T12808] netlink: 'syz.4.1920': attribute type 4 has an invalid length. [ 327.807190][T12808] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 328.296134][T12825] lo: entered promiscuous mode [ 328.325371][T12825] netlink: 'syz.4.1922': attribute type 2 has an invalid length. [ 328.365967][T12825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.993049][T12884] __nla_validate_parse: 46 callbacks suppressed [ 331.993069][T12884] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1931'. [ 332.148182][T12886] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.424504][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1940'. [ 333.523456][ C0] vcan0: j1939_session_tx_dat: 0xffff888057975400: queue data error: -100 [ 333.617162][T12915] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1941'. [ 334.047016][T12921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.057290][T12920] ip6gre2: entered allmulticast mode [ 334.123639][T12921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.178435][T12927] syz.2.1945 uses old SIOCAX25GETINFO [ 334.217391][T12927] xt_bpf: check failed: parse error [ 334.263783][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1944'. [ 334.302057][T12925] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1944'. [ 334.822747][T12945] IPv6: NLM_F_CREATE should be specified when creating new route [ 334.853169][T12944] netlink: 'syz.2.1950': attribute type 7 has an invalid length. [ 334.901484][T12945] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1949'. [ 334.977377][T12945] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1949'. [ 335.047684][T12951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1952'. [ 335.197635][T12956] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1954'. [ 335.252462][T12958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1954'. [ 335.452071][T12969] netlink: 'syz.2.1957': attribute type 10 has an invalid length. [ 335.613034][T12972] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 335.640976][T12972] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 336.109861][T12972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.153925][T12972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.445997][T13004] tls_set_device_offload: netdev not found [ 336.470010][T13006] x_tables: duplicate underflow at hook 2 [ 336.922270][T12972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.950416][T12972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.234608][T12972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.280184][T12972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.332393][T13029] netlink: 'syz.3.1976': attribute type 10 has an invalid length. [ 337.549678][T12972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.577756][T12972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.639476][T13042] veth0_to_batadv: entered promiscuous mode [ 337.656798][T13042] veth0_to_batadv: entered allmulticast mode [ 337.801054][T13045] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 337.834598][T13047] __nla_validate_parse: 3 callbacks suppressed [ 337.834617][T13047] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1980'. [ 337.859186][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1979'. [ 337.925955][ T38] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.946318][ T38] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.144259][ T38] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.183345][ T38] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.294672][ T77] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.345816][ T77] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.414554][ T77] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.447910][ T77] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.567361][T13064] netlink: 'syz.2.1985': attribute type 3 has an invalid length. [ 338.831260][T13073] netlink: 'syz.0.1987': attribute type 29 has an invalid length. [ 338.876838][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'. [ 339.054990][T13085] netlink: 'syz.0.1987': attribute type 11 has an invalid length. [ 339.092055][T13085] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1987'. [ 339.164720][T13085] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 339.302297][T13098] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1991'. [ 339.336781][T13099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1991'. [ 339.353870][T13093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1992'. [ 339.400084][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'. [ 339.608321][T13105] netlink: 'syz.4.1996': attribute type 1 has an invalid length. [ 339.746701][T13105] 8021q: adding VLAN 0 to HW filter on device bond11 [ 339.905119][T13114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1997'. [ 339.926427][T13114] block nbd0: Unsupported socket: should be TCP or UNIX. [ 340.125704][T13110] bond11: (slave geneve2): making interface the new active one [ 340.150586][T13110] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 340.163855][ T3433] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 340.178463][ T3433] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 340.216983][ T3433] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 340.240412][T13115] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 340.292484][ T3433] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 340.397138][T13123] syzkaller0: entered promiscuous mode [ 340.438226][T13123] syzkaller0: entered allmulticast mode [ 341.484092][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2011'. [ 341.808689][T13175] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 342.035970][T13189] xt_ecn: cannot match TCP bits for non-tcp packets [ 342.803530][T13200] bond8: entered allmulticast mode [ 342.941463][T13200] 8021q: adding VLAN 0 to HW filter on device bond8 [ 343.030078][T13210] __nla_validate_parse: 8 callbacks suppressed [ 343.030099][T13210] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2026'. [ 343.132224][T13210] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2026'. [ 343.224309][T13230] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 343.309721][T13228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2032'. [ 343.537020][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 240 seconds [ 343.548006][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 240 seconds [ 343.561151][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 240 seconds [ 343.572273][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 240 seconds [ 343.708006][T13238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2035'. [ 343.923903][T13244] bond12: Removing last ns target with arp_interval on [ 344.601599][T13267] nft_compat: unsupported protocol 0 [ 344.637401][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2042'. [ 344.905004][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2043'. [ 345.384733][T13292] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 345.405804][T13296] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2046'. [ 345.538109][T13288] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2046'. [ 345.642834][T13292] 8021q: adding VLAN 0 to HW filter on device bond8 [ 345.651418][T13291] syzkaller1: entered promiscuous mode [ 345.658363][T13292] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 345.666339][T13291] syzkaller1: entered allmulticast mode [ 345.749483][T13298] pimreg: entered allmulticast mode [ 345.768776][T13294] bond8: (slave geneve3): making interface the new active one [ 345.778861][T13294] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 345.823636][T13292] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 345.985916][T13292] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 346.034105][T13292] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 346.107000][T13292] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 346.149205][T13292] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 346.208412][T13308] veth0_to_batadv: left promiscuous mode [ 346.244249][T13308] bridge1: left promiscuous mode [ 346.251061][T13308] gtp0: left promiscuous mode [ 346.262118][T13308] gtp1: left promiscuous mode [ 346.278367][T13308] bond5: left promiscuous mode [ 346.283204][T13308] bridge5: left promiscuous mode [ 346.317647][T13313] syzkaller0: entered promiscuous mode [ 346.323187][T13313] syzkaller0: entered allmulticast mode [ 346.518274][T13318] netlink: 'syz.3.2053': attribute type 30 has an invalid length. [ 348.248241][T13376] tipc: Enabling of bearer rejected, failed to enable media [ 348.408143][T13380] delete_channel: no stack [ 348.482328][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 348.595579][T13385] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 348.762345][T13386] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2077'. [ 348.999368][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2080'. [ 349.181396][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2082'. [ 349.214010][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2082'. [ 349.265988][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2082'. [ 349.366688][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2082'. [ 349.586251][T13412] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2086'. [ 349.712239][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'. [ 349.753820][T13417] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 349.792903][T13420] netlink: 187468 bytes leftover after parsing attributes in process `syz.3.2088'. [ 350.219465][T13443] lo: left promiscuous mode [ 350.269819][T13443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.419856][T13445] sctp: [Deprecated]: syz.2.2091 (pid 13445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.419856][T13445] Use struct sctp_sack_info instead [ 373.921931][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 270 seconds [ 374.030871][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 270 seconds [ 374.065307][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 270 seconds [ 374.098957][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 270 seconds [ 384.640933][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.675934][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 408.029330][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 300 seconds [ 408.781104][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 300 seconds [ 409.130369][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 300 seconds [ 409.176944][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 300 seconds [ 446.640384][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 330 seconds [ 446.666107][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.974680][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 330 seconds [ 472.639516][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 330 seconds [ 476.728727][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 330 seconds [ 481.175521][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 360 seconds [ 501.538843][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 360 seconds [ 506.900250][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.555815][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 360 seconds [ 516.588924][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 360 seconds [ 525.158340][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 390 seconds [ 535.121645][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 390 seconds [ 553.457510][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 390 seconds [ 563.300273][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 390 seconds [ 563.557102][ T5832] syz_tun (unregistering): left allmulticast mode [ 564.859349][ T5832] syz_tun (unregistering): left promiscuous mode [ 564.877178][ T5832] bridge0: port 4(syz_tun) entered disabled state [ 564.895365][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 420 seconds [ 568.288763][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.664247][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 420 seconds [ 585.874682][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 420 seconds [ 593.478675][T13494] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 593.682647][T13494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 594.190714][T13494] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 594.554622][T13496] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 596.120985][T13496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 596.406529][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 420 seconds [ 596.762263][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 450 seconds [ 596.824685][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 596.882968][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 596.951397][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 597.007016][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 597.024877][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 598.145987][T13502] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 598.566141][T13502] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 598.832408][ T52] Bluetooth: hci0: command tx timeout [ 599.500812][T13502] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 600.122897][T13494] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 600.765832][T13494] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 600.909354][T13496] Bluetooth: hci0: command tx timeout [ 602.254085][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 450 seconds [ 602.990393][T13494] Bluetooth: hci0: command tx timeout [ 603.151280][T13494] Bluetooth: hci4: command tx timeout [ 604.834192][T13494] Bluetooth: hci2: command tx timeout [ 605.072207][T13494] Bluetooth: hci0: command tx timeout [ 605.223228][T13494] Bluetooth: hci4: command tx timeout [ 606.039778][T13496] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 607.136124][T13502] Bluetooth: hci2: command tx timeout [ 607.311667][T13496] Bluetooth: hci4: command tx timeout [ 608.109662][T13494] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 608.861082][T13494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 608.878332][T13494] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 608.902808][T13494] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.233567][T13494] Bluetooth: hci2: command tx timeout [ 609.387210][T13494] Bluetooth: hci4: command tx timeout [ 610.909171][T13504] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 611.308975][T13494] Bluetooth: hci2: command tx timeout [ 617.029067][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 450 seconds [ 623.434691][T13496] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 623.565341][T13496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 623.620377][T13496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 623.759984][T13496] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 623.927855][T13496] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 627.801172][T13494] Bluetooth: hci1: command tx timeout [ 627.830089][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 480 seconds [ 627.935725][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 450 seconds [ 629.871838][T13494] Bluetooth: hci1: command tx timeout [ 629.985248][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.042490][T13494] Bluetooth: hci1: command tx timeout [ 634.115114][T13494] Bluetooth: hci1: command tx timeout [ 634.762366][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 480 seconds [ 643.074621][T13496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 643.441000][T13496] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 643.482322][T13496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 643.656033][T13496] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 643.969008][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 644.008392][T13496] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 644.343768][T13496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 644.951165][T13496] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 645.060654][T13496] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 645.297620][T13496] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 646.993969][T13496] Bluetooth: hci3: command tx timeout [ 647.743509][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 480 seconds [ 649.143039][T13502] Bluetooth: hci3: command tx timeout [ 651.664095][T13494] Bluetooth: hci3: command tx timeout [ 651.670095][T13496] Bluetooth: hci5: command tx timeout [ 653.713484][T13502] Bluetooth: hci5: command tx timeout [ 653.788313][T13502] Bluetooth: hci3: command tx timeout [ 655.792050][T13502] Bluetooth: hci5: command tx timeout [ 657.867547][T13502] Bluetooth: hci5: command tx timeout [ 659.371860][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 510 seconds [ 659.394639][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 480 seconds [ 659.524573][ T3507] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.748641][ T3507] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.861031][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 510 seconds [ 666.179465][T13502] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 666.198995][T13496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 666.462501][T13496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 666.729928][T13496] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 666.778310][T13496] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 667.789422][T13494] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 668.010378][T13494] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 668.214068][T13494] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 668.220747][T13496] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.239590][T13496] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 670.111515][T13520] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 670.935515][T13494] Bluetooth: hci0: command tx timeout [ 672.991997][T13494] Bluetooth: hci0: command tx timeout [ 675.340176][T13494] Bluetooth: hci0: command tx timeout [ 678.058361][T13494] Bluetooth: hci0: command tx timeout [ 681.508651][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 510 seconds [ 686.901860][ T3507] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.757570][ T3507] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.075886][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 540 seconds [ 690.098494][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 510 seconds [ 691.171124][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.872112][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 540 seconds [ 707.588806][T13494] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 712.619343][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 540 seconds [ 720.574948][ T3507] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.500817][ T3507] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.654407][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 570 seconds [ 721.680678][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 540 seconds [ 730.038448][T13496] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 730.212800][T13496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 730.569112][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 730.599744][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 570 seconds [ 730.644392][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 730.701022][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 730.775455][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 731.704215][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 731.774953][T13502] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 733.838717][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 733.907772][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 734.072232][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 734.100562][T13496] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 734.317596][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 734.375333][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 734.454204][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 734.496751][T13542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 734.964566][ T52] Bluetooth: hci4: command tx timeout [ 735.036317][T13542] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 735.830385][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 736.862155][T13494] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 736.951245][T13494] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 737.127991][ T52] Bluetooth: hci4: command tx timeout [ 738.828393][T13502] Bluetooth: hci1: command tx timeout [ 739.268363][T13502] Bluetooth: hci4: command tx timeout [ 740.214527][T13538] Bluetooth: hci6: command tx timeout [ 740.233557][ T3507] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.505334][ T3507] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.660873][T13538] Bluetooth: hci2: command tx timeout [ 740.908296][T13538] Bluetooth: hci1: command tx timeout [ 741.307700][T13538] Bluetooth: hci4: command tx timeout [ 742.274954][T13538] Bluetooth: hci6: command tx timeout [ 742.831628][T13538] Bluetooth: hci2: command tx timeout [ 742.990458][T13502] Bluetooth: hci1: command tx timeout [ 743.261898][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 570 seconds [ 744.417762][T13502] Bluetooth: hci6: command tx timeout [ 744.775052][T13502] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 744.903569][T13502] Bluetooth: hci2: command tx timeout [ 745.069437][T13502] Bluetooth: hci1: command tx timeout [ 746.508048][T13502] Bluetooth: hci6: command tx timeout [ 746.833932][T13538] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 747.075641][T13538] Bluetooth: hci2: command tx timeout [ 747.599823][T13538] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 748.907287][T13544] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 753.303553][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.855887][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 600 seconds [ 753.878845][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 570 seconds [ 762.181995][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 600 seconds [ 763.205166][T13535] wg1 speed is unknown, defaulting to 1000 [ 768.718859][T13533] wg1 speed is unknown, defaulting to 1000 [ 768.747099][T13532] wg1 speed is unknown, defaulting to 1000 [ 768.780323][T13540] wg1 speed is unknown, defaulting to 1000 [ 770.992528][ T3507] dummy0: left allmulticast mode [ 771.232034][T13502] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 771.375595][T13502] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 771.413362][T13502] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 771.629061][ T3507] dummy0: left promiscuous mode [ 772.155289][ T3507] bridge0: port 3(dummy0) entered disabled state [ 772.592334][T13502] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 772.920047][ T3507] bridge_slave_0: left allmulticast mode [ 772.999366][T13502] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 774.691266][ T3507] bridge_slave_0: left promiscuous mode [ 775.206146][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.220562][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 600 seconds [ 776.749881][T13502] Bluetooth: hci0: command tx timeout [ 778.827768][T13502] Bluetooth: hci0: command tx timeout [ 780.911477][T13502] Bluetooth: hci0: command tx timeout [ 782.989010][T13502] Bluetooth: hci0: command tx timeout [ 784.751774][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 630 seconds [ 784.775771][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 600 seconds [ 786.978851][T13494] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 787.277876][T13538] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 787.434139][T13538] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 787.607085][T13538] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 787.780619][T13538] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 790.589762][T13538] Bluetooth: hci3: command tx timeout [ 792.670962][T13538] Bluetooth: hci3: command tx timeout [ 792.865669][ T11] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 630 seconds [ 793.560853][T13502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 793.666125][T13502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 793.954153][T13502] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 794.617070][T13502] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 794.703219][T13502] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 794.767121][T13494] Bluetooth: hci3: command tx timeout [ 795.114767][T13494] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 795.439773][T13494] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 795.481578][T13494] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 795.882088][T13538] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 796.664793][T13538] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 797.150091][T13538] Bluetooth: hci3: command tx timeout [ 797.555321][T13494] Bluetooth: hci5: command tx timeout [ 799.786875][T13502] Bluetooth: hci5: command tx timeout [ 800.429239][T13502] Bluetooth: hci7: command tx timeout [ 801.956755][T13502] Bluetooth: hci5: command tx timeout [ 802.498660][T13502] Bluetooth: hci7: command tx timeout [ 804.030511][T13502] Bluetooth: hci5: command tx timeout [ 804.475681][T13538] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 804.588596][T13494] Bluetooth: hci7: command tx timeout [ 804.815059][T13538] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 804.867780][T13538] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 806.181161][T13538] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 806.672809][T13538] Bluetooth: hci7: command tx timeout [ 806.714529][T13538] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 806.812136][ T11] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 630 seconds [ 809.952650][T13502] Bluetooth: hci8: command tx timeout [ 812.026230][T13502] Bluetooth: hci8: command tx timeout [ 814.354662][T13502] Bluetooth: hci8: command tx timeout [ 814.521418][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.427823][T13502] Bluetooth: hci8: command tx timeout [ 820.393141][ T11] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 660 seconds [ 820.693589][ T11] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 630 seconds [ 823.275970][ T56] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 660 seconds [ 837.815906][ T56] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 660 seconds [ 848.345007][T13538] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 849.067941][T13502] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 849.600295][T13502] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 850.291339][T13502] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 850.363960][T13502] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 851.523129][ T56] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 690 seconds [ 851.545590][ T56] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 660 seconds [ 852.251012][T13502] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 853.371475][T13538] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 854.530375][ T56] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 690 seconds [ 857.062404][T13538] Bluetooth: hci4: command 0x0406 tx timeout [ 857.236875][T13538] Bluetooth: hci9: command tx timeout [ 857.728549][T13494] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 857.770212][T13494] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 858.719324][T13494] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 859.023866][T13494] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 859.082573][T13494] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 859.307375][T13494] Bluetooth: hci9: command tx timeout [ 861.388120][ T52] Bluetooth: hci9: command tx timeout [ 862.869381][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 862.887629][T13542] Bluetooth: hci2: command 0x0406 tx timeout [ 863.465146][T13538] Bluetooth: hci9: command tx timeout [ 864.498794][T13494] Bluetooth: hci10: command tx timeout [ 864.852018][T13494] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 864.940427][T13494] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 865.020052][T13494] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 865.108732][T13494] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 865.281951][T13542] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 866.850049][T13542] Bluetooth: hci10: command tx timeout [ 867.303582][T13542] Bluetooth: hci6: command 0x0406 tx timeout [ 868.505575][T13542] Bluetooth: hci11: command tx timeout [ 868.602169][ T56] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 690 seconds [ 868.912133][T13542] Bluetooth: hci10: command tx timeout [ 870.590593][T13494] Bluetooth: hci11: command tx timeout [ 870.992978][T13494] Bluetooth: hci10: command tx timeout [ 872.672296][T13542] Bluetooth: hci11: command tx timeout [ 872.695216][T13542] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 872.734051][T13542] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 872.809164][T13542] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 873.016869][T13542] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 873.921444][T13542] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 874.597106][T13542] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 874.655647][T13542] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 874.749804][T13538] Bluetooth: hci11: command tx timeout [ 874.841479][T13542] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 874.951963][T13542] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 875.496899][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.169906][T13494] Bluetooth: hci13: Opcode 0x0c14 failed: -110 [ 877.355460][T13538] Bluetooth: hci13: command 0x0c14 tx timeout [ 878.275736][T13542] Bluetooth: hci12: command tx timeout [ 878.843479][T13542] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 879.263373][T13542] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 879.410260][T13542] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 879.768845][T13542] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 879.838694][T13542] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 880.346864][T13542] Bluetooth: hci12: command tx timeout [ 882.189427][T13542] Bluetooth: hci13: command tx timeout [ 882.426723][T13542] Bluetooth: hci12: command tx timeout [ 882.452463][ T56] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 720 seconds [ 884.268360][T13542] Bluetooth: hci13: command tx timeout [ 884.345612][ T56] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 690 seconds [ 884.510335][T13542] Bluetooth: hci12: command tx timeout [ 886.358300][T13542] Bluetooth: hci13: command tx timeout [ 888.592779][T13542] Bluetooth: hci13: command tx timeout [ 889.226256][ T56] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 720 seconds [ 898.589907][T13542] Bluetooth: hci0: command 0x0406 tx timeout [ 899.583959][ T56] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 720 seconds [ 913.376885][ T56] block nbd1: Possible stuck request ffff888024ac0000: control (read@0,1024B). Runtime 750 seconds [ 913.550627][T13502] Bluetooth: hci3: command 0x0406 tx timeout [ 914.521275][ T56] block nbd1: Possible stuck request ffff888024ac0600: control (read@3072,1024B). Runtime 720 seconds [ 919.391976][T13542] Bluetooth: hci5: command 0x0406 tx timeout [ 920.045436][ T56] block nbd1: Possible stuck request ffff888024ac0200: control (read@1024,1024B). Runtime 750 seconds [ 922.471598][T13502] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 922.565179][T13502] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 922.750864][ T31] INFO: task kworker/u8:12:3480 blocked for more than 144 seconds. [ 923.065293][T13502] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 923.336150][ T31] Not tainted syzkaller #0 [ 923.351013][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 923.544135][T13538] Bluetooth: hci7: command 0x0406 tx timeout [ 925.428527][ T31] task:kworker/u8:12 state:D stack:24408 pid:3480 tgid:3480 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 925.666988][T13502] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 925.741051][T13502] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 925.753948][ T31] Workqueue: events_unbound linkwatch_event [ 925.754023][ T31] Call Trace: [ 925.754034][ T31] [ 925.754051][ T31] __schedule+0x14bc/0x5000 [ 925.754111][ T31] ? __pfx___schedule+0x10/0x10 [ 925.754150][ T31] ? schedule+0x91/0x360 [ 925.754175][ T31] schedule+0x165/0x360 [ 925.754201][ T31] schedule_preempt_disabled+0x13/0x30 [ 925.754222][ T31] __mutex_lock+0x7e6/0x1350 [ 925.754254][ T31] ? __mutex_lock+0x5bb/0x1350 [ 925.754285][ T31] ? linkwatch_event+0xe/0x60 [ 925.754319][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 925.754361][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 925.754384][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 925.754410][ T31] linkwatch_event+0xe/0x60 [ 925.754439][ T31] process_scheduled_works+0xad1/0x1770 [ 925.754497][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 925.754542][ T31] worker_thread+0x8a0/0xda0 [ 925.754597][ T31] kthread+0x711/0x8a0 [ 925.754631][ T31] ? __pfx_worker_thread+0x10/0x10 [ 925.754656][ T31] ? __pfx_kthread+0x10/0x10 [ 925.754688][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 925.754722][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 925.754744][ T31] ? __pfx_kthread+0x10/0x10 [ 925.754774][ T31] ret_from_fork+0x599/0xb30 [ 925.754801][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 925.754837][ T31] ? __switch_to_asm+0x39/0x70 [ 925.754865][ T31] ? __switch_to_asm+0x33/0x70 [ 925.754893][ T31] ? __pfx_kthread+0x10/0x10 [ 925.754931][ T31] ret_from_fork_asm+0x1a/0x30 [ 925.754989][ T31] [ 925.756000][ T31] INFO: task kworker/0:6:5950 blocked for more than 147 seconds. [ 925.756022][ T31] Not tainted syzkaller #0 [ 925.756049][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 925.756059][ T31] task:kworker/0:6 state:D stack:25576 pid:5950 tgid:5950 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 925.756124][ T31] Workqueue: events switchdev_deferred_process_work [ 925.756153][ T31] Call Trace: [ 925.756162][ T31] [ 925.756176][ T31] __schedule+0x14bc/0x5000 [ 925.756204][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 925.756242][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 925.756278][ T31] ? preempt_schedule+0xae/0xc0 [ 926.263100][ T31] ? preempt_schedule+0xae/0xc0 [ 926.278069][ T31] ? __pfx___schedule+0x10/0x10 [ 926.283014][ T31] ? schedule+0x91/0x360 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 927.065490][T13538] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 927.471708][T13538] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 927.511773][ T31] schedule+0x165/0x360 [ 927.516023][ T31] schedule_preempt_disabled+0x13/0x30 [ 927.619938][T13538] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 928.736226][ T31] __mutex_lock+0x7e6/0x1350 [ 928.852605][ T31] ? __mutex_lock+0x5bb/0x1350 [ 928.867707][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 928.873862][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 929.240373][T13538] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 929.310519][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 929.315831][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 929.627323][T13538] Bluetooth: hci14: command tx timeout [ 929.688916][T13538] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 930.965786][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 931.372573][ T31] switchdev_deferred_process_work+0xe/0x20 [ 931.709810][T13542] Bluetooth: hci14: command tx timeout [ 932.087273][ T31] process_scheduled_works+0xad1/0x1770 [ 932.092948][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 932.240737][ T56] block nbd1: Possible stuck request ffff888024ac0400: control (read@2048,1024B). Runtime 750 seconds