last executing test programs: 7.710340195s ago: executing program 4 (id=2784): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000100)=0xc, 0x4) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) sendto$packet(r0, &(0x7f0000000180)="27a0f216deb08530babb1960ae9a054ba6a7394a0bbeca6fad72712a23c171f369f52d0406d383d2c4ba794d381f9069907a77472209fac24e53433eb6b05a706528a8973cf00769115713d2ced9479a241106b6349dbdce0bd357f8dc0892322b200d9c4d15cd59b4d61ee356aa059170307118ebd2f1a72506ec2f39d672cc3b75c2b6329c62bf67235826b624cb44af830e581379d9e4a2800815b7648c289f213d172b4c1470a3b776aeeac1d864b2a12597d3e272da4819ba63a5a76884f0306771b68e8cb46c66d1e2476a8806f1cbbf4f2351690ca2b1e92dba3e9253bd319791547a30c5edcb829011db14646b21", 0xf2, 0x1800, &(0x7f00000004c0)={0x11, 0x7, r3, 0x1, 0x80, 0x6, @broadcast}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f00000055c0)={0xffffffffffffffff}) shutdown(r7, 0x0) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001a000000070021006161000005009200000000003400228004000080"], 0x58}}, 0x0) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x3, 0x300) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000100)=0xc, 0x4) (async) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) (async) sendto$packet(r0, &(0x7f0000000180)="27a0f216deb08530babb1960ae9a054ba6a7394a0bbeca6fad72712a23c171f369f52d0406d383d2c4ba794d381f9069907a77472209fac24e53433eb6b05a706528a8973cf00769115713d2ced9479a241106b6349dbdce0bd357f8dc0892322b200d9c4d15cd59b4d61ee356aa059170307118ebd2f1a72506ec2f39d672cc3b75c2b6329c62bf67235826b624cb44af830e581379d9e4a2800815b7648c289f213d172b4c1470a3b776aeeac1d864b2a12597d3e272da4819ba63a5a76884f0306771b68e8cb46c66d1e2476a8806f1cbbf4f2351690ca2b1e92dba3e9253bd319791547a30c5edcb829011db14646b21", 0xf2, 0x1800, &(0x7f00000004c0)={0x11, 0x7, r3, 0x1, 0x80, 0x6, @broadcast}, 0x14) (async) socket$netlink(0x10, 0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) pipe(&(0x7f00000055c0)) (async) shutdown(r7, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001a000000070021006161000005009200000000003400228004000080"], 0x58}}, 0x0) (async) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) 7.503012607s ago: executing program 4 (id=2791): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{}, {0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000e401000000440004800500030005000000050003000100000005000300050000002000030001000000050003000500000055fe03000200000005000300000000000500030080ff000008000200020000000800010003"], 0x68}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x3) 6.415748217s ago: executing program 4 (id=2811): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x972, 0x200, 0x6, 0x0, 0x8000000, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x1ff, @private2, 0x7}}}, &(0x7f0000000300)=0x84) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='rose0\x00') (async) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f00000003c0)=""/166, &(0x7f0000000480)=0xa6) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x7ffffffe, 0x600, 0x1}}, 0x20) (async) ioctl$OCFS2_IOC_GROUP_ADD(r5, 0x40186f02, &(0x7f0000000080)={0x8, 0x10, 0x4aa, 0x1}) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmmsg$unix(r9, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/203, 0xcb}], 0x1}}], 0x1, 0x41, 0x0) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x2000) (async) r11 = accept4(r6, 0x0, 0x0, 0x800) write$nbd(r11, &(0x7f0000000400)=ANY=[], 0xb4) 6.183700168s ago: executing program 4 (id=2816): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r1, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (rerun: 32) setsockopt$ax25_int(r2, 0x101, 0x0, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}]}, 0x3c}}, 0x0) 6.070425515s ago: executing program 4 (id=2820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm], 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd26, 0x8000003, {0x0, 0x0, 0x0, r6, {0x0, 0xfff4}, {}, {0x1, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x200, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, ' '}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x43}, 0x8000200, 0x1, 0x0, 0xd, 0x0, 0x1ff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0x2, 0x2, 0x0, 0x2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2040000}, 0x40) 5.82358458s ago: executing program 4 (id=2825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x7, 0xffffffff, 0x1, 0x20080, 0xffffffffffffffff, 0x9c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1, 0xd}, 0x50) (rerun: 32) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 3.353558691s ago: executing program 0 (id=2856): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000480)=0x202000, 0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, 0x0, &(0x7f0000000540)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind(r5, 0xfffffffffffffffd, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0xb, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r0, r4, 0x2b, 0x1c, 0x0, @void, @value=r4, @void, @void, r8}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080500fe008b6785cdfbd291ec4708673d77ec05ab1f33f5608f8a4be35782a72c0ba52d811c18b5177796e2c8fae0bd24f44daa93f446907d85a2297d658a5c2ef1f3595702a37a1e201adb727bcc1d9323d17d869a1768db6f9e424f7074226d947f5d4838c8f7"], 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000008010400000000000000000300000606000240888400001400000800050003002f0000000900010073797a3100000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f00000000c0)='veth0_virt_wifi\x00', 0x10) sendto$inet(r10, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r10, 0x0, 0x8, &(0x7f0000000040)=0xfffd, 0x4) read(r10, &(0x7f0000000000)=""/224, 0xe0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}}, 0xc040) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89b0, &(0x7f0000000080)={'bridge0\x00', 0x2000}) 2.452974118s ago: executing program 0 (id=2863): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) epoll_create(0xfffffffe) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.259627857s ago: executing program 2 (id=2867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$inet_mreqn(r6, 0x0, 0x24, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) (async) sendmsg$inet_sctp(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x100, 0x41, 0xffffff7f}}], 0x20, 0x4048800}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000140), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.047417167s ago: executing program 1 (id=2869): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2.024738617s ago: executing program 0 (id=2870): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="b702000002000000bfa300000000000007030000007effff7a0af0ff3f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27126e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb6220fd8d4b470e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef0420f0000cac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e885340133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421a8223fe5308e4e65ee93e107000000f8ddeff70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b12000000000000000030711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dabec3d18fd0699ff3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623243643db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e69578e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea7e764dde8725d2b4a0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10b98c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5924948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476f9e0407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd96d2da66059de81abfa1acc9f889555eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b4fdc08000be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd9b31bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac4794680f3037f250e96f61cb20d46d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401413f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60530000000000000004b023e4954c9eb6cd70627f5c03edd4f5ce48b8a874c852064dd0efafc3df20ec8faf3d194db76127f88f1b4fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8b310900000c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1d8e80311895f0b99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44b57e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db6e3080000000000003e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f27b6c15b1ba971de1cb9c7e6a000000000000001478b2a78f9abfefce4448303ef54c71199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b462426ff9293a28a544a6a9e2279b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718b3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5f61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6485987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434cbd52325296e22802475edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a1471bab551bd6beae7dbf58530136c238e545b28211a92000000001501ae7d7cc75007e8ff56e6d8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db9966addf4877204047be633792118efdb6b88023e80da74fdf723c7f000000009f13c7e851dfc91ec01219af568825de0cedd55a92eafe9edd98a8529d64cbaa0b9f89f391b2db7369e934085e486b946a4558c68e195af1a6e6e878609f9ed7406dc9c93a5d5cc76e037d66abe4fe54f18b4c969814c7f2094ebe736ef0f0cd65b90942f2e8de44f6fd69a94ca27bb6d92e2282d4a0b0ee3abe30d877579aed9b54f460247890aed19ef12e45097631548d8639fb2b6eb9b41c7e89ee7223cdeae1b2d02cf664df99e4a661feecb63953a4d86f3060372861ac184824b7a4fd1c605128f1307f2bba91b9fbfe2884639073c1d51e42feeb5312b23b8e1e468aa31ea8e7597f5eb6ad1897a04afc8369ebec808165218b625a64a237ed01636880f70f0ed"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xf, 0xfffffffffffffe0d, &(0x7f0000000140)="7c003307000000000008000088471a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ppoll(&(0x7f0000000280)=[{r1, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) accept4(r10, 0x0, 0x0, 0x80000) bind$alg(r10, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff, 0xc}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x20044000) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r13, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 1.839607067s ago: executing program 1 (id=2871): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005800)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xf, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic='c$9']}]}, 0x28}], 0x1}, 0x0) 1.812871944s ago: executing program 3 (id=2872): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61c2f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa, @private0}}}, 0x3a) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) sendto(r4, 0x0, 0x0, 0x4008044, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_crypto(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61c2f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa, @private0}}}, 0x3a) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) (async) sendto(r4, 0x0, 0x0, 0x4008044, 0x0, 0x0) (async) 1.043526297s ago: executing program 1 (id=2873): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f00000004c0)={0x1, 0x2, "ff9edf", 0x6c, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0xb}]}}]}, 0x44}}, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socket$tipc(0x1e, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)={0x108, r11, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3e, 0x51}, {0xc}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xc54}, {0xc, 0x90, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4010090}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f00000017c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000000700)={0x1064, r11, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1004, 0xa8, @random="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"}]}, 0x1064}, 0x1, 0x0, 0x0, 0x4000840}, 0x24000004) 862.706813ms ago: executing program 3 (id=2874): ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x64}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0xc, 0x6, 0x302, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r1, 0x200, 0xe6, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4a}}}}, ["", "", ""]}, 0x20}}, 0x24000881) close(r0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000014) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x100, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe03}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf7}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x51}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xea70}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x88d}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x100}, 0x1, 0x0, 0x0, 0x48004}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000700)={'macvlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000740)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000780)='ns/mnt\x00') r5 = accept4$tipc(r0, &(0x7f00000007c0)=@name, &(0x7f0000000800)=0x10, 0x80000) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000840)=0x8, 0x4) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f00000008c0)={0x334, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @loopback, 0x251a}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @mcast1, 0x80000000}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}}}}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcd2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x69}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ID={0xd4, 0x3, "68a803910a2042e022bd43354942a86e453f21dcef126e8d9069addace1bd691ea1ea8fc755b9e49901bb359eaeec5627d61828e5a09ac316c684faf5dca2a39b495b4991f283fbdb1527b2f75fd97d137894919fe68ca7eec7a6b6a615c1c22ebcbff021adba4cf93ae69de027d8d51608208c6706caaa9296672bf1bb852065b98af684017ec2effa47d5b0f56a3bea326137b3683579612a70657d3b202ec3f061d2d7a32c17e5d55f636676e61dc2918a9024966930b08d9bc1c2e5ceb6d440abc569330b12ea438622e1df7238e"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @local, 0x8001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2000000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xaf1, @remote, 0xd}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x10}, 0x4000) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e22, @multicast2}, 0x10) r6 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000cc0)) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000d80)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0xd7e6e71d3cbd979, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000000dc0)='syzkaller\x00', 0x6, 0x9f, &(0x7f0000000e00)=""/159, 0x41100, 0x70, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000f00)={0x5, 0x0, 0x1e0, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f40)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1, 0x1, 0x1], 0x0, 0x10, 0x400}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000021c0)={r7, 0x0, 0xa2, 0x7, &(0x7f0000001040)="2e1a510b0820a35675848ebb817431ce684a0138a0128f7dc540f765d0285aedacc71281839e5df4e16e0f3cbf07b3bd913c715d919c325dc9043eb46bcf5313cff2b4c897373c2665505602bb1c541c71deedc2e0e197db9c4374849563567f43e984bb4c36bc6c77dfa71ca7f4924a8b46bd30c5560045e3dcdaae7f63c2b07e060312542683755f2a7de0ec556be946f65a569e7e525d38bdec36f857b2dfd0da", &(0x7f0000001100)=""/7, 0x7, 0x0, 0x1000, 0x70, &(0x7f0000001140)="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", &(0x7f0000002140)="c06f5ea4ed02a826cf252e1ceb4812f1a828fecc69df72c1bb665fc71570ef6bc471b47458294fc7e11d4b883ce364e37f6862fcd9a824749b9608af31e92c6b549da2ada9b230eed7c52d37cc854c7d82a9e3c13ebf8e4182d0abc56a062498231aa9b29c3c0976fd2a9724a582926f", 0x6, 0x0, 0x9}, 0x50) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002280), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000002500)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f00000022c0)={0x1cc, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xbe8}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x83b1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x7fff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3ac0}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff7}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfffe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xfe5c}}]}, 0x1cc}}, 0x24004080) r9 = accept4$bt_l2cap(r0, &(0x7f0000002540)={0x1f, 0x0, @fixed}, &(0x7f0000002580)=0xe, 0x80000) bind$bt_l2cap(r9, &(0x7f00000025c0)={0x1f, 0xd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5d5a, 0x1}, 0xe) socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000002740)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 862.232188ms ago: executing program 0 (id=2875): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7ff}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x10) close(0xffffffffffffffff) getsockopt$inet6_buf(r4, 0x29, 0x45, &(0x7f0000000140)=""/117, &(0x7f00000001c0)=0x75) 858.071299ms ago: executing program 2 (id=2876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cdfe0000010200010008000600fe7f0000050016003a0000006dda3f7ab0b95020ff20d9a27b15ac688ccb349010b63cc46c08c43129aee163f21d24aeb9404ff6081beb8a22750a262e2fcf84d12fa61dcb297f34514876b579f03ad3a06fd269e71c425fa1d348136bb5f4daf19e5fadae710168907864a7feb3a533997634d99ed19eec0000a592096ff215a9671e335c5e3b74a66719d326a64f700299493b1d766d568ee1f09582db28f6fa46866f527ceeaec92e5215a70f40f65c77accd6e76e988220ad3a4818f7fa7edf3fc57a9e7af0c"], 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00883ebbbbbbbbbbbbc77caaaaaa2986dd6d002008000c11fffc010000000000000000000000000000ff0200000a00000000000000000000014f194e20000c907881080001"], 0x46) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="01000000030000000500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001000000010000557b"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f00000003c0)="58f6", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x9}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x3, 0x0, 0x3}, 0xe) shutdown(r6, 0x1) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) (async) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9140400}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRES32], 0xd0}, 0x1, 0x0, 0x0, 0x20040815}, 0x44081) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8923, &(0x7f0000000000)={'hsr0\x00', 0x1102}) 756.318648ms ago: executing program 3 (id=2877): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x42, &(0x7f0000000140)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e21, 0x20, 0x0, @gue={{0x2, 0x0, 0x0, 0x81, 0x100, @val=0x80}, "f0108e72b9f82120c4d4fdbe5d74dedf"}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x8}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x1c, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) 697.169203ms ago: executing program 1 (id=2878): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x8, 0xfff1}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x2000, 0x8000, 0x0, 0xb, {{0x5, 0x4, 0x0, 0x11, 0x14, 0x20, 0x0, 0x2b, 0x4, 0x0, @rand_addr=0x64010100, @multicast1}}}}) 563.049709ms ago: executing program 3 (id=2879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x2, 0x3, 0x6b) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) (async) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 496.143814ms ago: executing program 3 (id=2880): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x27}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004}, 0x4000012) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000200)={0x78, 0xffffffff00000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) write$6lowpan_enable(r2, &(0x7f0000000d80)='0', 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e00)={0x1e0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x52}, @CTA_EXPECT_NAT={0xe8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xad}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, @CTA_EXPECT_NAT={0x78, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xf07}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20040000}, 0x88000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000010c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x50, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x80c0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) poll(&(0x7f0000001280)=[{r5, 0x40}, {0xffffffffffffffff, 0x8040}, {r6, 0x480}, {r5, 0x82}, {r2, 0x52}, {r4, 0x8000}, {r5, 0x22}, {r5, 0x180}, {r7, 0x10}], 0x9, 0x3) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000001400)={r2, &(0x7f0000001300)='0', 0x480100, &(0x7f0000001340)={@align=0x80000000, {0x3, 0x8, 0xd, 0x7ff}}, 0x10, &(0x7f0000001380)={@_ha_fsid}, &(0x7f00000013c0)=0x80000001}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r8, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xa, 0x42}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r8, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), r8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001740)={'ipvlan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000017c0)={'syztnl1\x00', &(0x7f0000001780)={'sit0\x00', 0x0, 0x80, 0x40, 0x8, 0x5, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, {[@end, @noop]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000001900)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)={0xb0, r11, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x81}, 0x80) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000001980), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000019c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r14, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), r8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x810, r4, 0x4bbf6000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000001b00)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x0, 0x1, 0xfff, 0x816f, 0xb03}, &(0x7f0000001bc0)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000001c00)={r16, 0x67, 0x10, 0x2, 0x7fffffff}, &(0x7f0000001c40)=0x18) 372.864541ms ago: executing program 2 (id=2881): r0 = socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 291.218626ms ago: executing program 3 (id=2882): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r0, &(0x7f00000002c0)=""/67, 0x43, 0x0, &(0x7f0000000380)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x2}}, 0x80) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000000)={{0x9, 0x4, 0x3, 0x10001, 0x4}, [{0x4, 0x2, 0xf9, 0x6}]}) (async) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000000)={{0x9, 0x4, 0x3, 0x10001, 0x4}, [{0x4, 0x2, 0xf9, 0x6}]}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="44ef2857aa1cf31416e13fdae2709a18425802c4bc083270594ce341547685854f6e2a1b80e786f1221f380071cd95111379d46f374c339048c6e5a29a1dc3595b20f079ca95810f7a98c32f32e2a5a1ccd8fc65fe2d64af6eed82e0a2be62ee52b7334e5b6ebc58881e380a10f278ec90d3a13bc7fc9e9e03e3d5ae1a2a8b7f14eff8be0b4b844941f4740276d8319e85041f3a259ea003ab38fe3035a739985d89b86086d190108ce318bffcd01280f1a0ac567601d23e139a5d6f81ab08907afb60399c79995979f6595e60d56023b08a246976857a6a6789677a1e6716784b529090"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40204042}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf253d000000a9b83e4c0e0001006e657464657673696d0000000f0002006e657464657673696d30000033008200736c746963"], 0x50}}, 0x20000880) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c8c4000", @ANYRES16, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 290.863829ms ago: executing program 2 (id=2883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 289.315252ms ago: executing program 1 (id=2884): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000aa743818556ef2cbd2d9cbafbfffee9fc0b65e8f2fbd501fe197de0b84433e3fba505d3c7d030000152d", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf251a00000007002100616100001400228004000080040000800400008004000080"], 0x30}}, 0x880) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x828}, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r2) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000300)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00~', @ANYRES16=r7, @ANYBLOB="04002dbd7000fddbdf2501000000050006000700000008000300f8ffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20000042}, 0x4008805) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 218.492028ms ago: executing program 2 (id=2885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000100000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d8000140000001000010000000000000000000000000a"], 0xe8}}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 190.332118ms ago: executing program 0 (id=2886): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000040), 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000180)=""/128, 0x80}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}, {&(0x7f00000000c0)=""/28, 0x1c}], 0x6}}], 0x2, 0x31, 0x0) 42.729771ms ago: executing program 2 (id=2887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x63}}, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x7, 0x3, 0x10, @dev={0xfe, 0x80, '\x00', 0x1b}, @private0, 0x48, 0xc5094c2612acb137, 0x10001, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@deltclass={0x78, 0x29, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x6, 0xffe0}, {0x9, 0x1}, {0x5, 0x6}}, [@tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_RATE={0x6, 0x5, {0x8, 0xf1}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0x3, 0xb0}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0xf7, 0xec}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x48010) 37.827073ms ago: executing program 0 (id=2888): r0 = socket(0x1e, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r1, 0x29, 0x21, 0x0, 0x4) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r3, r4, 0xffffffffffffffff}, 0xc) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x4c, 0x14, 0x100, 0x0, 0x0, {0xa, 0x48, 0xeaddb0ce1851e778, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xa2000}, @IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8, 0x8, 0x13a}]}, 0x4c}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x4, 0x400, 0x0, 0x81, 0x101, 0x7, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}, @TCA_GRED_LIMIT={0x8, 0x5, 0xae}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x80}, 0x8) 0s ago: executing program 1 (id=2889): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000f80)=@broute={'broute\x00', 0x20, 0x6, 0x90, [0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x2000000005c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffffffff00"/144]}, 0x108) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000002000)={{r1, &(0x7f00000001c0)='.:$\'{-\x00', 0x200, &(0x7f0000000200)={@_ha_fsid={[0x8, 0x1]}, {0x8001, 0x10, 0x6, 0x4}}, 0x9, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xff}, {[0x200, 0x59000000, 0xfffffffb, 0x9]}, 0x596, 0x1000, &(0x7f0000001000)=""/4096}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r5], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x22004800, &(0x7f0000000040)={0x11, 0x7, r6, 0x1, 0x7}, 0x14) sendmsg$xdp(r3, &(0x7f0000002540)={&(0x7f0000002080)={0x2c, 0x4, r6, 0x27}, 0x10, &(0x7f00000024c0)=[{&(0x7f00000020c0)="7bff96a3619dc5b53a1bc2e3ac955cd8a2b3d56e636442d86f673b97f4a751ab907c71ca0a34e719f9487776a0868bdfc9c45b90c84dbec56b171bfb919961d9678143c106c34b23bac8511965573d7e3430ca152f95e2f8a6085001ab833a08293ecf71af469bfb96ecfb976df0169e6bcb08cbdfaacc47551568a9a1df4d08c66e24737b1f68dc798e3ccba6997dc8df7279ae406ba4b7407e8b4498aea70ff21974e685d51219dd4e9e8013c977e0a9d348e902", 0xb5}, {&(0x7f0000002180)="6e3459e4ddc8d9e18456f9ec972cd56f3bcabb9c886a727c72504b408d395b9a9a6702e900b15247b083e56e1f2e464832f9399e8a6001b789db46bd81f639b441bb3a2590e8469445b19ce7de0fa7307c9cd5708ee48e43f7273d146d6331ba9db59142562f8b7554c13f7e4db115740221c769d887699db0cad18de2bd1ee229efae7aeb88cac7ac33cec91f2a9c769037a187d18206f8c80599c4e5abd0626519aedc73f796a9a4", 0xa9}, {&(0x7f0000002240)="754de063713d46be31ed576d7509eb5f9d791d4e71e81610671aad37ad5279ee80385b21aaef50fce809fd5a004719f8b0fb2982087d742541fd9e4532fb54ef041ce09a2dfc868a3e394054a7cb18c0101ff46adce1da17faad24186427", 0x5e}, {&(0x7f00000022c0)="1baaf520b1ae1b0665a2b8290d8d00f59096f7dfd0765979a58683e4e761be06c07bdd96d59fd2dd36f7864080f75cc8cd3030e41e8d3fc11089541e3459c1376577b547bbec9b8b700b8339756d5ddf0264314e51092188e6c7e99deb8f6fc0d5b3fe75b73151f7ffc9620bd70df00b30c5d04c9ddaf97d8b051b984695c759117feda5a8c17e", 0x87}, {&(0x7f0000002380)="18a9db16461eaba65f4d71bd0af3e13782f85fa8fb62aa610b7d27fd5b71cfd0395d7ab969c3b82650cbacd43b668398e7e9e6d4f59385931697e85eb697f2f977fc09e3413b3ffec739c6eae1954ae264db43091fbbfb1ee34a5997da7d7f7cd275fc118384e71487a27efe320e79416a93763dc706ac1b8a57d8794708104b90e36cf2f6215362000b885a4ffa546d69264d8009205e6d0f851c9b1df3f76e66f55d96a12aab78bb", 0xa9}, {&(0x7f0000002440)="37808445eaa0b4677c32dbe60d7e839fa10939f03327671e5c", 0x19}, {&(0x7f0000002480)="e5eaa19fca63645290d933610589", 0xe}], 0x7, 0x0, 0x0, 0x40004}, 0x8000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x28, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) kernel console output (not intermixed with test programs): etem: change failed [ 125.863666][ T8522] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.722'. [ 126.491986][ T8558] netlink: 'syz.1.733': attribute type 32 has an invalid length. [ 126.545401][ T8558] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 126.639663][ T8571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 126.705868][ T8572] 8021q: adding VLAN 0 to HW filter on device bond6 [ 126.967687][ T8593] netlink: 'syz.1.743': attribute type 3 has an invalid length. [ 127.033166][ T8600] netlink: 'syz.2.744': attribute type 1 has an invalid length. [ 127.059310][ T8598] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 127.069269][ T8600] netlink: 'syz.2.744': attribute type 3 has an invalid length. [ 127.077349][ T8600] __nla_validate_parse: 1 callbacks suppressed [ 127.077359][ T8600] netlink: 224 bytes leftover after parsing attributes in process `syz.2.744'. [ 127.096656][ T8602] lo speed is unknown, defaulting to 1000 [ 127.112949][ T8602] lo speed is unknown, defaulting to 1000 [ 127.145380][ T8602] lo speed is unknown, defaulting to 1000 [ 127.184532][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 127.193463][ T8605] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 127.211609][ T8602] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.264569][ T8602] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 127.378394][ T8619] netlink: 96 bytes leftover after parsing attributes in process `syz.0.750'. [ 127.397280][ T8602] lo speed is unknown, defaulting to 1000 [ 127.405765][ T8602] lo speed is unknown, defaulting to 1000 [ 127.407176][ T8620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.418645][ T8602] lo speed is unknown, defaulting to 1000 [ 127.419088][ T8620] IPv6: NLM_F_CREATE should be set when creating new route [ 127.432085][ T8620] IPv6: NLM_F_CREATE should be set when creating new route [ 127.436256][ T8602] lo speed is unknown, defaulting to 1000 [ 127.452450][ T8602] lo speed is unknown, defaulting to 1000 [ 127.550037][ T8624] xt_hashlimit: invalid rate [ 127.705644][ T8628] netlink: 'syz.4.754': attribute type 1 has an invalid length. [ 127.782610][ T8632] delete_channel: no stack [ 127.890755][ T8636] bond1: (slave ip6gretap0): making interface the new active one [ 127.899878][ T8636] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 127.918464][ T8636] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 127.946993][ T8628] netlink: 'syz.4.754': attribute type 1 has an invalid length. [ 127.974570][ T8636] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 128.238139][ T8665] netlink: 184 bytes leftover after parsing attributes in process `syz.2.763'. [ 128.418826][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.767'. [ 128.424407][ T8684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.767'. [ 128.593455][ T8693] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004 [ 128.657332][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'. [ 128.800419][ T8704] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 128.821548][ T8704] bond3 (unregistering): Released all slaves [ 128.833153][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 128.892711][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.776'. [ 129.007717][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 129.226523][ T5971] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.247429][ T5971] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.269399][ T5971] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.296626][ T63] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.421326][ T8757] ip6tnl1: entered allmulticast mode [ 129.826412][ T8790] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 130.268791][ T8810] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 130.294977][ T8810] netlink: 'syz.4.805': attribute type 11 has an invalid length. [ 130.519322][ T8828] netlink: 'syz.1.809': attribute type 83 has an invalid length. [ 130.554776][ T8827] netlink: 'syz.4.810': attribute type 1 has an invalid length. [ 131.132663][ T8867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.220362][ T8865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.228072][ T8865] bridge0: port 3(bond2) entered blocking state [ 131.235214][ T8865] bridge0: port 3(bond2) entered disabled state [ 131.242917][ T8865] bond2: entered allmulticast mode [ 131.251405][ T8865] bond2: entered promiscuous mode [ 131.281541][ T8876] xt_hashlimit: invalid interval [ 131.501189][ T8884] validate_nla: 1 callbacks suppressed [ 131.501211][ T8884] netlink: 'syz.0.824': attribute type 5 has an invalid length. [ 131.688997][ T8898] netlink: 'syz.2.826': attribute type 1 has an invalid length. [ 132.349999][ T8940] syz.3.833: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 132.388003][ T8940] CPU: 1 UID: 0 PID: 8940 Comm: syz.3.833 Not tainted syzkaller #0 PREEMPT(full) [ 132.388038][ T8940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.388059][ T8940] Call Trace: [ 132.388067][ T8940] [ 132.388077][ T8940] dump_stack_lvl+0xe8/0x150 [ 132.388126][ T8940] warn_alloc+0x249/0x340 [ 132.388153][ T8940] ? stack_trace_save+0xa9/0x100 [ 132.388178][ T8940] ? __pfx_warn_alloc+0x10/0x10 [ 132.388214][ T8940] ? kasan_save_track+0x4f/0x80 [ 132.388236][ T8940] ? kasan_save_track+0x3e/0x80 [ 132.388256][ T8940] ? __kasan_kmalloc+0x93/0xb0 [ 132.388277][ T8940] ? __kmalloc_cache_noprof+0x31c/0x660 [ 132.388300][ T8940] ? xskq_create+0x56/0x170 [ 132.388325][ T8940] ? xsk_setsockopt+0x54c/0x990 [ 132.388346][ T8940] ? do_sock_setsockopt+0x17c/0x1b0 [ 132.388372][ T8940] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 132.388399][ T8940] ? do_syscall_64+0x14d/0xf80 [ 132.388433][ T8940] __vmalloc_node_range_noprof+0x132/0x1730 [ 132.388493][ T8940] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.388532][ T8940] ? __kasan_kmalloc+0x93/0xb0 [ 132.388564][ T8940] vmalloc_user_noprof+0xad/0xe0 [ 132.388588][ T8940] ? xskq_create+0xbf/0x170 [ 132.388615][ T8940] xskq_create+0xbf/0x170 [ 132.388643][ T8940] xsk_init_queue+0x8a/0xe0 [ 132.388669][ T8940] xsk_setsockopt+0x54c/0x990 [ 132.388694][ T8940] ? __pfx_xsk_setsockopt+0x10/0x10 [ 132.388714][ T8940] ? __pfx_aa_sk_perm+0x10/0x10 [ 132.388748][ T8940] ? aa_sock_opt_perm+0xff/0x1a0 [ 132.388770][ T8940] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 132.388794][ T8940] ? __pfx_xsk_setsockopt+0x10/0x10 [ 132.388820][ T8940] do_sock_setsockopt+0x17c/0x1b0 [ 132.388852][ T8940] __x64_sys_setsockopt+0x13d/0x1b0 [ 132.388882][ T8940] do_syscall_64+0x14d/0xf80 [ 132.388906][ T8940] ? trace_irq_disable+0x3b/0x150 [ 132.388921][ T8940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.388941][ T8940] ? clear_bhb_loop+0x40/0x90 [ 132.388965][ T8940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.388985][ T8940] RIP: 0033:0x7fa58399c819 [ 132.389012][ T8940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.389031][ T8940] RSP: 002b:00007fa5848f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.389054][ T8940] RAX: ffffffffffffffda RBX: 00007fa583c15fa0 RCX: 00007fa58399c819 [ 132.389069][ T8940] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 132.389081][ T8940] RBP: 00007fa583a32c91 R08: 0000000000000004 R09: 0000000000000000 [ 132.389094][ T8940] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.389107][ T8940] R13: 00007fa583c16038 R14: 00007fa583c15fa0 R15: 00007ffe17168008 [ 132.389140][ T8940] [ 132.390475][ T8940] Mem-Info: [ 132.687397][ T8940] active_anon:6072 inactive_anon:0 isolated_anon:0 [ 132.687397][ T8940] active_file:2692 inactive_file:39948 isolated_file:0 [ 132.687397][ T8940] unevictable:768 dirty:91 writeback:0 [ 132.687397][ T8940] slab_reclaimable:11291 slab_unreclaimable:98988 [ 132.687397][ T8940] mapped:30333 shmem:1360 pagetables:1404 [ 132.687397][ T8940] sec_pagetables:0 bounce:0 [ 132.687397][ T8940] kernel_misc_reclaimable:0 [ 132.687397][ T8940] free:1334964 free_pcp:8087 free_cma:0 [ 132.799684][ T8940] Node 0 active_anon:24488kB inactive_anon:0kB active_file:10768kB inactive_file:159604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121332kB dirty:364kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12960kB pagetables:4976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 132.869673][ T8940] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 132.914063][ T8959] __nla_validate_parse: 15 callbacks suppressed [ 132.914085][ T8959] netlink: 1 bytes leftover after parsing attributes in process `syz.1.839'. [ 132.927473][ T8940] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.968436][ T8960] tap1: tun_chr_ioctl cmd 1074025676 [ 132.970963][ T8940] lowmem_reserve[]: 0 [ 132.973897][ T8960] tap1: owner set to 0 [ 132.985102][ T8940] 2492 2493 2493 2493 [ 132.987788][ T8959] netlink: 1 bytes leftover after parsing attributes in process `syz.1.839'. [ 132.989880][ T8940] Node 0 DMA32 free:1389332kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24388kB inactive_anon:0kB active_file:10768kB inactive_file:159604kB unevictable:1536kB writepending:164kB zspages:0kB present:3129332kB managed:2552564kB mlocked:0kB bounce:0kB free_pcp:32748kB local_pcp:18228kB free_cma:0kB [ 133.118758][ T8940] lowmem_reserve[]: 0 0 0 0 0 [ 133.123567][ T8940] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:872kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 133.196708][ T8940] lowmem_reserve[]: 0 0 0 0 0 [ 133.201802][ T8940] Node 1 Normal free:3935028kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 133.259251][ T8976] netlink: 788 bytes leftover after parsing attributes in process `syz.2.840'. [ 133.280538][ T8940] lowmem_reserve[]: 0 0 0 0 0 [ 133.291616][ T8940] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 133.306805][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.840'. [ 133.383054][ T8940] Node 0 DMA32: 3164*4kB (UME) 1432*8kB (UME) 537*16kB (UME) 120*32kB (UME) 44*64kB (ME) 34*128kB (ME) 44*256kB (UME) 40*512kB (UME) 29*1024kB (U) 25*2048kB (UME) 301*4096kB (UM) = 1389248kB [ 133.434979][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.449713][ T8983] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.466631][ T8991] netlink: 32 bytes leftover after parsing attributes in process `syz.2.846'. [ 133.475661][ T8940] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 133.480842][ T8983] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.514294][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.844'. [ 133.534544][ T8940] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 8*16kB (UM) 7*32kB (UM) 5*64kB (UM) 5*128kB (UM) 6*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (M) = 3935028kB [ 133.539878][ T8983] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.578581][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.844'. [ 133.602060][ T8940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.603285][ T8983] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.623768][ T8940] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.626151][ T8983] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.644209][ T8983] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.654062][ T8940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.654092][ T8940] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.654107][ T8940] 43997 total pagecache pages [ 133.654130][ T8940] 0 pages in swap cache [ 133.654138][ T8940] Free swap = 124996kB [ 133.654145][ T8940] Total swap = 124996kB [ 133.654155][ T8940] 2097051 pages RAM [ 133.654163][ T8940] 0 pages HighMem/MovableOnly [ 133.654170][ T8940] 427077 pages reserved [ 133.654177][ T8940] 0 pages cma reserved [ 133.664796][ T8983] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.724260][ T8983] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.735409][ T8983] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.768587][ T8983] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 133.822114][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 133.831949][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 134.425538][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 134.437587][ T9008] ipt_ECN: cannot use operation on non-tcp rule [ 134.471816][ T9011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.600916][ T9015] bond3: Unable to set up delay as MII monitoring is disabled [ 134.612101][ T9015] bond3 (unregistering): Released all slaves [ 134.741389][ T9035] netlink: 'syz.1.856': attribute type 8 has an invalid length. [ 134.908935][ T9045] netlink: 'syz.2.861': attribute type 10 has an invalid length. [ 135.012763][ T9045] veth0_macvtap: left promiscuous mode [ 135.278138][ T9059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.604291][ T9077] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 135.730138][ T9081] lo speed is unknown, defaulting to 1000 [ 135.851831][ T9086] netlink: 'syz.2.875': attribute type 1 has an invalid length. [ 135.859807][ T9086] netlink: 'syz.2.875': attribute type 4 has an invalid length. [ 136.333926][ T9108] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 138.598632][ T9112] veth1_macvtap: left promiscuous mode [ 138.604501][ T9112] macsec0: entered promiscuous mode [ 138.610100][ T9112] macsec0: entered allmulticast mode [ 138.635293][ T9117] veth1_macvtap: entered promiscuous mode [ 138.648380][ T9117] veth1_macvtap: entered allmulticast mode [ 138.654949][ T9117] macsec0: left promiscuous mode [ 138.660306][ T9117] macsec0: left allmulticast mode [ 138.665833][ T9117] veth1_macvtap: left allmulticast mode [ 138.868199][ T9143] __nla_validate_parse: 7 callbacks suppressed [ 138.868219][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.890'. [ 138.952437][ T9149] netlink: 'syz.2.893': attribute type 39 has an invalid length. [ 139.031735][ T9143] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 139.049580][ T9143] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 139.071269][ T9143] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 139.394683][ T9156] nbd0: detected capacity change from 0 to 63 [ 139.440552][ T5827] block nbd0: Receive control failed (result -104) [ 139.448905][ T5824] block nbd0: Receive control failed (result -32) [ 139.492247][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 139.631479][ T9182] IPVS: persistence engine module ip_vs_pe_À not found [ 140.585508][ T9208] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 140.593226][ T9208] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.910'. [ 140.603760][ T9207] net_ratelimit: 7208 callbacks suppressed [ 140.603792][ T9207] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 140.686238][ T9218] syzkaller0: entered promiscuous mode [ 140.692547][ T9218] syzkaller0: entered allmulticast mode [ 140.801001][ T9223] syzkaller0: entered promiscuous mode [ 140.817579][ T9223] syzkaller0: entered allmulticast mode [ 140.845291][ T9223] tc action pedit offset must be on 32 bit boundaries [ 140.852610][ T9223] tc action pedit offset must be on 32 bit boundaries [ 140.859657][ T9223] tc action pedit offset must be on 32 bit boundaries [ 140.866695][ T9223] tc action pedit offset must be on 32 bit boundaries [ 140.873548][ T9223] tc action pedit offset must be on 32 bit boundaries [ 140.880788][ T9223] tc action pedit offset must be on 32 bit boundaries [ 140.888020][ T9223] tc action pedit offset must be on 32 bit boundaries [ 140.894856][ T9223] tc action pedit offset must be on 32 bit boundaries [ 140.901688][ T9223] tc action pedit offset must be on 32 bit boundaries [ 140.908734][ T9223] tc action pedit offset must be on 32 bit boundaries [ 140.915673][ T9223] 0: reclassify loop, rule prio 0, protocol 800 [ 140.932198][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 140.943732][ T9227] openvswitch: netlink: Flow actions attr not present in new flow. [ 140.984792][ T9234] bond3: option mode: invalid value (133) [ 141.053202][ T9234] bond3 (unregistering): Released all slaves [ 141.513355][ T9266] netlink: 52 bytes leftover after parsing attributes in process `syz.3.927'. [ 141.573748][ T9261] syzkaller0: entered promiscuous mode [ 141.580550][ T9261] syzkaller0: entered allmulticast mode [ 141.606922][ T9270] netlink: 32 bytes leftover after parsing attributes in process `syz.0.928'. [ 141.608141][ T9271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.928'. [ 141.687791][ T9264] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 141.701280][ T9277] netlink: 36 bytes leftover after parsing attributes in process `syz.1.929'. [ 141.808644][ T9279] netlink: 36 bytes leftover after parsing attributes in process `syz.4.930'. [ 143.443295][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.941'. [ 143.460671][ T9313] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 143.515759][ T9313] bond3: entered promiscuous mode [ 143.521293][ T9313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.555690][ T9313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.566214][ T9313] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 143.579991][ T9313] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 143.597813][ T9313] bond3: (slave ip6gre1): making interface the new active one [ 143.607154][ T9327] sctp: [Deprecated]: syz.0.943 (pid 9327) Use of int in max_burst socket option deprecated. [ 143.607154][ T9327] Use struct sctp_assoc_value instead [ 143.634111][ T9313] ip6gre1: entered promiscuous mode [ 143.643077][ T9313] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 143.959326][ T9347] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 144.199773][ T9352] bond5: entered promiscuous mode [ 144.210463][ T9362] __nla_validate_parse: 2 callbacks suppressed [ 144.210483][ T9362] netlink: 128 bytes leftover after parsing attributes in process `syz.1.949'. [ 144.255245][ T9357] nftables ruleset with unbound set [ 144.263236][ T9352] bond5: entered allmulticast mode [ 144.305126][ T9352] 8021q: adding VLAN 0 to HW filter on device bond5 [ 144.312155][ T9362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.949'. [ 144.486869][ T9375] sctp: [Deprecated]: syz.4.953 (pid 9375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.486869][ T9375] Use struct sctp_sack_info instead [ 144.523071][ T9378] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 144.721714][ T9392] netlink: 496 bytes leftover after parsing attributes in process `syz.0.958'. [ 144.861999][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 144.867845][ T9402] team_slave_0: entered allmulticast mode [ 144.932938][ T9403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.960'. [ 145.006631][ T9412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.960'. [ 145.120775][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.963'. [ 145.140219][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 145.164527][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.963'. [ 145.215839][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.964'. [ 145.614781][ T9441] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 145.835927][ T9460] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 145.922189][ T9463] netlink: 'syz.2.976': attribute type 7 has an invalid length. [ 145.939235][ T9463] netlink: 'syz.2.976': attribute type 8 has an invalid length. [ 146.324046][ T9487] tipc: MTU too low for tipc bearer [ 146.380730][ T9497] bond8: option fail_over_mac: invalid value (16) [ 146.391612][ T9497] bond8 (unregistering): Released all slaves [ 146.432982][ T9503] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.697046][ T9512] ip6gre1: entered allmulticast mode [ 146.716830][ T9517] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 146.782151][ T9517] bond8: entered promiscuous mode [ 146.792588][ T9517] 8021q: adding VLAN 0 to HW filter on device bond8 [ 146.853766][ T9521] netlink: 'syz.4.996': attribute type 1 has an invalid length. [ 147.020758][ T9530] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.565783][ T9547] nbd1: detected capacity change from 0 to 127 [ 147.576279][ T5824] block nbd1: Receive control failed (result -32) [ 147.586339][ T6650] block nbd1: Dead connection, failed to find a fallback [ 147.625243][ T6650] block nbd1: shutting down sockets [ 147.631277][ T6650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.717640][ T9560] netlink: 'syz.4.1009': attribute type 21 has an invalid length. [ 147.724671][ T6650] Buffer I/O error on dev nbd1, logical block 0, async page read [ 147.735285][ T6650] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.737214][ T9560] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.767262][ T9563] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 147.770496][ T6650] Buffer I/O error on dev nbd1, logical block 1, async page read [ 147.775436][ T9560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.790289][ T9560] IPv6: NLM_F_CREATE should be set when creating new route [ 147.797783][ T9560] IPv6: NLM_F_CREATE should be set when creating new route [ 147.805145][ T9560] IPv6: NLM_F_CREATE should be set when creating new route [ 147.832495][ T6650] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.854007][ T6650] Buffer I/O error on dev nbd1, logical block 2, async page read [ 147.866160][ T6650] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.880772][ T6650] Buffer I/O error on dev nbd1, logical block 3, async page read [ 147.906315][ T6650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.909345][ T9560] netlink: 'syz.4.1009': attribute type 4 has an invalid length. [ 147.935543][ T6650] Buffer I/O error on dev nbd1, logical block 0, async page read [ 147.947819][ T9563] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 147.957245][ T6650] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 147.990020][ T6650] Buffer I/O error on dev nbd1, logical block 1, async page read [ 148.032359][ T6650] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.055915][ T6650] Buffer I/O error on dev nbd1, logical block 2, async page read [ 148.115735][ T6650] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.167142][ T6650] Buffer I/O error on dev nbd1, logical block 3, async page read [ 148.183117][ T6650] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.198596][ T6650] Buffer I/O error on dev nbd1, logical block 0, async page read [ 148.223162][ T6650] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 148.243492][ T6650] Buffer I/O error on dev nbd1, logical block 1, async page read [ 148.287828][ T6650] ldm_validate_partition_table(): Disk read failed. [ 148.325675][ T6650] Dev nbd1: unable to read RDB block 0 [ 148.339094][ T6650] nbd1: unable to read partition table [ 148.362886][ T6650] ldm_validate_partition_table(): Disk read failed. [ 148.375871][ T9593] netlink: 'syz.2.1017': attribute type 12 has an invalid length. [ 148.393837][ T6650] Dev nbd1: unable to read RDB block 0 [ 148.406674][ T6650] nbd1: unable to read partition table [ 148.774146][ T9615] macsec1: entered promiscuous mode [ 149.011211][ T9625] vcan1: entered promiscuous mode [ 149.018558][ T9625] vcan1: entered allmulticast mode [ 149.258097][ T9644] __nla_validate_parse: 25 callbacks suppressed [ 149.258116][ T9644] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1031'. [ 149.494172][ T9630] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.501539][ T9630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.510081][ T9630] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.517438][ T9630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.581839][ T9637] syzkaller1: entered promiscuous mode [ 149.606589][ T9637] syzkaller1: entered allmulticast mode [ 149.808660][ T9654] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 149.866125][ T9658] delete_channel: no stack [ 149.878114][ T9659] xt_hashlimit: max too large, truncated to 1048576 [ 149.945920][ T9660] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 150.015025][ T9660] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 150.070590][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1034'. [ 150.095644][ T9660] bond4: (slave ip6gre1): making interface the new active one [ 150.145248][ T9660] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 150.202953][ T9683] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1041'. [ 150.356786][ T9695] netlink: zone id is out of range [ 150.362399][ T9695] netlink: zone id is out of range [ 150.387176][ T9695] netlink: zone id is out of range [ 150.413713][ T9695] netlink: zone id is out of range [ 150.423846][ T9695] netlink: zone id is out of range [ 150.456616][ T9695] netlink: zone id is out of range [ 150.461798][ T9695] netlink: zone id is out of range [ 150.494605][ T9695] netlink: zone id is out of range [ 150.500152][ T9695] netlink: zone id is out of range [ 150.521103][ T9695] netlink: zone id is out of range [ 150.894063][ T9730] pim6reg527: entered allmulticast mode [ 150.921938][ T9739] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1059'. [ 151.257075][ T9749] veth5: entered allmulticast mode [ 151.440623][ T9756] netlink: 'syz.1.1065': attribute type 2 has an invalid length. [ 151.450154][ T9756] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1065'. [ 151.508363][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1065'. [ 151.530984][ T9761] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1068'. [ 151.683834][ T9772] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 151.692285][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1069'. [ 151.816184][ T9780] syzkaller0: entered promiscuous mode [ 151.853266][ T9780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1072'. [ 151.956526][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 152.172206][ T9801] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 152.192138][ T9801] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 152.210147][ T9801] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 152.252653][ T9801] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 152.315938][ T9801] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 153.274193][ T9886] sctp: [Deprecated]: syz.4.1094 (pid 9886) Use of int in max_burst socket option. [ 153.274193][ T9886] Use struct sctp_assoc_value instead [ 153.384732][ T9891] IPv6: sit2: Disabled Multicast RS [ 153.598106][ T9907] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 153.607315][ T9907] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 153.831948][ T9921] dvmrp0: entered allmulticast mode [ 154.030562][ T9925] tipc: Enabling of bearer rejected, already enabled [ 154.372167][ T9951] netlink: 'syz.0.1111': attribute type 12 has an invalid length. [ 154.403464][ T9951] netlink: 'syz.0.1111': attribute type 29 has an invalid length. [ 154.439815][ T9951] __nla_validate_parse: 7 callbacks suppressed [ 154.439835][ T9951] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1111'. [ 154.461061][ T9951] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1111'. [ 154.483728][ T9952] macvtap2: entered promiscuous mode [ 154.496803][ T9952] macvtap2: entered allmulticast mode [ 154.519460][ T9963] xt_TCPMSS: Only works on TCP SYN packets [ 154.656931][ T9979] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1120'. [ 154.784010][ T3517] nci: nci_ntf_packet: unsupported ntf opcode 0xf3c [ 154.811473][ T9991] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 154.910636][T10005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1125'. [ 154.920551][T10005] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.928255][T10005] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.986278][T10007] syzkaller0: entered promiscuous mode [ 154.991982][T10007] syzkaller0: entered allmulticast mode [ 155.107559][T10011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1127'. [ 155.183268][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 155.192406][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 155.209374][ T9849] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.209496][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 155.219046][ T9849] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.228486][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 155.237854][ T9849] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.256438][ T9849] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.444960][ T9976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.661231][T10022] syzkaller0: entered promiscuous mode [ 155.675027][T10022] syzkaller0: entered allmulticast mode [ 155.694532][T10024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.978122][T10047] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1138'. [ 156.151764][T10052] net_ratelimit: 53 callbacks suppressed [ 156.151785][T10052] TC_ACT_REPEAT abuse ? [ 156.329898][T10053] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 157.023786][T10105] team0: Device gtp1 is up. Set it down before adding it as a team port [ 157.115480][T10108] syzkaller0: entered promiscuous mode [ 157.123294][T10108] syzkaller0: entered allmulticast mode [ 159.265377][T10084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.149228][T10137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.159815][T10137] netlink: 'syz.2.1158': attribute type 1 has an invalid length. [ 160.200676][T10137] bond9: entered promiscuous mode [ 160.206495][T10137] 8021q: adding VLAN 0 to HW filter on device bond9 [ 160.269722][T10137] 8021q: adding VLAN 0 to HW filter on device bond9 [ 160.285647][T10137] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 160.299428][T10150] __nla_validate_parse: 4 callbacks suppressed [ 160.299447][T10150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1159'. [ 160.315420][T10137] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 160.336214][T10152] netlink: 'syz.3.1163': attribute type 21 has an invalid length. [ 160.340108][T10137] bond9: (slave ip6gre1): making interface the new active one [ 160.352197][T10137] ip6gre1: entered promiscuous mode [ 160.359506][T10137] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 160.370267][T10146] wg1 speed is unknown, defaulting to 1000 [ 160.372513][T10152] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1163'. [ 160.419361][T10157] netlink: 'syz.1.1164': attribute type 30 has an invalid length. [ 160.447044][T10146] wg1 speed is unknown, defaulting to 1000 [ 160.487943][T10159] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.496732][T10146] wg1 speed is unknown, defaulting to 1000 [ 160.527588][T10146] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 160.552274][T10155] erspan0: entered promiscuous mode [ 160.571844][T10159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1165'. [ 160.623778][T10146] wg1 speed is unknown, defaulting to 1000 [ 160.662815][T10146] wg1 speed is unknown, defaulting to 1000 [ 160.670691][T10146] wg1 speed is unknown, defaulting to 1000 [ 160.689959][T10146] wg1 speed is unknown, defaulting to 1000 [ 160.727289][T10146] wg1 speed is unknown, defaulting to 1000 [ 160.965668][T10186] netlink: 'syz.3.1172': attribute type 3 has an invalid length. [ 161.005319][T10186] netlink: 'syz.3.1172': attribute type 3 has an invalid length. [ 161.181847][T10197] sit0: entered promiscuous mode [ 161.192182][T10211] netlink: 'syz.3.1180': attribute type 11 has an invalid length. [ 161.211192][T10211] netlink: 'syz.3.1180': attribute type 4 has an invalid length. [ 161.220798][T10197] netlink: 'syz.0.1176': attribute type 1 has an invalid length. [ 161.229105][T10197] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1176'. [ 161.235114][T10211] netlink: 169012 bytes leftover after parsing attributes in process `syz.3.1180'. [ 161.264288][T10215] netlink: 'syz.4.1178': attribute type 9 has an invalid length. [ 161.284221][T10215] netlink: 'syz.4.1178': attribute type 11 has an invalid length. [ 161.311965][T10215] netlink: 'syz.4.1178': attribute type 12 has an invalid length. [ 161.327300][T10215] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1178'. [ 161.354684][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 161.599851][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 161.697605][T10229] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.738471][T10236] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 161.776273][T10236] bond6: entered allmulticast mode [ 161.851093][T10246] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 161.920727][T10249] lo speed is unknown, defaulting to 1000 [ 161.928507][ T5827] Bluetooth: hci4: link tx timeout [ 161.936181][ T5827] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 161.945932][ T5827] Bluetooth: hci4: link tx timeout [ 161.951385][ T5827] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.963462][T10249] wg1 speed is unknown, defaulting to 1000 [ 162.410030][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'. [ 162.455724][ T5827] Bluetooth: hci4: command tx timeout [ 162.855042][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'. [ 163.092277][T10338] openvswitch: netlink: Flow key attr not present in new flow. [ 163.100383][T10337] veth11: entered promiscuous mode [ 163.100412][T10337] veth11: entered allmulticast mode [ 163.198585][T10343] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 163.841463][T10389] xt_addrtype: ipv6 does not support BROADCAST matching [ 164.209888][T10412] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 164.339927][ T5970] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 164.351109][ T5970] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.365102][ T5970] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.374246][ T5970] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.534919][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 165.173832][T10468] ip6tnl3: entered promiscuous mode [ 166.614788][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 167.018769][T10400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.165195][T10502] __nla_validate_parse: 17 callbacks suppressed [ 167.165214][T10502] netlink: 320 bytes leftover after parsing attributes in process `syz.4.1240'. [ 167.199097][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 167.290845][T10512] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1242'. [ 167.357886][T10517] validate_nla: 7 callbacks suppressed [ 167.357907][T10517] netlink: 'syz.4.1246': attribute type 9 has an invalid length. [ 167.578541][T10531] netlink: 'syz.3.1250': attribute type 8 has an invalid length. [ 167.589027][T10534] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1252'. [ 167.601477][T10534] xt_policy: neither incoming nor outgoing policy selected [ 167.610269][T10527] netlink: 'syz.2.1249': attribute type 3 has an invalid length. [ 167.619781][T10533] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1252'. [ 167.630086][T10527] atomic_op ffff888033d47998 conn xmit_atomic 0000000000000000 [ 167.643494][T10533] xt_policy: neither incoming nor outgoing policy selected [ 167.785814][T10546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.838047][T10548] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1258'. [ 167.857019][T10549] syzkaller1: entered promiscuous mode [ 167.862819][T10549] syzkaller1: entered allmulticast mode [ 167.922064][T10554] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1260'. [ 167.978086][T10557] syzkaller1: entered promiscuous mode [ 167.983861][T10557] syzkaller1: entered allmulticast mode [ 168.130021][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'. [ 168.141459][T10571] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1263'. [ 168.192939][T10571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1263'. [ 168.241704][T10572] gtp0: entered promiscuous mode [ 168.247051][T10572] gtp0: entered allmulticast mode [ 168.345782][T10582] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 168.385010][T10582] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 168.394282][T10582] team0: Failed to send options change via netlink (err -105) [ 168.408019][T10582] team0: Port device batadv1 added [ 168.694683][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 168.802468][T10621] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 169.112349][T10642] netlink: 'syz.0.1281': attribute type 3 has an invalid length. [ 169.162240][T10639] lo speed is unknown, defaulting to 1000 [ 169.176304][T10639] wg1 speed is unknown, defaulting to 1000 [ 169.517117][T10680] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 169.762911][T10689] syzkaller0: entered promiscuous mode [ 169.769615][T10689] syzkaller0: entered allmulticast mode [ 169.904671][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 169.913822][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 169.922254][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 169.932688][ T1974] block nbd0: Dead connection, failed to find a fallback [ 169.946292][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 169.953668][ T1974] block nbd0: shutting down sockets [ 169.960297][ T1974] blk_print_req_error: 138 callbacks suppressed [ 169.960311][ T1974] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.979852][ T1974] buffer_io_error: 138 callbacks suppressed [ 169.979868][ T1974] Buffer I/O error on dev nbd0, logical block 1, async page read [ 169.995674][ T1974] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 170.005562][ T1974] Buffer I/O error on dev nbd0, logical block 0, async page read [ 170.013346][ T1974] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 170.022996][ T1974] Buffer I/O error on dev nbd0, logical block 3, async page read [ 170.030992][ T1974] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 170.040576][ T1974] Buffer I/O error on dev nbd0, logical block 2, async page read [ 170.050408][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 170.063388][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 170.071397][ T5820] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 170.095280][ T5820] Buffer I/O error on dev nbd0, logical block 1, async page read [ 170.105714][ T5820] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 170.119868][ T5820] Buffer I/O error on dev nbd0, logical block 2, async page read [ 170.141073][ T5820] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 170.150835][ T5820] Buffer I/O error on dev nbd0, logical block 3, async page read [ 170.159156][ T5820] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 170.169020][ T5820] Buffer I/O error on dev nbd0, logical block 0, async page read [ 170.177236][ T5820] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 170.186975][ T5820] Buffer I/O error on dev nbd0, logical block 1, async page read [ 170.195685][ T5820] ldm_validate_partition_table(): Disk read failed. [ 170.202789][ T5820] Dev nbd0: unable to read RDB block 0 [ 170.209214][ T5820] nbd0: unable to read partition table [ 170.219980][ T5820] ldm_validate_partition_table(): Disk read failed. [ 170.227568][ T5820] Dev nbd0: unable to read RDB block 0 [ 170.233772][ T5820] nbd0: unable to read partition table [ 170.933154][T10729] xt_CONNSECMARK: invalid mode: 0 [ 171.426700][T10719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.751010][T10751] bond5: entered promiscuous mode [ 171.769961][T10751] bond5: entered allmulticast mode [ 171.795535][T10757] syzkaller1: entered promiscuous mode [ 171.801165][T10757] syzkaller1: entered allmulticast mode [ 172.066204][T10777] sctp: [Deprecated]: syz.2.1316 (pid 10777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.066204][T10777] Use struct sctp_sack_info instead [ 172.247624][T10797] __nla_validate_parse: 22 callbacks suppressed [ 172.247640][T10797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1322'. [ 172.257130][T10799] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1322'. [ 172.345126][T10799] veth0_macvtap: left promiscuous mode [ 172.448083][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 172.523223][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1327'. [ 172.946844][T10853] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 173.046514][T10860] xt_hashlimit: size too large, truncated to 1048576 [ 173.054655][T10861] –: renamed from vxcan1 (while UP) [ 173.086681][T10864] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 173.393767][T10891] netlink: get zone limit has 4 unknown bytes [ 173.404208][T10892] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1347'. [ 173.498805][T10903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.506950][T10901] netlink: 'syz.0.1349': attribute type 21 has an invalid length. [ 173.508953][T10903] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 176.066925][T10864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.307965][T10920] wireguard: wg2: Could not create IPv4 socket [ 176.373962][T10930] netlink: 'syz.3.1358': attribute type 1 has an invalid length. [ 176.426776][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 176.440152][T10930] 8021q: adding VLAN 0 to HW filter on device bond6 [ 176.464531][T10939] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 176.516506][T10939] bond6: entered allmulticast mode [ 176.524938][T10941] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1360'. [ 176.567952][T10930] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 176.672874][T10957] netlink: 'syz.4.1363': attribute type 10 has an invalid length. [ 176.703864][T10957] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 176.923796][T10974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1369'. [ 176.964859][T10974] : entered promiscuous mode [ 176.976824][T10975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1367'. [ 177.037549][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 177.191832][T10979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 177.585166][T10991] syzkaller0: entered promiscuous mode [ 177.590939][T10991] syzkaller0: entered allmulticast mode [ 177.762734][T10997] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 177.811820][T11005] tipc: Enabling of bearer rejected, failed to enable media [ 177.828908][T11005] tipc: Enabling of bearer rejected, failed to enable media [ 177.912087][T11013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1380'. [ 178.007377][T11015] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 178.018948][T11015] bond7 (unregistering): Released all slaves [ 178.167551][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1383'. [ 178.176847][T11017] openvswitch: netlink: Unknown nsh attribute 0 [ 178.216616][T11030] netlink: 'syz.2.1385': attribute type 24 has an invalid length. [ 178.562254][T11056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1391'. [ 178.699698][T11065] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 179.009237][T11084] netlink: 'syz.2.1401': attribute type 4 has an invalid length. [ 179.036575][T11084] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1401'. [ 179.200533][T11094] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.1406'. [ 179.287593][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 179.301544][T11105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1411'. [ 179.358648][T11105] bond7: entered promiscuous mode [ 179.366070][T11105] bond7: entered allmulticast mode [ 179.441721][T11122] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 180.163963][T11109] delete_channel: no stack [ 180.168830][T11109] delete_channel: no stack [ 182.193683][T11098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.807342][T11174] "syz.0.1430" (11174) uses obsolete ecb(arc4) skcipher [ 182.959065][T11185] openvswitch: netlink: Key type 30 is not supported [ 183.004340][T11161] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 183.042589][T11192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1435'. [ 183.055182][T11190] openvswitch: netlink: IP tunnel dst address not specified [ 183.064829][T11193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1435'. [ 183.093438][T11195] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1436'. [ 183.167920][T11199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1438'. [ 183.227161][T11205] xt_cgroup: xt_cgroup: no path or classid specified [ 183.257720][T11205] macvtap2: entered promiscuous mode [ 183.263638][T11205] macvtap2: entered allmulticast mode [ 183.489214][T11217] netlink: 'syz.3.1445': attribute type 12 has an invalid length. [ 183.523440][T11217] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1445'. [ 183.638814][T11233] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 183.692658][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1449'. [ 183.762801][T11241] tipc: Can't bind to reserved service type 2 [ 183.790167][T11232] syzkaller0: entered promiscuous mode [ 183.796671][T11232] syzkaller0: entered allmulticast mode [ 183.807865][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1452'. [ 183.938227][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 185.267551][T11257] ip6erspan0: entered promiscuous mode [ 185.395571][T11273] netlink: 'syz.4.1462': attribute type 5 has an invalid length. [ 185.437604][T11277] : entered promiscuous mode [ 185.791457][T11294] netem: change failed [ 185.796258][T11292] lo: entered allmulticast mode [ 185.814842][T11291] lo: left allmulticast mode [ 186.017950][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1472'. [ 186.045677][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1472'. [ 186.294702][T11335] netlink: 'syz.0.1479': attribute type 12 has an invalid length. [ 186.386058][T11336] syzkaller1: entered promiscuous mode [ 186.391579][T11336] syzkaller1: entered allmulticast mode [ 186.493535][T11342] veth1_vlan: left allmulticast mode [ 186.548513][ T12] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.567102][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.585364][T11349] : entered promiscuous mode [ 186.591851][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.612133][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.682687][T11357] veth1_macvtap: left promiscuous mode [ 186.695427][T11357] macsec0: entered promiscuous mode [ 186.701146][T11357] macsec0: entered allmulticast mode [ 186.761370][T11366] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 186.870679][T11366] 8021q: adding VLAN 0 to HW filter on device bond7 [ 187.023739][T11381] vlan1: entered allmulticast mode [ 187.055390][T11381] bond0: entered allmulticast mode [ 187.060561][T11381] bond_slave_0: entered allmulticast mode [ 187.089749][T11381] bond_slave_1: entered allmulticast mode [ 187.138631][T11391] netlink: zone id is out of range [ 187.157018][T11391] netlink: zone id is out of range [ 187.164165][T11391] netlink: zone id is out of range [ 187.171989][T11391] netlink: zone id is out of range [ 187.172807][T11399] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 187.178003][T11391] netlink: zone id is out of range [ 187.272906][T11403] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.280777][T11403] bridge0: port 1(1¾x9ÿ) entered disabled state [ 187.299035][T11403] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.306496][T11403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.313980][T11403] bridge0: port 1(1¾x9ÿ) entered blocking state [ 187.320473][T11403] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 187.351093][T11403] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.358480][T11403] bridge0: port 1(1¾x9ÿ) entered disabled state [ 188.370944][T11435] netlink: 'syz.2.1506': attribute type 3 has an invalid length. [ 190.007450][T11385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.310317][T11459] __nla_validate_parse: 41 callbacks suppressed [ 190.310336][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 190.342643][T11458] net_ratelimit: 138 callbacks suppressed [ 190.342663][T11458] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 190.372437][T11458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.583296][T11464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.600810][T11464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.682825][T11489] sctp: [Deprecated]: syz.1.1521 (pid 11489) Use of int in max_burst socket option deprecated. [ 190.682825][T11489] Use struct sctp_assoc_value instead [ 190.824543][ T168] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.859742][ T168] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.877654][ T168] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.747826][ T168] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.861097][T11510] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 191.906392][T11510] bond7 (unregistering): Released all slaves [ 191.948838][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 191.949614][T11516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1528'. [ 192.017277][T11523] netlink: 'syz.0.1530': attribute type 20 has an invalid length. [ 192.050029][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 192.118531][T11523] netlink: 'syz.0.1530': attribute type 20 has an invalid length. [ 192.127313][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 192.216276][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1532'. [ 192.262589][T11534] macsec1: entered promiscuous mode [ 192.282682][T11534] bridge0: entered promiscuous mode [ 192.306456][T11534] macsec1: entered allmulticast mode [ 192.322158][T11534] bridge0: entered allmulticast mode [ 192.332903][T11534] bridge0: port 4(macsec1) entered blocking state [ 192.348337][T11534] bridge0: port 4(macsec1) entered disabled state [ 192.377535][T11534] bridge0: left allmulticast mode [ 192.389449][T11534] bridge0: left promiscuous mode [ 192.624276][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1539'. [ 192.734747][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1538'. [ 193.241605][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'. [ 193.276584][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1544'. [ 194.179641][T11641] bond7 (unregistering): Released all slaves [ 194.860612][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.340300][T11591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.788052][T11701] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 196.804669][T11702] netlink: 'syz.4.1568': attribute type 4 has an invalid length. [ 196.940190][T11710] __nla_validate_parse: 1 callbacks suppressed [ 196.940216][T11710] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.1573'. [ 196.968717][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 196.970912][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 196.977441][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 196.987966][ T5824] Bluetooth: hci0: command 0x080f tx timeout [ 197.154794][T11716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1574'. [ 197.212979][T11728] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 197.760844][T11740] syzkaller0: entered allmulticast mode [ 197.777604][T11734] syzkaller1: entered promiscuous mode [ 197.790701][T11734] syzkaller1: entered allmulticast mode [ 197.811990][T11737] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 197.827275][T11740] syzkaller0 (unregistering): left allmulticast mode [ 197.865418][T11743] x_tables: unsorted entry at hook 3 [ 197.875966][T11734] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 197.904085][T11746] sctp: [Deprecated]: syz.2.1582 (pid 11746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.904085][T11746] Use struct sctp_sack_info instead [ 198.030763][T11751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1584'. [ 198.117332][T11755] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1586'. [ 198.372706][T11775] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 198.424855][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1592'. [ 198.426718][T11775] bond8: entered promiscuous mode [ 198.443770][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1592'. [ 198.443977][T11779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.473543][T11775] 8021q: adding VLAN 0 to HW filter on device bond8 [ 198.489230][T11783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.601337][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.609492][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.632029][T11787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.642004][T11792] nbd: couldn't find a device at index 1048580 [ 199.155462][T11810] netlink: 'syz.1.1603': attribute type 83 has an invalid length. [ 199.327779][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 199.343423][T11819] Bluetooth: MGMT ver 1.23 [ 199.407430][T11821] syzkaller0: entered promiscuous mode [ 199.413052][T11821] syzkaller0: entered allmulticast mode [ 199.722712][T11851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1617'. [ 199.748044][T11853] tipc: Enabling of bearer rejected, media not registered [ 199.944728][T11869] syzkaller0: entered promiscuous mode [ 199.951411][T11869] syzkaller0: entered allmulticast mode [ 199.959400][T11871] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 200.008343][T11869] syzkaller0: tun_net_xmit 14 [ 200.013779][T11869] syzkaller0: tun_net_xmit 14 [ 200.022030][T11873] syzkaller1: entered promiscuous mode [ 200.033604][T11873] syzkaller1: entered allmulticast mode [ 200.146917][T11880] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1625'. [ 200.206587][T11887] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1629'. [ 200.490529][T11906] netlink: 'syz.2.1634': attribute type 2 has an invalid length. [ 200.645503][T11905] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.652903][T11905] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.805766][T11905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.821244][T11905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.974812][ T5973] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.974983][ T24] wg1 speed is unknown, defaulting to 1000 [ 200.985869][ T5973] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.992653][ T24] syz2: Port: 1 Link DOWN [ 201.009233][ T5973] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.031423][ T5973] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.044650][T11930] syzkaller0: entered promiscuous mode [ 201.050441][T11930] syzkaller0: entered allmulticast mode [ 201.096977][ T5973] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.110283][ T5973] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.134925][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.152963][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.255265][T11949] nbd2: detected capacity change from 0 to 127 [ 201.292906][ T51] block nbd2: Receive control failed (result -104) [ 201.689881][ T168] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 201.721912][T12000] macvlan3: entered allmulticast mode [ 201.981413][T12022] __nla_validate_parse: 12 callbacks suppressed [ 201.981427][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'. [ 202.025434][T12024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.122071][T12030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1664'. [ 202.272791][T12036] netlink: 'syz.0.1667': attribute type 1 has an invalid length. [ 202.284545][T12038] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1666'. [ 202.293960][T12038] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1666'. [ 202.388161][T11980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.402228][T12029] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 202.511487][T12046] netlink: 'syz.1.1668': attribute type 8 has an invalid length. [ 202.516375][T12034] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1666'. [ 202.536952][T12044] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1669'. [ 202.559435][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1669'. [ 202.880841][T12074] netlink: 'syz.3.1676': attribute type 1 has an invalid length. [ 202.881205][T12077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1676'. [ 202.910813][T12079] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 202.948440][T12074] 8021q: adding VLAN 0 to HW filter on device bond9 [ 202.975024][T12087] netlink: 'syz.4.1677': attribute type 10 has an invalid length. [ 203.003911][T12079] bond9: entered promiscuous mode [ 203.010635][T12079] 8021q: adding VLAN 0 to HW filter on device bond9 [ 203.040017][T12063] bond9: (slave bridge6): making interface the new active one [ 203.055543][T12063] bridge6: entered promiscuous mode [ 203.066382][T12063] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 203.199674][T12099] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1680'. [ 203.342384][T12104] bridge_slave_0: left allmulticast mode [ 203.351896][T12104] bridge_slave_0: left promiscuous mode [ 203.361812][T12104] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.372788][T12104] bridge_slave_1: left allmulticast mode [ 203.380792][T12104] bridge_slave_1: left promiscuous mode [ 203.383239][T12108] netlink: 'syz.4.1683': attribute type 21 has an invalid length. [ 203.388020][T12104] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.407817][T12104] bond0: (slave bond_slave_0): Releasing backup interface [ 203.430233][T12104] bond0: (slave bond_slave_1): Releasing backup interface [ 203.452574][T12104] team0: Port device team_slave_0 removed [ 203.478330][T12104] team0: Port device team_slave_1 removed [ 203.485908][T12104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.494314][T12104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.504314][T12104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.512330][T12104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.522229][T12104] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.540552][T12108] netlink: 'syz.4.1683': attribute type 6 has an invalid length. [ 203.550123][T12108] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1683'. [ 203.569928][T12113] team0: Mode changed to "random" [ 203.846296][T12143] "syz.1.1696" (12143) uses obsolete ecb(arc4) skcipher [ 203.856228][T12143] netlink: 'syz.1.1696': attribute type 1 has an invalid length. [ 204.035905][T12151] ip6t_srh: unknown srh match flags 5F28 [ 204.194109][T12161] bond0: entered promiscuous mode [ 204.254251][T12166] vlan3: entered allmulticast mode [ 204.277907][T12166] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 204.288812][T12170] netlink: 'syz.1.1706': attribute type 2 has an invalid length. [ 204.483758][T12183] bond11: option xmit_hash_policy: invalid value (64) [ 204.535094][T12183] bond11 (unregistering): Released all slaves [ 204.648095][T12192] team0 (unregistering): Port device team_slave_0 removed [ 204.672541][T12192] team0 (unregistering): Port device team_slave_1 removed [ 204.686010][T12200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.836306][T12213] ip6gretap0: entered allmulticast mode [ 205.056835][T12220] team0: Port device team_slave_0 removed [ 205.089278][T12169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.538994][T12222] syzkaller0: entered promiscuous mode [ 206.544806][T12222] syzkaller0: entered allmulticast mode [ 206.568200][T12233] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 206.676133][T12240] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 207.012137][T12263] __nla_validate_parse: 13 callbacks suppressed [ 207.012157][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1732'. [ 207.034966][T12262] bond4: entered promiscuous mode [ 207.042580][T12262] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1733'. [ 207.206766][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1736'. [ 207.611102][T12285] netlink: 'syz.2.1740': attribute type 1 has an invalid length. [ 207.632652][T12285] 8021q: adding VLAN 0 to HW filter on device bond11 [ 208.099297][T12319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1750'. [ 208.107472][T12321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1749'. [ 208.108798][T12320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1750'. [ 208.131559][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1749'. [ 208.143890][T12322] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1748'. [ 208.190162][T12322] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 208.201736][T12322] bond7 (unregistering): Released all slaves [ 208.247572][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 208.261286][T12334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1752'. [ 208.283546][T10840] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 208.323154][T10843] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.341205][T10843] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.371487][T10843] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.448270][T12346] veth0: entered promiscuous mode [ 208.523883][T12349] veth0: left promiscuous mode [ 208.597400][T12348] batman_adv: batadv0: Adding interface: dummy0 [ 208.603948][T12348] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.630112][T12348] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 208.745708][T12366] syzkaller0: entered promiscuous mode [ 209.738389][T12380] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 210.296505][T12376] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 210.471880][T12417] openvswitch: netlink: IP tunnel dst address not specified [ 210.481540][T12415] netlink: 'syz.3.1777': attribute type 7 has an invalid length. [ 210.498392][T12409] openvswitch: netlink: IP tunnel dst address not specified [ 210.934463][ T5832] Bluetooth: hci0: command 0x080f tx timeout [ 211.133762][T12464] netlink: 'syz.2.1791': attribute type 1 has an invalid length. [ 211.158258][T12464] netlink: 'syz.2.1791': attribute type 11 has an invalid length. [ 211.316994][T12480] netlink: 'syz.1.1795': attribute type 2 has an invalid length. [ 212.198826][T12509] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 212.315314][T12548] netlink: 'syz.4.1818': attribute type 8 has an invalid length. [ 212.508234][T12552] syzkaller1: entered promiscuous mode [ 212.556631][T12552] syzkaller1: entered allmulticast mode [ 212.575893][T12552] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 212.596360][T12566] netlink: 'syz.0.1824': attribute type 30 has an invalid length. [ 212.641823][T12569] __nla_validate_parse: 20 callbacks suppressed [ 212.641842][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1825'. [ 212.706763][T12569] netlink: 'syz.4.1825': attribute type 24 has an invalid length. [ 212.998794][T12578] bond5: Unable to set down delay as MII monitoring is disabled [ 213.043936][T12578] bond5 (unregistering): Released all slaves [ 213.255821][T12595] netlink: 'syz.0.1830': attribute type 10 has an invalid length. [ 213.319104][T12595] team0 (unregistering): Port device team_slave_1 removed [ 213.370938][T12595] team0 (unregistering): Port device batadv1 removed [ 213.405523][T12601] netlink: 'syz.3.1832': attribute type 8 has an invalid length. [ 213.422175][T12601] sch_fq: defrate 0 ignored. [ 213.741296][T12622] lo speed is unknown, defaulting to 1000 [ 214.160976][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1844'. [ 214.276683][T12646] gretap1: entered promiscuous mode [ 214.283895][T12646] batman_adv: batadv0: Adding interface: gretap1 [ 214.290730][T12646] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 214.319303][T12646] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 214.621888][T12679] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1850'. [ 214.687651][T12683] vlan3: entered allmulticast mode [ 214.785138][T12686] dvmrp0: entered allmulticast mode [ 215.025239][T12717] x_tables: unsorted entry at hook 2 [ 215.163351][T12726] netlink: 'syz.0.1864': attribute type 1 has an invalid length. [ 215.169944][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 215.177019][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 215.192049][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 215.459136][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1869'. [ 215.605934][T12758] validate_nla: 4 callbacks suppressed [ 215.605954][T12758] netlink: 'syz.1.1873': attribute type 10 has an invalid length. [ 215.733657][T12758] syzkaller0: entered promiscuous mode [ 215.754640][T12758] syzkaller0: entered allmulticast mode [ 215.775577][T12760] syzkaller1: entered promiscuous mode [ 215.792656][T12760] syzkaller1: entered allmulticast mode [ 215.948585][T12783] xt_TCPMSS: Only works on TCP SYN packets [ 217.545570][T12802] netlink: 'syz.2.1880': attribute type 1 has an invalid length. [ 217.567519][T12802] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 217.656346][T12815] openvswitch: netlink: IP tunnel TTL not specified. [ 217.677342][T12815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1883'. [ 217.703654][T12815] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1883'. [ 217.746971][T12815] gretap2: entered promiscuous mode [ 217.766569][T12815] gretap2: entered allmulticast mode [ 217.805412][T12833] bond1: option mode: unable to set because the bond device has slaves [ 217.859018][T12833] sit3: entered promiscuous mode [ 217.876247][T12833] sit3: entered allmulticast mode [ 217.897753][T12837] netlink: 'syz.1.1890': attribute type 1 has an invalid length. [ 217.946883][T12843] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1889'. [ 217.958169][T12837] 8021q: adding VLAN 0 to HW filter on device bond8 [ 217.982527][T12843] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 218.025426][T12845] bond8: option mode: unable to set because the bond device is up [ 218.050771][T12844] 8021q: adding VLAN 0 to HW filter on device bond8 [ 218.065938][T12844] bond8: (slave vcan0): The slave device specified does not support setting the MAC address [ 218.078577][T12844] bond8: (slave vcan0): Error -95 calling set_mac_address [ 218.248128][T12871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1898'. [ 218.548162][T12890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1903'. [ 218.862483][T12914] netlink: 'syz.3.1910': attribute type 1 has an invalid length. [ 218.902437][T12914] netlink: 'syz.3.1910': attribute type 3 has an invalid length. [ 218.925065][T12904] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 218.948100][T12914] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1910'. [ 219.297910][T12945] tipc: Enabling of bearer rejected, failed to enable media [ 219.304832][T12953] netlink: 'syz.0.1918': attribute type 17 has an invalid length. [ 219.314328][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1918'. [ 219.323439][T12953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1918'. [ 219.327374][T12952] openvswitch: netlink: IPv4 tun info is not correct [ 219.362771][T12953] gretap0: entered promiscuous mode [ 219.467447][T12953] gretap0: left promiscuous mode [ 219.517588][T12956] netlink: 'syz.3.1919': attribute type 1 has an invalid length. [ 219.582005][T12972] netlink: 'syz.2.1923': attribute type 1 has an invalid length. [ 219.602583][T12972] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1923'. [ 219.617952][T12972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1923'. [ 219.670276][T12972] netlink: 'syz.2.1923': attribute type 7 has an invalid length. [ 219.685631][T12976] netlink: 'syz.4.1925': attribute type 32 has an invalid length. [ 219.881116][T12991] 8021q: VLANs not supported on ip6tnl0 [ 219.933717][T13001] sctp: [Deprecated]: syz.0.1934 (pid 13001) Use of int in maxseg socket option. [ 219.933717][T13001] Use struct sctp_assoc_value instead [ 220.123726][T13009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.228612][T13014] ipvlan2: entered allmulticast mode [ 220.242521][T13014] syz_tun: entered allmulticast mode [ 220.257648][ T5832] block nbd3: Receive control failed (result -32) [ 220.463589][T13033] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20001 [ 221.035328][T13082] netem: invalid attributes len -24 [ 221.426190][T13111] validate_nla: 1 callbacks suppressed [ 221.426210][T13111] netlink: 'syz.3.1965': attribute type 1 has an invalid length. [ 221.753638][T13115] macvlan2: entered promiscuous mode [ 221.766963][T13115] macvlan2: entered allmulticast mode [ 221.783133][T13115] bond10: entered promiscuous mode [ 221.799792][T13115] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 221.824933][T13115] bond10: left promiscuous mode [ 222.095633][T13135] netlink: 'syz.4.1970': attribute type 1 has an invalid length. [ 222.242573][T13148] netlink: 'syz.1.1977': attribute type 3 has an invalid length. [ 222.253239][T13148] netlink: 'syz.1.1977': attribute type 1 has an invalid length. [ 222.279477][T13148] netlink: 'syz.1.1977': attribute type 3 has an invalid length. [ 222.304314][T13148] netlink: 'syz.1.1977': attribute type 1 has an invalid length. [ 222.388006][T13160] netlink: 'syz.0.1979': attribute type 2 has an invalid length. [ 222.413642][T13160] netlink: 'syz.0.1979': attribute type 2 has an invalid length. [ 222.452535][T13163] netlink: 'syz.1.1980': attribute type 21 has an invalid length. [ 222.491522][T13163] netlink: 'syz.1.1980': attribute type 6 has an invalid length. [ 222.717670][T13180] __nla_validate_parse: 26 callbacks suppressed [ 222.717692][T13180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1984'. [ 222.812478][T13188] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1984'. [ 222.880476][T13194] veth0: entered promiscuous mode [ 222.889768][T13194] veth0: left promiscuous mode [ 223.109301][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 223.118919][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1992'. [ 223.188570][T13212] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 223.374794][T13224] IPVS: Unknown mcast interface: vcan0 [ 223.490975][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1996'. [ 223.575478][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 224.068093][T13288] team0: Device gtp1 is up. Set it down before adding it as a team port [ 224.251303][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2012'. [ 224.333966][T13311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2015'. [ 224.505703][T13324] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2019'. [ 224.597794][T13339] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2021'. [ 225.230473][T13396] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.573049][T13425] syzkaller0: entered promiscuous mode [ 225.588650][T13425] syzkaller0: entered allmulticast mode [ 225.770461][T13443] xt_ecn: cannot match TCP bits for non-tcp packets [ 225.890204][T13452] syzkaller0: entered promiscuous mode [ 225.901231][T13452] syzkaller0: entered allmulticast mode [ 225.955730][T13458] team0 (unregistering): Port device team_slave_0 removed [ 225.995671][T13458] team0 (unregistering): Port device team_slave_1 removed [ 226.229774][T13479] syzkaller0: entered promiscuous mode [ 226.242996][T13479] syzkaller0: entered allmulticast mode [ 226.437000][T13492] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 226.459847][T13492] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 226.475576][T13492] bond5: (slave ip6gre2): making interface the new active one [ 226.484239][T13492] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 226.492337][T13500] validate_nla: 3 callbacks suppressed [ 226.492355][T13500] netlink: 'syz.2.2072': attribute type 10 has an invalid length. [ 226.685594][T10843] tipc: Subscription rejected, illegal request [ 226.790749][T13523] netlink: 'syz.2.2079': attribute type 8 has an invalid length. [ 226.848819][T13525] xt_hashlimit: size too large, truncated to 1048576 [ 227.181733][T13548] netlink: 'syz.1.2086': attribute type 22 has an invalid length. [ 227.204967][T13548] netlink: 'syz.1.2086': attribute type 22 has an invalid length. [ 227.255473][T13555] netlink: 'syz.3.2089': attribute type 1 has an invalid length. [ 227.468370][T13555] bond11: (slave bridge8): Enslaving as a backup interface with an up link [ 227.568153][T13586] openvswitch: netlink: Missing key (keys=40, expected=80) [ 227.631253][T13567] bond11: (slave bridge9): Enslaving as a backup interface with a down link [ 227.652026][T13588] netlink: 'syz.0.2099': attribute type 4 has an invalid length. [ 227.660813][T13590] netlink: 'syz.0.2099': attribute type 4 has an invalid length. [ 227.850055][T13594] lo speed is unknown, defaulting to 1000 [ 227.920886][T13608] __nla_validate_parse: 18 callbacks suppressed [ 227.920904][T13608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2107'. [ 227.987049][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2106'. [ 227.997823][T13610] nbd: must specify a device to reconfigure [ 228.011211][T13619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.038623][T13620] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2108'. [ 228.098572][ T5973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.108326][ T5973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.137642][T13615] syzkaller0: entered promiscuous mode [ 228.155686][T13615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2108'. [ 228.330266][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 230.187895][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2118'. [ 230.336821][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2121'. [ 230.353375][T13692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2121'. [ 230.379666][T13695] netlink: 'syz.0.2123': attribute type 1 has an invalid length. [ 230.398100][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'. [ 230.411209][T13695] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2123'. [ 230.428034][T13695] netlink: 'syz.0.2123': attribute type 1 has an invalid length. [ 230.436452][T13695] netlink: 'syz.0.2123': attribute type 8 has an invalid length. [ 230.569981][T13710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.762936][T13725] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 231.337764][ T5208] block nbd2: Possible stuck request ffff8880271c0000: control (read@0,1024B). Runtime 30 seconds [ 231.350976][ T5208] block nbd2: Possible stuck request ffff8880271c0200: control (read@1024,1024B). Runtime 30 seconds [ 231.362356][ T5208] block nbd2: Possible stuck request ffff8880271c0400: control (read@2048,1024B). Runtime 30 seconds [ 231.374742][ T5208] block nbd2: Possible stuck request ffff8880271c0600: control (read@3072,1024B). Runtime 30 seconds [ 231.819781][T13806] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 232.474134][T13854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.598861][T13865] x_tables: duplicate underflow at hook 2 [ 232.606968][T13865] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.962132][T13884] __nla_validate_parse: 9 callbacks suppressed [ 232.962150][T13884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2177'. [ 233.040354][T13865] validate_nla: 1 callbacks suppressed [ 233.040374][T13865] netlink: 'syz.2.2173': attribute type 29 has an invalid length. [ 233.054637][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'. [ 233.070633][T13865] netlink: 'syz.2.2173': attribute type 29 has an invalid length. [ 233.081701][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'. [ 233.091968][T13830] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 233.177383][T13891] x_tables: duplicate underflow at hook 3 [ 233.195117][T13891] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2181'. [ 233.207932][T13894] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 233.248965][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2180'. [ 233.499711][T13917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2187'. [ 233.507363][T13916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2189'. [ 233.518089][T13916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2189'. [ 233.533645][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2186'. [ 233.548901][T13919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2188'. [ 233.700165][T13929] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.232322][T13968] lo speed is unknown, defaulting to 1000 [ 234.244285][T13968] wg1 speed is unknown, defaulting to 1000 [ 234.292471][T13975] openvswitch: netlink: Duplicate or invalid key (type 0). [ 234.301984][ T5832] Bluetooth: hci0: command 0x080f tx timeout [ 234.316830][T13975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.383803][T13977] gtp1: entered promiscuous mode [ 234.401203][T13977] gtp1: entered allmulticast mode [ 234.555575][T13984] netlink: 'syz.3.2210': attribute type 1 has an invalid length. [ 234.566416][T13985] netlink: 'syz.1.2211': attribute type 1 has an invalid length. [ 234.720625][T13984] 8021q: adding VLAN 0 to HW filter on device bond12 [ 234.759398][T13997] bond12: (slave batadv1): Opening slave failed [ 234.824242][T13990] bond12: (slave veth17): Enslaving as an active interface with a down link [ 235.168207][T14022] netlink: 'syz.3.2224': attribute type 8 has an invalid length. [ 235.245692][T14027] syzkaller1: entered promiscuous mode [ 235.262099][T14027] syzkaller1: entered allmulticast mode [ 235.601122][T14052] sctp: [Deprecated]: syz.0.2230 (pid 14052) Use of int in maxseg socket option. [ 235.601122][T14052] Use struct sctp_assoc_value instead [ 235.748264][T14063] netlink: 'syz.3.2229': attribute type 1 has an invalid length. [ 236.345755][T14111] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 236.975795][T14171] openvswitch: netlink: Key type 118 is out of range max 32 [ 237.270362][T14187] syzkaller0: entered promiscuous mode [ 237.276155][T14187] syzkaller0: entered allmulticast mode [ 238.802557][T14199] bond6: entered promiscuous mode [ 238.808766][T14199] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.827919][T14220] netlink: 'syz.0.2276': attribute type 2 has an invalid length. [ 238.840408][T14230] sctp: [Deprecated]: syz.3.2277 (pid 14230) Use of int in maxseg socket option. [ 238.840408][T14230] Use struct sctp_assoc_value instead [ 239.022783][T14246] __nla_validate_parse: 28 callbacks suppressed [ 239.022803][T14246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2279'. [ 239.139797][T14251] netlink: 404 bytes leftover after parsing attributes in process `syz.4.2281'. [ 239.273584][T14266] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20002 [ 239.290463][T14267] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20002 [ 239.517664][T14289] tls_set_device_offload: netdev not found [ 239.736815][T14304] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2293'. [ 239.751907][T14307] TC_ACT_REPEAT abuse ? [ 239.917775][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2294'. [ 239.976706][T14317] xt_hashlimit: size too large, truncated to 1048576 [ 239.982349][T14313] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2294'. [ 240.006360][T14320] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2297'. [ 240.015870][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2298'. [ 240.413109][T14351] netlink: 'syz.0.2303': attribute type 29 has an invalid length. [ 240.431105][T14351] netlink: 'syz.0.2303': attribute type 29 has an invalid length. [ 240.439265][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2304'. [ 240.439291][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2304'. [ 240.439324][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2304'. [ 240.488258][T14351] netlink: 'syz.0.2303': attribute type 10 has an invalid length. [ 240.515172][T14351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.532240][T14351] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 240.556709][T14351] netlink: 'syz.0.2303': attribute type 10 has an invalid length. [ 240.596600][T14351] batadv0: entered promiscuous mode [ 240.608890][T14351] batadv0: entered allmulticast mode [ 240.642578][T14351] bond0: (slave batadv0): Releasing backup interface [ 240.672847][T14351] bridge0: port 3(batadv0) entered blocking state [ 240.715717][T14351] bridge0: port 3(batadv0) entered disabled state [ 240.809051][T14382] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 240.901584][T14389] openvswitch: netlink: Flow actions attr not present in new flow. [ 241.057534][T14400] veth7: entered promiscuous mode [ 241.084624][T10843] batman_adv: batadv0: IGMP Querier appeared [ 241.091513][T10843] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 241.196861][T14410] xt_hashlimit: invalid rate [ 241.267305][T14414] netlink: 'syz.0.2324': attribute type 13 has an invalid length. [ 241.387375][T14423] tc_dump_action: action bad kind [ 241.412453][T14425] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 241.422769][T14425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.669786][T14445] lo speed is unknown, defaulting to 1000 [ 241.677785][T14445] wg1 speed is unknown, defaulting to 1000 [ 242.113956][T14474] xt_l2tp: missing protocol rule (udp|l2tpip) [ 242.130180][T14477] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 242.415240][T14488] syzkaller0: entered promiscuous mode [ 242.423263][T14488] syzkaller0: entered allmulticast mode [ 242.738037][T14521] bond0: entered promiscuous mode [ 242.759256][T14521] batadv0: entered promiscuous mode [ 242.788734][T14521] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 242.828415][T14521] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 242.879002][T14521] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 242.899105][T14521] bond0: left promiscuous mode [ 242.913890][T14521] batadv0: left promiscuous mode [ 242.978555][T14532] syzkaller1: entered promiscuous mode [ 243.020486][T14532] syzkaller1: entered allmulticast mode [ 243.234159][T14508] infiniband sy‡1: set down [ 243.240527][T14508] infiniband sy‡1: added bond0 [ 243.369459][T14508] RDS/IB: sy‡1: added [ 243.376737][T14508] smc: adding ib device sy‡1 with port count 1 [ 243.383838][T14508] smc: ib device sy‡1 port 1 has no pnetid [ 243.540507][T14568] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 243.697108][T14579] netlink: 'syz.0.2372': attribute type 1 has an invalid length. [ 243.712585][T14579] netlink: 'syz.0.2372': attribute type 1 has an invalid length. [ 243.901005][T14589] netlink: 'syz.3.2375': attribute type 1 has an invalid length. [ 244.039155][T14602] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 244.084108][T14603] __nla_validate_parse: 45 callbacks suppressed [ 244.084130][T14603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2378'. [ 244.103488][T14602] TCP: TCP_TX_DELAY enabled [ 244.116904][T14602] netlink: 'syz.4.2380': attribute type 4 has an invalid length. [ 244.139266][T14602] netlink: 816 bytes leftover after parsing attributes in process `syz.4.2380'. [ 244.157725][T14602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2380'. [ 244.375815][T14618] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2385'. [ 244.397418][T14623] netlink: 'syz.0.2387': attribute type 11 has an invalid length. [ 244.428869][T14623] netlink: 'syz.0.2387': attribute type 11 has an invalid length. [ 244.449155][T14624] lo speed is unknown, defaulting to 1000 [ 244.455739][T14623] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2387'. [ 244.485714][T14624] wg1 speed is unknown, defaulting to 1000 [ 244.595233][T14632] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2387'. [ 244.669546][T14639] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 244.721456][T14639] bond12 (unregistering): Released all slaves [ 244.808301][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2392'. [ 244.906880][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2394'. [ 244.916508][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2394'. [ 244.934529][T14653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2394'. [ 244.966528][T14655] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 244.973882][T14655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.999412][T14650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.728266][T14678] netlink: 'syz.3.2401': attribute type 1 has an invalid length. [ 245.877301][T14686] netlink: 'syz.4.2404': attribute type 10 has an invalid length. [ 245.915267][T14686] bond0: (slave ÿ): Enslaving as an active interface with an up link [ 246.101074][T14700] veth0: entered promiscuous mode [ 246.107951][T14699] veth0: left promiscuous mode [ 246.147192][T14702] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 246.382444][T14716] delete_channel: no stack [ 246.582689][T14732] openvswitch: netlink: Message has 4 unknown bytes. [ 246.704341][T14685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.870975][T14746] syzkaller0: entered promiscuous mode [ 246.882208][T14746] syzkaller0: entered allmulticast mode [ 246.902422][T14746] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 247.256399][T14760] netlink: 'syz.4.2429': attribute type 11 has an invalid length. [ 247.919666][T14805] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 247.991886][T14810] lo: entered allmulticast mode [ 248.006629][T14810] tunl0: entered allmulticast mode [ 248.027353][T14810] gre0: entered allmulticast mode [ 248.077405][T14810] gretap0: entered allmulticast mode [ 248.100595][T14810] erspan0: entered allmulticast mode [ 248.135506][T14810] ip_vti0: entered allmulticast mode [ 248.143020][T14810] ip6_vti0: entered allmulticast mode [ 248.155287][T14762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.162980][T14810] sit0: entered allmulticast mode [ 248.163517][T14762] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 248.192081][T14810] ip6tnl0: entered allmulticast mode [ 248.204755][T14762] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.210934][T14762] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 248.225931][T14810] ip6gre0: entered allmulticast mode [ 248.240801][T14810] syz_tun: entered allmulticast mode [ 248.241541][T14762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.263766][T14762] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 248.277516][T14762] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.294588][T14762] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 248.294993][T14810] bridge0: entered allmulticast mode [ 248.315894][T14810] bond0: entered allmulticast mode [ 248.321210][T14810] mac80211_hwsim hwsim7 ÿ: entered allmulticast mode [ 248.327646][T14762] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 248.336689][T14810] team0: entered allmulticast mode [ 248.352132][T14762] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 248.352758][T14810] dummy0: entered allmulticast mode [ 248.380083][T14810] nlmon0: entered allmulticast mode [ 248.394252][T14810] caif0: entered allmulticast mode [ 248.401387][T14810] vxcan0: entered allmulticast mode [ 248.408721][T14810] vxcan1: entered allmulticast mode [ 248.420529][T14810] veth0: entered allmulticast mode [ 248.446054][T14810] veth1: entered allmulticast mode [ 248.456061][T14810] wg0: entered allmulticast mode [ 248.463506][T14810] wg1: entered allmulticast mode [ 248.472263][T14810] wg2: entered allmulticast mode [ 248.496379][T14810] veth0_to_bridge: entered allmulticast mode [ 248.508998][T14810] bridge_slave_0: entered allmulticast mode [ 248.517398][T14810] veth1_to_bridge: entered allmulticast mode [ 248.528477][T14810] bridge_slave_1: entered allmulticast mode [ 248.538474][T14810] veth0_to_bond: entered allmulticast mode [ 248.547722][T14810] bond_slave_0: entered allmulticast mode [ 248.553925][T14810] veth1_to_bond: entered allmulticast mode [ 248.566194][T14810] bond_slave_1: entered allmulticast mode [ 248.581707][T14810] veth0_to_team: entered allmulticast mode [ 248.595514][T14810] veth1_to_team: entered allmulticast mode [ 248.616283][T14810] team_slave_1: entered allmulticast mode [ 248.622508][T14810] veth0_to_batadv: entered allmulticast mode [ 248.634613][T14810] batadv_slave_0: entered allmulticast mode [ 248.649914][T14810] veth1_to_batadv: entered allmulticast mode [ 248.665633][T14810] batadv_slave_1: entered allmulticast mode [ 248.685893][T14810] veth0_to_hsr: entered allmulticast mode [ 248.715450][T14810] hsr_slave_0: entered allmulticast mode [ 248.733804][T14810] veth1_to_hsr: entered allmulticast mode [ 248.754340][T14810] hsr_slave_1: entered allmulticast mode [ 248.763313][T14810] hsr0: entered allmulticast mode [ 248.772045][T14810] veth1_macvtap: entered allmulticast mode [ 248.789150][T14810] veth0_macvtap: entered allmulticast mode [ 248.806176][T14810] macsec0: entered allmulticast mode [ 248.815631][T14810] geneve0: entered allmulticast mode [ 248.827532][T14810] geneve1: entered allmulticast mode [ 248.842081][T14810] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 248.851628][T14810] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 248.866272][T14810] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 248.884741][T14810] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 248.903873][T14810] tap0: entered allmulticast mode [ 248.910285][T14810] macvlan2: entered allmulticast mode [ 248.917140][T14810] @: entered allmulticast mode [ 248.924923][T14810] veth2: entered allmulticast mode [ 248.930325][T14810] veth3: entered allmulticast mode [ 248.937707][T14810] vcan0: entered allmulticast mode [ 248.943474][T14810] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 248.952555][T14810] bridge1: entered allmulticast mode [ 248.958821][T14810] gre1: entered allmulticast mode [ 248.965018][T14810] bridge2: entered allmulticast mode [ 248.970734][T14810] bond1: entered allmulticast mode [ 248.976065][T14810] ip6gretap0: entered allmulticast mode [ 248.985272][T14810] ip6tnl1: entered allmulticast mode [ 248.991597][T14810] ip6erspan0: entered allmulticast mode [ 249.001828][T14810] bond3: entered allmulticast mode [ 249.012702][T14810] vti0: entered allmulticast mode [ 249.022745][T14810] veth4: entered allmulticast mode [ 249.029513][T14810] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 249.037244][T14810] mac80211_hwsim hwsim18 wlan2: entered allmulticast mode [ 249.044794][T14810] vti1: entered allmulticast mode [ 249.050153][T14810] gtp0: left promiscuous mode [ 249.056556][T14810] vlan2: entered allmulticast mode [ 249.061844][T14810] syztnl1: entered allmulticast mode [ 249.070374][T14810] macvlan3: entered allmulticast mode [ 249.076287][T14810] veth6: entered allmulticast mode [ 249.081646][T14810] veth7: entered allmulticast mode [ 249.087168][T14810] : entered allmulticast mode [ 249.092186][T14810] veth8: entered allmulticast mode [ 249.097930][T14810] veth9: entered allmulticast mode [ 249.103338][T14810] vlan1: entered allmulticast mode [ 249.109276][T14810] bridge3: entered allmulticast mode [ 249.114957][T14810] mac80211_hwsim hwsim21 wlan3: entered allmulticast mode [ 249.122521][T14810] syztnl0: entered allmulticast mode [ 249.128389][T14810] veth10: entered allmulticast mode [ 249.133919][T14810] veth11: entered allmulticast mode [ 249.139991][T14810] gre2: entered allmulticast mode [ 249.149122][T14810] bond4: left promiscuous mode [ 249.153918][T14810] bond4: entered allmulticast mode [ 249.159272][T14810] ip6tnl2: entered allmulticast mode [ 249.165011][T14810] bridge4: entered allmulticast mode [ 249.170390][T14810] vlan3: entered allmulticast mode [ 249.176068][T14810] sit1: entered allmulticast mode [ 249.190818][T14810] bridge5: entered allmulticast mode [ 249.198215][T14810] bond5: entered allmulticast mode [ 249.203375][T14810] ip6gre2: entered allmulticast mode [ 249.215926][T14810] bridge6: entered allmulticast mode [ 249.221784][T14810] wireguard0: entered allmulticast mode [ 249.232918][T14810] bond6: left promiscuous mode [ 249.244600][T14810] bond6: entered allmulticast mode [ 249.436014][ T5973] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.442734][T14843] __nla_validate_parse: 8 callbacks suppressed [ 249.442754][T14843] netlink: 155788 bytes leftover after parsing attributes in process `syz.4.2445'. [ 249.455085][ T5973] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.483246][ T5973] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.492617][ T5973] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.546105][ T5973] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.563661][ T5973] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.578972][ T5973] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.590613][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 249.600561][ T5973] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.704808][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 249.743412][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2449'. [ 249.761001][T14859] netlink: 'syz.4.2450': attribute type 5 has an invalid length. [ 249.782884][T14862] xfrm1: entered promiscuous mode [ 249.800356][T14862] xfrm1: entered allmulticast mode [ 250.197241][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2459'. [ 250.225640][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2459'. [ 250.254941][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2459'. [ 250.290895][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2459'. [ 250.483391][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2462'. [ 250.493583][T14918] sctp: [Deprecated]: syz.0.2465 (pid 14918) Use of int in max_burst socket option deprecated. [ 250.493583][T14918] Use struct sctp_assoc_value instead [ 250.588855][T14925] --map-set only usable from mangle table [ 250.697026][T14927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2467'. [ 250.940996][T14951] netlink: 'syz.0.2473': attribute type 1 has an invalid length. [ 251.046438][T14951] 8021q: adding VLAN 0 to HW filter on device bond11 [ 251.054347][T14952] syzkaller1: entered promiscuous mode [ 251.060194][T14952] syzkaller1: entered allmulticast mode [ 251.376947][ T29] audit: type=1804 audit(1776188664.540:3): pid=14980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2479" name="/newroot/528/cgroup.controllers" dev="tmpfs" ino=2705 res=1 errno=0 [ 251.407682][ T29] audit: type=1800 audit(1776188664.540:4): pid=14980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2479" name="cgroup.controllers" dev="tmpfs" ino=2705 res=0 errno=0 [ 251.449165][T14983] bond9: entered allmulticast mode [ 252.289290][T15039] netlink: 'syz.2.2496': attribute type 1 has an invalid length. [ 252.980126][T15094] netlink: 'syz.4.2508': attribute type 2 has an invalid length. [ 253.299697][T15108] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 253.708979][T15134] tipc: Started in network mode [ 253.724356][T15134] tipc: Node identity b6feff277d61, cluster identity 4711 [ 253.732080][T15134] tipc: Enabled bearer , priority 11 [ 253.788052][T15139] netlink: 'syz.4.2522': attribute type 1 has an invalid length. [ 253.824630][T15139] netlink: 'syz.4.2522': attribute type 1 has an invalid length. [ 254.708616][T15193] __nla_validate_parse: 15 callbacks suppressed [ 254.708636][T15193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2532'. [ 254.734858][ T5966] tipc: Node number set to 3416260391 [ 254.755011][T15193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2532'. [ 255.163811][T15222] bond1: (slave lo): Releasing backup interface [ 255.235343][T15222] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 255.288441][T15222] ¾x9ÿ: left allmulticast mode [ 255.293376][T15222] ¾x9ÿ: left promiscuous mode [ 255.344249][T15222] bridge0: port 1(1¾x9ÿ) entered disabled state [ 255.382220][T15222] bridge_slave_1: left allmulticast mode [ 255.428542][T15222] bridge_slave_1: left promiscuous mode [ 255.456796][T15222] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.497937][T15222] bond0: (slave bond_slave_0): Releasing backup interface [ 255.527018][T15222] bond_slave_0: left allmulticast mode [ 255.547705][T15222] bond0: (slave bond_slave_1): Releasing backup interface [ 255.576727][T15222] bond_slave_1: left allmulticast mode [ 255.582864][T15222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.592563][T15222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.610900][T15222] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.806345][T15262] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2545'. [ 255.838248][T15258] TC_ACT_REPEAT abuse ? [ 255.853797][T15258] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000 [ 255.875558][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2547'. [ 255.901231][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2547'. [ 256.006853][T15271] netlink: 796 bytes leftover after parsing attributes in process `syz.2.2548'. [ 256.046878][T15280] netlink: 'syz.1.2551': attribute type 13 has an invalid length. [ 256.090625][T15280] macvtap0: entered allmulticast mode [ 256.156154][T15280] macvtap0: refused to change device tx_queue_len [ 256.268842][T15300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2556'. [ 256.280540][T15302] bridge0: port 1(ipvlan2) entered blocking state [ 256.287607][T15300] openvswitch: netlink: Flow key attr not present in new flow. [ 256.300486][T15302] bridge0: port 1(ipvlan2) entered disabled state [ 256.303465][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.307545][T15302] ipvlan2: entered allmulticast mode [ 256.329145][T15302] bridge0: entered allmulticast mode [ 256.351312][T15302] ipvlan2: left allmulticast mode [ 256.363796][T15302] bridge0: left allmulticast mode [ 256.380527][T15309] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2558'. [ 256.515660][T15317] netlink: 'syz.0.2561': attribute type 12 has an invalid length. [ 256.609728][T15323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2562'. [ 256.633766][T15323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2562'. [ 256.855380][T15343] netlink: 'syz.0.2567': attribute type 33 has an invalid length. [ 257.337391][T15375] syzkaller0: entered promiscuous mode [ 257.342978][T15375] syzkaller0: entered allmulticast mode [ 259.095727][T15421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.323986][T15437] syzkaller0: entered promiscuous mode [ 259.350234][T15437] syzkaller0: entered allmulticast mode [ 260.090250][T15488] netlink: 'syz.3.2602': attribute type 10 has an invalid length. [ 260.291380][T15497] IPVS: set_ctl: invalid protocol: 55208 100.1.1.2:20001 [ 260.320580][T15497] __nla_validate_parse: 16 callbacks suppressed [ 260.320601][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2605'. [ 260.391266][T15504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2606'. [ 260.445634][T15506] syzkaller0: entered promiscuous mode [ 260.445696][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'. [ 260.461107][T15506] syzkaller0: entered allmulticast mode [ 260.461191][T15504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2606'. [ 260.585537][T15504] netlink: 'syz.1.2606': attribute type 4 has an invalid length. [ 260.842032][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2614'. [ 260.881399][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2615'. [ 260.902357][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2614'. [ 260.914746][T15539] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 260.922175][T15539] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 260.956567][T15539] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2615'. [ 260.996847][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2617'. [ 261.062855][T15550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.152171][T15539] tipc: Enabling of bearer rejected, failed to enable media [ 261.313648][T15556] syzkaller0: entered promiscuous mode [ 261.326614][T15556] syzkaller0: entered allmulticast mode [ 261.418851][ T5208] block nbd2: Possible stuck request ffff8880271c0000: control (read@0,1024B). Runtime 60 seconds [ 261.429743][ T5208] block nbd2: Possible stuck request ffff8880271c0200: control (read@1024,1024B). Runtime 60 seconds [ 261.441185][ T5208] block nbd2: Possible stuck request ffff8880271c0400: control (read@2048,1024B). Runtime 60 seconds [ 261.452727][ T5208] block nbd2: Possible stuck request ffff8880271c0600: control (read@3072,1024B). Runtime 60 seconds [ 261.717267][T15573] lo speed is unknown, defaulting to 1000 [ 261.754561][T15573] wg1 speed is unknown, defaulting to 1000 [ 261.820088][T15590] syzkaller0: entered promiscuous mode [ 261.826286][T15590] syzkaller0: entered allmulticast mode [ 261.839510][T15582] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2623'. [ 262.199580][T15602] netlink: 'syz.0.2631': attribute type 1 has an invalid length. [ 262.212586][T15602] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 262.213770][T15608] netlink: 'syz.1.2632': attribute type 11 has an invalid length. [ 262.250117][T15610] syzkaller0: entered promiscuous mode [ 262.273582][T15610] syzkaller0: entered allmulticast mode [ 262.846274][T15643] netlink: 'syz.3.2643': attribute type 30 has an invalid length. [ 262.988334][T15646] netlink: 'syz.4.2646': attribute type 1 has an invalid length. [ 263.006941][T15646] NCSI netlink: No device for ifindex 0 [ 263.217191][T15668] 8021q: adding VLAN 0 to HW filter on device bond14 [ 263.436718][T15691] bond_slave_1: entered promiscuous mode [ 263.455284][T15691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.490273][T15696] netlink: 'syz.1.2658': attribute type 10 has an invalid length. [ 264.435218][T15756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.539090][T15760] syzkaller0: entered promiscuous mode [ 264.564664][T15760] syzkaller0: entered allmulticast mode [ 264.691704][T15777] macsec3: entered allmulticast mode [ 264.714877][T15777] bridge0: port 4(macsec3) entered blocking state [ 264.732138][T15777] bridge0: port 4(macsec3) entered disabled state [ 264.787010][T15787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.090600][T15818] netlink: 'syz.4.2687': attribute type 2 has an invalid length. [ 265.519926][T15846] __nla_validate_parse: 13 callbacks suppressed [ 265.519947][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2692'. [ 265.607745][T15852] geneve2: entered promiscuous mode [ 265.628330][T10840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 41884 - 0 [ 265.660075][T10840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 41884 - 0 [ 265.671328][T10840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 41884 - 0 [ 265.682817][T10840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 41884 - 0 [ 265.702380][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2697'. [ 265.817372][T15869] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.865280][T15871] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2702'. [ 265.904171][T15871] syzkaller1: entered promiscuous mode [ 265.910688][T15871] syzkaller1: entered allmulticast mode [ 265.980703][T15877] netlink: 'syz.1.2703': attribute type 32 has an invalid length. [ 265.992288][T15877] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2703'. [ 266.122154][T15885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2708'. [ 266.158255][T15885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.214319][T15885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.385118][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 266.595472][T15909] netlink: 'syz.3.2713': attribute type 10 has an invalid length. [ 266.646535][T15909] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 266.655569][T15909] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 266.747615][T15917] netlink: 'syz.1.2715': attribute type 3 has an invalid length. [ 266.761326][T15917] netlink: 'syz.1.2715': attribute type 3 has an invalid length. [ 266.780145][T15917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2715'. [ 266.855669][T15921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2715'. [ 266.875200][T15921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2715'. [ 266.939485][T15926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2719'. [ 266.960071][T15928] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 267.148813][T15939] tipc: Started in network mode [ 267.164478][T15939] tipc: Node identity 0000140f, cluster identity 4711 [ 267.174805][T15939] tipc: Enabling of bearer rejected, failed to enable media [ 267.256976][T15942] xt_time: unknown flags 0xf4 [ 267.854062][T15982] validate_nla: 1 callbacks suppressed [ 267.854083][T15982] netlink: 'syz.0.2736': attribute type 21 has an invalid length. [ 267.871812][T15982] netlink: 'syz.0.2736': attribute type 4 has an invalid length. [ 267.882182][T15982] netlink: 'syz.0.2736': attribute type 5 has an invalid length. [ 268.512702][ T5193] udevd[5193]: worker [5820] /devices/virtual/block/nbd2 is taking a long time [ 288.831765][T16047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.873250][T16053] __nla_validate_parse: 8 callbacks suppressed [ 288.873272][T16053] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.2749'. [ 289.089346][T16067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2754'. [ 289.239077][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'. [ 289.550720][T16101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2765'. [ 289.658119][T16099] bond16: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 289.682389][T16099] bond16 (unregistering): Released all slaves [ 289.900068][T16120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.949128][T16126] netlink: 'syz.0.2771': attribute type 4 has an invalid length. [ 290.065059][T16129] syzkaller0: entered promiscuous mode [ 290.070716][T16129] syzkaller0: entered allmulticast mode [ 290.615963][T16140] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 290.891559][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2784'. [ 291.127531][T16189] netlink: 'syz.4.2791': attribute type 3 has an invalid length. [ 291.450900][T16220] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 291.499639][ T5208] block nbd2: Possible stuck request ffff8880271c0000: control (read@0,1024B). Runtime 90 seconds [ 291.510626][ T5208] block nbd2: Possible stuck request ffff8880271c0200: control (read@1024,1024B). Runtime 90 seconds [ 291.522477][ T5208] block nbd2: Possible stuck request ffff8880271c0400: control (read@2048,1024B). Runtime 90 seconds [ 291.534733][ T5208] block nbd2: Possible stuck request ffff8880271c0600: control (read@3072,1024B). Runtime 90 seconds [ 291.840914][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2803'. [ 291.871086][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2803'. [ 291.919498][T16243] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2804'. [ 291.963178][T16246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2806'. [ 292.127186][T16251] smc: removing net device team0 with user defined pnetid SYB2 [ 292.230774][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2807'. [ 292.369398][T16273] vlan3: entered promiscuous mode [ 292.375861][T16273] bridge0: entered promiscuous mode [ 293.027639][T16319] netlink: 'syz.1.2829': attribute type 1 has an invalid length. [ 293.207305][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.224353][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.244602][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.253433][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.266331][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.302262][T16338] RDS: rds_bind could not find a transport for ::ffff:172.30.32.2, load rds_tcp or rds_rdma? [ 293.328943][T16332] lo speed is unknown, defaulting to 1000 [ 293.339703][T16332] wg1 speed is unknown, defaulting to 1000 [ 293.515924][T16346] netlink: 'syz.0.2837': attribute type 9 has an invalid length. [ 293.593978][T16352] netlink: 'syz.2.2839': attribute type 4 has an invalid length. [ 294.248462][T16390] netlink: 'syz.0.2847': attribute type 4 has an invalid length. [ 294.256465][T16390] __nla_validate_parse: 3 callbacks suppressed [ 294.256481][T16390] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2847'. [ 294.311085][T16332] chnl_net:caif_netlink_parms(): no params data found [ 294.504173][T10845] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.548708][T16407] ip6erspan1: entered allmulticast mode [ 294.577812][ T168] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.653964][ T168] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.706456][T16332] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.715852][T16332] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.723441][T16332] bridge_slave_0: entered allmulticast mode [ 294.731453][T16332] bridge_slave_0: entered promiscuous mode [ 294.741451][T10842] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.769314][T16332] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.780444][T16332] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.787928][T16332] bridge_slave_1: entered allmulticast mode [ 294.796569][T16332] bridge_slave_1: entered promiscuous mode [ 294.829552][T16419] netlink: 'syz.2.2854': attribute type 4 has an invalid length. [ 294.833143][T10840] bond2: left promiscuous mode [ 294.847837][T16417] netlink: 496 bytes leftover after parsing attributes in process `syz.1.2853'. [ 294.848283][T10840] bridge0: port 3(bond2) entered disabled state [ 294.881663][T16420] netlink: 'syz.2.2854': attribute type 4 has an invalid length. [ 294.911329][T10840] bond1 (unregistering): (slave ip6gretap0): Releasing active interface [ 294.937364][T10840] bond5 (unregistering): (slave ip6gre2): Releasing backup interface [ 295.334606][ T51] Bluetooth: hci5: command tx timeout [ 295.441331][T10840] bond0 (unregistering): (slave ÿ): Releasing backup interface [ 295.450750][T10840] bond0 (unregistering): Released all slaves [ 295.460606][T10840] bond1 (unregistering): Released all slaves [ 295.474619][T10840] bond2 (unregistering): Released all slaves [ 295.489205][T10840] bond3 (unregistering): Released all slaves [ 295.502189][T10840] bond4 (unregistering): Released all slaves [ 295.518967][T10840] bond5 (unregistering): Released all slaves [ 295.534083][T10840] bond6 (unregistering): Released all slaves [ 295.563042][T16332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.597839][T16332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.691673][T16435] netlink: 'syz.1.2857': attribute type 1 has an invalid length. [ 295.734901][T10840] : left promiscuous mode [ 295.772483][T16439] SET target dimension over the limit! [ 295.800795][T16435] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 295.809237][T16332] team0: Port device team_slave_0 added [ 295.865852][T10840] tipc: Disabling bearer [ 295.920260][T16448] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 295.930161][T10840] tipc: Left network mode [ 295.930353][T16446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2860'. [ 295.950399][T16332] team0: Port device team_slave_1 added [ 295.975127][T16453] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 295.996407][T16446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2860'. [ 296.006316][T10840] IPVS: stopping backup sync thread 7394 ... [ 296.025732][T16332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.034409][T16332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.061975][T16332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.074860][T16332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.082103][T16332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.132237][T16332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.237568][T16465] netlink: 'syz.0.2863': attribute type 1 has an invalid length. [ 296.276483][T16467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2865'. [ 296.447306][T16470] bond12: (slave geneve3): making interface the new active one [ 296.477910][T16470] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 296.589080][T10845] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 296.604228][T10845] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 296.847536][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2871'. [ 297.425487][ T51] Bluetooth: hci5: command tx timeout [ 297.444726][T16332] hsr_slave_0: entered promiscuous mode [ 297.451349][T16332] hsr_slave_1: entered promiscuous mode [ 297.458564][T16332] debugfs: 'hsr0' already exists in 'hsr' [ 297.464315][T16332] Cannot create hsr debugfs directory [ 297.470393][T10845] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 297.640108][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 297.656400][ T168] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 297.761288][T16520] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2873'. [ 298.042155][T16547] raw_sendmsg: syz.3.2879 forgot to set AF_INET. Fix it! [ 298.219094][T16554] block nbd3: reconnected socket [ 298.230417][ T51] block nbd3: Receive control failed (result -32) [ 298.718178][T16332] [ 298.720564][T16332] ====================================================== [ 298.728089][T16332] WARNING: possible circular locking dependency detected [ 298.735112][T16332] syzkaller #0 Not tainted [ 298.739517][T16332] ------------------------------------------------------ [ 298.746608][T16332] syz-executor/16332 is trying to acquire lock: [ 298.753022][T16332] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 298.763923][T16332] [ 298.763923][T16332] but task is already holding lock: [ 298.771458][T16332] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 298.781892][T16332] [ 298.781892][T16332] which lock already depends on the new lock. [ 298.781892][T16332] [ 298.792473][T16332] [ 298.792473][T16332] the existing dependency chain (in reverse order) is: [ 298.801793][T16332] [ 298.801793][T16332] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 298.809869][T16332] down_write+0x96/0x200 [ 298.814720][T16332] kernfs_add_one+0x41/0x5c0 [ 298.819831][T16332] kernfs_create_dir_ns+0xde/0x130 [ 298.825711][T16332] internal_create_group+0x425/0x1180 [ 298.831688][T16332] cpuhp_invoke_callback+0x445/0x860 [ 298.837513][T16332] cpuhp_issue_call+0x430/0x7a0 [ 298.843049][T16332] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 298.849993][T16332] __cpuhp_setup_state+0x3f/0x60 [ 298.855676][T16332] do_one_initcall+0x250/0x8d0 [ 298.861146][T16332] do_initcall_level+0x104/0x190 [ 298.866710][T16332] do_initcalls+0x59/0xa0 [ 298.872282][T16332] kernel_init_freeable+0x2a6/0x3e0 [ 298.878215][T16332] kernel_init+0x1d/0x1d0 [ 298.883147][T16332] ret_from_fork+0x51e/0xb90 [ 298.888334][T16332] ret_from_fork_asm+0x1a/0x30 [ 298.893614][T16332] [ 298.893614][T16332] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 298.901425][T16332] [ 298.901425][T16332] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 298.909236][T16332] cpus_read_lock+0x42/0x160 [ 298.914341][T16332] static_key_slow_inc+0x12/0x30 [ 298.920251][T16332] nbd_genl_reconfigure+0x132f/0x1ea0 [ 298.926711][T16332] genl_family_rcv_msg_doit+0x22a/0x330 [ 298.933055][T16332] genl_rcv_msg+0x61c/0x7a0 [ 298.938248][T16332] netlink_rcv_skb+0x232/0x4b0 [ 298.943617][T16332] genl_rcv+0x28/0x40 [ 298.948196][T16332] netlink_unicast+0x80f/0x9b0 [ 298.953559][T16332] netlink_sendmsg+0x813/0xb40 [ 298.958921][T16332] ____sys_sendmsg+0x972/0x9f0 [ 298.964285][T16332] ___sys_sendmsg+0x2a5/0x360 [ 298.969645][T16332] __x64_sys_sendmsg+0x1bd/0x2a0 [ 298.975275][T16332] do_syscall_64+0x14d/0xf80 [ 298.980465][T16332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.986886][T16332] [ 298.986886][T16332] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 298.994609][T16332] __mutex_lock+0x19f/0x1300 [ 298.999723][T16332] nbd_queue_rq+0x37b/0x1100 [ 299.004855][T16332] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 299.010921][T16332] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 299.017944][T16332] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 299.024542][T16332] blk_mq_run_hw_queue+0x348/0x4f0 [ 299.030429][T16332] blk_mq_dispatch_list+0xd16/0xe10 [ 299.036346][T16332] blk_mq_flush_plug_list+0x48d/0x570 [ 299.042239][T16332] __blk_flush_plug+0x3ed/0x4d0 [ 299.047689][T16332] __submit_bio+0x28d/0x580 [ 299.053378][T16332] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 299.059558][T16332] block_read_full_folio+0x599/0x830 [ 299.065474][T16332] filemap_read_folio+0x137/0x3b0 [ 299.071107][T16332] do_read_cache_folio+0x358/0x590 [ 299.076729][T16332] read_part_sector+0xb6/0x2b0 [ 299.082009][T16332] adfspart_check_ICS+0xa5/0xa40 [ 299.087482][T16332] bdev_disk_changed+0x7ba/0x1550 [ 299.093133][T16332] blkdev_get_whole+0x380/0x510 [ 299.098602][T16332] bdev_open+0x31e/0xd30 [ 299.103477][T16332] blkdev_open+0x470/0x610 [ 299.108419][T16332] do_dentry_open+0x785/0x14e0 [ 299.113876][T16332] vfs_open+0x3b/0x340 [ 299.118473][T16332] path_openat+0x2e08/0x3860 [ 299.123590][T16332] do_file_open+0x23e/0x4a0 [ 299.129105][T16332] do_sys_openat2+0x113/0x200 [ 299.134327][T16332] __x64_sys_openat+0x138/0x170 [ 299.139721][T16332] do_syscall_64+0x14d/0xf80 [ 299.144841][T16332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.151366][T16332] [ 299.151366][T16332] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 299.158575][T16332] __mutex_lock+0x19f/0x1300 [ 299.163703][T16332] nbd_queue_rq+0xc6/0x1100 [ 299.168747][T16332] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 299.175128][T16332] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 299.182275][T16332] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 299.188776][T16332] blk_mq_run_hw_queue+0x348/0x4f0 [ 299.194485][T16332] blk_mq_dispatch_list+0xd16/0xe10 [ 299.200194][T16332] blk_mq_flush_plug_list+0x48d/0x570 [ 299.206083][T16332] __blk_flush_plug+0x3ed/0x4d0 [ 299.211495][T16332] __submit_bio+0x28d/0x580 [ 299.216636][T16332] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 299.222929][T16332] block_read_full_folio+0x599/0x830 [ 299.228958][T16332] filemap_read_folio+0x137/0x3b0 [ 299.234623][T16332] do_read_cache_folio+0x358/0x590 [ 299.240332][T16332] read_part_sector+0xb6/0x2b0 [ 299.245957][T16332] adfspart_check_ICS+0xa5/0xa40 [ 299.251682][T16332] bdev_disk_changed+0x7ba/0x1550 [ 299.257522][T16332] blkdev_get_whole+0x380/0x510 [ 299.262894][T16332] bdev_open+0x31e/0xd30 [ 299.267739][T16332] blkdev_open+0x470/0x610 [ 299.272775][T16332] do_dentry_open+0x785/0x14e0 [ 299.278154][T16332] vfs_open+0x3b/0x340 [ 299.282846][T16332] path_openat+0x2e08/0x3860 [ 299.287998][T16332] do_file_open+0x23e/0x4a0 [ 299.293115][T16332] do_sys_openat2+0x113/0x200 [ 299.298320][T16332] __x64_sys_openat+0x138/0x170 [ 299.303712][T16332] do_syscall_64+0x14d/0xf80 [ 299.308997][T16332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.315601][T16332] [ 299.315601][T16332] -> #4 (set->srcu){.+.+}-{0:0}: [ 299.322838][T16332] __synchronize_srcu+0xca/0x300 [ 299.328383][T16332] elevator_switch+0x1e8/0x7a0 [ 299.333658][T16332] elevator_change+0x2cc/0x450 [ 299.338931][T16332] elevator_set_default+0x36c/0x430 [ 299.344640][T16332] blk_register_queue+0x366/0x430 [ 299.350379][T16332] __add_disk+0x677/0xd50 [ 299.355306][T16332] add_disk_fwnode+0xfb/0x480 [ 299.360502][T16332] nbd_dev_add+0x72c/0xb50 [ 299.365427][T16332] nbd_init+0x168/0x1f0 [ 299.370362][T16332] do_one_initcall+0x250/0x8d0 [ 299.375915][T16332] do_initcall_level+0x104/0x190 [ 299.381373][T16332] do_initcalls+0x59/0xa0 [ 299.386339][T16332] kernel_init_freeable+0x2a6/0x3e0 [ 299.392158][T16332] kernel_init+0x1d/0x1d0 [ 299.396994][T16332] ret_from_fork+0x51e/0xb90 [ 299.402105][T16332] ret_from_fork_asm+0x1a/0x30 [ 299.407497][T16332] [ 299.407497][T16332] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 299.415394][T16332] __mutex_lock+0x19f/0x1300 [ 299.420716][T16332] elevator_change+0x1b3/0x450 [ 299.426092][T16332] elevator_set_none+0xb5/0x140 [ 299.431451][T16332] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 299.437772][T16332] nbd_start_device+0x17f/0xb10 [ 299.443135][T16332] nbd_genl_connect+0x165b/0x1cf0 [ 299.448673][T16332] genl_family_rcv_msg_doit+0x22a/0x330 [ 299.454742][T16332] genl_rcv_msg+0x61c/0x7a0 [ 299.459871][T16332] netlink_rcv_skb+0x232/0x4b0 [ 299.465294][T16332] genl_rcv+0x28/0x40 [ 299.469803][T16332] netlink_unicast+0x80f/0x9b0 [ 299.475393][T16332] netlink_sendmsg+0x813/0xb40 [ 299.480704][T16332] ____sys_sendmsg+0x972/0x9f0 [ 299.486007][T16332] ___sys_sendmsg+0x2a5/0x360 [ 299.491434][T16332] __x64_sys_sendmsg+0x1bd/0x2a0 [ 299.496973][T16332] do_syscall_64+0x14d/0xf80 [ 299.502178][T16332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.508706][T16332] [ 299.508706][T16332] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 299.517324][T16332] blk_alloc_queue+0x546/0x680 [ 299.522645][T16332] __blk_mq_alloc_disk+0x197/0x390 [ 299.528366][T16332] nbd_dev_add+0x499/0xb50 [ 299.533300][T16332] nbd_init+0x168/0x1f0 [ 299.537974][T16332] do_one_initcall+0x250/0x8d0 [ 299.543251][T16332] do_initcall_level+0x104/0x190 [ 299.548716][T16332] do_initcalls+0x59/0xa0 [ 299.553650][T16332] kernel_init_freeable+0x2a6/0x3e0 [ 299.559361][T16332] kernel_init+0x1d/0x1d0 [ 299.564201][T16332] ret_from_fork+0x51e/0xb90 [ 299.569736][T16332] ret_from_fork_asm+0x1a/0x30 [ 299.575129][T16332] [ 299.575129][T16332] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 299.582433][T16332] fs_reclaim_acquire+0x71/0x100 [ 299.587883][T16332] kmem_cache_alloc_noprof+0x40/0x650 [ 299.593787][T16332] __kernfs_iattrs+0xdf/0x340 [ 299.599075][T16332] kernfs_iop_setattr+0xea/0x3f0 [ 299.604641][T16332] notify_change+0xc1a/0xf40 [ 299.609745][T16332] do_truncate+0x1c2/0x250 [ 299.614671][T16332] path_openat+0x2f89/0x3860 [ 299.619771][T16332] do_file_open+0x23e/0x4a0 [ 299.624782][T16332] do_sys_openat2+0x113/0x200 [ 299.630077][T16332] __x64_sys_openat+0x138/0x170 [ 299.635531][T16332] do_syscall_64+0x14d/0xf80 [ 299.640663][T16332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.647168][T16332] [ 299.647168][T16332] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 299.655775][T16332] __lock_acquire+0x15a5/0x2cf0 [ 299.661515][T16332] lock_acquire+0xf0/0x2e0 [ 299.666456][T16332] down_write+0x96/0x200 [ 299.671203][T16332] kernfs_unlink_sibling+0x71/0x180 [ 299.676993][T16332] __kernfs_remove+0x3e7/0x660 [ 299.682267][T16332] kernfs_remove_by_name_ns+0xaf/0x130 [ 299.688324][T16332] sysfs_unmerge_group+0xd4/0x140 [ 299.693919][T16332] dpm_sysfs_remove+0x76/0xd0 [ 299.699132][T16332] device_del+0x250/0x8f0 [ 299.704002][T16332] device_unregister+0x21/0xf0 [ 299.709279][T16332] del_device_store+0x2b0/0x370 [ 299.714921][T16332] kernfs_fop_write_iter+0x3af/0x540 [ 299.720921][T16332] vfs_write+0x61d/0xb90 [ 299.725879][T16332] ksys_write+0x150/0x270 [ 299.730743][T16332] do_syscall_64+0x14d/0xf80 [ 299.735857][T16332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.742350][T16332] [ 299.742350][T16332] other info that might help us debug this: [ 299.742350][T16332] [ 299.752569][T16332] Chain exists of: [ 299.752569][T16332] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 299.752569][T16332] [ 299.767085][T16332] Possible unsafe locking scenario: [ 299.767085][T16332] [ 299.774545][T16332] CPU0 CPU1 [ 299.779897][T16332] ---- ---- [ 299.785271][T16332] lock(&root->kernfs_rwsem); [ 299.790116][T16332] lock(cpuhp_state_mutex); [ 299.797297][T16332] lock(&root->kernfs_rwsem); [ 299.804574][T16332] lock(&root->kernfs_iattr_rwsem); [ 299.809855][T16332] [ 299.809855][T16332] *** DEADLOCK *** [ 299.809855][T16332] [ 299.818075][T16332] 5 locks held by syz-executor/16332: [ 299.823602][T16332] #0: ffff88803581c420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 299.832488][T16332] #1: ffff88805a9c8c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 299.842429][T16332] #2: ffff888029795e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 299.852655][T16332] #3: ffffffff8f444d68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 299.863201][T16332] #4: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 299.874162][T16332] [ 299.874162][T16332] stack backtrace: [ 299.880053][T16332] CPU: 0 UID: 0 PID: 16332 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 299.880075][T16332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 299.880092][T16332] Call Trace: [ 299.880102][T16332] [ 299.880111][T16332] dump_stack_lvl+0xe8/0x150 [ 299.880135][T16332] print_circular_bug+0x2e1/0x300 [ 299.880158][T16332] check_noncircular+0x12e/0x150 [ 299.880180][T16332] __lock_acquire+0x15a5/0x2cf0 [ 299.880200][T16332] ? __lock_acquire+0x6b5/0x2cf0 [ 299.880221][T16332] lock_acquire+0xf0/0x2e0 [ 299.880236][T16332] ? kernfs_unlink_sibling+0x71/0x180 [ 299.880255][T16332] down_write+0x96/0x200 [ 299.880268][T16332] ? kernfs_unlink_sibling+0x71/0x180 [ 299.880281][T16332] ? __pfx_down_write+0x10/0x10 [ 299.880293][T16332] ? kernfs_root+0x1c/0x230 [ 299.880312][T16332] ? kernfs_root+0x1c/0x230 [ 299.880329][T16332] ? kernfs_root+0x1c/0x230 [ 299.880347][T16332] ? kernfs_root+0x1ea/0x230 [ 299.880366][T16332] kernfs_unlink_sibling+0x71/0x180 [ 299.880381][T16332] __kernfs_remove+0x3e7/0x660 [ 299.880396][T16332] kernfs_remove_by_name_ns+0xaf/0x130 [ 299.880411][T16332] sysfs_unmerge_group+0xd4/0x140 [ 299.880431][T16332] dpm_sysfs_remove+0x76/0xd0 [ 299.880452][T16332] device_del+0x250/0x8f0 [ 299.880469][T16332] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.880488][T16332] ? __pfx_ida_free+0x10/0x10 [ 299.880507][T16332] ? __pfx_device_del+0x10/0x10 [ 299.880527][T16332] device_unregister+0x21/0xf0 [ 299.880545][T16332] del_device_store+0x2b0/0x370 [ 299.880563][T16332] ? __pfx_del_device_store+0x10/0x10 [ 299.880578][T16332] ? sysfs_file_kobj+0x1e4/0x230 [ 299.880595][T16332] ? sysfs_kf_write+0x166/0x260 [ 299.880613][T16332] ? __pfx_sysfs_kf_write+0x10/0x10 [ 299.880629][T16332] kernfs_fop_write_iter+0x3af/0x540 [ 299.880647][T16332] vfs_write+0x61d/0xb90 [ 299.880664][T16332] ? __pfx_vfs_write+0x10/0x10 [ 299.880679][T16332] ? kmem_cache_free+0x187/0x630 [ 299.880695][T16332] ? fd_install+0x94/0x3d0 [ 299.880712][T16332] ? do_sys_openat2+0x14c/0x200 [ 299.880736][T16332] ksys_write+0x150/0x270 [ 299.880751][T16332] ? __pfx_ksys_write+0x10/0x10 [ 299.880775][T16332] do_syscall_64+0x14d/0xf80 [ 299.880793][T16332] ? trace_irq_disable+0x3b/0x150 [ 299.880805][T16332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.880819][T16332] ? clear_bhb_loop+0x40/0x90 [ 299.880834][T16332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.880848][T16332] RIP: 0033:0x7f88bc95d04e [ 299.880864][T16332] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 299.880877][T16332] RSP: 002b:00007ffcc5538d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.880893][T16332] RAX: ffffffffffffffda RBX: 000055555683c500 RCX: 00007f88bc95d04e [ 299.880903][T16332] RDX: 0000000000000001 RSI: 00007ffcc5538e20 RDI: 0000000000000005 [ 299.880912][T16332] RBP: 00007f88bca33514 R08: 0000000000000000 R09: 0000000000000000 [ 299.880920][T16332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.880929][T16332] R13: 00007ffcc5538e20 R14: 00007f88bd744620 R15: 0000000000000003 [ 299.880945][T16332] [ 300.200701][ T51] Bluetooth: hci5: command tx timeout [ 300.213010][T16585] 8021q: VLANs not supported on sit0 [ 300.252277][T16332] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.302154][T10840] hsr_slave_0: left promiscuous mode [ 300.308362][T10840] hsr_slave_1: left promiscuous mode [ 300.445433][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 300.454290][T16332] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.541463][T16332] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.598757][T16332] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.715654][T16332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 300.726057][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.736153][T16332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 300.752979][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.761590][T16332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 300.772100][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.780667][T16332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 300.790487][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.856736][T16332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.873315][T16332] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.885650][T10840] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.892893][T10840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.909736][T10845] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.917300][T10845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.073845][T16332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.259584][T16332] veth0_vlan: entered promiscuous mode [ 301.270216][T16332] veth1_vlan: entered promiscuous mode [ 301.294141][T16332] veth0_macvtap: entered promiscuous mode [ 301.307197][T16332] veth1_macvtap: entered promiscuous mode [ 301.323630][T16332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.336969][T16332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.349962][ T168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.363032][ T168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.374283][ T168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.388273][ T168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.419301][T16332] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 301.446119][T10845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.448102][T16332] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 301.463412][T10845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.494042][T10845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.503826][T10845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.214653][ T51] Bluetooth: hci5: command tx timeout