last executing test programs: 3.411213377s ago: executing program 3 (id=11563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x5, 0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000100)) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000140)={0x1, 0x0, 0x10}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000180)="dc0d73032cf9412f58322ce7d1d58c03503ebda32eb62f994f830a75e8c8fd9ac3d960af365a8cb4e8f4699f6732f32d20beb9e6aad1bc0aa0f9d2903404aaeb94bf72ddd576e9930b11852dd58835e61736c544d2c51037ec7bccfe96b05aaa15ea606ec032ab") ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000200)={'ip_vti0\x00'}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000300)={'filter\x00', 0x0, 0x3, 0x4b, [0x6, 0x14000000, 0x5, 0x8001, 0x80000000], 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000280)=""/75}, &(0x7f0000000380)=0x78) recvmmsg$unix(r1, &(0x7f0000002840)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000600)=""/13, 0xd}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/189, 0xbd}, {&(0x7f0000000800)=""/255, 0xff}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/244, 0xf4}, {&(0x7f0000001a00)=""/105, 0x69}, {&(0x7f0000001a80)=""/18, 0x12}, {&(0x7f0000001ac0)=""/91, 0x5b}], 0xa, &(0x7f0000001c00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000001d40)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001dc0)=""/132, 0x84}, {&(0x7f0000001e80)=""/159, 0x9f}], 0x2, &(0x7f0000001f80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000002080), 0x6e, &(0x7f0000002280)=[{&(0x7f0000002100)=""/197, 0xc5}, {&(0x7f0000002200)=""/90, 0x5a}], 0x2, &(0x7f00000022c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f00000023c0), 0x6e, &(0x7f0000002700)=[{&(0x7f0000002440)=""/224, 0xe0}, {&(0x7f0000002540)=""/197, 0xc5}, {&(0x7f0000002640)=""/141, 0x8d}], 0x3, &(0x7f0000002740)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}], 0x5, 0x1000, &(0x7f0000002980)) r16 = socket$inet6_udp(0xa, 0x2, 0x0) write(r16, &(0x7f00000029c0)="dfa82a30b25f488908bf57d4f5ca1f95136b3d447f10124279081281d01d43927cc482d89b2b682711", 0x29) r17 = openat$cgroup_ro(r14, &(0x7f0000002a00)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r17, 0x89e0, &(0x7f0000002a40)={r10, r4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002a80)={r12}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r18, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x1c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}}, 0x80) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r15, 0x800442d4, &(0x7f0000002bc0)=0x9) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000002c00)=0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000002d80)={'ip6tnl0\x00', &(0x7f0000002d00)={'ip6tnl0\x00', 0x0, 0x29, 0x96, 0x1, 0xc, 0x22, @mcast1, @private0, 0x8070, 0x8, 0x0, 0x9f54}}) bpf$PROG_LOAD(0x5, &(0x7f0000002e40)={0x18, 0x4, &(0x7f0000002c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x347}, [@jmp={0x5, 0x0, 0x9, 0x7, 0x1, 0xffffffffffffffc0, 0x1}]}, &(0x7f0000002c80)='syzkaller\x00', 0x1, 0x9, &(0x7f0000002cc0)=""/9, 0x1e00, 0x3, '\x00', r19, @fallback=0x2b, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002dc0)={0x5, 0xd, 0x401, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000002e00)=[{0x2, 0x4, 0xd, 0x3}, {0x2, 0x2, 0xa, 0x6}, {0x0, 0x4, 0x7, 0xb}], 0x10, 0x2}, 0x94) sendto(r7, &(0x7f0000002f00)="d0ed40afbbfa9242e6227fefe19c4add60c7e128cd34b2f2e97d8817547b586d156f5eaca46c0ebf70f829e466b7e93b60549442155a", 0x36, 0x40000, &(0x7f0000002f40)=@pppoe={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'macvlan0\x00'}}, 0x80) write$tun(r8, &(0x7f0000002fc0)={@val={0x0, 0x10}, @val={0x3, 0x4, 0x8, 0x3ff, 0xa, 0x7}, @eth={@broadcast, @broadcast, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@can={0xc, {{0x2, 0x0, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "c26ed780346497c8"}}}}}, 0x30) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000003000)) r20 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r20, &(0x7f0000003380)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003340)={&(0x7f0000003240)={0xe8, 0x38, 0x20, 0x70bd2a, 0x25dfdbfc, {0x6}, [@generic="2e4a9b4d3635bd1364c92dbaf090867d83bd7f81e04f08897504c5b4585095ac68a926b98b2c70cc06492fff40d30f30a1d281de656161c4844cdab4e4bd8159876d17f72584fc36b5a9a5116ad4dff3193f0fa3f4500671c86691b37473ff11f650930ec3eb997bad2a4d82298ac305f9ebee14d72e6164e28b36c167bdd35743d38ace9264cf9cf52bba9656a77f70e5af6b738f8fc282afe512a5f95d39d60c1d7891fe5633a92a74d435ee2492bc3eaa9fcaecfa8767ff2a7cc02d8215388a9bde8544", @generic="b1e639e81bba0f47033a273c2fed"]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r21 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003400), r13) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r15, &(0x7f0000003500)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000034c0)={&(0x7f0000003440)={0x58, r21, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000c081}, 0x40000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000003, 0x2010, r11, 0x53451000) 2.463506046s ago: executing program 3 (id=11580): socket$nl_generic(0x11, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) socket(0x40000000015, 0x805, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180601fe8000000000000000000000000000aa0000000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="20c200b08033755eafe88000"], 0x0) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) 2.079431183s ago: executing program 3 (id=11585): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0xde8, 0x4) recvmmsg(r0, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}, 0x4f9}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket(0x10, 0x5, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r4, 0x0, 0x40812) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) listen(r5, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) syz_emit_ethernet(0x75, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa9078ac14141bac1e000144047f71440c1f1000003224000012fe0000000014059078ac141442475aa4331811c2a907c4eb0b4361da82632a5927f31d4b5a9b726426e9f2ddc2280c2793293cb9f240afd21042b30ae43a903138b354ac"], 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="08005090140005ea"], 0x24}}, 0x0) 1.863348751s ago: executing program 0 (id=11589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x1, 0x4) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xf17}]}}]}, 0x3c}}, 0x40000) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000001b000000000000000018130000", @ANYRES32=r5, @ANYBLOB="000000000000000085000000c000000095"], &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="9e36d4fd3108451a7818d854b388", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.572338822s ago: executing program 1 (id=11593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000fa"], 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x801, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x400c000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8ce6e3117aaf10cd}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20040010) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002100030000000a00100088"], 0x5c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000f9fc335b7ba1f0399e348ad02bb2fda1496fde90e37610aa34f2d9c54faced0300f3f1aeeba6fd3df3786424e311094b819098b14d52ac91a5f435d8be1edb85217557beb40e6e38b07e4f4c03bc23a5bd150b6d99d7e6ca847449c9bf85468a7a74e2aec45bdae9f03c14089c6e0893565e8dfc2a7c5f12e207e05b33fe96ef280b46c30f374d3110fb18a4975b164b499948609571a4", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r9 = socket$inet6(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'wg2\x00', 0x1000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 1.429169004s ago: executing program 4 (id=11594): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) 1.418427961s ago: executing program 2 (id=11595): r0 = socket(0x29, 0xa, 0x10000040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x468000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) close(r0) 1.365382415s ago: executing program 0 (id=11596): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xdd, 0x4, 0x3, 0x21, 0x0, 0x9, 0xe8, 0xa0, 0x7, 0x3, 0x3, 0x3, 0x86, 0xf}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}}}, &(0x7f0000000040)=0x84) 1.255511958s ago: executing program 4 (id=11597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x5, 0x3}]}]}, 0x13c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="000000000001000014001680100001800c000400feffffff0400000008001b"], 0x3c}}, 0x0) 1.247028764s ago: executing program 2 (id=11598): r0 = socket(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8000000}, 0xc) r1 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x40f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.246414782s ago: executing program 1 (id=11599): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) 1.245804321s ago: executing program 0 (id=11600): socket(0x1e, 0x4, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f00000000c0)=0x86, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r3, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40010142, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.107936915s ago: executing program 2 (id=11601): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x80) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x2000a081}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.105516617s ago: executing program 1 (id=11602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x18, 0x1}, {0x7b, 0x1}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x7040}, 0x20004010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) close(r11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r10, 0x0, r11, &(0x7f00000002c0), 0x6, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/4111, 0x100f}, {&(0x7f0000000000)=""/95, 0x5f}, {&(0x7f0000000080)=""/128, 0x80}], 0x4}, 0x40002080) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x3c, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x11}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x40800) 1.104284952s ago: executing program 4 (id=11603): r0 = socket(0x15, 0x805, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0xfffffffc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feff8b3f36a80bafdbffff850000008945963900000095000000000000002239"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004740)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000007780)=0x6, 0x4) socket$alg(0x26, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x2}, 0x10) bind$tipc(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0}, 0x94) close(0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r2, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000012c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f00000013c0)=[{}], 0x8, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000001480)}}, 0x10) unshare(0x20020400) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x847b0dac5bec178f, &(0x7f00000000c0)}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000200)={{r2}, "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"}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000001280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfffffffe}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x696}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4000) syz_init_net_socket$ax25(0x3, 0x2, 0xda6118dfbc15f4d) 1.098808859s ago: executing program 3 (id=11604): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000003640)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000080)=[@ip_retopts={{0xc0, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0x26, [@remote, @multicast1, @broadcast, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0xc, 0xb0, 0x1, 0xf, [{@private=0xa010101, 0xc000000}]}, @generic={0x94, 0xb, "3420dd362f378891a2"}, @cipso={0x86, 0x2c, 0x3, [{0x0, 0xa, "e90a242987580b0d"}, {0x5, 0x12, "600100208096f47b7e77aa8cf8850500"}, {0x0, 0xa, "df34661756a87ffe"}]}, @generic={0x89, 0x5, "c6fcfd"}, @timestamp_prespec={0x44, 0x24, 0x92, 0x3, 0x6, [{@empty, 0x2}, {@empty, 0x5}, {@multicast1, 0x400}, {@multicast1, 0x6}]}, @generic={0x86, 0xc, "e81ce386ac26d92ffc4f"}, @end, @rr={0x7, 0xb, 0xba, [@loopback, @dev={0xac, 0x14, 0x14, 0x37}]}]}}}, @ip_tos_int={{0x14}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x67, [@broadcast, @loopback, @private=0xa010102, @local, @loopback, @broadcast]}, @generic={0x86, 0xa, "e55aa8afd5cf5291"}, @timestamp_prespec={0x44, 0xc, 0xbf, 0x3, 0x5, [{@rand_addr=0x64010100, 0x8000}]}, @timestamp_addr={0x44, 0x1c, 0x54, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x1}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x5e52}]}, @generic={0x88, 0x12, "8d27207eb489c96c492eb95cf203ccca"}, @lsrr={0x83, 0x1b, 0x5d, [@rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @broadcast, @broadcast]}, @ssrr={0x89, 0x1b, 0x5a, [@empty, @private=0xa010100, @remote, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x17, 0x60, [@empty, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @remote]}, @ra={0x94, 0x4}]}}}], 0x198}}, {{&(0x7f0000000240)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000280)="37692e47f886e953f8da155645ccb85189f38b4897128f9499539da7f3342ec161d69ee8493e3ac7162074068319e2b14ddef33668d35cbb56fc3588606737d3be75cf88f6838673b347d9332c1aaec0f0ccf4548e8e170f762fdadd96653f790b956cbc7a3ff5a04ae98e9a5110af01cf02622c33dbb5e7309588a394571f8d55c5a36dfbb3568796021a624fe8f9999f3337772f15348d8ba59a87748968ff9e35a79dc050778744d9a1c66f0e0e8048c7a3356b31fdfc7a8c5e3695b9f5a2aa7e5d84fd2aa5a7d4ddb3bec7722a4c098594", 0xd3}, {&(0x7f0000000380)="22029d1a32e579b60d97bcff07b52e3b1bc1502bd32000ad5fc98fff944554d9f33b935adbf37ff2e010f144b651a7a13720804ca6d30367da7d35f6107f44c96770daabd189e516a5b8b876d6da56dba11d41ddc942875cefd2534b1776af40c125af35c279291163cacd3164a05c4103580b18cbb2d3e97d540021a9815cba363c1a8ed9bc59c3b88724c425a08ef2670a68f3a5ab1b822d6ddb2eac4f87e7264cfd810eea751ebe955c78b138fc856ccf831df3059fa65ea2d9071179b67da507226e9e8e36f958b62be82b6edea2b618a08126a24e60657b25e4f8a83d13892ff12978180a3cde3af5b8dac8a5", 0xef}, {&(0x7f0000000480)="22e4d7ed2cf6d4531708d5071161ffb61a834e0f48705821270412bb7c2da4abcb0a63619ed5a9116487590b5fc055153db07248da03f0da2c5a3b11b4a4f6ad2350fb87babe1e1c83450cc1191947dd4cad729a414fe65ffd74b28345abb6e4bab5ff5f0f24c7971fe8356c1046826c324ce9fb23d942aa0ed9c74b8eb2a71288a5d681f2", 0x85}, {&(0x7f0000000540)="011f9e52953d8b14347c5536906fbdb4be2f68a207450e2e172fe51f881214427aaf0cbdb21d86015e059a99df49448e447917f58dc1ae3c6d7287910458cf0b7350ae190c5840c3cbb8a6536cd6791d18a98f08fd3df1594ffca2cba8e5ba4882203cb9fdf6b22c487a5fbc088dda701192a173e833b3d4197fc4c929ba3eae3c57e50ea35a13011bab886b454c832918ba76d0ba68e996b834e59ef7420af7555f7b42d1b0ba2f506692d8ea07d448470b241a5cd7489aeedf76e257e98438a1d090a743b2a0703981869041af60c99be0c909ebbec11cba006b390d6b9bf0e492cf617368ae54feec9b78161dbc8396279d63a82c08d398066deaa882", 0xfe}, {&(0x7f0000000640)="a31f1c2482ed3a6c64995573d2329d42b77146f3cd5e0b60da4f599d6bedf2abceaeac6b6fb6e9d9e8b9ca352ecacdb9508a6298543bc7de284721f6cf1c98da5befc6364ee65e722febb1a267229c3cd7f00b5b0fb14bdb976b793de92b7a3ec22aecc234790be729b9fc8e616cde0da8c0caab64001a20ee267a3f35fbb69fbde1295a0f80b155276a39e7e74f9b26ee90e194102a961e0eb12711a3ee5d312a342c4d60700c0556c2", 0xaa}, {&(0x7f0000000700)="f835df80cd5ae487c95bb07608e0395082fa2c40b4612ee50739c467f8811e352479f17c9835d31337c355106fb286150377d170e7db6beb74db9f090fb4aa658dc3f4f64e4c8e1713795e624d394d", 0x4f}, {&(0x7f0000000780)="0af033fd24fd4146830a4f47ee985dce2ce5b4d3c01a2f118b67eb531492efb6", 0x20}, {&(0x7f00000007c0)="8a5f3babaab8d37591a884caeb665d52f4582153709ed948c8effcc5eab5efbd9ba91ac16d14c8236afa387a2b71a2a77e78de606f0448b0ddd34e6524bcda298648e623e5c831cdfbe9fa9ee9a9a6643132d163913bcd48420ea3a4e68e196573e832665f1fbb8705c384c4402fb6b36eeb094bed23ddb8", 0x78}], 0x8, &(0x7f0000001a80)=ANY=[@ANYBLOB="5c00000000000000000000000700000082034e8307c03231693f441c49000000000900000002fffffff80000000000004aa15a0c1e1607f14b8ebda4d8072b0000000689235d7f00000164010101ac1e0101ffffffffac141439ac1414aaac14142d00"/109], 0x60}}], 0x4, 0x200008c0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@dev, @in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xc87) listen(r0, 0x80000001) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000001800eb8976156951b2ba29ef80"], 0xfe33) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000a40)={r3, 0x1000, "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"}, &(0x7f0000000040)=0x1008) 988.780108ms ago: executing program 2 (id=11605): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b856c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34459a9718a06cd60bc06000000a705251e6182949a3651f60a84c9f4d493803756041cfb9032d038c128a982a9ba5af76842fd7d569f", 0x66}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffcb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000d00)=""/266, 0x10a}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000002340)=""/4057, 0xfd9}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000001f00)=""/203, 0xcb}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f00000007c0)=""/158, 0x9e}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000000880)=""/59, 0x3b}, {&(0x7f0000000700)=""/135, 0x87}], 0xd}, 0x40002060) 914.086616ms ago: executing program 4 (id=11606): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x2, 0x8, 0x8}, 0x48) (async) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x15, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcff2000000000000034e58085000000a0000000850000009e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x100b, &(0x7f0000001680)=""/4107}, 0x90) 831.982185ms ago: executing program 3 (id=11607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) syz_extract_tcp_res(&(0x7f0000000140), 0x7, 0x8001) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/119, 0x77}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01ee26bd7000fedbdf250700000008000400060000000800040081000000080006000700000040000280060002004e210000080003000100000014000100fc0000000000000000000000000000010800070001800000080007002c00000008000300030000000800040008000000"], 0x74}, 0x1, 0x0, 0x0, 0x1000}, 0x4040054) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0xad, 0x6, 0x6, 0x40, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, @local, 0x7, 0x40, 0x1, 0x3}}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=@gettclass={0x24, 0x2a, 0x1, 0x2070bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xf, 0x2}, {0xfff1, 0x1}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c40a5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x40, 0x8e6bc56bdd8930a5, 0x80000001, 0x8f, {{0x16, 0x4, 0x2, 0x3e, 0x58, 0x67, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp={0x44, 0x1c, 0x4e, 0x0, 0x7, [0x10000, 0x5, 0x7fffffff, 0x5, 0x2, 0x0]}, @ssrr={0x89, 0xb, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @ssrr={0x89, 0x1b, 0x63, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac0100001300000127bd7000fedbdf2507000000", @ANYRES32=r4, @ANYBLOB="0042000010000100080023000800001014001680100001800c000300070000000600000008001d000d00000005002700060000004800128009000100626f6e64000000003800028008001a000000000005001600020000000400088008000200", @ANYRES32=r7, @ANYBLOB="08000400030000000500150001000000080013000800000008000d00060000000c00198008000100000000006800128008000100687372005c0002800600050004000000050007000200000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="050006000700000006000500ff0300000a000400ffffffffffff000005000700000000000a000400aaaaaaaaaa33000005000600400000009c00188004000180200001800800010000040000140004009cf2ceceb508511bcfba8bfe6542f20760000180080001000c00000014000500477c3bbec15fb311048fedcf38ea8d1914000500ce95027b5e30e565391bf68cceb3f0e30500060005000000050006000300000005000600770000001400040075545b199b6cfb8ad86adce48aa5be6014000180050006000000000008000100ad000000"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x80) write$tun(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="0000900000040200090009000800460400600065000007119078ffffffff0a01010101030003000000f3cec6d89a21ebc2866967c1b5039959f4a61ec79b7790321da95449be78d2ac64bd777d60f608f8e807001238108be7ed849c65c15735da"], 0x6e) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r12, 0x0, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x944}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006110a3000000000001000000000000007b1fb76c4597582b5772d6fea72f3f5b9566acd54d4c82939657c41507971c75fcad966806b79dfcf31b274a79aaf59d8032f788a4d74b21a75756870d38020078da34a1e288b2b1b8ef5192b3defc8954125ea51d136e3700"/132], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000b03"], 0x0, 0x5a}, 0x20) 815.890138ms ago: executing program 1 (id=11608): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xdd, 0x4, 0x3, 0x21, 0x0, 0x9, 0xe8, 0xa0, 0x7, 0x3, 0x3, 0x3, 0x86, 0xf}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x8000, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x4, 0x200, 0xd18, 0x2, r1}, &(0x7f0000000380)=0x10) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070300443c00810a01010200010000e000000100000000ac1414aa00000000ac1414bb0000000000000000000000ac1414bb00"/130], 0x0) 808.277307ms ago: executing program 0 (id=11609): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@loopback}, &(0x7f0000000040)=0x14) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) 735.350367ms ago: executing program 2 (id=11610): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x2d, 0x44, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x1c, 0xa2, 0x3, 0x4, [{@empty, 0x7}, {@multicast2, 0x6}, {@multicast2, 0x1}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x25, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000005662f3cb5000000000000000100030000000000047483"], 0x20}}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x2e, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{}, {0x0, 0x2, [@TCA_U32_FLAGS={0x0, 0xb, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c4}, 0x8800) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x16c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x158, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xb}, {0xc, 0x4}}}, @m_xt={0x58, 0x17, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x90b}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x1f, 0x6, "f62f5842d5a9b8e8524ed558e3b65cc1fc86a749027b865caa0a1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xa4, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, {0x6a, 0x6, "2b45b9197ecf7bcbd6d5d0b89e829e9d769f0a6fcdf2f493491fd74e2215c1ff57261a537b40d82cf2a7e591517e2575dfd2d9175e10cab5f40f0e8cd5d063c0ec791f379873f196923734be8ec74e54b7c9aee8b3ba3986a11dc9d804cd96293f161fe9ffc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x16c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000013"], 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x5, 0x9, 0x8, 0x6, 0x8000, 0x3ff, 0x0, 0x800}}}}]}, 0x58}}, 0x0) 720.421157ms ago: executing program 4 (id=11611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x50}}, 0x0) close(r1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x7, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3, 0x1, 0x38000, 0xfa9a, 0x5, 0x3, 0x1, 0xffffe7cf}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="98000000", @ANYRES16=r11, @ANYBLOB="230125bd7000fddbdf250f0000006400078008000200ffffffff0c00030001000000000000000c0004"], 0x98}, 0x1, 0x0, 0x0, 0x44000}, 0x50) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x15c, r11, 0x38, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd35}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x21}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe656}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23b5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4c041) 644.878183ms ago: executing program 0 (id=11612): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x40, 0x10, 0x1, 0x3, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x68, 0x0, 0x8e, 0x0, 0x0, @local, @private=0xa010102}}}}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000200)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000180)={0x5, 0x4, 0xfffffff8, {0x77359400}, {}, {0x4, 0x1, 0x0, 0x1}, 0x1, @can={{0x3, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "ae3fadb14ada1b09"}}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20040804) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000100010000001400070000000000"], 0x74}}, 0x0) 579.498604ms ago: executing program 1 (id=11613): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xecfd}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4f2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff801}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4b87}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xc9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x805}, 0x20000085) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x270, 0x1398, 0x1398, 0x270, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@dst={{0x48}, {0x401, 0x2, 0x1, [0x2, 0x5, 0x7, 0x4, 0x967, 0x0, 0x8, 0x7, 0x6, 0x60, 0x8, 0x2, 0x625, 0x2, 0x8742, 0x800], 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xf5, 0x23, 0x7, '\x00', 'syz0\x00', {0xc}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x62, 0x1, 0x51}, @val={0x8, 0x3, r5}, @void}}}, 0x24}}, 0x240040c0) close(0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000480)={0x5, 0x9, 0xfff3, 0x0, 0xb, 0x6, 0x4}, 0xc) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x8, 0x8001, 0x5f82, 0x3ff, 0x8, 0x9, 0xed2e, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x2, 0x7a0, 0x6, 0x7, 0x4}}, &(0x7f00000003c0)=0xb0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000400)={r6, 0x351f}, &(0x7f0000000440)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x1b, 0x5, 0x640, 0x570, 0x480, 0xffffffff, 0x480, 0x348, 0x570, 0x570, 0xffffffff, 0x570, 0x570, 0x5, &(0x7f0000000280), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x40}, @private1, [0xffffff00, 0xffffff00, 0x0, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'veth0_vlan\x00', 'rose0\x00', {}, {0xff}, 0x84, 0x4, 0x3, 0x34}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d2], 0x7, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@broadcast, @gre_key=0x2, @gre_key=0x1}}}, {{@ipv6={@local, @mcast2, [0xff000000, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0x0, 0xff000000], 'wlan0\x00', 'pimreg1\x00', {0xff}, {}, 0x2c, 0x40, 0x2, 0xc}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0xa, 0x8b], 0x3, 0x8, 0x2, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @remote, @remote, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1], 0x6}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x13, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, @ipv6=@private2, @port=0x4e24, @port=0x4e21}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0xc7d, 0x5, 0x0, [0x2, 0x10, 0x0, 0x4, 0x200, 0xa, 0x8, 0x648e, 0x2, 0x400, 0x40, 0xfff9, 0x4b, 0x800, 0x81, 0x2], 0x5}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x6, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x7, @icmp_id=0x66}}}, {{@ipv6={@mcast2, @mcast1, [0xffffffff, 0xffffffff, 0xff0000ff, 0xffffffff], [0xffffffff, 0xff, 0xff], 'pimreg0\x00', 'veth1_to_hsr\x00', {}, {}, 0xaf63739c672025d2, 0x9, 0x6, 0x20}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv4=@empty, @ipv6=@private2, @port=0x4e21, @port=0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) 428.694879ms ago: executing program 1 (id=11614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x8, 0x3, 0x4, 0xfffffffe}, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r2, 0x1, 0x70bd24, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24080850}, 0xc010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x8000}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000200)=0x6, 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x6, @empty, 0xa}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 231.555138ms ago: executing program 3 (id=11615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a0b040000000000000000020000005c000480580001800a0001006d617463680000004800028008000240000000001c0003004cb43801b2486e8f58c2052fade1bc2c62cdeb7521cf85f60e0001007374617469737469630000000e000100636f6e6e62797465730000000900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd61"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r2 = accept(r0, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000a00)={0x3, {{0xa, 0x4e22, 0x736, @mcast1, 0x8}}, 0x0, 0xa, [{{0xa, 0x4e23, 0x6, @private1, 0x82}}, {{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfa}}, {{0xa, 0x4e22, 0x3, @empty, 0x1}}, {{0xa, 0x4e24, 0x9, @mcast1, 0x3}}, {{0xa, 0x4e22, 0x2, @private1, 0x1}}, {{0xa, 0x4e23, 0x80000000, @private0, 0xb0a}}, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}, {{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3ff}}, {{0xa, 0x4e21, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {{0xa, 0x4e21, 0x9, @empty, 0x8}}]}, 0x590) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000001c0)={0x8, 'veth1_to_team\x00', {'vlan0\x00'}, 0x9}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000540)={r4, &(0x7f0000000240)='[(N&^,\x00', 0x8401, &(0x7f0000000280)={@_ha_fsid={[0x9, 0x81]}, {0x1902, 0x8, 0x5, 0x9}}, 0x0, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x24000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd7fd24001613802b}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002280)={0x14, 0x5, 0x6, 0x201}, 0x14}}, 0x0) 99.053648ms ago: executing program 2 (id=11616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) 84.383321ms ago: executing program 0 (id=11617): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4008001}, 0x40880) read(r0, &(0x7f0000000100)=""/19, 0x13) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040004}, 0x4040044) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000000)="86218863cb0f67e28e57e735ef693e32", 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a31000000002800048008000240000000000800014000000005140003006e7230000000000000000000000000000900010073797a31000000003c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000015040004800b00070066696c746572"], 0xd8}}, 0x0) 0s ago: executing program 4 (id=11618): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, 0x0, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x1d8, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x3c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480d8}, 0x20004804) (async) accept4$nfc_llcp(r1, &(0x7f0000001000), &(0x7f0000001080)=0x60, 0x0) (async) r6 = accept4(r0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f00000010c0)={0x10, 0x0, "da768dca212120027c20ba20ba6a7464"}) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r6, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) (async) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-neon\x00'}, 0x58) kernel console output (not intermixed with test programs): process `syz.0.9412'. [ 1018.496097][ T8791] bond2: entered promiscuous mode [ 1018.501458][ T8791] bond2: entered allmulticast mode [ 1018.508111][ T8791] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1018.527003][ T8797] veth0: entered promiscuous mode [ 1018.538683][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9414'. [ 1018.635502][ T8797] veth0: left promiscuous mode [ 1018.782611][ T8731] chnl_net:caif_netlink_parms(): no params data found [ 1018.959992][ T5143] Bluetooth: hci3: command tx timeout [ 1019.046097][ T8514] lo speed is unknown, defaulting to 1000 [ 1019.060355][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.067542][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.089349][ T8731] bridge_slave_0: entered allmulticast mode [ 1019.091949][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9416'. [ 1019.106494][ T8731] bridge_slave_0: entered promiscuous mode [ 1019.155145][ T8816] syz_tun: entered promiscuous mode [ 1019.170263][ T8818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9418'. [ 1019.190401][ T8816] macvtap1: entered promiscuous mode [ 1019.202391][ T8816] syz_tun: left promiscuous mode [ 1019.272982][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.300344][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.310813][ T8731] bridge_slave_1: entered allmulticast mode [ 1019.325758][ T8731] bridge_slave_1: entered promiscuous mode [ 1019.465633][ T8822] veth0_to_bond: left allmulticast mode [ 1019.471852][ T8822] veth0_to_bond: left promiscuous mode [ 1019.478966][ T8822] bridge2: port 2(veth0_to_bond) entered disabled state [ 1019.634071][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.681029][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.728081][ T8832] netem: invalid attributes len -24 [ 1019.735486][ T8832] netem: change failed [ 1019.744031][ T8731] team0: Port device team_slave_0 added [ 1019.750892][ T8832] netlink: 'syz.3.9419': attribute type 3 has an invalid length. [ 1019.765616][ T8731] team0: Port device team_slave_1 added [ 1019.874632][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.905493][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.952563][ T8731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.967429][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.974977][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.006054][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms [ 1020.006088][ C0] lec:lec_tx_timeout: lec0 [ 1020.023206][ T8731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.102619][ T8731] hsr_slave_0: entered promiscuous mode [ 1020.110079][ T8731] hsr_slave_1: entered promiscuous mode [ 1020.116737][ T8731] debugfs: 'hsr0' already exists in 'hsr' [ 1020.124036][ T8731] Cannot create hsr debugfs directory [ 1020.292616][ T8854] sctp: [Deprecated]: syz.0.9428 (pid 8854) Use of int in maxseg socket option. [ 1020.292616][ T8854] Use struct sctp_assoc_value instead [ 1020.333291][ T8854] openvswitch: netlink: IP tunnel TTL not specified. [ 1020.387877][ T8731] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1020.399732][ T8731] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1020.410028][ T8731] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1020.426953][ T8731] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1020.508024][ T8731] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1020.517994][ T8731] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1020.528646][ T8731] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1020.545560][ T8731] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1020.604666][ T8731] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1020.631317][ T8731] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1020.654974][ T8731] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1020.665442][ T8731] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1020.744477][ T8864] syzkaller0: entered promiscuous mode [ 1020.751472][ T8864] syzkaller0: entered allmulticast mode [ 1020.772646][ T8731] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1020.819341][ T8731] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1020.829329][ T8731] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1020.841547][ T8731] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1021.033206][ T8879] netlink: 'syz.2.9435': attribute type 24 has an invalid length. [ 1021.040039][ T5143] Bluetooth: hci3: command tx timeout [ 1023.067842][ T8731] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1023.116134][ T8731] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1023.124552][ T5143] Bluetooth: hci3: command tx timeout [ 1023.153321][ T8731] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1023.195640][ T8731] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1023.219527][ T8902] __nla_validate_parse: 4 callbacks suppressed [ 1023.219548][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9442'. [ 1023.275936][ T8902] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1023.547909][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.625507][ T8731] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.678402][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.685622][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.788759][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.796090][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.376101][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9453'. [ 1024.734071][ T8973] bond8 (unregistering): Released all slaves [ 1024.774365][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.888504][ T8985] netlink: 'syz.0.9461': attribute type 29 has an invalid length. [ 1024.900073][ T8985] netlink: 'syz.0.9461': attribute type 29 has an invalid length. [ 1024.910020][ T8985] netlink: 'syz.0.9461': attribute type 29 has an invalid length. [ 1024.918359][ T8985] netlink: 'syz.0.9461': attribute type 29 has an invalid length. [ 1024.970274][ T8985] netlink: 'syz.0.9461': attribute type 29 has an invalid length. [ 1025.053413][ T8985] netlink: 'syz.0.9461': attribute type 29 has an invalid length. [ 1025.088224][ T8985] netlink: 'syz.0.9461': attribute type 29 has an invalid length. [ 1025.199665][ T5143] Bluetooth: hci3: command tx timeout [ 1025.326403][ T8731] veth0_vlan: entered promiscuous mode [ 1025.353934][ T8731] veth1_vlan: entered promiscuous mode [ 1025.461846][ T8731] veth0_macvtap: entered promiscuous mode [ 1025.486438][ T8731] veth1_macvtap: entered promiscuous mode [ 1025.534705][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.560432][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.588102][ T7888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.602300][ T7888] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.614786][ T7888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.625149][ T7888] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.565699][ T4783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.593641][ T4783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.673396][ T9051] netlink: 'syz.2.9476': attribute type 15 has an invalid length. [ 1028.713445][ T7885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.721868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.735537][ T7885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.750592][ T9054] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9478'. [ 1029.221935][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1029.233145][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1029.246637][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1029.261028][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1029.269702][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1029.345771][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9484'. [ 1029.426928][ T9081] netlink: 412 bytes leftover after parsing attributes in process `syz.4.9484'. [ 1029.454739][ T9069] lo speed is unknown, defaulting to 1000 [ 1029.478773][ T9082] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9487'. [ 1029.564319][ T9082] syzkaller1: entered promiscuous mode [ 1029.572224][ T9082] syzkaller1: entered allmulticast mode [ 1029.705701][ T9081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.768483][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9488'. [ 1029.881576][ T9081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.004815][ T9094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9491'. [ 1030.033511][ T9081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.056780][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9492'. [ 1030.113428][ T9096] veth0: entered promiscuous mode [ 1030.181353][ T9081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.320143][ T9103] netlink: 'syz.0.9494': attribute type 1 has an invalid length. [ 1030.336351][ T24] IPVS: starting estimator thread 0... [ 1030.402605][ T9103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1030.460996][ T9107] IPVS: using max 30 ests per chain, 72000 per kthread [ 1030.622822][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9497'. [ 1030.662886][ T9119] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20004 [ 1030.693070][ T9119] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1030.715470][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9497'. [ 1030.790957][ T9119] veth0_macvtap: left promiscuous mode [ 1030.868583][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9499'. [ 1031.063301][ T84] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 1031.204991][ T9133] netlink: 'syz.0.9500': attribute type 10 has an invalid length. [ 1031.359557][ T5143] Bluetooth: hci4: command tx timeout [ 1031.535627][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.545305][ T84] bond_slave_0: left allmulticast mode [ 1031.553295][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.563421][ T84] bond_slave_1: left allmulticast mode [ 1031.572164][ T84] bond0 (unregistering): Released all slaves [ 1031.584523][ T84] bond1 (unregistering): Released all slaves [ 1031.599863][ T84] bond2 (unregistering): Released all slaves [ 1031.616108][ T84] bond3 (unregistering): Released all slaves [ 1031.640746][ T84] bond4 (unregistering): Released all slaves [ 1031.657151][ T84] bond5 (unregistering): Released all slaves [ 1031.679678][ T84] bond6 (unregistering): Released all slaves [ 1031.700528][ T84] bond7 (unregistering): Released all slaves [ 1031.724093][ T9069] chnl_net:caif_netlink_parms(): no params data found [ 1031.820380][ T9133] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1031.936529][ T84] tipc: Left network mode [ 1032.127817][ T9159] sctp: [Deprecated]: syz.0.9506 (pid 9159) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1032.127817][ T9159] Use struct sctp_sack_info instead [ 1032.172424][ T9150] syzkaller0: entered promiscuous mode [ 1032.180821][ T9150] syzkaller0: entered allmulticast mode [ 1032.365356][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.396267][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.411097][ T9069] bridge_slave_0: entered allmulticast mode [ 1032.433815][ T9069] bridge_slave_0: entered promiscuous mode [ 1032.452766][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.466767][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.480751][ T9069] bridge_slave_1: entered allmulticast mode [ 1032.496355][ T9069] bridge_slave_1: entered promiscuous mode [ 1032.652023][ T9069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.687731][ T9069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.749500][ T9185] block nbd0: reconnected socket [ 1032.820842][ T5143] block nbd0: Receive control failed (result -32) [ 1032.872039][ T9069] team0: Port device team_slave_0 added [ 1032.889627][ T9069] team0: Port device team_slave_1 added [ 1033.084353][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.093041][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.139343][ T9069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.176468][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.186575][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.215163][ T9069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.443765][ T5143] Bluetooth: hci4: command tx timeout [ 1033.450734][ T9069] hsr_slave_0: entered promiscuous mode [ 1033.473849][ T9069] hsr_slave_1: entered promiscuous mode [ 1033.490228][ T9069] debugfs: 'hsr0' already exists in 'hsr' [ 1033.511945][ T9069] Cannot create hsr debugfs directory [ 1033.826556][ T84] hsr_slave_0: left promiscuous mode [ 1033.844249][ T84] hsr_slave_1: left promiscuous mode [ 1033.856758][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.881639][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.927386][ T9229] netlink: 'syz.1.9518': attribute type 6 has an invalid length. [ 1034.435526][ T4783] smc: removing ib device syz0 [ 1034.608445][T31847] lo speed is unknown, defaulting to 1000 [ 1034.615971][T31847] syz0: Port: 1 Link DOWN [ 1034.836174][ T9246] __nla_validate_parse: 3 callbacks suppressed [ 1034.836197][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9521'. [ 1034.852138][ T8331] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.991627][ T9246] bond1: entered promiscuous mode [ 1034.997273][ T9246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1035.087044][ T8331] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.161964][ T9257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1035.197210][ T9257] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 1035.241608][ T9257] bond1: (slave sit1): Error -95 calling set_mac_address [ 1035.290727][ T8331] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.447930][ T7888] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.521214][ T5143] Bluetooth: hci4: command tx timeout [ 1035.528848][ T9269] netlink: 'syz.4.9527': attribute type 39 has an invalid length. [ 1035.973845][ T9285] veth1_macvtap: left promiscuous mode [ 1035.984929][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9530'. [ 1036.012957][ T9285] macsec0: entered promiscuous mode [ 1036.049057][ T9285] macsec0: entered allmulticast mode [ 1036.157879][ T9286] veth1_macvtap: entered promiscuous mode [ 1036.173935][ T9286] veth1_macvtap: entered allmulticast mode [ 1036.182577][ T9286] macsec0: left promiscuous mode [ 1036.187890][ T9286] macsec0: left allmulticast mode [ 1036.196165][ T9286] veth1_macvtap: left allmulticast mode [ 1036.453921][ T9304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1036.530464][ T9302] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9534'. [ 1036.554162][ T9309] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9536'. [ 1036.634776][ T9309] netlink: 'syz.1.9536': attribute type 1 has an invalid length. [ 1036.649277][ T9309] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9536'. [ 1036.658804][ T9309] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9536'. [ 1036.670069][ T9302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9534'. [ 1036.763838][ T9309] netlink: 'syz.1.9536': attribute type 1 has an invalid length. [ 1036.825492][ T9309] netlink: 634 bytes leftover after parsing attributes in process `syz.1.9536'. [ 1037.121370][ T9317] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1037.154348][ T9317] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1037.171148][ T9317] gretap1: entered promiscuous mode [ 1037.176499][ T9317] gretap1: entered allmulticast mode [ 1037.388829][ T9069] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1037.476103][ T9069] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1037.527390][ T9328] netlink: 'syz.0.9540': attribute type 1 has an invalid length. [ 1037.542475][ T9332] Bluetooth: MGMT ver 1.23 [ 1037.545779][ T9069] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1037.554282][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9540'. [ 1037.592965][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9540'. [ 1037.606841][ T5143] Bluetooth: hci4: command tx timeout [ 1037.607986][ T9328] netlink: 'syz.0.9540': attribute type 2 has an invalid length. [ 1037.626027][ T9069] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1037.633150][ T9328] netlink: 'syz.0.9540': attribute type 2 has an invalid length. [ 1037.744233][ T9328] netlink: 'syz.0.9540': attribute type 2 has an invalid length. [ 1038.538217][ T9069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.665348][ T9069] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.735459][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.742695][ T7888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.770351][ T30] audit: type=1804 audit(1772012323.073:14): pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9548" name="/newroot/4/cgroup.controllers" dev="tmpfs" ino=39 res=1 errno=0 [ 1038.830576][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.837790][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.867098][ T30] audit: type=1800 audit(1772012323.073:15): pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9548" name="cgroup.controllers" dev="tmpfs" ino=39 res=0 errno=0 [ 1039.069303][ T8331] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.088360][ T8331] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.208442][ T9393] bond2: entered promiscuous mode [ 1039.216024][ T9393] bond2: entered allmulticast mode [ 1039.233171][ T9393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1039.287791][ T8331] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.327954][ T8331] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.488167][ T9412] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode active-backup(1) [ 1039.545935][ T9420] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1039.564173][ T9412] bond1 (unregistering): Released all slaves [ 1039.808806][ T84] IPVS: stop unused estimator thread 0... [ 1039.888594][ T9431] tipc: Started in network mode [ 1039.909547][ T9431] tipc: Node identity , cluster identity 4711 [ 1039.915728][ T9431] tipc: Failed to obtain node identity [ 1039.949759][ T9431] tipc: Enabling of bearer rejected, failed to enable media [ 1040.014652][ T9443] nbd: socks must be embedded in a SOCK_ITEM attr [ 1040.022600][ T9441] syzkaller0: entered promiscuous mode [ 1040.048723][ T9441] syzkaller0: entered allmulticast mode [ 1040.108959][ T9445] syzkaller0: left promiscuous mode [ 1040.136720][ T9445] syzkaller0: left allmulticast mode [ 1040.347553][ T9069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.397014][ T9461] sctp: [Deprecated]: syz.4.9561 (pid 9461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1040.397014][ T9461] Use struct sctp_sack_info instead [ 1040.460197][ T9460] __nla_validate_parse: 38 callbacks suppressed [ 1040.460219][ T9460] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9562'. [ 1040.507557][ T9460] netlink: 'syz.3.9562': attribute type 10 has an invalid length. [ 1040.541928][ T9069] veth0_vlan: entered promiscuous mode [ 1040.577571][ T9069] veth1_vlan: entered promiscuous mode [ 1040.735447][ T9069] veth0_macvtap: entered promiscuous mode [ 1040.841167][ T9069] veth1_macvtap: entered promiscuous mode [ 1040.924067][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.974358][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.061746][ T8331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.093781][ T8331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.126500][ T8331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.169693][ T8331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.229473][ T9500] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1041.421617][ T9509] netlink: 512 bytes leftover after parsing attributes in process `syz.1.9575'. [ 1041.461456][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.476963][ T9517] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1041.500165][ T9517] team0: Device macvlan2 is already an upper device of the team interface [ 1041.513339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.675727][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.708006][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.745299][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9580'. [ 1041.809890][ T9526] netlink: 596 bytes leftover after parsing attributes in process `syz.1.9580'. [ 1041.840990][ T9526] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9580'. [ 1041.880791][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9582'. [ 1041.890742][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9581'. [ 1041.922999][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9582'. [ 1041.943757][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9581'. [ 1041.955588][ T9533] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1041.968585][ T9535] tipc: Failed to remove unknown binding: 66,0,0/0:1254895402/1254895403 [ 1041.982121][ T9535] tipc: Failed to remove unknown binding: 66,0,0/0:1254895402/1254895403 [ 1042.032746][ T9533] bond3 (unregistering): Released all slaves [ 1042.077092][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9581'. [ 1042.874682][ T9583] netlink: 'syz.2.9591': attribute type 1 has an invalid length. [ 1043.181336][ T9605] xt_l2tp: v2 doesn't support IP mode [ 1043.218474][ T9601] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1043.276851][ T9601] team0: Port device batadv1 added [ 1043.426925][ T9617] sock: sock_set_timeout: `syz.3.9599' (pid 9617) tries to set negative timeout [ 1043.446500][ T9615] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1045.714606][ T9647] __nla_validate_parse: 6 callbacks suppressed [ 1045.714629][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9605'. [ 1045.907976][ T9660] x_tables: unsorted entry at hook 3 [ 1045.985407][ T9660] netlink: 'syz.3.9610': attribute type 1 has an invalid length. [ 1046.038634][T31847] IPVS: starting estimator thread 0... [ 1046.129280][ T9670] IPVS: using max 26 ests per chain, 62400 per kthread [ 1046.191778][ T9675] netlink: 'syz.4.9615': attribute type 4 has an invalid length. [ 1046.212277][ T9675] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9615'. [ 1046.255925][ T9683] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.9615'. [ 1046.347204][ T9675] netlink: 'syz.4.9615': attribute type 6 has an invalid length. [ 1046.485535][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9618'. [ 1046.751884][ T9709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1046.763438][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9625'. [ 1047.205163][ T9736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1047.321944][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9637'. [ 1047.467524][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9638'. [ 1047.581219][ T9761] xt_limit: Overflow, try lower: 604147548/4200216962 [ 1047.591528][ T9763] openvswitch: netlink: Flow key attr not present in new flow. [ 1047.607174][ T9762] vlan0: entered promiscuous mode [ 1047.699703][ T9766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9640'. [ 1047.721167][ T9766] netlink: 'syz.0.9640': attribute type 7 has an invalid length. [ 1047.740043][ T9766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9640'. [ 1047.771130][ T9768] netlink: 'syz.3.9642': attribute type 2 has an invalid length. [ 1047.782814][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9642'. [ 1047.871836][ T9754] vlan0: left promiscuous mode [ 1048.476669][ T9806] veth1_macvtap: left promiscuous mode [ 1048.488467][ T9806] macsec0: entered promiscuous mode [ 1048.500960][ T9807] IPv6: Can't replace route, no match found [ 1048.507432][ T9807] IPv6: Can't replace route, no match found [ 1048.522528][ T9806] macsec0: entered allmulticast mode [ 1048.546516][ T9808] veth1_macvtap: entered promiscuous mode [ 1048.570196][ T9808] veth1_macvtap: entered allmulticast mode [ 1048.587096][ T9808] macsec0: left promiscuous mode [ 1048.619293][ T9808] macsec0: left allmulticast mode [ 1048.624398][ T9808] veth1_macvtap: left allmulticast mode [ 1049.108664][ T9835] netlink: 'syz.3.9660': attribute type 3 has an invalid length. [ 1049.484560][ T9852] netlink: 'syz.1.9665': attribute type 1 has an invalid length. [ 1049.567449][ T8331] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.595999][ T8331] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.657941][ T9852] bond2: (slave ip6gretap1): making interface the new active one [ 1049.710694][ T9852] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1049.757493][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.802702][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.966746][ T9871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1050.385379][ T9890] netlink: 'syz.4.9678': attribute type 1 has an invalid length. [ 1050.449444][ T9890] bond1: entered promiscuous mode [ 1050.454980][ T9890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1050.469780][ T9898] bpq0: entered allmulticast mode [ 1050.496319][ T9898] netlink: 'syz.3.9680': attribute type 1 has an invalid length. [ 1050.508235][ T9893] bridge1: entered promiscuous mode [ 1050.515748][ T9893] bridge1: entered allmulticast mode [ 1050.752192][ T9908] x_tables: duplicate underflow at hook 2 [ 1050.870447][ T9916] __nla_validate_parse: 20 callbacks suppressed [ 1050.870467][ T9916] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9687'. [ 1050.909248][ T9916] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9687'. [ 1050.933491][ T5943] IPVS: starting estimator thread 0... [ 1051.031267][ T9921] IPVS: using max 29 ests per chain, 69600 per kthread [ 1051.111044][ T9927] netlink: 205 bytes leftover after parsing attributes in process `syz.4.9691'. [ 1051.197657][ T9936] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.9694'. [ 1051.272195][ T9939] netlink: 'syz.4.9695': attribute type 1 has an invalid length. [ 1051.637733][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9706'. [ 1052.068006][ T9991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1052.106745][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9717'. [ 1052.158029][ T9995] netlink: 'syz.3.9717': attribute type 2 has an invalid length. [ 1052.168231][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9717'. [ 1052.315390][T10007] netlink: 788 bytes leftover after parsing attributes in process `syz.4.9720'. [ 1052.345083][T10005] netlink: 'syz.0.9719': attribute type 1 has an invalid length. [ 1052.356184][T10007] xt_connbytes: Forcing CT accounting to be enabled [ 1052.393237][T10005] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1052.412700][T10011] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9720'. [ 1052.444998][T10010] bond3: (slave geneve2): making interface the new active one [ 1052.449448][T10014] netlink: 788 bytes leftover after parsing attributes in process `syz.4.9720'. [ 1052.473341][T10010] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1052.505877][T10013] ip6gre1: entered promiscuous mode [ 1052.517843][T10013] ip6gre1: entered allmulticast mode [ 1052.539782][T10005] x_tables: duplicate underflow at hook 2 [ 1053.710198][T10081] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 1053.954510][T10099] tipc: Started in network mode [ 1053.972730][T10099] tipc: Node identity e636d4ddc0cb, cluster identity 4711 [ 1053.988047][T10099] tipc: Enabled bearer , priority 0 [ 1054.008221][T10099] +: renamed from syzkaller0 [ 1054.024285][T10099] tipc: Disabling bearer [ 1054.125541][T10115] openvswitch: netlink: IP tunnel dst address not specified [ 1054.158522][T10115] openvswitch: netlink: IP tunnel dst address not specified [ 1054.251758][T10117] IPv6: sit1: Disabled Multicast RS [ 1054.326305][T10124] netlink: 'syz.2.9754': attribute type 3 has an invalid length. [ 1054.350282][T10124] netlink: 'syz.2.9754': attribute type 3 has an invalid length. [ 1054.384996][T10124] bridge_slave_0: left allmulticast mode [ 1054.418461][T10124] bridge_slave_0: left promiscuous mode [ 1054.450471][T10124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.495749][T10124] bridge_slave_1: left allmulticast mode [ 1054.521082][T10124] bridge_slave_1: left promiscuous mode [ 1054.527032][T10124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.527595][T10139] netlink: 'syz.0.9757': attribute type 1 has an invalid length. [ 1054.577329][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1054.584322][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1054.598112][T10124] bond0: (slave bond_slave_0): Releasing backup interface [ 1054.641382][T10124] bond0: (slave bond_slave_1): Releasing backup interface [ 1054.682310][T10124] team0: Port device team_slave_0 removed [ 1054.713604][T10124] team0: Port device team_slave_1 removed [ 1054.736999][T10124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.754356][T10124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.765138][T10124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.775073][T10124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.797307][T10124] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1055.010697][T10152] geneve2: entered promiscuous mode [ 1055.019962][T10157] tc_dump_action: action bad kind [ 1056.060440][T10242] netlink: 'syz.4.9788': attribute type 16 has an invalid length. [ 1056.068629][T10242] netlink: 'syz.4.9788': attribute type 3 has an invalid length. [ 1056.076665][T10242] __nla_validate_parse: 18 callbacks suppressed [ 1056.076683][T10242] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9788'. [ 1056.210061][T10248] sctp: [Deprecated]: syz.4.9790 (pid 10248) Use of int in maxseg socket option. [ 1056.210061][T10248] Use struct sctp_assoc_value instead [ 1056.798523][T10266] : entered promiscuous mode [ 1056.846483][T10268] vlan2: entered promiscuous mode [ 1056.863209][T10268] vlan2: entered allmulticast mode [ 1056.869680][T10268] hsr_slave_1: entered allmulticast mode [ 1056.900296][T10272] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1056.930529][T10273] netlink: 'syz.0.9796': attribute type 1 has an invalid length. [ 1056.971196][T10275] delete_channel: no stack [ 1056.976260][T10275] delete_channel: no stack [ 1057.107672][T10273] bond4: (slave bridge1): Enslaving as a backup interface with an up link [ 1057.168119][T10273] bond4: (slave bridge2): Enslaving as a backup interface with a down link [ 1057.294251][T10295] x_tables: duplicate underflow at hook 2 [ 1057.428043][T10305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9805'. [ 1057.457768][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9806'. [ 1057.493017][T10306] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1057.550592][T10308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1057.588706][T10313] netlink: 'syz.3.9809': attribute type 5 has an invalid length. [ 1057.754880][T10321] Unsupported ieee802154 address type: 0 [ 1057.801107][T10327] netlink: 'syz.0.9814': attribute type 21 has an invalid length. [ 1057.829401][T10327] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9814'. [ 1057.888692][T10332] x_tables: duplicate underflow at hook 2 [ 1058.328174][T10362] can: request_module (can-proto-0) failed. [ 1058.919535][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9837'. [ 1058.937676][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9837'. [ 1058.953581][T10411] netlink: 'syz.1.9835': attribute type 39 has an invalid length. [ 1059.213016][T10429] netlink: 'syz.1.9842': attribute type 1 has an invalid length. [ 1059.221145][T10429] netlink: 476 bytes leftover after parsing attributes in process `syz.1.9842'. [ 1059.230777][T10429] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.9842'. [ 1059.277013][T10430] sctp: [Deprecated]: syz.3.9841 (pid 10430) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1059.277013][T10430] Use struct sctp_sack_info instead [ 1059.332021][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9843'. [ 1059.422361][T10422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1059.450636][T10440] syz_tun: entered allmulticast mode [ 1059.459978][T10439] syz_tun: left allmulticast mode [ 1059.803060][T10463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9854'. [ 1059.848206][T10467] netlink: 'syz.0.9855': attribute type 17 has an invalid length. [ 1059.963959][T10471] sit0: entered promiscuous mode [ 1059.986274][T10471] netlink: 'syz.2.9857': attribute type 1 has an invalid length. [ 1059.999106][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 1060.007172][ C0] lec:lec_tx_timeout: lec0 [ 1060.191770][T10481] netlink: 'syz.4.9859': attribute type 16 has an invalid length. [ 1060.223477][T10481] netlink: 'syz.4.9859': attribute type 17 has an invalid length. [ 1060.315725][T10481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1060.472348][T10494] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1060.488315][T10494] bond2: left promiscuous mode [ 1060.516561][T10494] ip6gre1: left promiscuous mode [ 1061.253794][T10515] __nla_validate_parse: 10 callbacks suppressed [ 1061.253815][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9870'. [ 1061.281189][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9870'. [ 1061.298388][T10515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9870'. [ 1061.538215][T10542] IPv6: Can't replace route, no match found [ 1061.558433][T10542] IPv6: Can't replace route, no match found [ 1061.790206][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9881'. [ 1061.936568][T10564] netlink: 'syz.1.9884': attribute type 1 has an invalid length. [ 1061.961920][T10564] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9884'. [ 1062.004378][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9885'. [ 1062.072193][T10564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9884'. [ 1062.102494][T10572] netlink: 'syz.0.9886': attribute type 13 has an invalid length. [ 1062.111012][T10572] netlink: 'syz.0.9886': attribute type 17 has an invalid length. [ 1062.175474][T10575] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1062.235578][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9886'. [ 1062.321235][T10572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1062.363562][T10588] netlink: 'syz.2.9891': attribute type 7 has an invalid length. [ 1062.373904][T10584] netlink: 'syz.1.9890': attribute type 12 has an invalid length. [ 1062.402034][T10584] netlink: 'syz.1.9890': attribute type 29 has an invalid length. [ 1062.431331][T10584] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9890'. [ 1062.448950][T10584] netlink: 23 bytes leftover after parsing attributes in process `syz.1.9890'. [ 1063.423954][T10646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1064.868291][T10733] bond5: entered promiscuous mode [ 1064.874187][T10733] bond5: entered allmulticast mode [ 1064.882405][T10733] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1065.960329][T10787] validate_nla: 1 callbacks suppressed [ 1065.960351][T10787] netlink: 'syz.1.9951': attribute type 4 has an invalid length. [ 1066.010959][T10787] netlink: 'syz.1.9951': attribute type 4 has an invalid length. [ 1066.213652][T10801] netlink: 'syz.3.9953': attribute type 2 has an invalid length. [ 1066.397058][T10810] netlink: 'syz.3.9957': attribute type 1 has an invalid length. [ 1066.538696][T10810] bond3: entered promiscuous mode [ 1066.570807][T10819] __nla_validate_parse: 40 callbacks suppressed [ 1066.570821][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9959'. [ 1066.587217][T10810] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1066.630164][T10802] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 1066.857663][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9962'. [ 1066.880903][T10832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9964'. [ 1066.896239][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9964'. [ 1066.906454][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9964'. [ 1067.045490][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9965'. [ 1067.059610][T10840] netlink: 'syz.3.9967': attribute type 1 has an invalid length. [ 1067.127371][T10840] bond4: (slave ip6gretap1): making interface the new active one [ 1067.137203][T10840] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1067.145738][T10840] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1067.153771][T10840] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1067.553705][T10863] syzkaller0: entered promiscuous mode [ 1067.570479][T10863] syzkaller0: entered allmulticast mode [ 1067.592913][T10866] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1067.652726][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9978'. [ 1067.687420][T10881] netlink: 'syz.0.9977': attribute type 7 has an invalid length. [ 1068.114539][T10888] netlink: 'syz.2.9981': attribute type 3 has an invalid length. [ 1078.339793][T13875] lec:lec_start_xmit: lec0:No lecd attached [ 1082.249185][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 1083.999675][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 1084.007731][ C0] lec:lec_tx_timeout: lec0 [ 1112.959521][T10418] Bluetooth: hci0: command 0x0406 tx timeout [ 1116.006345][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1116.013269][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1121.039078][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1121.047189][ C0] lec:lec_tx_timeout: lec0 [ 1127.227293][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9984'. [ 1127.258721][T10903] bridge_slave_0: entered allmulticast mode [ 1127.462450][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9989'. [ 1127.486301][T10926] sctp: [Deprecated]: syz.1.9988 (pid 10926) Use of int in max_burst socket option deprecated. [ 1127.486301][T10926] Use struct sctp_assoc_value instead [ 1127.505185][T10920] netlink: 576 bytes leftover after parsing attributes in process `syz.0.9987'. [ 1127.522654][T10921] bond0 (unregistering): Released all slaves [ 1127.692081][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9991'. [ 1127.716333][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9992'. [ 1127.730461][T10935] openvswitch: netlink: Duplicate key (type 32). [ 1127.778798][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9993'. [ 1127.996921][T10951] netlink: 'syz.1.9995': attribute type 2 has an invalid length. [ 1128.098623][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9998'. [ 1128.133114][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9999'. [ 1128.169360][T10963] IPv6: Can't replace route, no match found [ 1128.175800][T10961] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9999'. [ 1128.181014][T10963] IPv6: Can't replace route, no match found [ 1128.205514][T10961] ipt_rpfilter: unknown options [ 1128.297027][T10968] netlink: 'syz.3.10002': attribute type 3 has an invalid length. [ 1128.367200][T10976] netlink: 'syz.2.10003': attribute type 1 has an invalid length. [ 1128.457765][T10980] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 1128.618826][T10985] ip6_vti0 speed is unknown, defaulting to 1000 [ 1128.645184][T10985] ip6_vti0 speed is unknown, defaulting to 1000 [ 1128.654976][T10985] ip6_vti0 speed is unknown, defaulting to 1000 [ 1128.760738][T10990] bpq0: left allmulticast mode [ 1129.061422][T11012] pimreg3: entered allmulticast mode [ 1129.163748][T10985] infiniband syz2: set down [ 1129.168389][ T5943] ip6_vti0 speed is unknown, defaulting to 1000 [ 1129.175388][T10985] infiniband syz2: added ip6_vti0 [ 1129.261827][T11023] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10018'. [ 1129.283736][T10985] RDS/IB: syz2: added [ 1129.287974][T10985] smc: adding ib device syz2 with port count 1 [ 1129.307881][T10985] smc: ib device syz2 port 1 has no pnetid [ 1129.404490][T10985] ip6_vti0 speed is unknown, defaulting to 1000 [ 1129.432292][T31849] ip6_vti0 speed is unknown, defaulting to 1000 [ 1129.522740][T11034] netlink: 'syz.3.10020': attribute type 21 has an invalid length. [ 1129.579227][T11034] IPv6: NLM_F_CREATE should be specified when creating new route [ 1129.814593][T11051] x_tables: unsorted entry at hook 2 [ 1129.884590][T11049] gre1: entered promiscuous mode [ 1129.916578][T11049] gre1: entered allmulticast mode [ 1129.957578][T11056] netlink: 'syz.4.10030': attribute type 10 has an invalid length. [ 1130.024594][T11056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.032411][T11056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.047205][T11056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.054501][T11056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.062082][T11056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.069310][T11056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.083292][T11056] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1130.092903][T10985] ip6_vti0 speed is unknown, defaulting to 1000 [ 1130.334711][T11065] pim6reg: entered allmulticast mode [ 1130.662450][T10985] ip6_vti0 speed is unknown, defaulting to 1000 [ 1130.690073][T11078] netlink: 'syz.0.10036': attribute type 2 has an invalid length. [ 1130.763639][T11078] 9: entered promiscuous mode [ 1131.357838][T11106] netlink: 'syz.0.10045': attribute type 1 has an invalid length. [ 1131.421388][T10985] ip6_vti0 speed is unknown, defaulting to 1000 [ 1131.749999][T11128] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1131.795039][T11128] bond0: entered promiscuous mode [ 1131.809392][T11128] bond_slave_0: entered promiscuous mode [ 1131.822533][T11128] bond_slave_1: entered promiscuous mode [ 1131.838912][T11128] mac80211_hwsim hwsim98 wlan1: entered promiscuous mode [ 1131.862067][T11128] batadv0: entered promiscuous mode [ 1131.873650][T11128] hsr1: entered promiscuous mode [ 1131.889202][T11128] hsr1: entered allmulticast mode [ 1131.899872][T11128] bond0: entered allmulticast mode [ 1131.910229][T11128] bond_slave_0: entered allmulticast mode [ 1131.924428][T11128] bond_slave_1: entered allmulticast mode [ 1131.942052][T11128] mac80211_hwsim hwsim98 wlan1: entered allmulticast mode [ 1131.959445][T11128] batadv0: entered allmulticast mode [ 1131.971180][T11128] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1131.992301][T11128] bond0: left promiscuous mode [ 1131.997517][T11128] bond_slave_0: left promiscuous mode [ 1132.015838][T11128] bond_slave_1: left promiscuous mode [ 1132.025965][T11128] mac80211_hwsim hwsim98 wlan1: left promiscuous mode [ 1132.047258][T11128] batadv0: left promiscuous mode [ 1132.113524][T10985] ip6_vti0 speed is unknown, defaulting to 1000 [ 1132.467812][T11150] __nla_validate_parse: 5 callbacks suppressed [ 1132.467832][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10060'. [ 1132.598416][T10985] ip6_vti0 speed is unknown, defaulting to 1000 [ 1132.692242][T11159] netem: change failed [ 1132.766472][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10066'. [ 1132.842641][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10066'. [ 1133.192231][T11199] delete_channel: no stack [ 1133.304001][T11185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.311822][T11185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.328524][T11204] netlink: 'syz.1.10075': attribute type 3 has an invalid length. [ 1133.576353][T11185] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1133.601236][T10985] ip6_vti0 speed is unknown, defaulting to 1000 [ 1133.616385][T11200] dvmrp0: entered allmulticast mode [ 1133.888199][T11219] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1133.908610][T11219] bond5: (slave lo): Enslaving as an active interface with an up link [ 1133.917630][T11219] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1134.119215][T11233] netlink: 'syz.0.10082': attribute type 1 has an invalid length. [ 1134.137522][T11233] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10082'. [ 1134.282635][T10985] ip6_vti0 speed is unknown, defaulting to 1000 [ 1134.450195][T11241] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1134.472681][T11241] bond6 (unregistering): Released all slaves [ 1134.775415][T11245] ip6_vti0 speed is unknown, defaulting to 1000 [ 1134.899853][T11249] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1134.961054][T11249] openvswitch: netlink: IP tunnel TTL not specified. [ 1135.569289][T10985] ip6_vti0 speed is unknown, defaulting to 1000 [ 1135.743453][T11279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10093'. [ 1135.887691][T11282] openvswitch: netlink: IP tunnel dst address not specified [ 1136.132632][T10985] ip6_vti0 speed is unknown, defaulting to 1000 [ 1136.197152][T11296] netlink: 'syz.3.10099': attribute type 1 has an invalid length. [ 1136.215653][T11296] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10099'. [ 1136.228115][T11296] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10099'. [ 1136.472415][T11311] netlink: 'syz.4.10103': attribute type 3 has an invalid length. [ 1136.871259][T11330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1137.606388][T11379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10118'. [ 1137.839807][T11384] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10121'. [ 1137.881583][T11384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10121'. [ 1137.900759][T11391] netlink: 412 bytes leftover after parsing attributes in process `syz.4.10122'. [ 1137.933361][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10121'. [ 1137.987433][T11384] bond0: (slave wlan1): Releasing backup interface [ 1138.019389][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10125'. [ 1138.048528][T11391] geneve2: entered promiscuous mode [ 1138.110849][T11396] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.139501][ T7885] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 56081 - 0 [ 1138.164616][ T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 56081 - 0 [ 1138.183665][ T12] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 56081 - 0 [ 1138.318109][T11364] lec:lec_atm_close: lec0: Shut down! [ 1138.369244][T11416] netlink: 'syz.0.10131': attribute type 16 has an invalid length. [ 1138.377433][T11415] netlink: 'syz.0.10131': attribute type 16 has an invalid length. [ 1138.385627][T11416] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10131'. [ 1138.394887][T11415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10131'. [ 1138.407492][T11313] Bluetooth: hci4: command 0x0405 tx timeout [ 1138.416345][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10131'. [ 1138.430170][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10131'. [ 1138.575495][ T5143] Bluetooth: hci5: command 0x0406 tx timeout [ 1138.764740][ T7885] syzkaller0: tun_net_xmit 76 [ 1138.773346][ T7885] syzkaller0: tun_net_xmit 48 [ 1138.774641][T11433] syzkaller0: create flow: hash 1795286251 index 1 [ 1138.790014][ T5943] syzkaller0: tun_net_xmit 76 [ 1138.845975][T11433] syzkaller0: delete flow: hash 1795286251 index 1 [ 1140.813182][T11449] ip6gre0: entered allmulticast mode [ 1141.047527][T11467] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1141.072155][T11467] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1141.090259][T11467] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1141.151886][T11396] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.179304][T11396] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 56081 - 0 [ 1141.247634][T11396] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.258457][T11396] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 56081 - 0 [ 1141.308224][T11396] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.319930][T11396] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 56081 - 0 [ 1141.431417][ T7885] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 56081 - 0 [ 1141.443140][ T7885] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1141.463018][ T7885] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 56081 - 0 [ 1141.471856][ T7885] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1141.492255][ T8331] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 56081 - 0 [ 1141.502863][ T8331] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1141.531801][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 56081 - 0 [ 1141.540816][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1141.775717][T31850] IPVS: starting estimator thread 0... [ 1141.870857][T11502] IPVS: using max 27 ests per chain, 64800 per kthread [ 1142.031692][T11515] netlink: 'syz.2.10159': attribute type 13 has an invalid length. [ 1142.040527][T11515] syz_tun: refused to change device tx_queue_len [ 1143.692439][T10418] Bluetooth: hci3: command 0x0406 tx timeout [ 1143.999382][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5690 ms [ 1144.007492][ C0] lec:lec_tx_timeout: lec0 [ 1144.012694][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1144.138501][T11474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1144.405592][T11534] netlink: 'syz.2.10165': attribute type 1 has an invalid length. [ 1144.591521][T11542] pimreg: entered allmulticast mode [ 1144.641200][T11547] __nla_validate_parse: 10 callbacks suppressed [ 1144.641223][T11547] netlink: 277 bytes leftover after parsing attributes in process `syz.2.10171'. [ 1144.718380][T11547] netlink: 'syz.2.10171': attribute type 1 has an invalid length. [ 1144.799731][T10418] Bluetooth: hci4: link tx timeout [ 1144.806524][T10418] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1144.917804][T11562] netlink: 'syz.0.10176': attribute type 3 has an invalid length. [ 1146.885606][ T5143] Bluetooth: hci4: command 0x0405 tx timeout [ 1146.937631][T11547] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1147.138114][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10183'. [ 1147.236797][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10183'. [ 1147.282040][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10186'. [ 1147.608500][T11625] IPv6: sit4: Disabled Multicast RS [ 1147.635891][T11625] sit4: entered allmulticast mode [ 1147.900559][T11636] ip6_vti0 speed is unknown, defaulting to 1000 [ 1147.917122][T11645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10200'. [ 1147.937614][T11645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10200'. [ 1147.951778][T11645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10200'. [ 1147.964342][T11645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10200'. [ 1147.976320][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10198'. [ 1148.233308][T11650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1148.403229][T11669] sctp: [Deprecated]: syz.3.10206 (pid 11669) Use of int in max_burst socket option. [ 1148.403229][T11669] Use struct sctp_assoc_value instead [ 1148.445986][T11670] sctp: [Deprecated]: syz.3.10206 (pid 11670) Use of int in max_burst socket option. [ 1148.445986][T11670] Use struct sctp_assoc_value instead [ 1148.499551][T11629] ip6_vti0 speed is unknown, defaulting to 1000 [ 1148.727703][T11683] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10211'. [ 1148.808797][T11684] tipc: Enabling not permitted [ 1148.828861][T11684] tipc: Enabling of bearer rejected, failed to enable media [ 1149.039186][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1149.047304][ C0] lec:lec_tx_timeout: lec0 [ 1149.943773][T11712] __nla_validate_parse: 4 callbacks suppressed [ 1149.943797][T11712] netlink: 212 bytes leftover after parsing attributes in process `syz.1.10219'. [ 1151.257800][T11702] vlan1: entered allmulticast mode [ 1151.292272][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1151.306407][T11705] bond_slave_0: left allmulticast mode [ 1151.325253][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1151.335160][T11705] bond_slave_1: left allmulticast mode [ 1151.346367][T11705] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1151.356044][T11705] mac80211_hwsim hwsim98 wlan1: left allmulticast mode [ 1151.366588][T11705] bond0 (unregistering): Released all slaves [ 1151.424243][T11704] ip6_vti0 speed is unknown, defaulting to 1000 [ 1151.714906][T11732] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10225'. [ 1151.765668][T11732] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10225'. [ 1177.445465][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1177.452423][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1183.039126][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 1183.047169][ C0] lec:lec_tx_timeout: lec0 [ 1206.745928][T13875] lec:lec_start_xmit: lec0:No lecd attached [ 1211.999059][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 1212.007137][ C0] lec:lec_tx_timeout: lec0 [ 1218.774932][T11769] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10232'. [ 1218.882994][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10232'. [ 1218.960114][T11769] team1: entered promiscuous mode [ 1218.965326][T11769] team1: entered allmulticast mode [ 1218.971165][T11772] netlink: 'syz.3.10235': attribute type 25 has an invalid length. [ 1218.983423][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10235'. [ 1219.117537][T11784] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10238'. [ 1219.881715][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10251'. [ 1220.008847][T11837] netlink: 'syz.4.10254': attribute type 62 has an invalid length. [ 1220.021824][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10253'. [ 1220.092545][T11834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1220.281631][T11855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1220.547280][T11865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1220.700385][T11880] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1220.882876][T11890] sctp: [Deprecated]: syz.1.10272 (pid 11890) Use of int in max_burst socket option. [ 1220.882876][T11890] Use struct sctp_assoc_value instead [ 1221.298595][T11893] delete_channel: no stack [ 1222.006518][T11904] netlink: 'syz.3.10274': attribute type 10 has an invalid length. [ 1223.091986][T11904] bridge_slave_1: left allmulticast mode [ 1223.097791][T11904] bridge_slave_1: left promiscuous mode [ 1223.129501][T11904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.161086][T11911] netlink: 248 bytes leftover after parsing attributes in process `syz.2.10275'. [ 1223.223669][T11915] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 1223.688888][T11948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10286'. [ 1223.774069][T11957] netlink: 168 bytes leftover after parsing attributes in process `syz.3.10289'. [ 1224.014529][T11969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10290'. [ 1224.297191][T11950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.304668][T11950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.725630][T11950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1224.791437][T11950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1225.514517][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 56081 - 0 [ 1225.542308][ T12] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1225.571631][T12002] netlink: 'syz.0.10295': attribute type 83 has an invalid length. [ 1225.646607][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 56081 - 0 [ 1225.681772][ T12] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1225.707052][T12008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10294'. [ 1225.716817][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 56081 - 0 [ 1225.778874][ T12] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1225.812819][T12022] netlink: 'syz.4.10294': attribute type 10 has an invalid length. [ 1225.869631][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 56081 - 0 [ 1225.878498][ T12] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1225.907717][T12022] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1226.019765][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10300'. [ 1226.031649][T12027] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1226.091754][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10301'. [ 1226.164341][T12027] ip6gre1: entered allmulticast mode [ 1226.178798][T12029] geneve3: entered promiscuous mode [ 1226.268809][T12038] netlink: 'syz.2.10303': attribute type 16 has an invalid length. [ 1226.277631][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10303'. [ 1226.390469][T12042] delete_channel: no stack [ 1226.422946][T12042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10304'. [ 1226.474003][T12046] netlink: 11 bytes leftover after parsing attributes in process `syz.2.10306'. [ 1226.505298][T12046] netlink: 11 bytes leftover after parsing attributes in process `syz.2.10306'. [ 1226.640487][T12054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10308'. [ 1226.720792][T12058] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.10309'. [ 1227.311104][T12085] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1227.508072][T12095] netlink: 'syz.1.10320': attribute type 2 has an invalid length. [ 1227.550507][T12095] netlink: 'syz.1.10320': attribute type 2 has an invalid length. [ 1227.613570][T12097] ip6_vti0 speed is unknown, defaulting to 1000 [ 1228.296791][T12128] syzkaller0: entered promiscuous mode [ 1228.317511][T12128] syzkaller0: entered allmulticast mode [ 1228.395808][T12144] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 1229.547260][T12213] __nla_validate_parse: 3 callbacks suppressed [ 1229.547281][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10353'. [ 1229.578793][T12213] Bluetooth: MGMT ver 1.23 [ 1229.584921][T12213] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1229.770738][T12223] netlink: 'syz.2.10357': attribute type 13 has an invalid length. [ 1229.805505][T12223] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1229.819978][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10359'. [ 1229.847944][T12223] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1229.885570][T12229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10359'. [ 1229.904451][T12223] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1229.942817][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10359'. [ 1230.047327][T12241] syzkaller0: entered promiscuous mode [ 1230.065521][T12241] syzkaller0: entered allmulticast mode [ 1230.073657][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10361'. [ 1230.125881][T12249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10364'. [ 1230.138189][T12249] erspan0: entered promiscuous mode [ 1230.172686][T12241] netlink: 'syz.4.10362': attribute type 11 has an invalid length. [ 1230.190778][T12241] netlink: 'syz.4.10362': attribute type 4 has an invalid length. [ 1230.205688][T12241] netlink: 'syz.4.10362': attribute type 5 has an invalid length. [ 1230.223591][T12241] netlink: 'syz.4.10362': attribute type 6 has an invalid length. [ 1230.239281][T12241] netlink: 199748 bytes leftover after parsing attributes in process `syz.4.10362'. [ 1230.316070][T12258] syzkaller0: entered promiscuous mode [ 1230.322593][T12258] syzkaller0: entered allmulticast mode [ 1230.481467][T12265] delete_channel: no stack [ 1230.748409][T12283] bond0: Unable to set down delay as MII monitoring is disabled [ 1230.758414][T12283] bond0 (unregistering): Released all slaves [ 1230.785907][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10375'. [ 1230.796719][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10375'. [ 1230.870993][T12278] syzkaller0: entered promiscuous mode [ 1230.876540][T12278] syzkaller0: entered allmulticast mode [ 1230.885483][T12278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10372'. [ 1230.935862][T12292] netlink: 'syz.3.10377': attribute type 1 has an invalid length. [ 1231.053338][T12290] netlink: 'syz.0.10376': attribute type 10 has an invalid length. [ 1231.427071][T12316] ip6_vti0 speed is unknown, defaulting to 1000 [ 1231.617000][T12339] netlink: 'syz.1.10391': attribute type 11 has an invalid length. [ 1231.896380][T12355] netlink: 'syz.2.10394': attribute type 9 has an invalid length. [ 1232.847624][T12389] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1232.966856][T12397] netlink: 'syz.0.10409': attribute type 10 has an invalid length. [ 1233.084356][T12397] team0: Port device vxcan1 added [ 1235.591446][T12439] bridge0: entered promiscuous mode [ 1235.597207][T12439] bridge0: entered allmulticast mode [ 1235.787479][T12459] __nla_validate_parse: 12 callbacks suppressed [ 1235.787503][T12459] netlink: 276 bytes leftover after parsing attributes in process `syz.4.10425'. [ 1235.828012][T12454] netlink: 'syz.2.10424': attribute type 4 has an invalid length. [ 1235.841025][T12458] netem: change failed [ 1235.859468][T12454] netlink: 'syz.2.10424': attribute type 4 has an invalid length. [ 1235.953422][T12467] nbd: illegal input index 2958377 [ 1236.113041][T12475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10431'. [ 1236.143026][T12475] openvswitch: netlink: Flow actions attr not present in new flow. [ 1236.168776][T12475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10431'. [ 1236.209861][T12475] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10431'. [ 1236.230842][ T12] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1236.517324][ T12] bond1 (unregistering): Released all slaves [ 1236.537715][ T12] bond0 (unregistering): Released all slaves [ 1236.560317][ T12] bond2 (unregistering): Released all slaves [ 1236.587889][ T12] bond3 (unregistering): Released all slaves [ 1236.617312][ T12] bond4 (unregistering): Released all slaves [ 1236.652976][ T12] bond5 (unregistering): Released all slaves [ 1236.677453][ T12] bond6 (unregistering): Released all slaves [ 1236.702304][T12454] netlink: 'syz.2.10424': attribute type 4 has an invalid length. [ 1236.746812][T12488] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10435'. [ 1236.855937][ T12] 9: left promiscuous mode [ 1236.867537][T12488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1236.972099][ T12] : left promiscuous mode [ 1237.035973][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10438'. [ 1237.086470][ T12] tipc: Left network mode [ 1237.574500][T12530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10447'. [ 1237.681290][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10447'. [ 1237.719749][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10447'. [ 1237.947120][T12547] netlink: 'syz.3.10452': attribute type 29 has an invalid length. [ 1237.963360][T12551] netlink: 'syz.3.10452': attribute type 29 has an invalid length. [ 1238.089423][T12556] openvswitch: netlink: Tunnel attr 171 out of range max 16 [ 1238.314635][T12569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10458'. [ 1238.567103][T12585] netlink: 'syz.3.10463': attribute type 15 has an invalid length. [ 1238.626031][T12585] netlink: 'syz.3.10463': attribute type 15 has an invalid length. [ 1238.634736][ T7893] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 1238.661216][ T7893] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 1238.704754][ T7893] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 1238.788099][T12597] netlink: Unknown conntrack attr (0) [ 1238.828519][ T7893] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 1238.889767][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1238.896158][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1239.107615][T12608] netlink: 'syz.0.10468': attribute type 1 has an invalid length. [ 1239.134316][ T12] hsr_slave_0: left promiscuous mode [ 1239.165297][ T12] hsr_slave_1: left promiscuous mode [ 1239.814287][T12613] gretap2: entered promiscuous mode [ 1239.827178][T12613] bond6: (slave gretap2): making interface the new active one [ 1239.836467][T12613] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 1239.861573][T12617] macvlan2: entered promiscuous mode [ 1239.867003][T12617] macvlan2: entered allmulticast mode [ 1239.874544][T12617] bond6: entered promiscuous mode [ 1239.881391][T12617] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1239.891275][T12617] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1239.908028][T12617] bond6: left promiscuous mode [ 1240.119473][T12654] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1240.156483][ T12] IPVS: stop unused estimator thread 0... [ 1240.886031][T12690] syzkaller0: entered promiscuous mode [ 1240.891722][T12690] syzkaller0: entered allmulticast mode [ 1240.910063][T12690] 0: reclassify loop, rule prio 0, protocol 800 [ 1241.128687][T12699] __nla_validate_parse: 10 callbacks suppressed [ 1241.128711][T12699] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10485'. [ 1241.157181][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10485'. [ 1241.193997][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10487'. [ 1241.292151][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10488'. [ 1241.316383][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10488'. [ 1241.372818][T12720] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10490'. [ 1241.404371][T12722] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10492'. [ 1241.603115][T12734] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10495'. [ 1241.628518][T12734] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10495'. [ 1241.723001][T12743] erspan0: entered promiscuous mode [ 1241.728286][T12743] erspan0: entered allmulticast mode [ 1241.822639][T12750] netlink: 'syz.4.10498': attribute type 21 has an invalid length. [ 1241.851881][T12751] netlink: 'syz.4.10498': attribute type 21 has an invalid length. [ 1242.144881][T12760] syzkaller0: entered promiscuous mode [ 1242.169154][T12760] syzkaller0: entered allmulticast mode [ 1242.208626][T12772] netlink: 'syz.3.10504': attribute type 9 has an invalid length. [ 1242.216763][T12765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10503'. [ 1242.239206][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 1242.247131][T12654] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1242.253721][T12654] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1243.101464][T12654] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1243.107623][T12654] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1244.001733][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 1244.010078][ C0] lec:lec_tx_timeout: lec0 [ 1244.464671][T12789] tipc: Enabled bearer , priority 0 [ 1244.587953][T12654] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1244.604869][T12654] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1244.614542][T12789] tipc: Disabling bearer [ 1244.774143][T12654] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1244.797007][T12654] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1244.915550][T12654] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1244.949322][T12654] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1245.416305][T12846] netlink: 'syz.4.10518': attribute type 1 has an invalid length. [ 1245.647391][T12855] netlink: 'syz.0.10521': attribute type 3 has an invalid length. [ 1245.683122][T12855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1245.970904][T12870] openvswitch: netlink: IP tunnel dst address not specified [ 1246.168025][T12878] __nla_validate_parse: 6 callbacks suppressed [ 1246.168047][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10528'. [ 1246.185425][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10528'. [ 1246.280513][T12891] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10532'. [ 1246.537715][T12906] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1246.603556][T12909] geneve2: entered promiscuous mode [ 1246.629449][T12909] geneve2: entered allmulticast mode [ 1246.800746][T12924] netlink: 'syz.2.10541': attribute type 11 has an invalid length. [ 1246.821704][T12924] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10541'. [ 1246.838144][T12904] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1246.911488][T12928] batadv_slave_1: default FDB implementation only supports local addresses [ 1247.082422][T12938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10544'. [ 1247.533923][T12962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10549'. [ 1248.744882][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10564'. [ 1248.927533][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10566'. [ 1249.060616][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10569'. [ 1249.080333][T13047] : entered promiscuous mode [ 1249.110339][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10568'. [ 1249.201290][T13051] team1: entered promiscuous mode [ 1249.212910][T13051] team1: entered allmulticast mode [ 1249.385787][T13065] netlink: 'syz.4.10570': attribute type 10 has an invalid length. [ 1249.402927][T13067] netlink: 'syz.1.10573': attribute type 33 has an invalid length. [ 1249.508774][T13076] netlink: 'syz.3.10574': attribute type 1 has an invalid length. [ 1249.806754][ T8331] dvmrp0 (unregistering): left allmulticast mode [ 1249.838321][ T8331] bond10 (unregistering): (slave geneve4): Releasing active interface [ 1250.295255][ T8331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.307205][ T8331] bond0 (unregistering): Released all slaves [ 1250.321319][ T8331] bond1 (unregistering): Released all slaves [ 1250.348548][ T8331] bond2 (unregistering): (slave C): Releasing backup interface [ 1250.371176][ T8331] bond2 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 1250.385181][ T8331] bond2 (unregistering): Released all slaves [ 1250.404610][ T8331] bond3 (unregistering): Released all slaves [ 1250.425028][ T8331] bond4 (unregistering): Released all slaves [ 1250.447854][ T8331] bond5 (unregistering): Released all slaves [ 1250.480878][ T8331] bond6 (unregistering): Released all slaves [ 1250.499464][ T8331] bond7 (unregistering): Released all slaves [ 1250.518084][ T8331] bond8 (unregistering): Released all slaves [ 1250.547285][ T8331] bond9 (unregistering): Released all slaves [ 1250.566196][ T8331] bond10 (unregistering): Released all slaves [ 1250.712150][T13065] team0: Port device dummy0 added [ 1250.898184][ T8331] tipc: Left network mode [ 1251.383566][T13133] bond0 (unregistering): Released all slaves [ 1251.474537][T13144] veth0_to_bridge: entered promiscuous mode [ 1251.493511][T13139] __nla_validate_parse: 5 callbacks suppressed [ 1251.493533][T13139] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10582'. [ 1251.784595][T13138] veth0_to_bridge: left promiscuous mode [ 1251.997868][T13172] 8021q: VLANs not supported on ip_vti0 [ 1252.335809][T13185] tipc: Enabling of bearer rejected, failed to enable media [ 1252.388705][T13185] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1252.579666][T13202] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1252.734460][T13209] netlink: 'syz.2.10598': attribute type 10 has an invalid length. [ 1252.914686][T13209] team0: Port device dummy0 added [ 1252.968674][T13212] tipc: Started in network mode [ 1252.987808][T13212] tipc: Node identity 2eaeab43dcc7, cluster identity 4711 [ 1253.021598][T13212] tipc: Enabled bearer , priority 0 [ 1253.043963][T13220] syzkaller0: entered promiscuous mode [ 1253.060277][T13220] syzkaller0: entered allmulticast mode [ 1253.234149][T13236] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10603'. [ 1253.338796][T13248] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.10604'. [ 1253.372047][T13248] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1253.546033][T13206] tipc: Resetting bearer [ 1253.646064][T13259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10606'. [ 1253.656802][T13206] tipc: Disabling bearer [ 1254.046867][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10606'. [ 1254.197471][T13282] netlink: 'syz.2.10610': attribute type 21 has an invalid length. [ 1254.373325][T13287] netlink: 'syz.1.10612': attribute type 63 has an invalid length. [ 1254.405618][T13289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10613'. [ 1254.585625][T13295] netlink: 'syz.3.10615': attribute type 9 has an invalid length. [ 1254.706784][T13305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10615'. [ 1254.820854][T13310] Bluetooth: MGMT ver 1.23 [ 1254.833543][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10615'. [ 1254.978669][T13322] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10620'. [ 1255.352325][ T8331] hsr_slave_1: left promiscuous mode [ 1255.361823][ T8331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.375049][ T8331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.394677][ T8331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.411454][ T8331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.435315][ T8331] veth1_macvtap: left promiscuous mode [ 1255.908725][ T8331] team0 (unregistering): Port device team_slave_1 removed [ 1255.953105][ T8331] team0 (unregistering): Port device team_slave_0 removed [ 1256.147818][ T8331] smc: removing net device caif0 with user defined pnetid SYZ2 [ 1256.597979][T13390] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10633'. [ 1256.683917][T13395] netlink: 'syz.2.10634': attribute type 1 has an invalid length. [ 1256.723417][T13395] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10634'. [ 1256.734418][T13395] NCSI netlink: No device for ifindex 0 [ 1256.764136][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10637'. [ 1256.798143][T13401] netlink: 'syz.1.10637': attribute type 4 has an invalid length. [ 1256.866716][T13401] netlink: 17 bytes leftover after parsing attributes in process `syz.1.10637'. [ 1256.894930][T13403] netlink: 'syz.0.10638': attribute type 21 has an invalid length. [ 1256.907847][T13403] netlink: 'syz.0.10638': attribute type 1 has an invalid length. [ 1256.945745][ T8331] IPVS: stop unused estimator thread 0... [ 1256.981476][T13406] netlink: 'syz.2.10639': attribute type 12 has an invalid length. [ 1257.090964][T13416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1257.133873][T13417] syzkaller0: entered promiscuous mode [ 1257.143062][T13417] syzkaller0: entered allmulticast mode [ 1257.164897][T13414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1257.332928][T13429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1257.675094][T13441] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10650'. [ 1257.773633][T13443] bridge0: port 1(batadv0) entered blocking state [ 1257.782578][T13443] bridge0: port 1(batadv0) entered disabled state [ 1257.790870][T13443] batadv0: entered allmulticast mode [ 1257.803186][T13443] batadv0: entered promiscuous mode [ 1258.260753][ T84] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1258.270923][ T84] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1258.476441][T13491] syzkaller0: entered promiscuous mode [ 1258.491269][T13491] syzkaller0: entered allmulticast mode [ 1258.638061][T13494] netlink: 'syz.2.10668': attribute type 1 has an invalid length. [ 1258.833311][T13504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10670'. [ 1258.854669][T13504] netem: change failed [ 1258.883941][T13504] sctp: [Deprecated]: syz.1.10670 (pid 13504) Use of int in max_burst socket option. [ 1258.883941][T13504] Use struct sctp_assoc_value instead [ 1258.926220][T13506] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10672'. [ 1258.961902][T13511] syzkaller0: entered promiscuous mode [ 1258.970833][T13511] syzkaller0: entered allmulticast mode [ 1259.062245][T13513] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10675'. [ 1259.195381][T13528] netlink: 88 bytes leftover after parsing attributes in process `syz.0.10679'. [ 1259.219384][T13528] netem: invalid attributes len -24 [ 1259.224674][T13528] netem: change failed [ 1259.352112][T13537] netlink: 'syz.1.10682': attribute type 1 has an invalid length. [ 1259.397265][T13534] netlink: 'syz.3.10681': attribute type 21 has an invalid length. [ 1259.480737][T13545] bond3: entered promiscuous mode [ 1259.486028][T13545] bond3: entered allmulticast mode [ 1259.507181][T13545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1259.520446][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10684'. [ 1259.683132][T13557] "syz.1.10690" (13557) uses obsolete ecb(arc4) skcipher [ 1259.723346][T13560] openvswitch: netlink: Flow key attr not present in new flow. [ 1260.113341][T13582] bond5: option lp_interval: invalid value (0) [ 1260.131715][T13582] bond5: option lp_interval: allowed values 1 - 2147483647 [ 1260.144388][T13582] bond5 (unregistering): Released all slaves [ 1260.381496][T13605] netlink: 'syz.0.10705': attribute type 3 has an invalid length. [ 1260.726563][T13632] nbd: must specify at least one socket [ 1260.911871][T13642] vlan2: entered allmulticast mode [ 1260.917226][T13642] mac80211_hwsim hwsim110 wlan0: entered allmulticast mode [ 1260.937244][T13640] tipc: Enabling of bearer rejected, failed to enable media [ 1261.514579][T13686] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1261.663846][T13693] tipc: Started in network mode [ 1261.688695][T13693] tipc: Node identity b6645979c51b, cluster identity 4711 [ 1261.697874][T13693] tipc: Enabled bearer , priority 0 [ 1261.729708][T13690] tipc: Disabling bearer [ 1261.810733][T13704] syzkaller1: entered promiscuous mode [ 1261.820655][T13704] syzkaller1: entered allmulticast mode [ 1261.828034][T13706] syzkaller0: entered promiscuous mode [ 1261.835861][T13703] __nla_validate_parse: 8 callbacks suppressed [ 1261.835880][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10734'. [ 1261.858097][T13706] syzkaller0: entered allmulticast mode [ 1261.884056][T13713] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 1262.280479][T13730] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10743'. [ 1262.500579][T13732] syzkaller0: entered promiscuous mode [ 1262.538456][T13732] syzkaller0: entered allmulticast mode [ 1262.573813][T13750] geneve3: entered promiscuous mode [ 1262.579304][T13750] geneve3: entered allmulticast mode [ 1262.685152][ T7888] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 1262.694380][ T7888] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 1262.739281][ T7888] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1262.771885][ T7888] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1262.826260][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10751'. [ 1262.920457][T13767] netlink: 'syz.2.10753': attribute type 10 has an invalid length. [ 1262.928625][T13767] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10753'. [ 1263.193235][T13777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10757'. [ 1263.210501][T13776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10757'. [ 1263.222994][T13777] openvswitch: netlink: Flow key attr not present in new flow. [ 1263.237246][T13776] openvswitch: netlink: Flow key attr not present in new flow. [ 1263.307108][T13779] bridge0: entered allmulticast mode [ 1263.541934][T13799] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.10763'. [ 1263.554583][T13799] openvswitch: netlink: Message has 6 unknown bytes. [ 1263.848686][T13818] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10766'. [ 1263.868252][T13818] netlink: 320 bytes leftover after parsing attributes in process `syz.4.10766'. [ 1263.937342][T13811] syzkaller0: entered promiscuous mode [ 1263.944352][T13811] syzkaller0: entered allmulticast mode [ 1263.990615][T13823] netlink: 'syz.0.10769': attribute type 16 has an invalid length. [ 1263.998812][T13823] netlink: 'syz.0.10769': attribute type 17 has an invalid length. [ 1264.637184][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10771'. [ 1266.171915][T13823] ip6gre0: left allmulticast mode [ 1266.213242][T13823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1266.243625][T13824] syzkaller1: entered promiscuous mode [ 1266.269689][T13824] syzkaller1: entered allmulticast mode [ 1266.393210][T13835] ip6_vti0 speed is unknown, defaulting to 1000 [ 1266.672047][T13862] netlink: 'syz.2.10780': attribute type 1 has an invalid length. [ 1266.695767][T13864] sctp: [Deprecated]: syz.1.10781 (pid 13864) Use of int in max_burst socket option deprecated. [ 1266.695767][T13864] Use struct sctp_assoc_value instead [ 1266.700080][T13862] netlink: 'syz.2.10780': attribute type 2 has an invalid length. [ 1266.991220][T13878] __nla_validate_parse: 6 callbacks suppressed [ 1266.991241][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10785'. [ 1267.313635][T13891] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10789'. [ 1267.430118][T13885] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.10789'. [ 1267.575390][T13900] geneve3: entered promiscuous mode [ 1267.584170][T13906] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 1267.660954][ T37] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 59635 - 0 [ 1267.670209][ T37] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 59635 - 0 [ 1267.703541][ T37] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 59635 - 0 [ 1267.742161][ T37] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 59635 - 0 [ 1267.772336][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10796'. [ 1267.801587][T13914] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10797'. [ 1267.851647][T13914] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10797'. [ 1267.951917][T13924] netlink: 'syz.0.10802': attribute type 29 has an invalid length. [ 1267.961585][T13924] netlink: 'syz.0.10802': attribute type 29 has an invalid length. [ 1267.972221][T13924] netlink: 500 bytes leftover after parsing attributes in process `syz.0.10802'. [ 1268.285597][T13942] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20000 [ 1268.432837][T13958] netlink: 'syz.3.10811': attribute type 11 has an invalid length. [ 1268.459957][T13958] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10811'. [ 1268.488098][T13958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10811'. [ 1268.503147][T13965] netlink: 'syz.4.10814': attribute type 1 has an invalid length. [ 1268.531006][T13965] netlink: 236 bytes leftover after parsing attributes in process `syz.4.10814'. [ 1268.710740][ T1150] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 1268.733645][ T1150] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 1268.750264][ T1150] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 1268.764281][ T1150] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 1268.845847][T13982] netlink: 'syz.4.10818': attribute type 1 has an invalid length. [ 1268.978232][T13996] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 1269.107219][T14005] IPv6: NLM_F_CREATE should be specified when creating new route [ 1269.491851][T14020] bond7: Removing last ns target with arp_interval on [ 1269.554063][T14020] bond8: Removing last ns target with arp_interval on [ 1269.797310][T14020] bond9: Removing last ns target with arp_interval on [ 1269.905075][T14020] bond10: Removing last ns target with arp_interval on [ 1269.933826][T14020] bond11: Removing last ns target with arp_interval on [ 1270.065421][T14020] bond12: Removing last ns target with arp_interval on [ 1270.420210][T14020] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1270.493886][T14073] syzkaller1: left promiscuous mode [ 1270.510414][T14073] syzkaller1: left allmulticast mode [ 1270.755196][T14085] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 1270.827427][T14084] netlink: 'syz.0.10839': attribute type 5 has an invalid length. [ 1270.870698][T13875] lec:lec_start_xmit: lec0:No lecd attached [ 1271.184239][T14098] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1271.815117][T14132] tipc: Enabling of bearer rejected, failed to enable media [ 1272.016269][T14139] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1272.083501][T14139] syzkaller0: entered promiscuous mode [ 1272.093813][T14139] syzkaller0: entered allmulticast mode [ 1272.110072][T14144] __nla_validate_parse: 12 callbacks suppressed [ 1272.110095][T14144] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10854'. [ 1272.409418][T14159] netlink: 'syz.4.10862': attribute type 1 has an invalid length. [ 1272.431943][T14159] netlink: 16107 bytes leftover after parsing attributes in process `syz.4.10862'. [ 1272.456738][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10863'. [ 1272.928865][T14191] netlink: 'syz.3.10872': attribute type 4 has an invalid length. [ 1273.051054][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10874'. [ 1273.485754][T14214] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1273.619581][T14215] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20001 [ 1273.959918][T14227] netlink: 'syz.0.10884': attribute type 9 has an invalid length. [ 1274.150410][T14237] nbd3: detected capacity change from 0 to 127 [ 1274.160958][ T5143] block nbd3: Receive control failed (result -32) [ 1274.172689][T14033] block nbd3: Dead connection, failed to find a fallback [ 1274.193780][T14241] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10889'. [ 1274.291023][T14249] netlink: 'syz.2.10892': attribute type 1 has an invalid length. [ 1274.299113][T14249] netlink: 232 bytes leftover after parsing attributes in process `syz.2.10892'. [ 1274.574539][T14265] netlink: 'syz.3.10897': attribute type 4 has an invalid length. [ 1274.600093][T14262] netlink: 'syz.3.10897': attribute type 4 has an invalid length. [ 1275.737664][T14343] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10916'. [ 1275.748646][T14343] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1275.759912][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10915'. [ 1275.999142][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5130 ms [ 1276.007405][ C0] lec:lec_tx_timeout: lec0 [ 1277.595825][T14332] veth0: entered promiscuous mode [ 1278.037550][T14376] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10923'. [ 1278.533108][T14407] pim6reg1: entered promiscuous mode [ 1278.538560][T14407] pim6reg1: entered allmulticast mode [ 1278.624631][T14410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.669635][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10934'. [ 1278.687554][T14410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.721652][T14413] vcan0: tx drop: invalid sa for name 0x0000000000001000 [ 1278.722022][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10935'. [ 1278.757487][T14410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.910582][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10939'. [ 1278.935617][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10938'. [ 1279.028540][T14438] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10940'. [ 1279.236315][T14455] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10942'. [ 1279.496295][T14468] netlink: 'syz.1.10947': attribute type 1 has an invalid length. [ 1279.526187][T14468] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1279.605552][T14482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10950'. [ 1279.649654][T14482] netlink: 'syz.2.10950': attribute type 29 has an invalid length. [ 1279.668523][T14486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10951'. [ 1279.785043][T14493] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10954'. [ 1280.094198][T14512] bond5: entered promiscuous mode [ 1280.100239][T14512] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1280.186362][T14512] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1280.211530][T14512] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 1280.224799][T14512] bond5: (slave sit1): Error -95 calling set_mac_address [ 1280.329615][T14523] pim6reg1: entered promiscuous mode [ 1280.335544][T14523] pim6reg1: entered allmulticast mode [ 1280.674809][T14552] netlink: 'syz.4.10967': attribute type 21 has an invalid length. [ 1280.828861][T14556] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 1281.216825][T14581] netlink: 'syz.2.10976': attribute type 1 has an invalid length. [ 1281.483747][T14598] macsec0: entered promiscuous mode [ 1281.506290][T14598] macsec0: entered allmulticast mode [ 1281.589752][T14598] veth1_macvtap: entered allmulticast mode [ 1281.595957][T14598] macsec0: left promiscuous mode [ 1281.601435][T14598] macsec0: left allmulticast mode [ 1281.606521][T14598] veth1_macvtap: left allmulticast mode [ 1282.068747][T14625] geneve3: entered promiscuous mode [ 1282.086324][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 59455 - 0 [ 1282.111318][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 59455 - 0 [ 1282.133935][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 59455 - 0 [ 1282.164839][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 59455 - 0 [ 1282.731175][T14670] syzkaller1: entered promiscuous mode [ 1282.737021][T14670] syzkaller1: entered allmulticast mode [ 1282.760424][T14671] netlink: 'syz.1.11003': attribute type 29 has an invalid length. [ 1282.790285][T14671] netlink: 'syz.1.11003': attribute type 29 has an invalid length. [ 1282.925188][T14683] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1282.928341][T14684] netem: incorrect gi model size [ 1283.116723][T14697] __nla_validate_parse: 10 callbacks suppressed [ 1283.116745][T14697] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11012'. [ 1283.152005][T14697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11012'. [ 1283.602744][T14726] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1283.682151][T14730] syzkaller0: entered promiscuous mode [ 1283.687774][T14730] syzkaller0: entered allmulticast mode [ 1283.827105][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11027'. [ 1283.853785][T14741] netlink: 'syz.2.11028': attribute type 1 has an invalid length. [ 1283.943853][T14741] gretap2: entered promiscuous mode [ 1283.957306][T14741] bond0: (slave gretap2): making interface the new active one [ 1283.966880][T14741] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 1283.996527][T14742] macvlan2: entered promiscuous mode [ 1284.002683][T14742] macvlan2: entered allmulticast mode [ 1284.009562][T14742] bond0: entered promiscuous mode [ 1284.015810][T14742] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1284.024010][T14742] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1284.042746][T14742] bond0: left promiscuous mode [ 1284.082853][T14754] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11030'. [ 1284.163868][T14762] xt_TCPMSS: Only works on TCP SYN packets [ 1284.186890][T14764] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11032'. [ 1284.629549][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11039'. [ 1284.753434][T14794] mac80211_hwsim hwsim116 syzkaller0: entered promiscuous mode [ 1284.762931][T14794] mac80211_hwsim hwsim116 syzkaller0: entered allmulticast mode [ 1284.987254][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11044'. [ 1285.015053][T14813] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11045'. [ 1285.111177][T14810] macvtap1: entered promiscuous mode [ 1285.155694][T14810] macvtap1: entered allmulticast mode [ 1285.167916][T14810] veth1_vlan: entered allmulticast mode [ 1285.244152][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11050'. [ 1285.268562][T14824] bridge_slave_0: entered promiscuous mode [ 1285.918022][T14858] sctp: [Deprecated]: syz.1.11066 (pid 14858) Use of int in max_burst socket option deprecated. [ 1285.918022][T14858] Use struct sctp_assoc_value instead [ 1286.815663][T14906] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1286.977249][T14906] bond5: (slave lo): Enslaving as an active interface with an up link [ 1287.049267][T14906] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1287.568001][T14942] netlink: 'syz.1.11092': attribute type 1 has an invalid length. [ 1287.585680][T14942] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11092'. [ 1287.761355][T14947] bond6: entered promiscuous mode [ 1287.777468][T14947] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1288.114228][T14965] syzkaller1: left promiscuous mode [ 1288.125475][T14965] syzkaller1: left allmulticast mode [ 1288.306173][T14971] __nla_validate_parse: 3 callbacks suppressed [ 1288.306194][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11102'. [ 1288.531059][T14981] netlink: 'syz.4.11104': attribute type 4 has an invalid length. [ 1289.119605][T14998] netlink: 'syz.3.11108': attribute type 1 has an invalid length. [ 1289.127495][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11108'. [ 1289.137317][T15000] openvswitch: netlink: IP tunnel dst address not specified [ 1289.147685][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11109'. [ 1289.180333][T14998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1289.424641][T15009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11113'. [ 1289.582835][T15025] netlink: 'syz.0.11117': attribute type 21 has an invalid length. [ 1289.591476][T15025] IPv6: NLM_F_CREATE should be specified when creating new route [ 1289.704064][T15034] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11116'. [ 1289.735429][T15034] netlink: 'syz.1.11116': attribute type 58 has an invalid length. [ 1289.764988][T15034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11116'. [ 1290.023703][T15050] netlink: 'syz.0.11123': attribute type 29 has an invalid length. [ 1290.052002][T15050] netlink: 'syz.0.11123': attribute type 29 has an invalid length. [ 1290.062107][T15050] netlink: 500 bytes leftover after parsing attributes in process `syz.0.11123'. [ 1290.405142][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11131'. [ 1290.501964][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11132'. [ 1290.527141][T15086] netlink: 'syz.4.11133': attribute type 1 has an invalid length. [ 1290.544095][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11132'. [ 1290.642468][T15099] SET target dimension over the limit! [ 1290.931443][T15120] bond0: entered promiscuous mode [ 1290.937939][T15120] bond0: left promiscuous mode [ 1292.171308][T15203] siw: device registration error -23 [ 1292.641398][T15242] netlink: 'syz.4.11177': attribute type 1 has an invalid length. [ 1292.717725][T15248] bond7: (slave ip6gretap1): making interface the new active one [ 1292.728577][T15248] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1292.739777][T15249] netlink: 'syz.2.11179': attribute type 7 has an invalid length. [ 1293.297116][T15283] netlink: 'syz.0.11189': attribute type 1 has an invalid length. [ 1293.323024][T15283] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1293.447344][T15297] __nla_validate_parse: 119 callbacks suppressed [ 1293.447368][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11192'. [ 1293.479982][T15301] IPVS: Unknown mcast interface: wlan1 [ 1293.532234][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11192'. [ 1293.561198][T15307] tipc: New replicast peer: 255.255.255.255 [ 1293.568527][T15307] tipc: Enabled bearer , priority 10 [ 1293.716713][T15318] sctp: [Deprecated]: syz.1.11199 (pid 15318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1293.716713][T15318] Use struct sctp_sack_info instead [ 1293.952912][T15330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11204'. [ 1294.032696][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11206'. [ 1294.071196][T15337] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11207'. [ 1294.072550][T15335] vlan2: entered allmulticast mode [ 1294.080780][T15337] xt_policy: neither incoming nor outgoing policy selected [ 1294.094250][T15335] bridge1: entered allmulticast mode [ 1294.123212][T15335] bridge1: port 1(veth5) entered blocking state [ 1294.130733][T15335] bridge1: port 1(veth5) entered disabled state [ 1294.137458][T15335] veth5: entered allmulticast mode [ 1294.145963][T15335] veth5: entered promiscuous mode [ 1294.629429][T15365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11215'. [ 1294.680174][T19053] tipc: Node number set to 2639012380 [ 1294.709393][T15366] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1294.884455][T15381] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11220'. [ 1294.937864][T15381] bond13 (unregistering): Released all slaves [ 1294.986068][T15387] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11222'. [ 1295.002392][T15389] netlink: 'syz.1.11223': attribute type 1 has an invalid length. [ 1295.072924][T15389] bond6: entered promiscuous mode [ 1295.079492][T15389] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1295.128719][T15391] bond6: (slave bridge2): making interface the new active one [ 1295.138516][T15391] bridge2: entered promiscuous mode [ 1295.148777][T15391] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 1295.175221][T15397] netlink: 'syz.3.11224': attribute type 39 has an invalid length. [ 1295.905514][T15430] vlan2: entered allmulticast mode [ 1295.915546][T15430] geneve1: entered allmulticast mode [ 1296.110833][T15439] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11236'. [ 1296.210136][T15447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1296.323337][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11241'. [ 1296.404445][T15454] bond1: entered promiscuous mode [ 1296.420954][T15454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1296.488505][T15466] bridge6: entered promiscuous mode [ 1296.498529][T15466] bond1: (slave bridge6): Enslaving as an active interface with an up link [ 1296.837743][T15476] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1296.855398][T15476] bond9 (unregistering): Released all slaves [ 1297.026204][T15492] xt_CT: No such helper "pptp" [ 1297.519793][T15523] netlink: 'syz.2.11261': attribute type 1 has an invalid length. [ 1297.744842][T15542] openvswitch: netlink: Tunnel attr 207 out of range max 16 [ 1297.875236][T15547] netlink: 'syz.4.11272': attribute type 10 has an invalid length. [ 1297.946108][T15553] syzkaller0: entered promiscuous mode [ 1297.964129][T15553] syzkaller0: entered allmulticast mode [ 1298.205303][T15568] team0 (unregistering): Port device team_slave_0 removed [ 1298.257084][T15568] team0 (unregistering): Port device team_slave_1 removed [ 1298.346467][T15575] netlink: 'syz.4.11280': attribute type 7 has an invalid length. [ 1298.607949][T15594] syzkaller0: entered promiscuous mode [ 1298.613618][T15594] syzkaller0: entered allmulticast mode [ 1298.870913][T15611] __nla_validate_parse: 13 callbacks suppressed [ 1298.870936][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11292'. [ 1299.194245][T15627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11299'. [ 1299.205310][T15627] ipt_rpfilter: unknown options [ 1299.870255][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11306'. [ 1299.965158][T15653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11306'. [ 1300.004349][T15647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.245568][T15666] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11310'. [ 1300.327938][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1300.334427][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1300.421102][T15679] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11314'. [ 1300.433214][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11314'. [ 1300.636089][T15695] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11319'. [ 1300.671874][T15699] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11321'. [ 1300.772384][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11322'. [ 1300.824621][T15707] netlink: zone id is out of range [ 1300.842503][T15707] netlink: zone id is out of range [ 1300.847692][T15707] netlink: zone id is out of range [ 1300.854675][T15705] netlink: 'syz.3.11322': attribute type 1 has an invalid length. [ 1300.866024][T15707] netlink: zone id is out of range [ 1300.873200][T15711] syzkaller1: entered promiscuous mode [ 1300.880186][T15707] netlink: zone id is out of range [ 1300.884903][T15711] syzkaller1: entered allmulticast mode [ 1300.896849][T15707] netlink: zone id is out of range [ 1300.916085][T15707] netlink: zone id is out of range [ 1300.926244][T15707] netlink: zone id is out of range [ 1300.939607][T15704] vlan1: entered allmulticast mode [ 1300.944885][T15704] bridge5: entered allmulticast mode [ 1300.955592][T15718] netlink: 'syz.2.11323': attribute type 3 has an invalid length. [ 1301.152048][T15726] vlan2: entered allmulticast mode [ 1301.157896][T15726] gretap0: entered allmulticast mode [ 1301.212107][T15730] geneve4: entered promiscuous mode [ 1301.217545][T15730] geneve4: entered allmulticast mode [ 1301.350609][T15746] netlink: 'syz.1.11331': attribute type 8 has an invalid length. [ 1301.662294][T15764] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1301.680789][T15764] team0: Device batadv1 is of different type [ 1301.772126][T15772] netlink: 'syz.3.11339': attribute type 2 has an invalid length. [ 1302.191087][T15795] syzkaller0: entered promiscuous mode [ 1302.199335][T15795] syzkaller0: entered allmulticast mode [ 1302.218774][T15795] gtp1: entered promiscuous mode [ 1302.224096][T15795] gtp1: entered allmulticast mode [ 1302.475956][T15814] netlink: 'syz.2.11352': attribute type 1 has an invalid length. [ 1302.484680][T15814] netlink: 'syz.2.11352': attribute type 1 has an invalid length. [ 1302.563655][T15816] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1302.768564][T15834] netlink: 'syz.0.11359': attribute type 3 has an invalid length. [ 1303.252654][T15859] netlink: 'syz.3.11367': attribute type 39 has an invalid length. [ 1303.637343][T15882] netlink: 'syz.3.11372': attribute type 2 has an invalid length. [ 1303.651756][T15882] netlink: 'syz.3.11372': attribute type 5 has an invalid length. [ 1303.674250][T15880] ip6_vti0 speed is unknown, defaulting to 1000 [ 1303.717552][T15876] net_ratelimit: 39 callbacks suppressed [ 1303.717575][T15876] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1303.731071][T15876] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1303.738800][T15876] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1303.746611][T15876] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1303.754360][T15876] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1303.762180][T15876] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1303.769940][T15876] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1303.777640][T15876] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1303.785376][T15876] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1303.793191][T15876] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1303.882000][T15897] team0: No ports can be present during mode change [ 1304.073783][T15906] netlink: 'syz.1.11373': attribute type 12 has an invalid length. [ 1304.100263][T15906] netlink: 'syz.1.11373': attribute type 29 has an invalid length. [ 1304.118825][T15906] __nla_validate_parse: 19 callbacks suppressed [ 1304.118849][T15906] netlink: 148 bytes leftover after parsing attributes in process `syz.1.11373'. [ 1304.187719][T15906] netlink: 59 bytes leftover after parsing attributes in process `syz.1.11373'. [ 1304.585838][T15918] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11381'. [ 1304.981172][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11387'. [ 1305.029185][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11388'. [ 1305.067938][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11388'. [ 1305.098654][T15939] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11388'. [ 1305.464539][T15960] sctp: [Deprecated]: syz.1.11395 (pid 15960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1305.464539][T15960] Use struct sctp_sack_info instead [ 1305.824984][T15986] netlink: 'syz.2.11402': attribute type 1 has an invalid length. [ 1305.828852][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11406'. [ 1305.875057][T15990] pim6reg: entered allmulticast mode [ 1305.883272][T15990] pim6reg: left allmulticast mode [ 1305.914682][T15992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11407'. [ 1305.999616][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 1306.007806][ C0] lec:lec_tx_timeout: lec0 [ 1306.082958][T16005] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11411'. [ 1306.265950][T16018] syzkaller0: entered promiscuous mode [ 1306.271781][T16018] syzkaller0: entered allmulticast mode [ 1333.947970][T13875] lec:lec_start_xmit: lec0:No lecd attached [ 1335.309291][ T5192] udevd[5192]: worker [14033] /devices/virtual/block/nbd3 is taking a long time [ 1339.039098][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5090 ms [ 1339.047159][ C0] lec:lec_tx_timeout: lec0 [ 1361.765330][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1361.771855][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1363.280508][T16055] netlink: 'syz.0.11425': attribute type 2 has an invalid length. [ 1363.470195][T16064] syzkaller0: entered promiscuous mode [ 1363.476477][T16064] syzkaller0: entered allmulticast mode [ 1363.638056][T16077] netlink: 'syz.0.11431': attribute type 1 has an invalid length. [ 1363.696738][T16071] syzkaller0: entered promiscuous mode [ 1363.710624][T16071] syzkaller0: entered allmulticast mode [ 1367.039168][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms [ 1367.047290][ C0] lec:lec_tx_timeout: lec0 [ 1367.962101][T16097] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1397.830501][T13875] lec:lec_start_xmit: lec0:No lecd attached [ 1403.038953][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 1403.047228][ C0] lec:lec_tx_timeout: lec0 [ 1422.916874][T16117] __nla_validate_parse: 1 callbacks suppressed [ 1422.916894][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11442'. [ 1422.948577][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11442'. [ 1422.990149][ T7893] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.000561][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11442'. [ 1423.014645][ T7893] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.024226][ T7893] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.035395][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11442'. [ 1423.046542][ T7893] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.162764][T16132] netlink: 'syz.1.11445': attribute type 2 has an invalid length. [ 1423.208178][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1423.216834][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1423.242482][T16130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11447'. [ 1423.421701][T16149] net_ratelimit: 3257 callbacks suppressed [ 1423.421724][T16149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1423.445027][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11451'. [ 1423.535281][T16154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11451'. [ 1423.559634][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11449'. [ 1423.755707][T16157] bond13: option all_slaves_active: invalid value (222) [ 1423.787702][T16157] bond13 (unregistering): Released all slaves [ 1424.004005][T16172] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.11457'. [ 1424.093678][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11459'. [ 1424.250068][T16186] netlink: 'syz.0.11462': attribute type 1 has an invalid length. [ 1424.579737][T16210] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1424.871356][T16231] netlink: 'syz.2.11474': attribute type 2 has an invalid length. [ 1424.940307][T16237] netlink: 'syz.3.11475': attribute type 29 has an invalid length. [ 1424.970734][T16237] netlink: 'syz.3.11475': attribute type 29 has an invalid length. [ 1425.804603][T16297] IPv6: sit5: Disabled Multicast RS [ 1425.860530][T16304] netlink: 'syz.1.11497': attribute type 3 has an invalid length. [ 1425.868707][T16304] netlink: 'syz.1.11497': attribute type 3 has an invalid length. [ 1425.995334][T16312] netlink: 'syz.3.11499': attribute type 1 has an invalid length. [ 1426.113483][T16319] netlink: 'syz.0.11502': attribute type 11 has an invalid length. [ 1426.175894][T16315] gretap1: entered promiscuous mode [ 1426.195834][T16315] bond0: (slave gretap1): making interface the new active one [ 1426.207247][T16315] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1426.245559][T16322] macvlan3: entered promiscuous mode [ 1426.265785][T16322] macvlan3: entered allmulticast mode [ 1426.275126][T16322] bond0: entered promiscuous mode [ 1426.282708][T16322] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1426.293338][T16331] "syz.1.11504" (16331) uses obsolete ecb(arc4) skcipher [ 1426.307265][T16322] bond0: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1426.327870][T16322] bond0: left promiscuous mode [ 1426.902688][T16373] netlink: 'syz.2.11518': attribute type 83 has an invalid length. [ 1427.107007][T16380] erspan2: entered allmulticast mode [ 1427.328605][T16395] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1427.401103][T16398] ip6_vti0 speed is unknown, defaulting to 1000 [ 1427.652407][T16410] xt_hashlimit: size too large, truncated to 1048576 [ 1427.729799][T16415] xt_hashlimit: size too large, truncated to 1048576 [ 1428.030372][T16427] __nla_validate_parse: 21 callbacks suppressed [ 1428.030393][T16427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11533'. [ 1428.477134][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11539'. [ 1429.038930][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 1429.047031][ C0] lec:lec_tx_timeout: lec0 [ 1429.076246][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11546'. [ 1429.105755][T16469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11546'. [ 1429.192103][T16474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11548'. [ 1429.267462][T16474] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11548'. [ 1429.408162][T16481] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11550'. [ 1429.489059][T16487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1429.786462][T16500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11558'. [ 1429.795888][T16500] nbd: must specify a device to reconfigure [ 1430.208063][T16534] netlink: 368 bytes leftover after parsing attributes in process `syz.1.11565'. [ 1430.271706][T16536] netlink: 'syz.0.11566': attribute type 1 has an invalid length. [ 1430.295572][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11564'. [ 1430.413289][T16541] bond13: (slave bridge5): making interface the new active one [ 1430.422500][T16541] bond13: (slave bridge5): Enslaving as an active interface with an up link [ 1430.460002][T16536] bond13: (slave gretap4): Enslaving as an active interface with an up link [ 1430.510759][T16536] macvlan3: entered promiscuous mode [ 1430.516135][T16536] macvlan3: entered allmulticast mode [ 1430.542525][T16536] bond13: entered promiscuous mode [ 1430.547859][T16536] bridge5: entered promiscuous mode [ 1430.557997][T16536] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1430.567172][T16536] bond13: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1430.585007][T16536] bond13: left promiscuous mode [ 1430.590773][T16536] bridge5: left promiscuous mode [ 1430.601831][T16549] netlink: 'syz.4.11571': attribute type 58 has an invalid length. [ 1430.654201][T16550] tipc: Enabled bearer , priority 0 [ 1430.662263][T16547] syzkaller0: entered promiscuous mode [ 1430.667779][T16547] syzkaller0: entered allmulticast mode [ 1430.685492][T16546] tipc: Resetting bearer [ 1430.724605][T16546] tipc: Disabling bearer [ 1430.825472][T16561] sctp: [Deprecated]: syz.4.11575 (pid 16561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1430.825472][T16561] Use struct sctp_sack_info instead [ 1430.967786][T16566] sctp: [Deprecated]: syz.1.11577 (pid 16566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1430.967786][T16566] Use struct sctp_sack_info instead [ 1431.048270][T16568] netem: incorrect gi model size [ 1431.062835][T16568] netem: change failed [ 1431.074656][T16573] netlink: 'syz.3.11580': attribute type 10 has an invalid length. [ 1431.136401][T16575] netlink: 'syz.0.11578': attribute type 13 has an invalid length. [ 1431.145021][T16575] netlink: 'syz.0.11578': attribute type 17 has an invalid length. [ 1431.347793][T16590] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1431.367616][T16590] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1431.383328][T16575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1431.413757][T16590] openvswitch: netlink: Flow actions attr not present in new flow. [ 1431.429138][T16590] netlink: 'syz.4.11584': attribute type 29 has an invalid length. [ 1431.437999][T16590] netlink: 'syz.4.11584': attribute type 29 has an invalid length. [ 1431.838045][T16617] bond0: entered promiscuous mode [ 1431.843838][T16617] bond_slave_0: entered promiscuous mode [ 1431.850188][T16617] bond_slave_1: entered promiscuous mode [ 1431.856242][T16617] bridge0: entered promiscuous mode [ 1431.863454][T16617] mac80211_hwsim hwsim116 wlan1: entered promiscuous mode [ 1431.892266][T16617] bond0: left promiscuous mode [ 1431.900727][T16617] bond_slave_0: left promiscuous mode [ 1431.910168][T16617] bond_slave_1: left promiscuous mode [ 1431.915973][T16617] bridge0: left promiscuous mode [ 1431.922047][T16617] mac80211_hwsim hwsim116 wlan1: left promiscuous mode [ 1431.939069][T16608] syzkaller1: entered promiscuous mode [ 1431.945148][T16608] syzkaller1: entered allmulticast mode [ 1432.242227][T16634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1432.524983][T16652] netlink: 'syz.2.11605': attribute type 29 has an invalid length. [ 1432.556611][T16652] netlink: 'syz.2.11605': attribute type 29 has an invalid length. [ 1432.845139][T16668] netlink: 'syz.4.11611': attribute type 1 has an invalid length. [ 1433.195525][T16674] geneve4: entered promiscuous mode [ 1433.202177][T16674] geneve4: entered allmulticast mode [ 1433.209745][T16675] __nla_validate_parse: 13 callbacks suppressed [ 1433.209766][T16675] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11611'. [ 1433.226349][T16675] tipc: Started in network mode [ 1433.233056][T16675] tipc: Node identity ffffffff, cluster identity 5 [ 1433.240448][T16675] tipc: Node number set to 4294967295 [ 1433.246310][T16675] tipc: Cannot configure node identity twice [ 1433.288120][ T8331] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.302063][ T8331] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 59635 - 0 [ 1433.321759][ T8331] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.331470][ T8331] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 59635 - 0 [ 1433.344853][ T8331] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.356452][ T8331] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 59635 - 0 [ 1433.368468][ T8331] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.388343][ T8331] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 59635 - 0 [ 1433.448724][ T31] INFO: task udevd:14033 blocked for more than 143 seconds. [ 1433.467775][ T31] Not tainted syzkaller #0 [ 1433.473307][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1433.484667][T16688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11616'. [ 1433.494198][ T31] task:udevd state:D stack:23464 pid:14033 tgid:14033 ppid:5192 task_flags:0x400140 flags:0x00080000 [ 1433.518450][ T31] Call Trace: [ 1433.521944][ T31] [ 1433.525150][ T31] __schedule+0x1585/0x5340 [ 1433.535738][ T31] ? blk_mq_flush_plug_list+0x443/0x570 [ 1433.541698][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1433.547784][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 1433.559698][ T31] ? __pfx___schedule+0x10/0x10 [ 1433.572086][ T31] ? schedule+0x90/0x360 [ 1433.577420][ T31] schedule+0x164/0x360 [ 1433.582507][ T31] schedule_timeout+0x158/0x2c0 [ 1433.587741][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1433.594421][ T31] ? __pfx_process_timeout+0x10/0x10 [ 1433.602028][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1433.608157][ T31] ? prepare_to_wait_event+0x436/0x480 [ 1433.614241][ T31] nbd_queue_rq+0x857/0x1100 [ 1433.622985][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1433.628423][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1433.636319][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1433.642926][ T31] ? sbitmap_get+0x229/0x390 [ 1433.647805][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1433.655351][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1433.662313][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1433.670590][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1433.685959][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1433.694156][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1433.700278][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 1433.705693][ T31] blk_mq_dispatch_list+0xd16/0xe10 [ 1433.711114][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 1433.716713][ T31] ? blk_mq_dispatch_list+0x1a0/0xe10 [ 1433.722553][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1433.728470][ T31] ? rcu_is_watching+0x15/0xb0 [ 1433.733713][ T31] blk_mq_flush_plug_list+0x48d/0x570 [ 1433.739289][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 1433.744554][ T31] ? blk_mq_submit_bio+0xef8/0x2810 [ 1433.749937][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1433.755903][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 1433.761218][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 1433.766691][ T31] __submit_bio+0x28d/0x580 [ 1433.771299][ T31] ? __pfx___submit_bio+0x10/0x10 [ 1433.776392][ T31] ? bio_associate_blkg+0x6d/0x230 [ 1433.781901][ T31] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1433.787605][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1433.794323][ T31] ? bio_alloc_bioset+0xbe2/0x11b0 [ 1433.799717][ T31] block_read_full_folio+0x599/0x830 [ 1433.805240][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 1433.810820][ T31] filemap_read_folio+0x137/0x3b0 [ 1433.815891][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1433.822020][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 1433.827603][ T31] ? filemap_add_folio+0x356/0x530 [ 1433.832862][ T31] do_read_cache_folio+0x358/0x590 [ 1433.838048][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1433.845156][ T31] read_part_sector+0xb6/0x2b0 [ 1433.850387][ T31] adfspart_check_ICS+0xa5/0xa40 [ 1433.855475][ T31] ? snprintf+0xe8/0x140 [ 1433.860165][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1433.866735][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1433.872834][ T31] bdev_disk_changed+0x7ba/0x1550 [ 1433.878604][ T31] ? bdev_open+0xe0/0xd30 [ 1433.883401][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1433.890764][ T31] blkdev_get_whole+0x380/0x510 [ 1433.895705][ T31] bdev_open+0x31e/0xd30 [ 1433.900895][ T31] blkdev_open+0x470/0x610 [ 1433.905416][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1433.910623][ T31] do_dentry_open+0x785/0x14e0 [ 1433.915534][ T31] vfs_open+0x3b/0x340 [ 1433.923370][ T31] ? path_openat+0x2df0/0x3860 [ 1433.928361][ T31] path_openat+0x2e08/0x3860 [ 1433.934036][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1433.940063][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1433.945611][ T31] ? __pfx_path_openat+0x10/0x10 [ 1433.952657][ T31] ? __x64_sys_openat+0x138/0x170 [ 1433.957759][ T31] ? do_syscall_64+0x14d/0xf80 [ 1433.963439][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.969727][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1433.974804][ T31] do_file_open+0x23e/0x4a0 [ 1433.980372][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1433.985637][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1433.991011][ T31] ? alloc_fd+0x64b/0x6c0 [ 1433.995826][ T31] do_sys_openat2+0x113/0x200 [ 1434.002608][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1434.008305][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1434.013963][ T31] ? rcu_is_watching+0x15/0xb0 [ 1434.020619][ T31] __x64_sys_openat+0x138/0x170 [ 1434.025765][ T31] do_syscall_64+0x14d/0xf80 [ 1434.030616][ T31] ? trace_irq_disable+0x3b/0x150 [ 1434.035959][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.042611][ T31] ? clear_bhb_loop+0x40/0x90 [ 1434.047468][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.053977][ T31] RIP: 0033:0x7f54e60a7407 [ 1434.058447][ T31] RSP: 002b:00007ffd80d13230 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1434.068628][ T31] RAX: ffffffffffffffda RBX: 00007f54e67b6880 RCX: 00007f54e60a7407 [ 1434.077245][ T31] RDX: 00000000000a0800 RSI: 00005566cf322d80 RDI: ffffffffffffff9c [ 1434.085920][ T31] RBP: 00005566cf315910 R08: 0000000000000000 R09: 0000000000000000 [ 1434.094493][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005566cf33da40 [ 1434.103120][ T31] R13: 00005566cf323190 R14: 0000000000000000 R15: 00005566cf33da40 [ 1434.111933][ T31] [ 1434.115177][ T31] [ 1434.115177][ T31] Showing all locks held in the system: [ 1434.123490][ T31] 3 locks held by kworker/0:1/10: [ 1434.137904][ T31] #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1434.152944][ T31] #1: ffffc900000f7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1434.166608][ T31] #2: ffff88806c14f240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 1434.177266][ T31] 1 lock held by khungtaskd/31: [ 1434.182849][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1434.193382][ T31] 1 lock held by klogd/5181: [ 1434.198191][ T31] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1434.208508][ T31] 2 locks held by getty/5584: [ 1434.213953][ T31] #0: ffff888036a180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1434.224284][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1434.234811][ T31] 3 locks held by kworker/u8:13/7893: [ 1434.241264][ T31] #0: ffff888031dea948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1434.253645][ T31] #1: ffffc90003aa7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1434.266727][ T31] #2: ffffffff8fbcb888 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1434.276853][ T31] 3 locks held by kworker/u8:6/8331: [ 1434.283993][ T31] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1434.294340][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1434.303404][ T31] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 1434.312975][ T31] 3 locks held by udevd/14033: [ 1434.317814][ T31] #0: ffff888026820358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1434.327475][ T31] #1: ffff8880255b1a18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 1434.337492][ T31] #2: ffff8880268c8180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1434.346976][ T31] 3 locks held by syz.3.11615/16682: [ 1434.352410][ T31] #0: ffff888052a6bb88 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1434.362890][ T31] #1: ffffffff8fc37530 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1434.374496][ T31] #2: ffff888034a4a8d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0 [ 1434.385075][ T31] 3 locks held by syz.0.11617/16686: [ 1434.390432][ T31] #0: ffff8880415accc8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1434.401266][ T31] #1: ffff888079be53a0 (sk_lock-AF_QIPCRTR){+.+.}-{0:0}, at: qrtr_release+0x52/0x2d0 [ 1434.411081][ T31] #2: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1434.422167][ T31] 2 locks held by syz.4.11618/16691: [ 1434.427497][ T31] #0: ffffffff8fbcb888 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1434.437318][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1434.448742][ T31] [ 1434.452312][ T31] ============================================= [ 1434.452312][ T31] [ 1434.462869][ T31] NMI backtrace for cpu 0 [ 1434.462891][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1434.462915][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1434.462928][ T31] Call Trace: [ 1434.462938][ T31] [ 1434.462955][ T31] dump_stack_lvl+0xe8/0x150 [ 1434.462991][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1434.463017][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1434.463056][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1434.463086][ T31] sys_info+0x135/0x170 [ 1434.463108][ T31] watchdog+0xfd9/0x1030 [ 1434.463145][ T31] ? watchdog+0x21a/0x1030 [ 1434.463185][ T31] kthread+0x388/0x470 [ 1434.463206][ T31] ? __pfx_watchdog+0x10/0x10 [ 1434.463244][ T31] ? __pfx_kthread+0x10/0x10 [ 1434.463265][ T31] ret_from_fork+0x51e/0xb90 [ 1434.463297][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1434.463323][ T31] ? __switch_to+0xc7d/0x1450 [ 1434.463350][ T31] ? __pfx_kthread+0x10/0x10 [ 1434.463371][ T31] ret_from_fork_asm+0x1a/0x30 [ 1434.463417][ T31] [ 1434.463426][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1434.579538][ C1] NMI backtrace for cpu 1 [ 1434.579559][ C1] CPU: 1 UID: 0 PID: 16682 Comm: syz.3.11615 Not tainted syzkaller #0 PREEMPT(full) [ 1434.579580][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1434.579592][ C1] RIP: 0010:__lock_acquire+0xfe/0x2cf0 [ 1434.579621][ C1] Code: 93 c6 40 20 ce 40 80 fe 01 0f 84 21 01 00 00 8b 9c 24 40 01 00 00 44 8b a4 24 30 01 00 00 89 d5 48 c7 c1 10 74 c4 93 48 29 c8 <48> c1 f8 03 48 be 29 5c 8f c2 f5 28 5c 8f 48 0f af f0 85 db 0f 85 [ 1434.579637][ C1] RSP: 0018:ffffc9000c46f398 EFLAGS: 00000002 [ 1434.579654][ C1] RAX: 0000000000001770 RBX: 0000000000000000 RCX: ffffffff93c47410 [ 1434.579667][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffffffff8e7603a0 [ 1434.579679][ C1] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffff8e7603a0 [ 1434.579691][ C1] R10: dffffc0000000000 R11: fffff94000adc8f1 R12: 0000000000000000 [ 1434.579703][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 1434.579713][ C1] FS: 0000000000000000(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 1434.579728][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1434.579740][ C1] CR2: 00007feb9f5e82f8 CR3: 00000000782d4000 CR4: 00000000003526f0 [ 1434.579757][ C1] Call Trace: [ 1434.579764][ C1] [ 1434.579774][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1434.579806][ C1] lock_acquire+0xf0/0x2e0 [ 1434.579826][ C1] ? pfn_valid+0xba/0x480 [ 1434.579845][ C1] ? folio_mark_accessed+0x442/0x8c0 [ 1434.579866][ C1] ? pfn_valid+0xba/0x480 [ 1434.579884][ C1] pfn_valid+0xd6/0x480 [ 1434.579900][ C1] ? pfn_valid+0xba/0x480 [ 1434.579917][ C1] page_table_check_clear+0x21/0x5f0 [ 1434.579935][ C1] ? vm_normal_page+0x10d/0x240 [ 1434.579956][ C1] unmap_page_range+0x33b3/0x48f0 [ 1434.579998][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1434.580023][ C1] ? mas_find+0xb0e/0xd30 [ 1434.580050][ C1] ? unmap_vmas+0x1c4/0x6a0 [ 1434.580071][ C1] unmap_vmas+0x48f/0x6a0 [ 1434.580096][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1434.580128][ C1] exit_mmap+0x280/0xa10 [ 1434.580156][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1434.580193][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1434.580224][ C1] ? uprobe_clear_state+0x27c/0x290 [ 1434.580251][ C1] __mmput+0x118/0x430 [ 1434.580274][ C1] exit_mm+0x168/0x220 [ 1434.580298][ C1] do_exit+0x62e/0x2320 [ 1434.580316][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1434.580343][ C1] ? __pfx_do_exit+0x10/0x10 [ 1434.580359][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1434.580380][ C1] ? preempt_schedule_common+0x82/0xd0 [ 1434.580406][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1434.580427][ C1] do_group_exit+0x21b/0x2d0 [ 1434.580447][ C1] __x64_sys_exit_group+0x3f/0x40 [ 1434.580465][ C1] x64_sys_call+0x221a/0x2240 [ 1434.580490][ C1] do_syscall_64+0x14d/0xf80 [ 1434.580517][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.580535][ C1] ? clear_bhb_loop+0x40/0x90 [ 1434.580555][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.580573][ C1] RIP: 0033:0x7f7e6f59c629 [ 1434.580588][ C1] Code: Unable to access opcode bytes at 0x7f7e6f59c5ff. [ 1434.580598][ C1] RSP: 002b:00007ffeba65fa68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1434.580616][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7e6f59c629 [ 1434.580629][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1434.580639][ C1] RBP: 00007ffeba65facc R08: 0000000000000000 R09: 00000000000927c0 [ 1434.580651][ C1] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000226 [ 1434.580662][ C1] R13: 00000000000927c0 R14: 000000000015de22 R15: 00007ffeba65fb20 [ 1434.580683][ C1] [ 1434.944291][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1434.951180][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1434.960313][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1434.970483][ T31] Call Trace: [ 1434.973776][ T31] [ 1434.976720][ T31] vpanic+0x56c/0xa60 [ 1434.980764][ T31] ? __pfx___schedule+0x10/0x10 [ 1434.985670][ T31] ? __pfx_vpanic+0x10/0x10 [ 1434.990206][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1434.995438][ T31] panic+0xc5/0xd0 [ 1434.999283][ T31] ? __pfx_panic+0x10/0x10 [ 1435.003767][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1435.009192][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1435.015497][ T31] watchdog+0x1023/0x1030 [ 1435.020281][ T31] ? watchdog+0x21a/0x1030 [ 1435.024764][ T31] kthread+0x388/0x470 [ 1435.028966][ T31] ? __pfx_watchdog+0x10/0x10 [ 1435.033700][ T31] ? __pfx_kthread+0x10/0x10 [ 1435.038342][ T31] ret_from_fork+0x51e/0xb90 [ 1435.042993][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1435.048146][ T31] ? __switch_to+0xc7d/0x1450 [ 1435.052866][ T31] ? __pfx_kthread+0x10/0x10 [ 1435.057482][ T31] ret_from_fork_asm+0x1a/0x30 [ 1435.062290][ T31] [ 1435.065941][ T31] Kernel Offset: disabled [ 1435.070280][ T31] Rebooting in 86400 seconds..