last executing test programs: 1.381588989s ago: executing program 4 (id=7421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f0000000200), &(0x7f0000000140)=@udp6=r6, 0x3}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20040000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000580)}, 0x10) 1.379858288s ago: executing program 2 (id=7423): r0 = socket$inet6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) getsockname(r0, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c80)=0x80) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 1.20588069s ago: executing program 4 (id=7426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a010c0000240000000000020000000900020073797a32000000000900010073797a30000000000c000640000000000000000214"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 1.180729026s ago: executing program 0 (id=7427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}, {&(0x7f0000000100)="31020002", 0x12}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3d2, &(0x7f0000000a40)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x398, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x9, 0x6, '\x00', 0x5, 0x29, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @private2, [@srh={0x6c, 0x10, 0x4, 0x8, 0xf, 0x28, 0x5, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @loopback]}, @dstopts={0x2f, 0xd, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x2, 0x2, [0x4, 0x9, 0xc12, 0x5, 0x4494, 0x2e7843f, 0x4f2, 0x401]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0x800, [0x80, 0x7fffffffffffffff]}}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @pad1]}, @dstopts={0x10a, 0x28, '\x00', [@generic={0x2, 0xbd, "d3323e73207d5e199063c8acc9c63c9ac26f97a338cd0736237e115d86f1e9d50de173df2b876a1ab085651ef0d9c2f959615b3ba1553fd3ced73498bb532fa0eecf199c3c867f211e1d522d59c0f851b75062485652d5c21fc355420e8f06c32956d746e3f471f496d0667c9408cf244976701924ea308c97838bd2c770ca36df7d3bdb28c6b8f4d7fa39f0ded1ab16f13b0c5c77a8acf7b541e581e38f607a2a94710734e9e19a145ac23baf2e29d6a7265ed839e28b4af7c64844d8"}, @calipso={0x7, 0x38, {0x2, 0xc, 0x8, 0xffff, [0xfffffffffffffffe, 0x0, 0xd4, 0x80, 0x7ff, 0x8000000000000001]}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x1, 0x8, [0x1c000000, 0x101, 0x8, 0x0, 0x1, 0x3]}}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim, @jumbo={0xc2, 0x4, 0x8}]}, @hopopts={0x0, 0x1e, '\x00', [@pad1, @generic={0x0, 0xaa, "1568b148f44706e9476e3f689bb961ba853d58b28a6a90857ecb18d19426ddc8589b9c71c2b7899de93108e41ab02e5cfea8cb99f0a214465694c43203107d6059b5dc293dfcdfcc0c125d3d6b0b556778c8b2e60ae96f66ecaf1fd2bf0d830f8154ec8e94d0ec89e13bb4d6014611f407bda52492b6378f1145323274c71762986d9af0e45870080377243da75ee1cacd735982d0d060e22e9501733d41e4107e14b0950439eed41463"}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0x6, [0x6, 0x0]}}]}, @fragment={0x0, 0x0, 0x6, 0x1, 0x0, 0x15, 0x64}, @fragment={0x3a, 0x0, 0x7, 0x0, 0x0, 0xc, 0x65}], "96b24e2389907a94"}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) close(r2) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x2}, [@NDA_FDB_EXT_ATTRS={0x14, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_DONT_REFRESH={0x4}]}]}, 0x80}}, 0x4068011) 1.089339516s ago: executing program 4 (id=7429): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000002c0)={0x4, 0x6}) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x81, 0x1, 0x80, 0x1, 0x5, 0x9, 0xfe, 0x8, 0x0, 0x8, 0x0, 0x9, 0x2, 0x22}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r4, 0x5}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstopts={{0x18, 0x29, 0x3b, {0x73}}}], 0x18}, 0x440e0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000000)='virt_wifi0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB], 0x14}}, 0x0) close(r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdc0, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000310000003377fbac141416e000000183070403b180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) syz_emit_ethernet(0x2ba, &(0x7f0000000f00)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x5, 0x0, 0x1}, {0x9}, {0xb5, 0x0, 0x1}, {0xa}, {0xd, 0x0, 0x1}, {0x7f}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}], @ipv6=@udp={0x8, 0x6, "60c162", 0x260, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x5e, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x5}]}, @srh={0x21, 0xe, 0x4, 0x7, 0x9, 0x40, 0x100, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x87, 0x0, 0x0, 0x1, 0x0, 0x4, 0x64}, @fragment={0x73, 0x0, 0x8, 0x1, 0x0, 0x0, 0x67}, @routing={0x73, 0xa, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0xf}, @remote, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}, @srh={0x2f, 0xa, 0x4, 0x5, 0x1, 0x48, 0x2, [@ipv4={'\x00', '\xff\xff', @loopback}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2a}]}, @hopopts={0x3a, 0xf, '\x00', [@generic={0x5, 0x21, "74a3269dc9857615977ec0481510d0df7b6761045225709ebcfab005299198e84a"}, @pad1, @jumbo={0xc2, 0x4, 0x1000}, @enc_lim={0x4, 0x1, 0x9e}, @calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0xc0, [0x5, 0x1, 0x7]}}, @pad1, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x9}]}, @srh={0x2d, 0x6, 0x4, 0x3, 0x9e, 0x28, 0xff01, [@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x3c}, @remote]}], {0x4e24, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "ad088165d4e2152c02ea5a203f269e4045b032b6dd8cffe1", "8884d7235a24edcfbc785b207ac4dd42a7ead7418e1ac7818555fc137532371e"}}}}}}}}, &(0x7f00000011c0)={0x0, 0x2, [0x2a0, 0x4b, 0x67b, 0xa4c]}) 1.071305422s ago: executing program 2 (id=7431): syz_emit_ethernet(0x7c, &(0x7f00000000c0)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fbff00", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x4]}, {}, {}, {0xa888}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2a}}}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='@\x00\x00\x00']}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@generic="a664f7feda247668"]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000084000000160a010100000000000000000100000058000380540003801400010067656e65766531000000000000000000140001006d6163736563300000000000c498d61050000100766574683100000000000000000000001400010073797a6b616c6c6572310000000000000900010073797a30000000000900020073797a30"], 0x10c}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100", @ANYRES16=r5], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) 937.618794ms ago: executing program 1 (id=7432): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000100)='\x00', 0xe8402, &(0x7f0000000140)={@_ha_fsid={[0x0, 0xa]}, {0xed0, 0xd, 0x5, 0x4}}, 0x7, &(0x7f00000001c0), &(0x7f0000000240)=0x3}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x27, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async, rerun: 32) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet6(0xa, 0x3, 0x88) (async) socket$inet(0x2, 0x801, 0x0) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 64) close(r6) (async, rerun: 64) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x7, 0x40, 0x1}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840) (async, rerun: 32) write$nci(r6, &(0x7f00000004c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0x7, 0x3, 0x1, 0x2, 0x80, 0x1c, 0x2, {0xc}, 0x5, 0xbc, 0x0, 0x7, 0x29, "ff9339a0253bd2c1d234a2f8c3bb519f39ed5c5ba3021457899ac066cbc0850167dccdd285e42d505e"}}, 0x3a) (rerun: 32) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0) 937.088071ms ago: executing program 4 (id=7433): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000640)=@gcm_256={{0x304}, "55b2bfe456f65ac5", "94933eabd65daad540f97d075c35dc3d0c5423c36a5a29e09986c18918a9d481", "ea6eda2b", "a3df11c174fa26bb"}, 0x38) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000180)=0xd74b, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b180dccc16eb676ff09b3e4ef26f701d", 0x10}, {&(0x7f0000001ac0)="185f70788926e08ce31809863a7db4d975e887eea5dcd974fef9c6ed45a821773237e5d2d329c07c7e1bb2e75ecccfb76e11781c5daab14253f6959a0400da0bf98a0ab829816250cf32206089785600f7c3ee056ab6fdd436f0c3e71740000000d5d70f35c3c55403e6a22e4560ac69", 0x70}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x84) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f0000000840)=""/205, 0xcd}], 0x2}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000100fcff0000000000001c"], 0x18}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a000005090002f172797a32000000002c000480280001800d00010073796e70726f78790000000014000280050002000400000008000340000000000900010073797a3100000000360000000000000e00000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x29}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@float={0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x30, 0x30, 0x0, 0x61]}}, &(0x7f0000000680)=""/133, 0x42, 0x85, 0x0, 0xfb}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x12, 0x4, 0xfff, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8, 0xffffffffffffffff}, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r9, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 910.776738ms ago: executing program 3 (id=7434): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f0f3000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000003e75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2726f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfda047bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded527a0bfe5504eb355cb0000000000000073be27152effbed9ed6a4e8f9c55a2ff11245f2c20856d491b80d749cf8917dbe01cc6c7b747923621bb16efb2025d19a1a27b0348135e32e442da8f26e05283ece8ad92c77f8141c7a2037380f28c9c638ee0151f4620b9b64185db0321a4e809a5438cdef28f7adac1735a50006fbae20d0930b55f0081db6fa0d14024cefa1611ef384de38787324bfb9f79a1e164c8fe80a2d9e4199960"], &(0x7f0000000100)='GPL\x00', 0xa4d00000}, 0x94) 849.39778ms ago: executing program 0 (id=7435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r7, {0xfff3, 0x4}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x2}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8808}, 0x20004804) r8 = socket$unix(0x1, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r11, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x400, 0xd0, 0xffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)=@newtfilter={0x256c, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xd, 0xf}, {0xfff2, 0x6}, {0x3, 0xfff3}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x2}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xe46}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0xd}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xf9}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0xb}]}}, @filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xa79}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x2}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7fff}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffff00]}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff000000, 0xffffffff, 0xff000000, 0xff000000]}, @TCA_FLOWER_KEY_MPLS_TTL={0x5}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x7}}, @filter_kind_options=@f_fw={{0x7}, {0x2470, 0x2, [@TCA_FW_ACT={0x9c8, 0x4, [@m_mpls={0x128, 0xa, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x9, 0xfffffffffffffff3, 0x7ff, 0x8001}, 0x2}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x3}]}, {0xd0, 0x6, "516658705c779577ec07b9ce6dadf396cd306bae8812ff397a0f168cd2585d01c00a51d687fd0e96c31e69fd48495ac9cc3266b28bb03e257a35ad272e7b23d9666eb5a6e116f61128b125628671b1bc8c2280d9ff0f41432ccfd91c6d34d4e6474a722e97df937de1da6e65a923d82578515a58d59978a5d534ba310bfdcb0274fa04a67fed6d5884470127aa588ece959999fde4d4ea2fff222e08b5927c25c3f3fa7aa515f0c836c229e3c597b84e402282ceae778a925eef2e77a4b1c4520e35b84bc2ad0da326423b30"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x89c, 0x10, 0x0, 0x0, {{0xb}, {0x870, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0xfffffffffffffff9, 0x9, 0xd0, 0x5, {0x8, 0x2, 0x9, 0x5, 0xfff7, 0x7}, {0x7, 0x0, 0x200, 0x800, 0x8948, 0xceb}, 0x10000, 0x3, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x75, 0x5, 0x4, 0xbfb5, 0x0, 0x80, 0x4e, 0xd61, 0x0, 0xa85, 0x8, 0x8, 0x8, 0x4, 0x4b0, 0x1ff, 0x4, 0x7, 0x0, 0xc727, 0x400, 0x1, 0x3, 0x5, 0x3, 0x3de, 0x5, 0xe, 0xd, 0xfffffffb, 0x1, 0x8, 0x0, 0x1ff, 0x9, 0x1, 0x9, 0x0, 0x101, 0xffff, 0x8001, 0x503, 0x8001, 0xfd4, 0x236, 0x2, 0xffffffff, 0x0, 0x4, 0xe8, 0x10000, 0x8, 0x7, 0x9, 0x6, 0x2, 0x7, 0x7, 0x4, 0x3, 0x800, 0x6, 0x6, 0x9753, 0x500000, 0x5, 0xb1b9, 0x9, 0xffffffff, 0x6, 0x8, 0x9, 0x5, 0x3, 0x1, 0x70b, 0x8, 0x7ff, 0x9, 0x400, 0xa03, 0xb, 0x3, 0x4, 0x6, 0x7, 0x1, 0x0, 0x4, 0x6, 0x8, 0x930, 0x101, 0x7, 0xe, 0x5, 0xa685, 0xcf9, 0x8, 0xa, 0x93, 0xfffffffd, 0x6, 0x10, 0xfffffffb, 0x1, 0x9, 0x1, 0x9, 0x8, 0xe480, 0xffff, 0x4, 0xd, 0x6, 0x0, 0x8, 0x6, 0xfffffffb, 0x1, 0xffff, 0x6, 0x2, 0x80000001, 0x5, 0x80, 0x475c, 0x7f, 0x0, 0x7, 0x1, 0x1, 0x2, 0x8, 0x4, 0x6, 0x0, 0x2, 0xb, 0xffffffff, 0x1, 0x6, 0x8001, 0x1, 0xffffb627, 0x5, 0x7, 0xc21963, 0x8000, 0x0, 0xfff, 0xa, 0x8, 0x7, 0x0, 0x1000, 0x830d, 0x3, 0x8, 0x8, 0x2, 0x101, 0x4be54612, 0xc, 0x200, 0x3, 0x800, 0x7fffffff, 0x8, 0x9, 0xa, 0x1000, 0xecd, 0x3, 0x8, 0x1, 0x8, 0x8, 0x4, 0x5, 0x7, 0x4, 0x9, 0x5, 0xc0000, 0x6, 0x3, 0x3, 0xfff, 0x3, 0xb73, 0x3, 0x5, 0xffff, 0x400, 0x4, 0x8, 0x7, 0x9, 0x7df8e0da, 0xfffffff8, 0x5, 0xf, 0xe81, 0x8f3b, 0x101, 0xfff, 0x4, 0x80, 0x7f, 0x1, 0x7f, 0x1, 0x3, 0xa, 0x8001, 0x2, 0x7, 0x6, 0x3, 0x78, 0x2, 0x2, 0x6, 0x0, 0x5, 0x9, 0x7ff, 0x16, 0x77b, 0x3, 0x9, 0x2, 0xfffffff7, 0x7, 0x2, 0x2fbb8ff2, 0x58, 0x401, 0x81, 0x6, 0xe0a, 0xb, 0x1, 0x9, 0xffff, 0x8, 0x3, 0x6, 0x8000, 0x200, 0x2, 0x7, 0x7665]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xae, 0x10001, 0x1, 0x3, 0x410, 0x291, 0x5d8, 0x7, 0x3, 0x367e, 0x1, 0x2, 0x5, 0x5, 0x7, 0x1, 0x6, 0x3, 0x2, 0x3, 0x1, 0x4, 0xaa3d, 0x3, 0xc31, 0x2, 0x5, 0x1ff, 0x4, 0x9, 0x2, 0xffffffff, 0x2, 0x4, 0x7d, 0x9, 0xfff, 0x3, 0x401, 0x4, 0x0, 0x80000000, 0x800, 0x5, 0x0, 0x4, 0x3, 0x0, 0x1, 0x2, 0x4, 0x3, 0x9, 0x3a5, 0x5e, 0x2, 0x9, 0x4, 0x80000001, 0xfffffffb, 0x101, 0x3, 0x1, 0x7fffffff, 0x81, 0x800, 0x7, 0x401, 0x4, 0x462019f, 0x2, 0x100, 0x0, 0x4, 0x1, 0x1edd97b9, 0xa, 0xfd12, 0x6, 0xf, 0x7, 0x3, 0x9, 0x3ff, 0x7, 0xfffff9ee, 0x40, 0x6c84, 0xff, 0x1, 0x4c, 0x5, 0xabd, 0x5, 0x2, 0x0, 0x4, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x2, 0x8, 0x9, 0xfffffffd, 0x1000, 0x3ff, 0x80000001, 0x4, 0x5, 0x3, 0x6, 0x32, 0x81, 0x80000001, 0x10000, 0x0, 0x7f, 0x1000, 0x3, 0xe6c, 0x9, 0xfffffffd, 0xfffffff9, 0x32, 0x9, 0x4, 0x952, 0xbb, 0xf, 0xffffffff, 0x8000, 0x10, 0x9, 0x0, 0xffffffc0, 0x2, 0x2, 0xfffff551, 0x8, 0x4, 0x2, 0xffff, 0x7, 0x3, 0x3, 0x401, 0xffff7fff, 0x3, 0x0, 0x3, 0x3, 0xfff, 0x4, 0x6, 0x2, 0x10, 0x1, 0x9, 0x10001, 0x3, 0x81, 0x1, 0xe4, 0x1000, 0x5, 0xf, 0x800, 0x3ff, 0x0, 0x800, 0x8, 0xf6e, 0x0, 0x1ff, 0x1ff, 0x7, 0x0, 0x6, 0xbe, 0xe26, 0x47, 0x1, 0x6, 0x0, 0x0, 0x4, 0x6, 0x7, 0xfffffff9, 0x5, 0x3, 0x8241, 0x6, 0x0, 0x9, 0x3ff, 0x8, 0x4, 0x5, 0x61a89085, 0x8000, 0x5c9, 0x8, 0x0, 0x10000, 0x8, 0x10, 0x1000, 0x1000, 0x7c2f7853, 0x48a6, 0x9, 0x80, 0xb, 0xa26, 0xfc, 0x101, 0xa, 0xf5c, 0x3, 0x7, 0x745f, 0x4, 0x1, 0x2, 0x400, 0x9250, 0x7, 0x4, 0x5, 0xa, 0x4, 0x3, 0x1, 0x1ff, 0xb, 0xf84b, 0x0, 0x5, 0xffffffff, 0x6, 0xe1, 0x9, 0x80000001, 0x9, 0x3, 0x0, 0xeaa, 0x5f3, 0x93, 0x3, 0xffff, 0x3, 0x30000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2be3}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_ACT={0x2b8, 0x4, [@m_tunnel_key={0xbc, 0x20, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x200, 0x4, 0x80000001, 0xfffffffe}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x4e, 0x6, "38d581aa7c500deca43ba391ceca30fbda0c2738e1c2f69e30fca9d2fe0086c0de3ab9dff89ab2064735979a0dd64134f83cb23305045b2205c5d7b5c1633ce30912e928b418ac4fabc6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_connmark={0xa8, 0x1, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x633, 0x4, 0x80000000, 0x8001}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7ff, 0x2, 0xfffffff8, 0x3ff}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x100, 0x3, 0x80, 0x8}, 0xf41e}}]}, {0x21, 0x6, "0405b1166a292e9ff8748c66eecf687002c09f9f5a0f31b5cd2257eb97"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x150, 0x7, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1edb, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x7, 0x5, 0x10001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0xc1f, 0x20000000, 0xe4c, 0x7ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc, 0x0, 0x10000004, 0x7, 0x1000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x15e1, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x20a3}}, @TCA_GACT_PROB={0xc, 0x3, {0xea20b0487b3933b6, 0x80b, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x200, 0x8, 0x0, 0xc10}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x0, 0xffffffffffffffff, 0x80000001, 0x2}}]}, {0x79, 0x6, "9b51c619aa2626ccdf81c0861379797599c2e937210b8524792ee1d7a0815a0fd5a45d1fa0226b7b8bfc3e33a74de5ab20558c267ddf3761763f3d6bf36b41b147e8125383fd5c5206127c2f5d17c55a658de76af46610db0dc7d04993a4a15237ebba531047d75940467960e24dfed71949d39bcd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_ACT={0x17bc, 0x4, [@m_mpls={0x1038, 0x18, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xae54e}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x150, 0x1b, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, ']@\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x47, 0x4, 0x8, 0xffff, 0x912d}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x5, 0x1, 0x10000}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x80000001, 0x20000001, 0x7ff}}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_DATA={0x6, 0x3, ':\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'prio\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'IPVS\x00'}]}, {0x9c, 0x6, "cecccef8eb1e06aa236be8a5a69d0d5636ee7adf9db190c71c00a98c833c3dd67e14ead11b78647920a37faa2a31038ef5b969dfd0d8bb4b9df558f1a2f956e33b8744be8d7eff3225f25452e513dd81ecc9fcce69250881e6da9bc3bd8a733f0d2ee07ef92ca4ec0fd0ac2f5dd5a3be679a5c8fccebab2bdead9a50eca3443f96306f33fda685959c631819130a7d0ba313239823aa93bc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x124, 0x1c, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x7f}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8000, 0xe9, 0x2, 0x4000000, 0x4}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0xad, 0x6, "1f8c805c4209ce8923c29171f5e0d4a5968aa2ef1205923691f6b0e887abd2c3e91ce860efb0257f3e666e7f670426bf7a3380d866b00f53b3a4f75daed0354cdb0f2aa0f6b4df07629e416f6b9f697336e700bd7501f9aaf545d06f09ccc3a2e37cdc2e97fad95e97f8ffbb3e26b0e3414bca57a34328704d28c1374ef21f492c15377fe125103d73b3c789427181cc971617d1b0d5dfc8da5670e2a848a07d2ec05bb189492a1403"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x1a0, 0x18, 0x0, 0x0, {{0xf}, {0x74, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1000}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x5, 0x4, 0xf23, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2d}}]}, {0xff, 0x6, "080c2bc5aba976e78820b81c36d97a194e75f0fba10d5bb85c4d5cad0752467653f0e9a2b4950aec6b850958d5a3764e62a27ba74a2c730b1329e3a0a5eaa6f6170e778414b6b18efa789411fd54c2ee988686cdb84b0607188b4f289d347508c19e592241cbc15e449087f34b329f717d3d82dd18b25f2114dca3ee8d224cf507dbbcb614cf47bca3c23c02b58af6ed347df87ffe5e864bad3c58b1b0eef89fe1d377800e06d88e19f88ab7f0601d1a9828e335e329196e96d82da0840f4457547115cfafe1ee9d1b69c961151b77a2038ae3daa8ec70649a09973bee19f60879d226f5bcef07d7d961034e3f74ab674a0d7e7976d015c69251dd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x50, 0xc, 0x0, 0x0, {{0x8}, {0x4}, {0x27, 0x6, "7d2ae775fb350913f7ffb73469f68f997beeea84f4b9e62376930d00c1599749f1af02"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x90, 0x20, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x0, 0x6, 0x5, 0x401}, 0x1}}]}, {0x25, 0x6, "b6ed68eac67567519c42c68a261b0381c5aaeb7c3a99a20d2444ff78905048c53a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffd2c5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0x2d, 0x6, "8c9964b2082d176be38e104d2c2565979cf4334a37e0a2c13969ede7fdea630e2c53dd1a88b368bece"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x100, 0x4, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0xb3, 0x6, "1d5148de7e9f9bf8de6be13fd61702a84bc87401d383fd1872d0535f0c47d51b5717b3e50e840f7c81abb131382be262a1ad11160a8283ee599d34c65b3521fe49a405d5ef42d1abae72bd06329d94fa1aaada55c795790c7fcd7a69786be7d6dfce2ebf6a72012cff61a5e99f9876186e3d8354c17d972e2f11c15dd00a6332abddf5e1ab1298c960e3ac774ce4e46f553dd83c70703f9494e1c4aadba6d7dd17f83a34f39a204b8a9d0c0b6d3908"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x120, 0x9, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x8, 0x9694, 0x3}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x72cc, 0x6, 0x6, 0x9, 0x8}, 0x2d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7e68471d, 0xa6, 0x0, 0x6, 0x3}, 0xf1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x80d, 0x20000000, 0x5, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x0, 0x7fffffff, 0x10}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xd4, 0x10000000, 0x0, 0xe}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xe, 0x10000000, 0x18000000, 0xf8000000}, 0x38a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x0, 0xffffffffffffffff, 0x35, 0x3}, 0x2}}]}, {0xf, 0x6, "8bbb7bbeee907aceea02c5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x5}}]}}]}, 0x256c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 719.282281ms ago: executing program 3 (id=7436): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r1, @ANYBLOB="80008f0b0a000200aaaaaaaaaaaa000008000f"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 718.870903ms ago: executing program 2 (id=7437): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 717.438213ms ago: executing program 1 (id=7438): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000d3a2c2ede4000000001c140000fe00000100000029e0eed3"], 0x24}}, 0x0) (async, rerun: 32) read(0xffffffffffffffff, &(0x7f0000000100)=""/243, 0xf3) 655.215351ms ago: executing program 4 (id=7439): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1405, 0x300, 0x70bd28, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48011) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000e28b94e400fc03216f505020bc2366acb892276c9feeeabdcb0271636a98bfc00f87e4dee1d8e4bcbc7268aefac63903d44e1aad8572c822a09aa5d713f96e286f71fb5c3f9c9ffb08dc8b7a785ac9d6f975e652aa9a319335b9b7ae8d0f12726a7f0dd07d6533e0880eecb2192b441a93e69b37dd6a7109b2f963fe2232d5d0f807386af8c8630c13ab5e553b8a0dca2169ec9361fa56a80f25aabd998d0886c2c4fb834704c9c2a6cbc9f06fbd1c7d0910ed86d81ca25b2a4a00"/200, @ANYRES16=r1, @ANYBLOB="01002ebd7000fbdbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000180000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) 641.28952ms ago: executing program 1 (id=7440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a010c00fff50000000000020000000900020073797a32000000000900010073797a30000000000c000640000000000000000214"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 509.467218ms ago: executing program 3 (id=7441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) (rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000000000006911ba000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r2, 0x100000000) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x2, 0x0, 0x7, 0xbdb, 0x7509}, 0x20) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r4, 0x80089000) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) (async) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r3, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) mmap(&(0x7f0000ea7000/0x2000)=nil, 0x2000, 0x2000006, 0x10010, r2, 0xb0d4f000) (async, rerun: 64) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) listen(r5, 0xc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0xff1f0000}, 0x800) 508.121361ms ago: executing program 4 (id=7442): poll(&(0x7f0000000040), 0x0, 0x7a7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4073, 0xff0, 0x1, 0x0}, &(0x7f0000000140)=0x53) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000000000000fcffffff000000000000020005000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 507.411938ms ago: executing program 0 (id=7443): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000004900000095000000000000004dd90abee6d40aeae03868e3e455a41e85d7b094c58586700988fd470a80a0e2449b82e96a95564fe0dbe0bc7ca6a783fe2d44ac274f0fb8994f79a9cc3c547f99dca5fb70d107492692c0ec3df87abd3ee5bc62416bb6bba0a8a3ea0476024b50f86c110da6cbae7f8e0ffa7565cf9165eeede9bc577f06ce"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x7fe2, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x400}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xc3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x468c0) 460.973163ms ago: executing program 1 (id=7444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xff, '\x00', @empty}}}}}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x80000000, 0x504, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$unix(r6, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x6e) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r7, 0x8}, &(0x7f00000003c0)=0x8) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r8, 0x0, 0x0, 0x80800) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 410.656793ms ago: executing program 0 (id=7445): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{0x0, 0x10004, 0x4c270108, 0x4, 0x7ff, 0x7, 0x2, 0x3ff, 0xfffffffd, 0x4, 0x5, 0xbfa, 0xffffffffffffffff, 0xd5, 0x8}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0a000200aaaaaaaaaabb0000"], 0x48}}, 0x800) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 249.802409ms ago: executing program 3 (id=7446): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x4e24, 0x0, 'rr\x00', 0x34, 0x51, 0x3b}, 0x2c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfd, 0x3, 0x7, 0x1, 0x2, 0x7, 0x80000}}, {0x4}}]}]}, 0x48}}, 0x8804) 249.446285ms ago: executing program 0 (id=7447): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x0, 0x4001000, 0x4a}, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x0, 0x1e}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x6}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x3, 0x7fff}}, @TCA_U32_SEL={0x34, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb70b, 0x58f, [{0xaf, 0x6, 0x9, 0x2}, {0x1, 0x1, 0x5, 0x7}]}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x2000004}, 0xffffffb0) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000080)={0x2, 0x1}) sendmsg$tipc(r1, &(0x7f0000000180)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x3}}, 0x10, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 248.650804ms ago: executing program 2 (id=7448): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0xa, 0xfffffffffffffffd, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30ed447f265616aae93d59dc30cee14c8ba06c", @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000001c000d80040000801400008000000500feffffff4fff070000000000"], 0x30}}, 0x4000890) 220.869472ms ago: executing program 1 (id=7449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000100)) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) 177.443422ms ago: executing program 2 (id=7450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept(r0, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0xd1, 0x382532b9, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x1, 0x20, 0x6, 0x31168485}}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@delqdisc={0x64, 0x25, 0x2, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xe, 0xb}, {0xfff2, 0xb}, {0xfff3, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0xf3, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}, @TCA_RATE={0x6, 0x5, {0x3a, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x17, 0xa, 0x804, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000808000340000000000800024000000000080006400000000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 89.500022ms ago: executing program 3 (id=7451): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x100000) sendmmsg$unix(r0, &(0x7f00000025c0)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002500)=[{&(0x7f00000000c0)="52a562c30a55349f3baa2e6a3b8485e71598b9410d0ff5752f0883a26704a8bb57e5c13810f387394e5c4e09dc6c", 0x2e}, {&(0x7f0000000100)="360c245766597964b5dc9f0afd5e9fb6c4f8b33e3643afd7c5de62a80d77d6181b0066c87970e2a1db8793cf24b0b78ce871f9a1f4ebd743867168333d326cd80e02c5c3fe68657c87a45d224117712050e1e124b07b1d69e07aef0e3db045e0ac7005381fbca61ca64bf158c7ed35ab72c6c02061bfad9edca8f46c4c91ddd1588c45fa57731752c0667fc7faf190d63db9d4ea85fbd47e290ab9e701d4b462468282914b4bcb7a159c3b1ec233ff8774f91cc2a928fda713b7614a120f9bfc2065194b511f3b013e5aa5a9eb264d9606b310229d946c49", 0xd8}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="1a2ea4da9df37db0042e125b299260e93a09053ce792bba7995327fc665d2bc19e33613baab2aa49745fff60fbe0a11e3c6e597eb13a10e18b77f71282d49fe98a577fdcada28027c01d491758bb3f50552b1cbd5f049dc185b34664b5018e9dd8324652eb6b18fd272ff08a51575ef8a8b90c4152ba11f7b907022fa730c65b2ab51286150b41f1caca20fe92ba82f14599b6c77a985d14bef16d9dcd4cc1682b98d55ef188b9892898c9985f8bf786f3fcf989f2d8cb58b2d59c23f672ff12b53b583d", 0xc4}, {&(0x7f0000001300)='Wz', 0x2}, {&(0x7f0000001340)="ed889c31b17f373b97e4aeea4db64c970eda9d1b418de5df8a7d0d8ceb6e9e30799b98307a248892c6c12c95f751e7e29f235dfab258e26fc3cb30a89f3022a6f43f917b358200c983a5a2e4ea2df4565a68a442dcd1062223cb65ef187a6e43a3dc91cff4181e42aa9ef142", 0x6c}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="0acfe4a85293d0f347ebc92f17d2c67fe90d745904f3b1739a8f0e066637bdc73e739c19e22156d9982783d006cb79b45bc03b5468602618b8194e9f79fef0508d69a1ad10e8feb79b83d4d3ae8dd1fd5a456f13c4c97859fcb91f9a4d72ca883ed55ed5e15326b8dcb4af71e6e2f53031ab97290e9626437fd1ec3e1a0272b0e34641e7271cac13ca947f0779353e31371309c322e6025a44eaf90c694a94bbddb35e3a12d726c7302303fe8815826f4139032db0", 0xb5}, {&(0x7f0000002480)="103736f8e0f9fc39f205634073aa2256d2f7b118125508ffa8177963bc41f4340421a82b2f45c2c9ce19bd3c6c9f4cb26c8a3a32ba43e91faadcdbf53d0c6284721534e11ec7fc09f45492ce5996e089e9f116d965a8b27c2a4a", 0x5a}], 0x9, 0x0, 0x0, 0x40}}], 0x1, 0x30) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, r0, 0x10f9a000) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002700), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002880)={{0x1, 0xffffffffffffffff}, &(0x7f0000002800), &(0x7f0000002840)='%-5lx \x00'}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002940)={0x11, 0x2, &(0x7f0000002600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000002640)='syzkaller\x00', 0x9, 0x73, &(0x7f0000002680)=""/115, 0x41000, 0x48, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000002740)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002780)={0x0, 0x1, 0x7fff, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000028c0)=[r2, r3], &(0x7f0000002900)=[{0x1, 0x3, 0xe, 0x4}, {0x2, 0x1, 0xe}, {0x4, 0x1, 0x6, 0xc}], 0x10, 0x3}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002a40)={0x5, &(0x7f0000002a00)=[{0x9, 0x0, 0xc, 0x401}, {0x8, 0x8, 0x5, 0x5}, {0xe4, 0x8, 0x40, 0xce}, {0x4, 0x3, 0x2, 0x4}, {0x31f, 0x1a, 0x3, 0x2}]}, 0x10) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000002a80)={0x6, [0x8, 0x200, 0x8, 0x1, 0x2, 0x5]}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002ac0), &(0x7f0000002b00)=r4}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000002d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002d80)=0x14) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002e40)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x3, '\x00', 0x0, r1, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002f00)={0x6, 0xa, &(0x7f0000002b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb64a, 0x0, 0x0, 0x0, 0xd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @jmp={0x5, 0x1, 0x8, 0x9, 0x3, 0xfffffffffffffff8, 0x1}, @exit]}, &(0x7f0000002c00)='syzkaller\x00', 0x8, 0xfe, &(0x7f0000002c40)=""/254, 0x41000, 0x4f, '\x00', r6, 0x25, r1, 0x8, &(0x7f0000002dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000002e00)={0x4, 0x10, 0x7fbf, 0xde}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=[r7, r2, r3, r3], 0x0, 0x10, 0x400}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000003080)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x42, &(0x7f00000030c0)={@local, @empty, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @broadcast, @local}}}}, &(0x7f0000003140)={0x1, 0x4, [0xced, 0xbd0, 0xb1b, 0x8ba]}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003180)='./cgroup.net/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000031c0)='io.stat\x00', 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000003200)={r9}, 0x8) setsockopt$inet6_tcp_buf(r10, 0x6, 0x1f, &(0x7f0000003240)="3b9e14cb083851151a43304e5cad8966918fd48edf01f4f2b2daaa4b6560e0603db977a62c9f3b9bd8bd27972867f8", 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003600)={r9, 0x0, 0xeb, 0xe6, &(0x7f0000003280)="6c01d19751898caa638a9fda690ee753299160bb0af1adab490c4e9c30aa9857db0edf0acd422ce946e05a504b5cee466fbd40d180b2c713e3d00d532822a36039bf2274f6db8ac5ba15078c16f1e865a378a510128fcea75d30c1a0dd34cccda57fe4a332db89d16826ef3dd3c1aa514507d0dfdc2320eb476f5638fdc7d11d89c46fbadbaa3090d17d46694494bb541e9f8666f20b371577fb018b76139b7b591588a0a1e44a03440c0fe9dc08b866ae1b15b6119fb74667d8fa489b380ea6895b6523890bb6b19b9c5d609b860cf101347df24595575cc9c269169840cde2a1564493f5c7b025fd87af", &(0x7f0000003380)=""/230, 0x4, 0x0, 0xf8, 0x6d, &(0x7f0000003480)="d74cf82152405a8b05b6c557944987ac606c132b350ec1f274eb890baf94c4425caf2620b135623be44fe270a45b06b2bddb6729eb8a42b9b53161b09265569bbb624c32cc29f17b9dde31c1c0a000c8a90962152006cea92fb96452f86c8f2b30e54ba8b69e913b126bd8b234f6a35decf635fa47b3a5b086adcb4fc3a6878fea6d8dc943785f5c63a15a4b091be414aeee4403d90d5834315f70a07e789c5b28ba33ef37df8304b835be1c6efc03a345d74d487c1954efc68de03bb774123955a841105c242bccc5bb65127881a468a9e3682523bf347591cc8ead4c49a6f2b3b8412ccf3536e2f14b6f8fb4ae1af1836ce0e2944649a5", &(0x7f0000003580)="388df9bc81123bac6191d3bfed9baeacc46f8031ba67bf1944b36eb0803ab3da1c167bd3aa750a14ef02048085daa427271f7b9dfd9372ca6a5100920fc44be07145323b07a7b08e42d437f0a399166f1a273892f6d6563b0a5a645158732a193ed96d7fbc7893e6818ddc8695", 0x2, 0x0, 0x9}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000036c0), r9) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r11, &(0x7f0000003780)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x1c, r12, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4044081) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x40010, r11, 0xb2443000) ioctl$PPPIOCSNPMODE(r10, 0x4008744b, &(0x7f00000037c0)={0x21, 0x1}) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000003900)={r7, &(0x7f0000003800)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, &(0x7f0000003840)={@_ha_fsid={[0x1800000, 0x2]}, {0xff, 0x81, 0x5, 0x3}}, 0x9, &(0x7f0000003880)={@_ha_fsid}, &(0x7f00000038c0)=0x58000000}) ioctl$FS_IOC_GETFSLABEL(r13, 0x81009431, &(0x7f0000003940)) pipe(&(0x7f0000003b80)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003d40)={0x6, 0x10, &(0x7f0000003a40)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000003ac0)='syzkaller\x00', 0x5c7, 0x34, &(0x7f0000003b00)=""/52, 0x41000, 0x1, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003b40)={0x2, 0xd, 0xfffffffa, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000003c40)=[r3, r13, r14, 0xffffffffffffffff, r13, 0xffffffffffffffff, r3], &(0x7f0000003c80)=[{0x1, 0x5, 0x3, 0x1}, {0x4, 0x4, 0x5, 0x3}, {0x3, 0x3, 0x6, 0xa}, {0x4, 0x1, 0x6, 0xb}, {0x3, 0x1, 0xd, 0x7}, {0x5, 0x1, 0x0, 0x2}, {0x5, 0x2, 0x10, 0xb}, {0x5, 0x5, 0x0, 0xa}, {0x2, 0x5, 0xa, 0x4}], 0x10, 0x800}, 0x94) 88.875736ms ago: executing program 1 (id=7452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x15, 0xa9, @random="ad93002848d07e00a9fd2a47532dddaadb"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="b0b3", 0x2}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) recvmmsg(r8, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/195, 0xc3}], 0x1, &(0x7f00000000c0)=""/75, 0x4b}, 0x9}], 0x1, 0x40010000, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket(0x23, 0x2, 0xf7) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 41.009377ms ago: executing program 3 (id=7453): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) 2.116175ms ago: executing program 2 (id=7454): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 0s ago: executing program 0 (id=7455): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb9eb7b6f9bbbb88a84d008100660008004519001c00e4", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x36) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2041) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c0005"], 0x108}}, 0x24040800) kernel console output (not intermixed with test programs): tes in process `syz.1.3993'. [ 450.481155][T20583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.506011][T20583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.515863][T20583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.525480][T20583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.534407][T20591] Unsupported ieee802154 address type: 0 [ 450.547530][T20583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.571828][T20597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.580019][T11302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.592361][T20583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.736136][T20599] bond1 (unregistering): Released all slaves [ 450.757612][T17540] block nbd4: Receive control failed (result -32) [ 450.873340][T20612] netlink: 'syz.3.4004': attribute type 2 has an invalid length. [ 451.308731][T20638] sctp: [Deprecated]: syz.1.4012 (pid 20638) Use of int in max_burst socket option. [ 451.308731][T20638] Use struct sctp_assoc_value instead [ 451.433450][T20645] netlink: 'syz.3.4015': attribute type 1 has an invalid length. [ 451.476569][T20643] netlink: 'syz.2.4014': attribute type 1 has an invalid length. [ 451.494410][T20645] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 451.552513][T20656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 451.738040][T20672] bridge0: port 3(gretap0) entered blocking state [ 451.770889][T20672] bridge0: port 3(gretap0) entered disabled state [ 451.778533][T20672] gretap0: entered allmulticast mode [ 451.786149][T20672] gretap0: entered promiscuous mode [ 451.793323][T20672] bridge0: port 3(gretap0) entered blocking state [ 451.800058][T20672] bridge0: port 3(gretap0) entered forwarding state [ 452.469894][T20660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.671522][T20697] x_tables: duplicate underflow at hook 3 [ 452.892887][T10446] IPVS: ip_vs_send_async error -101 [ 453.002981][T20730] netlink: 'syz.0.4039': attribute type 1 has an invalid length. [ 453.039790][T20736] netlink: 'syz.3.4041': attribute type 32 has an invalid length. [ 453.048426][T20734] : entered promiscuous mode [ 453.100761][T20730] 8021q: adding VLAN 0 to HW filter on device bond6 [ 453.113796][T17359] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.169910][T20736] bond3: Setting coupled_control to off (0) [ 453.370998][T17359] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.372102][T20758] netlink: 'syz.3.4049': attribute type 1 has an invalid length. [ 453.389711][T17359] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.510009][T20763] net_ratelimit: 12 callbacks suppressed [ 453.510026][T20763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.529216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.543341][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.563681][T20758] bond4: entered promiscuous mode [ 453.570562][T20758] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.577399][T20763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.590026][T17359] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.689211][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.701378][T20771] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 453.710963][T20773] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 453.732319][T20765] __nla_validate_parse: 16 callbacks suppressed [ 453.732338][T20765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4049'. [ 453.734090][T20758] syzkaller0: entered promiscuous mode [ 453.785119][T20780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4053'. [ 453.788232][T20758] syzkaller0: entered allmulticast mode [ 453.822149][T20780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4053'. [ 453.844867][T20782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.911810][T20780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4053'. [ 454.065246][T20786] netlink: 'syz.2.4055': attribute type 1 has an invalid length. [ 454.107432][T20786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4055'. [ 454.133074][T20793] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 454.248987][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.373135][T20801] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4060'. [ 454.385377][T20801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4060'. [ 454.396353][T20801] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4060'. [ 454.423156][T20801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4060'. [ 454.452632][T20801] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4060'. [ 454.592242][T20797] syzkaller0: entered promiscuous mode [ 454.608975][T20797] syzkaller0: entered allmulticast mode [ 454.730325][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.408814][T11302] page_pool_release_retry() stalled pool shutdown: id 102, 1 inflight 60 sec [ 457.641004][T20827] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 457.647005][T20837] ip6gretap0: entered promiscuous mode [ 457.973568][T20857] netlink: 'syz.3.4075': attribute type 7 has an invalid length. [ 458.243343][T20884] IPv6: NLM_F_REPLACE set, but no existing node found! [ 458.536488][T20892] syzkaller0: entered promiscuous mode [ 458.561250][T20892] syzkaller0: entered allmulticast mode [ 458.579284][T20905] netlink: 'syz.4.4088': attribute type 1 has an invalid length. [ 458.709418][T20905] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 458.717345][T20915] lo: Caught tx_queue_len zero misconfig [ 458.762045][T20921] netlink: 'syz.3.4092': attribute type 83 has an invalid length. [ 458.847093][T20915] pim6reg1: entered promiscuous mode [ 458.860896][T20915] pim6reg1: entered allmulticast mode [ 458.879541][T20915] net_ratelimit: 6 callbacks suppressed [ 458.879558][T20915] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 458.912809][T20915] __nla_validate_parse: 71 callbacks suppressed [ 458.912825][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4091'. [ 458.937176][T20926] openvswitch: netlink: IP tunnel dst address not specified [ 459.127825][T20939] dvmrp0: entered allmulticast mode [ 459.253354][T20945] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4097'. [ 459.429117][T20966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4103'. [ 459.438550][T20967] netlink: 'syz.1.4104': attribute type 4 has an invalid length. [ 459.443323][T20965] netlink: 'syz.1.4104': attribute type 4 has an invalid length. [ 459.465910][T20966] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 459.613825][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4111'. [ 459.632537][T20983] ip6tnl0: Caught tx_queue_len zero misconfig [ 459.797406][T20991] netlink: 'syz.0.4113': attribute type 10 has an invalid length. [ 460.059113][T21018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4121'. [ 460.113960][T21018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4121'. [ 460.325055][T21035] netlink: 'syz.4.4127': attribute type 2 has an invalid length. [ 460.395411][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4128'. [ 460.480709][T21041] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4129'. [ 460.529056][T21041] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4129'. [ 460.595821][T21041] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4129'. [ 460.661993][T21052] vlan0: entered promiscuous mode [ 460.764564][T21058] tipc: Enabling of bearer rejected, failed to enable media [ 460.771863][T21060] netlink: 'syz.4.4136': attribute type 1 has an invalid length. [ 460.863113][T21060] bond2: entered promiscuous mode [ 460.869932][T21060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.991072][ T9686] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 461.079495][T21060] bond2: (slave bridge5): making interface the new active one [ 461.102428][T21060] bridge5: entered promiscuous mode [ 461.115840][T21060] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 461.221184][T21087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.273617][T21092] bond0: Error: Cannot enslave bond to itself. [ 461.320368][T21098] bond0: Caught tx_queue_len zero misconfig [ 461.844170][T21138] tc action pedit offset must be on 32 bit boundaries [ 461.853114][T21138] tc action pedit offset must be on 32 bit boundaries [ 461.859990][T21138] tc action pedit offset must be on 32 bit boundaries [ 461.866792][T21138] tc action pedit offset must be on 32 bit boundaries [ 461.873619][T21138] tc action pedit offset must be on 32 bit boundaries [ 461.880437][T21138] tc action pedit offset must be on 32 bit boundaries [ 461.887206][T21138] tc action pedit offset must be on 32 bit boundaries [ 461.894054][T21138] tc action pedit offset must be on 32 bit boundaries [ 461.900947][T21138] tc action pedit offset must be on 32 bit boundaries [ 461.907735][T21138] tc action pedit offset must be on 32 bit boundaries [ 461.914587][T21138] 0: reclassify loop, rule prio 0, protocol 800 [ 462.030642][T21151] netlink: 'syz.4.4163': attribute type 11 has an invalid length. [ 462.097109][T21147] syzkaller0: entered promiscuous mode [ 462.109148][T21147] syzkaller0: entered allmulticast mode [ 462.397610][T21171] Cannot find del_set index 4 as target [ 463.397062][T21240] netlink: 'syz.1.4194': attribute type 16 has an invalid length. [ 463.427540][T21240] netlink: 'syz.1.4194': attribute type 17 has an invalid length. [ 463.557473][T21240] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 463.572581][T21240] ipvlan0: left allmulticast mode [ 463.577637][T21240] veth0_vlan: left allmulticast mode [ 463.598259][T21240] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 463.616236][T21240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.637740][ T5769] bond_slave_0: entered promiscuous mode [ 463.645465][ T5769] bond_slave_1: entered promiscuous mode [ 463.670551][T21253] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.754365][T21253] bridge_slave_0 (unregistering): left allmulticast mode [ 463.788816][T21253] bridge_slave_0 (unregistering): left promiscuous mode [ 463.808025][T21253] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.025914][T21281] __nla_validate_parse: 82 callbacks suppressed [ 464.025930][T21281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4203'. [ 464.045080][T21281] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 464.204522][T21279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4202'. [ 464.471836][T21297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4208'. [ 464.495342][T21295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4209'. [ 464.524020][T21306] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4212'. [ 464.593449][T21306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.612533][T21306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.631880][T21306] bond0 (unregistering): Released all slaves [ 464.764937][T21318] netlink: 'syz.4.4215': attribute type 1 has an invalid length. [ 464.781380][T21310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.781889][T21318] netlink: 'syz.4.4215': attribute type 4 has an invalid length. [ 464.804694][T21318] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4215'. [ 464.855660][T21320] syzkaller0: entered promiscuous mode [ 464.862007][T21320] syzkaller0: entered allmulticast mode [ 465.095906][T21343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4220'. [ 465.108480][T21342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4220'. [ 465.164086][T21335] set match dimension is over the limit! [ 465.306765][T21354] syzkaller0: entered promiscuous mode [ 465.312907][T21354] syzkaller0: entered allmulticast mode [ 465.349499][T21354] ip6_vti0: left promiscuous mode [ 465.373646][T21354] ip6gretap0: left promiscuous mode [ 465.382431][T21354] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.390052][T21354] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.436533][T21354] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 465.456562][T21358] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 467.123701][T21369] netlink: 'syz.1.4228': attribute type 1 has an invalid length. [ 467.291172][T21372] netlink: 'syz.1.4229': attribute type 4 has an invalid length. [ 467.747860][T21318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.982576][T21376] bridge3: entered promiscuous mode [ 468.000521][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4235'. [ 468.008662][T21376] bridge3: entered allmulticast mode [ 468.070878][T21382] nbd5: detected capacity change from 0 to 127 [ 468.110533][T17540] block nbd5: Receive control failed (result -32) [ 468.131249][T17936] block nbd5: Dead connection, failed to find a fallback [ 468.138869][T17936] block nbd5: shutting down sockets [ 468.144608][T17936] blk_print_req_error: 138 callbacks suppressed [ 468.144624][T17936] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.163505][T17936] buffer_io_error: 138 callbacks suppressed [ 468.163528][T17936] Buffer I/O error on dev nbd5, logical block 0, async page read [ 468.179651][T17936] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.190519][T17936] Buffer I/O error on dev nbd5, logical block 1, async page read [ 468.201722][T17936] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.211669][T17936] Buffer I/O error on dev nbd5, logical block 2, async page read [ 468.221527][T17936] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.244060][T17936] Buffer I/O error on dev nbd5, logical block 3, async page read [ 468.275265][T17936] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.304288][T17936] Buffer I/O error on dev nbd5, logical block 0, async page read [ 468.324772][T17936] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.341138][T17936] Buffer I/O error on dev nbd5, logical block 1, async page read [ 468.355089][T17936] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.367861][T17936] Buffer I/O error on dev nbd5, logical block 2, async page read [ 468.408211][T17936] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.421133][T17936] Buffer I/O error on dev nbd5, logical block 3, async page read [ 468.439264][T17936] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.455890][T17540] block nbd6: Receive control failed (result -32) [ 468.481261][T17936] Buffer I/O error on dev nbd5, logical block 0, async page read [ 468.489755][T10446] IPVS: ip_vs_send_async error -101 [ 468.495939][T17936] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 468.507904][T17936] Buffer I/O error on dev nbd5, logical block 1, async page read [ 468.519162][T17936] ldm_validate_partition_table(): Disk read failed. [ 468.527606][T17936] Dev nbd5: unable to read RDB block 0 [ 468.536003][T17936] nbd5: unable to read partition table [ 468.584682][T17936] ldm_validate_partition_table(): Disk read failed. [ 468.605687][T17936] Dev nbd5: unable to read RDB block 0 [ 468.631569][T17936] nbd5: unable to read partition table [ 468.696149][T21418] tipc: Failed to remove unknown binding: 66,1,1/0:2001959467/2001959469 [ 468.871772][T21432] tipc: Started in network mode [ 468.893085][T21432] tipc: Node identity ac1e0002, cluster identity 4711 [ 468.903327][T21432] tipc: Enabling of bearer rejected, failed to enable media [ 468.913528][T21433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4249'. [ 469.033786][T21448] __nla_validate_parse: 4 callbacks suppressed [ 469.033804][T21448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4254'. [ 469.051812][T21450] netlink: 'syz.3.4255': attribute type 1 has an invalid length. [ 469.076356][T21450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4255'. [ 469.106947][T21452] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 469.174193][T21452] netlink: 'syz.1.4256': attribute type 1 has an invalid length. [ 469.187321][T21452] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4256'. [ 469.241495][T21464] netlink: 'syz.0.4258': attribute type 3 has an invalid length. [ 469.262901][T21464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4258'. [ 469.276742][T21468] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4261'. [ 469.296938][T21462] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4259'. [ 469.816470][T21502] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 469.845226][T21502] sock: sock_timestamping_bind_phc: sock not bind to device [ 469.846847][T21506] netlink: 316 bytes leftover after parsing attributes in process `syz.4.4276'. [ 469.947798][T21511] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4279'. [ 469.961788][T21511] syzkaller0: entered promiscuous mode [ 469.968251][T21511] syzkaller0: entered allmulticast mode [ 470.251862][T21531] veth1_to_bond: entered allmulticast mode [ 471.075200][T21529] veth1_to_bond: left allmulticast mode [ 473.299015][T21538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.310015][T21546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4288'. [ 473.484634][T21563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4291'. [ 473.912845][T21593] xt_HMARK: proto mask must be zero with L3 mode [ 473.964436][T21596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.050281][T21604] __nla_validate_parse: 6 callbacks suppressed [ 474.050301][T21604] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4305'. [ 474.050407][T21596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.163195][T21601] syzkaller0: entered promiscuous mode [ 474.185051][T21601] syzkaller0: entered allmulticast mode [ 474.622341][T21641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4313'. [ 474.992134][T21659] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 475.007007][T21659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4316'. [ 475.084270][T21664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4318'. [ 475.116612][T21664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4318'. [ 475.175527][T21672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4318'. [ 475.251110][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4321'. [ 475.562748][T21706] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.4327'. [ 475.703629][T21715] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.4334'. [ 475.726536][ T5367] IPVS: starting estimator thread 0... [ 475.744627][T21715] openvswitch: netlink: IP tunnel dst address not specified [ 475.828529][T21725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4332'. [ 475.856999][T21716] IPVS: using max 36 ests per chain, 86400 per kthread [ 475.885501][T21719] veth0_macvtap: Caught tx_queue_len zero misconfig [ 475.895143][T21720] IPVS: persistence engine module ip_vs_pe_À not found [ 476.102842][T21720] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.110547][T21720] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.281897][T21720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.300383][T21720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.356989][T21720] vlan0: left promiscuous mode [ 476.405630][T21720] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 476.494818][T21720] gtp0: left promiscuous mode [ 476.500890][T21720] gtp0: left allmulticast mode [ 476.518239][T21743] veth1_to_bond: entered allmulticast mode [ 476.536691][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.561056][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.659990][T21743] veth1_to_bond: left allmulticast mode [ 476.665953][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.706206][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.954270][T21785] netlink: 'syz.2.4351': attribute type 11 has an invalid length. [ 476.978770][T21785] netlink: 'syz.2.4351': attribute type 11 has an invalid length. [ 477.087387][T21789] syzkaller0: entered promiscuous mode [ 477.103725][T21789] syzkaller0: entered allmulticast mode [ 477.167196][T21789] tipc: Enabled bearer , priority 0 [ 477.190545][T21787] tipc: Resetting bearer [ 477.237876][T21787] tipc: Disabling bearer [ 477.675635][T21827] netlink: 'syz.2.4359': attribute type 1 has an invalid length. [ 477.795075][T21835] netlink: 'syz.2.4359': attribute type 1 has an invalid length. [ 477.939208][T17540] Bluetooth: hci5: command 0x0406 tx timeout [ 477.998230][T21827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.213187][T21851] can: request_module (can-proto-4) failed. [ 478.317607][T21848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.342495][T21848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.443067][T21857] bond0: (slave geneve2): making interface the new active one [ 478.463656][T21857] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 478.534864][T17358] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.582805][T17358] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.609521][T17358] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.683236][T17358] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.716840][T21887] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 478.899720][T21895] netlink: 'syz.0.4371': attribute type 1 has an invalid length. [ 479.146260][T21917] __nla_validate_parse: 9 callbacks suppressed [ 479.146280][T21917] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4376'. [ 479.324748][T21928] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4381'. [ 479.347767][T21923] IPv6: NLM_F_REPLACE set, but no existing node found! [ 479.358356][T21928] netlink: Conntrack attr has 4 unknown bytes [ 479.702750][T21953] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4385'. [ 479.732468][T21959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.733728][T21956] netlink: 'syz.1.4388': attribute type 32 has an invalid length. [ 479.803134][T21956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.981779][T21974] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 480.115043][T21980] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 480.358950][T21998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4399'. [ 480.441099][T21998] netlink: 'syz.0.4399': attribute type 2 has an invalid length. [ 480.475513][T21998] netlink: 'syz.0.4399': attribute type 1 has an invalid length. [ 480.493568][T21998] netlink: 'syz.0.4399': attribute type 3 has an invalid length. [ 480.507045][T21998] netlink: 'syz.0.4399': attribute type 7 has an invalid length. [ 480.515594][T21998] netlink: 'syz.0.4399': attribute type 8 has an invalid length. [ 480.548326][T21998] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4399'. [ 480.573857][T21998] NCSI netlink: No device for ifindex 131092 [ 480.720284][T22014] netlink: 'syz.3.4402': attribute type 11 has an invalid length. [ 480.758446][T22014] netlink: 'syz.3.4402': attribute type 4 has an invalid length. [ 480.766754][T22014] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.4402'. [ 480.795009][T22017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4403'. [ 480.810742][T22017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4403'. [ 480.862353][T22026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4405'. [ 480.886973][T22026] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4405'. [ 481.254403][T22048] Bluetooth: MGMT ver 1.23 [ 481.404476][T22054] veth0: entered promiscuous mode [ 481.422295][T22051] veth0: left promiscuous mode [ 484.703820][T22108] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 485.016819][T22127] validate_nla: 3 callbacks suppressed [ 485.016837][T22127] netlink: 'syz.0.4434': attribute type 1 has an invalid length. [ 485.087310][T22127] 8021q: adding VLAN 0 to HW filter on device bond7 [ 485.139677][T22137] bond7: (slave veth13): Enslaving as an active interface with a down link [ 485.278158][T22143] netlink: 'syz.4.4435': attribute type 1 has an invalid length. [ 485.303648][T22143] __nla_validate_parse: 8 callbacks suppressed [ 485.303663][T22143] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4435'. [ 485.882646][T22173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4444'. [ 485.915974][T22187] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4447'. [ 485.927572][T22184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4448'. [ 485.942214][T22184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4448'. [ 488.690866][T22163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.857562][T22204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4450'. [ 488.878370][T22209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4454'. [ 488.903911][T22211] syzkaller1: entered promiscuous mode [ 488.917553][T22211] syzkaller1: entered allmulticast mode [ 489.090234][T22220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4457'. [ 489.110354][T22220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4457'. [ 489.148207][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4457'. [ 489.165059][T22232] netlink: 'syz.2.4461': attribute type 3 has an invalid length. [ 489.294019][T22243] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 489.294019][T22244] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 489.564389][T22255] netlink: 'syz.2.4466': attribute type 10 has an invalid length. [ 489.674220][T22267] xt_hashlimit: size too large, truncated to 1048576 [ 489.790240][T22273] erspan0: entered allmulticast mode [ 489.939968][T22279] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 489.964979][T22279] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 490.035868][T22279] tipc: Enabled bearer , priority 0 [ 490.559616][T22317] __nla_validate_parse: 8 callbacks suppressed [ 490.559633][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4487'. [ 490.649818][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4488'. [ 490.834956][T22338] sit0: entered promiscuous mode [ 490.849431][T22338] netlink: 'syz.2.4492': attribute type 1 has an invalid length. [ 490.866881][T22338] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4492'. [ 491.185796][ T9] tipc: Node number set to 2887647234 [ 491.220280][T22352] netlink: 'syz.3.4494': attribute type 10 has an invalid length. [ 491.246491][T22352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.255390][T22352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.265915][T22352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.279142][T22352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.467840][T22359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4495'. [ 491.547727][ T81] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.571322][ T81] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.627254][ T81] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.660010][ T81] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.752010][T22379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4504'. [ 491.794259][T22381] macvlan0: entered promiscuous mode [ 491.804640][T22383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4506'. [ 491.903022][T22388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4507'. [ 491.909640][T22391] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4509'. [ 491.993298][T22390] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 492.677901][T22440] ip6tnl1: entered allmulticast mode [ 492.708248][T22440] netlink: 'syz.3.4518': attribute type 1 has an invalid length. [ 492.789254][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4520'. [ 492.993715][T22463] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4522'. [ 493.401535][T22502] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 493.407767][T22488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.913467][T22529] vlan1: entered allmulticast mode [ 493.929776][T22529] bond0: entered allmulticast mode [ 493.939113][T22529] geneve2: entered allmulticast mode [ 494.156903][T22524] netlink: 'syz.2.4538': attribute type 10 has an invalid length. [ 494.186053][T22524] team0: Port device dummy0 added [ 494.386215][T22543] can: request_module (can-proto-3) failed. [ 494.459592][T22550] netlink: 'syz.2.4545': attribute type 142 has an invalid length. [ 495.085590][T22584] netlink: 'syz.0.4556': attribute type 1 has an invalid length. [ 495.117852][T22584] netlink: 'syz.0.4556': attribute type 3 has an invalid length. [ 495.153409][T22584] netlink: 'syz.0.4556': attribute type 7 has an invalid length. [ 495.180292][T22584] netlink: 'syz.0.4556': attribute type 8 has an invalid length. [ 495.203638][T22584] NCSI netlink: No device for ifindex 131092 [ 495.606762][T22616] __nla_validate_parse: 48 callbacks suppressed [ 495.606781][T22616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4568'. [ 495.661290][T22616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4568'. [ 495.683632][T22621] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4572'. [ 495.727858][T22622] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4571'. [ 495.743035][T22622] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4571'. [ 495.756109][T22622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4571'. [ 495.787942][T22622] syzkaller0: entered promiscuous mode [ 495.800479][T22622] syzkaller0: entered allmulticast mode [ 495.826272][T22622] TC_ACT_REPEAT abuse ? [ 495.836366][T22625] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 495.850971][T22625] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 496.539748][T22672] syzkaller0: entered promiscuous mode [ 496.551899][T22672] syzkaller0: entered allmulticast mode [ 496.572768][T22672] tcf_pedit_act: 22 callbacks suppressed [ 496.572864][T22672] tc action pedit 'at' offset 2047 out of bounds [ 496.587273][T22672] tc action pedit 'at' offset 2047 out of bounds [ 496.593686][T22672] tc action pedit 'at' offset 2047 out of bounds [ 496.600109][T22672] tc action pedit 'at' offset 2047 out of bounds [ 496.606475][T22672] tc action pedit 'at' offset 2047 out of bounds [ 496.612891][T22672] tc action pedit 'at' offset 2047 out of bounds [ 496.619274][T22672] tc action pedit 'at' offset 2047 out of bounds [ 496.625615][T22672] tc action pedit 'at' offset 2047 out of bounds [ 496.632021][T22672] tc action pedit 'at' offset 2047 out of bounds [ 496.638372][T22672] tc action pedit 'at' offset 2047 out of bounds [ 496.644812][T22672] TC_ACT_REPEAT abuse ? [ 496.750164][T22676] netlink: 'syz.3.4589': attribute type 1 has an invalid length. [ 496.828765][T22677] macvtap1: entered promiscuous mode [ 496.851129][T22677] macvtap1: entered allmulticast mode [ 496.873350][T22677] veth1_vlan: entered allmulticast mode [ 496.892895][T22685] netlink: 'syz.0.4587': attribute type 15 has an invalid length. [ 496.902560][T22685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4587'. [ 496.972562][T22685] netlink: 'syz.0.4587': attribute type 15 has an invalid length. [ 496.974882][ T9706] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 497.008844][T22685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4587'. [ 497.026698][ T9706] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 497.080711][ T9706] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 497.110611][ T9706] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 497.392548][T22712] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4594'. [ 497.854061][T22737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4601'. [ 497.999700][T22741] netlink: 'syz.2.4603': attribute type 3 has an invalid length. [ 498.382926][T22765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.404081][T22765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.459349][T22768] tipc: Started in network mode [ 498.465084][T22768] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 498.475494][T22768] tipc: Enabling of bearer rejected, failed to enable media [ 498.623277][T22774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.073018][T22803] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 499.098117][T22803] 0ªX¹¦Dö»: entered allmulticast mode [ 499.403035][T22828] IPVS: set_ctl: invalid protocol: 33 172.20.20.66:20002 [ 500.259235][T22886] lo speed is unknown, defaulting to 1000 [ 500.287003][T22886] lo speed is unknown, defaulting to 1000 [ 500.307843][T22886] lo speed is unknown, defaulting to 1000 [ 500.347211][T22886] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 500.385229][T22886] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 500.415522][T22886] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 500.471554][T22886] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 500.548418][T22907] vlan2: entered promiscuous mode [ 500.555566][T22907] geneve1: entered promiscuous mode [ 500.560663][T22905] netlink: 'syz.4.4654': attribute type 11 has an invalid length. [ 500.561521][T22907] vlan2: entered allmulticast mode [ 500.578120][T22907] geneve1: entered allmulticast mode [ 500.592184][T22886] lo speed is unknown, defaulting to 1000 [ 500.601515][T22909] syzkaller0: entered promiscuous mode [ 500.617315][T22909] syzkaller0: entered allmulticast mode [ 500.632835][T22886] lo speed is unknown, defaulting to 1000 [ 500.652617][T22886] lo speed is unknown, defaulting to 1000 [ 500.734965][T22918] __nla_validate_parse: 17 callbacks suppressed [ 500.734983][T22918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4659'. [ 500.751715][T22886] lo speed is unknown, defaulting to 1000 [ 500.761049][T22915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4658'. [ 500.764709][T22886] lo speed is unknown, defaulting to 1000 [ 500.802333][T22886] lo speed is unknown, defaulting to 1000 [ 500.805445][T22918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4659'. [ 500.843000][T22886] lo speed is unknown, defaulting to 1000 [ 500.862108][T22922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4660'. [ 500.892765][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4660'. [ 500.923682][T22886] lo speed is unknown, defaulting to 1000 [ 500.948502][T22886] lo speed is unknown, defaulting to 1000 [ 501.009865][T22924] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4662'. [ 501.081208][T22919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4655'. [ 501.234436][T22940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4665'. [ 501.284727][T22940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4665'. [ 501.360711][T22940] gretap0: entered promiscuous mode [ 501.409292][T22951] xt_policy: output policy not valid in PREROUTING and INPUT [ 501.421684][T22953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4671'. [ 501.530602][T22940] gretap0: left promiscuous mode [ 501.838034][T22961] veth0: entered promiscuous mode [ 501.890051][T22961] veth0: left promiscuous mode [ 502.241804][T22997] syzkaller1: entered promiscuous mode [ 502.248463][T22997] syzkaller1: entered allmulticast mode [ 502.337466][T23003] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 502.346722][T23003] bond4: option packets_per_slave: allowed values 0 - 65535 [ 502.356449][T23003] bond4 (unregistering): Released all slaves [ 502.454962][T22999] syzkaller0: entered promiscuous mode [ 502.461069][T22999] syzkaller0: entered allmulticast mode [ 502.562035][T23011] netlink: 'syz.3.4687': attribute type 5 has an invalid length. [ 502.848974][T23039] netlink: 'syz.4.4697': attribute type 3 has an invalid length. [ 502.932468][T23047] netlink: 'syz.3.4696': attribute type 39 has an invalid length. [ 503.060168][T23058] netlink: 'syz.4.4701': attribute type 21 has an invalid length. [ 503.070329][T23060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 503.077610][T23060] IPv6: NLM_F_CREATE should be set when creating new route [ 503.084941][T23060] IPv6: NLM_F_CREATE should be set when creating new route [ 503.094220][T23060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 503.151629][T23062] netlink: 'syz.0.4702': attribute type 1 has an invalid length. [ 503.177805][T23058] netlink: 'syz.4.4701': attribute type 4 has an invalid length. [ 503.188833][T23058] netlink: 'syz.4.4701': attribute type 5 has an invalid length. [ 503.526822][T23083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.538355][ T5651] Bluetooth: hci3: command 0x0406 tx timeout [ 506.033442][T23078] veth0: Caught tx_queue_len zero misconfig [ 506.481937][T23106] __nla_validate_parse: 14 callbacks suppressed [ 506.481954][T23106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4713'. [ 506.517571][T23106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4713'. [ 506.538353][T23112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4714'. [ 506.693261][T23120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4716'. [ 506.717970][T23120] veth0_macvtap: left promiscuous mode [ 506.867700][T23132] tipc: Enabled bearer , priority 0 [ 506.877526][T23132] syzkaller0: MTU too low for tipc bearer [ 506.884183][T23132] tipc: Disabling bearer [ 507.020714][T23141] xt_TCPMSS: Only works on TCP SYN packets [ 507.022779][T23142] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4722'. [ 507.030768][T23143] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4722'. [ 507.111585][T23151] netlink: 'syz.3.4726': attribute type 11 has an invalid length. [ 507.254271][T23160] C: renamed from lo [ 507.264050][T23160] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 507.302755][T23163] sit0: left promiscuous mode [ 507.362369][T23170] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 507.470836][T23179] netlink: 'syz.4.4736': attribute type 11 has an invalid length. [ 507.505819][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4734'. [ 507.559465][T23192] netlink: 'syz.1.4737': attribute type 4 has an invalid length. [ 507.777781][T23211] bond0: Caught tx_queue_len zero misconfig [ 507.913154][T23219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4744'. [ 508.267495][T23183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.440670][T23225] netlink: 44459 bytes leftover after parsing attributes in process `syz.1.4749'. [ 508.460626][T23225] tunl0: Caught tx_queue_len zero misconfig [ 508.552400][T23235] netlink: 'syz.2.4752': attribute type 12 has an invalid length. [ 508.603315][T23232] netlink: 'syz.3.4750': attribute type 1 has an invalid length. [ 508.632550][ T9706] tipc: Subscription rejected, illegal request [ 508.649311][T17540] Bluetooth: hci4: command 0x041b tx timeout [ 508.677122][T23232] 8021q: adding VLAN 0 to HW filter on device bond5 [ 508.753364][T23251] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002 [ 508.772638][T23251] tipc: Enabling of bearer rejected, already enabled [ 508.831368][T23253] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 508.844595][T23251] mac80211_hwsim hwsim40 syzkaller0: Caught tx_queue_len zero misconfig [ 508.855855][T23251] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 508.884043][T23251] tipc: Resetting bearer [ 508.951327][T23263] netlink: 'syz.2.4759': attribute type 1 has an invalid length. [ 508.976703][T23263] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.4759'. [ 509.302008][T23289] syzkaller0: entered promiscuous mode [ 509.323242][T23289] syzkaller0: entered allmulticast mode [ 509.708105][T23309] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 509.755099][T23312] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 510.306440][T23328] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 510.413078][T23328] bond4 (unregistering): Released all slaves [ 510.547602][T23343] netlink: 'syz.0.4787': attribute type 32 has an invalid length. [ 510.580981][T23343] bond8: Setting coupled_control to off (0) [ 510.591082][T23348] netlink: 'syz.0.4787': attribute type 32 has an invalid length. [ 510.624434][T23348] bond9: Setting coupled_control to off (0) [ 510.631821][T23349] netlink: 'syz.3.4790': attribute type 1 has an invalid length. [ 511.213106][T23393] netlink: 'syz.4.4802': attribute type 10 has an invalid length. [ 511.447965][T23401] openvswitch: netlink: Flow key attr not present in new flow. [ 511.573495][T23411] __nla_validate_parse: 14 callbacks suppressed [ 511.573513][T23411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4809'. [ 511.599231][T23413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4809'. [ 511.646533][T23417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4811'. [ 512.203263][T23440] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4820'. [ 512.513750][T23465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4827'. [ 512.543265][T23467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4829'. [ 512.558829][T23467] openvswitch: netlink: Flow actions attr not present in new flow. [ 512.595520][ T30] audit: type=1804 audit(1781299004.707:15): pid=23467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4829" name="/newroot/368/cgroup.controllers" dev="tmpfs" ino=1889 res=1 errno=0 [ 512.620891][T23467] ve: renamed from veth0_vlan (while UP) [ 512.651658][ T30] audit: type=1800 audit(1781299004.707:16): pid=23467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4829" name="cgroup.controllers" dev="tmpfs" ino=1889 res=0 errno=0 [ 512.691470][T23472] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4831'. [ 512.954709][T23482] nbd: couldn't find a device at index 0 [ 513.003690][T23488] netlink: 'syz.4.4836': attribute type 8 has an invalid length. [ 513.043269][T23488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4836'. [ 513.091055][T23486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.120642][T23486] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.206595][T23488] veth1_to_team: entered promiscuous mode [ 513.236046][T23488] gretap0: entered promiscuous mode [ 513.275697][T23488] veth1_to_team: left promiscuous mode [ 513.300701][T23488] gretap0: left promiscuous mode [ 513.462677][T23486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.467487][T23512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4843'. [ 513.482930][T23486] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.543940][T23517] netlink: 'syz.3.4844': attribute type 1 has an invalid length. [ 513.565085][T23517] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4844'. [ 513.667163][T23486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.693894][T23527] netlink: 'syz.0.4848': attribute type 1 has an invalid length. [ 513.697618][T23486] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.716237][T23527] netlink: 'syz.0.4848': attribute type 2 has an invalid length. [ 513.744653][T23533] netlink: 'syz.0.4848': attribute type 1 has an invalid length. [ 513.766783][T23533] netlink: 'syz.0.4848': attribute type 2 has an invalid length. [ 513.863067][T23486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.893688][T23486] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.064153][T23549] netlink: 'syz.4.4852': attribute type 9 has an invalid length. [ 514.101002][ T9686] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.138908][ T9686] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.165716][T23551] sctp: [Deprecated]: syz.3.4853 (pid 23551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 514.165716][T23551] Use struct sctp_sack_info instead [ 514.251032][T10446] IPVS: ip_vs_send_async error -101 [ 514.296106][ T9703] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.313308][ T9703] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.370593][ T9686] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.385629][ T9686] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.455449][ T81] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.468318][ T81] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.478853][T23571] netlink: 'syz.4.4859': attribute type 1 has an invalid length. [ 514.491979][T23571] netlink: 'syz.4.4859': attribute type 3 has an invalid length. [ 514.502545][T23571] netlink: 'syz.4.4859': attribute type 7 has an invalid length. [ 514.510899][T23571] netlink: 'syz.4.4859': attribute type 8 has an invalid length. [ 514.519810][T23571] NCSI netlink: No device for ifindex 131092 [ 514.656672][T23578] xt_CT: No such helper "snmp_trap" [ 514.896373][T23604] siw: device registration error -23 [ 515.153681][T23621] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 515.476658][T23640] sctp: [Deprecated]: syz.3.4876 (pid 23640) Use of int in maxseg socket option. [ 515.476658][T23640] Use struct sctp_assoc_value instead [ 515.477411][T23639] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 515.634307][T23639] netlink: 'syz.4.4877': attribute type 11 has an invalid length. [ 515.657515][T23639] netlink: 'syz.4.4877': attribute type 5 has an invalid length. [ 516.627106][T23731] __nla_validate_parse: 12 callbacks suppressed [ 516.627124][T23731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4899'. [ 516.656109][T23729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4899'. [ 516.697674][T23722] syzkaller1: entered promiscuous mode [ 516.711719][T23722] syzkaller1: entered allmulticast mode [ 516.918462][T23748] nbd: couldn't find a device at index 0 [ 517.151557][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4906'. [ 517.534024][T23773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4909'. [ 517.775387][T23786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4913'. [ 517.884266][T23792] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4915'. [ 517.995135][T23803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4918'. [ 518.050647][T23803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4918'. [ 518.169309][T23811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4918'. [ 518.211391][T23803] netlink: 211792 bytes leftover after parsing attributes in process `syz.1.4918'. [ 518.490883][T23740] Bluetooth: hci2: command 0x0405 tx timeout [ 518.666060][T23858] xt_cgroup: xt_cgroup: no path or classid specified [ 518.671444][T23856] macsec0: left promiscuous mode [ 518.713017][T23858] validate_nla: 4 callbacks suppressed [ 518.713035][T23858] netlink: 'syz.4.4934': attribute type 4 has an invalid length. [ 518.896699][ T5651] Bluetooth: hci1: command 0x0406 tx timeout [ 518.945486][T23868] openvswitch: netlink: IP tunnel dst address not specified [ 519.066866][T23879] IPv4: Oversized IP packet from 127.202.26.0 [ 519.242565][T23880] syzkaller0: entered promiscuous mode [ 519.261239][T23880] syzkaller0: entered allmulticast mode [ 519.712697][T23907] netlink: 'syz.0.4945': attribute type 2 has an invalid length. [ 521.717186][T17359] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 522.535301][T23905] sch_fq: defrate 0 ignored. [ 522.545278][T23906] bridge4: port 1(veth0_to_bond) entered blocking state [ 522.554145][T23906] bridge4: port 1(veth0_to_bond) entered disabled state [ 522.563468][T23906] veth0_to_bond: entered allmulticast mode [ 522.580802][T23906] veth0_to_bond: entered promiscuous mode [ 522.634171][T23915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.750931][T23922] syzkaller0: entered promiscuous mode [ 522.773677][T23922] syzkaller0: entered allmulticast mode [ 522.853318][T23931] dvmrp0: entered allmulticast mode [ 522.866313][T23934] netlink: 'syz.2.4948': attribute type 2 has an invalid length. [ 522.883557][T23934] netlink: 'syz.2.4948': attribute type 2 has an invalid length. [ 522.896262][T23934] __nla_validate_parse: 6 callbacks suppressed [ 522.896279][T23934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4948'. [ 523.086333][T23946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4956'. [ 523.123474][T23947] can: request_module (can-proto-3) failed. [ 523.126833][T23953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4957'. [ 523.200977][T23953] 8021q: adding VLAN 0 to HW filter on device bond6 [ 523.217665][T23958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4958'. [ 523.232168][T23957] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 523.277712][T23953] 8021q: VLANs not supported on lo [ 523.633877][T23987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4966'. [ 523.665657][T23987] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4966'. [ 523.689956][T23987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4966'. [ 523.709548][T23987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4966'. [ 523.775075][T23998] IPv6: NLM_F_REPLACE set, but no existing node found! [ 524.004897][T24015] bridge0: port 3(veth1_to_bridge) entered blocking state [ 524.018028][T24015] bridge0: port 3(veth1_to_bridge) entered disabled state [ 524.025993][T24015] veth1_to_bridge: entered allmulticast mode [ 524.036006][T24015] veth1_to_bridge: entered promiscuous mode [ 524.046105][T24015] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 524.065525][T24015] bridge0: port 3(veth1_to_bridge) entered blocking state [ 524.073192][T24015] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 524.144288][T24022] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4981'. [ 524.646520][T24055] veth0: entered promiscuous mode [ 524.710051][T24060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4990'. [ 524.770121][T24052] veth0: left promiscuous mode [ 525.136527][T24097] netlink: 'syz.0.5003': attribute type 9 has an invalid length. [ 525.311186][T24115] FAULT_INJECTION: forcing a failure. [ 525.311186][T24115] name failslab, interval 1, probability 0, space 0, times 1 [ 525.349117][T24115] CPU: 1 UID: 0 PID: 24115 Comm: syz.0.5007 Not tainted syzkaller #0 PREEMPT(full) [ 525.349163][T24115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.349191][T24115] Call Trace: [ 525.349265][T24115] [ 525.349337][T24115] dump_stack_lvl+0xe8/0x150 [ 525.349444][T24115] should_fail_ex+0x412/0x560 [ 525.349535][T24115] should_failslab+0xa8/0x100 [ 525.349580][T24115] __kmalloc_noprof+0xe8/0x760 [ 525.349611][T24115] ? __asan_memcpy+0x40/0x70 [ 525.349660][T24115] ? nf_tables_newrule+0x152c/0x28b0 [ 525.349746][T24115] nf_tables_newrule+0x152c/0x28b0 [ 525.349781][T24115] ? __pfx_nf_tables_newrule+0x10/0x10 [ 525.349798][T24115] ? nfnl_pernet+0x23/0x240 [ 525.349889][T24115] ? nfnl_pernet+0x23/0x240 [ 525.349919][T24115] ? __nla_parse+0x40/0x60 [ 525.349942][T24115] nfnetlink_rcv+0x123e/0x27b0 [ 525.349993][T24115] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 525.350053][T24115] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.350127][T24115] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.350144][T24115] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.350165][T24115] netlink_unicast+0x75c/0x8e0 [ 525.350190][T24115] netlink_sendmsg+0x813/0xb40 [ 525.350210][T24115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.350225][T24115] ? aa_sock_msg_perm+0xf1/0x1b0 [ 525.350305][T24115] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.350344][T24115] ____sys_sendmsg+0x972/0x9f0 [ 525.350396][T24115] ? __might_fault+0xaf/0x130 [ 525.350417][T24115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.350437][T24115] ? import_iovec+0x73/0xa0 [ 525.350489][T24115] ___sys_sendmsg+0x2a5/0x360 [ 525.350501][T24115] ? __lock_acquire+0x6b5/0x2cf0 [ 525.350534][T24115] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.350573][T24115] ? __fget_files+0x2a/0x420 [ 525.350595][T24115] ? __fget_files+0x3a0/0x420 [ 525.350617][T24115] __x64_sys_sendmsg+0x1bd/0x2a0 [ 525.350632][T24115] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.350653][T24115] ? __pfx_ksys_write+0x10/0x10 [ 525.350681][T24115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.350707][T24115] do_syscall_64+0x174/0x580 [ 525.350769][T24115] ? trace_irq_disable+0x3b/0x140 [ 525.350796][T24115] ? clear_bhb_loop+0x40/0x90 [ 525.350812][T24115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.350824][T24115] RIP: 0033:0x7fc192f9ce59 [ 525.350869][T24115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.350906][T24115] RSP: 002b:00007fc1911f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.350952][T24115] RAX: ffffffffffffffda RBX: 00007fc193215fa0 RCX: 00007fc192f9ce59 [ 525.350961][T24115] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 525.350969][T24115] RBP: 00007fc1911f6090 R08: 0000000000000000 R09: 0000000000000000 [ 525.350976][T24115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.350983][T24115] R13: 00007fc193216038 R14: 00007fc193215fa0 R15: 00007ffd3be41628 [ 525.351006][T24115] [ 525.976976][T24143] netlink: 'syz.0.5018': attribute type 3 has an invalid length. [ 525.986540][T24144] netlink: zone id is out of range [ 525.992341][T24144] netlink: zone id is out of range [ 525.997758][T24144] netlink: zone id is out of range [ 526.003613][T24144] netlink: zone id is out of range [ 526.009513][T24144] netlink: zone id is out of range [ 526.015276][T24144] netlink: zone id is out of range [ 526.021792][T24144] netlink: zone id is out of range [ 526.184740][T24142] syzkaller0: entered promiscuous mode [ 526.201601][T24144] netlink: set zone limit has 4 unknown bytes [ 526.207347][T24142] syzkaller0: entered allmulticast mode [ 529.677649][T24215] __nla_validate_parse: 2 callbacks suppressed [ 529.677669][T24215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5035'. [ 529.777465][T24215] hsr_slave_1 (unregistering): left promiscuous mode [ 529.857572][T10446] IPVS: ip_vs_send_async error -101 [ 529.972981][T24228] openvswitch: netlink: Flow key attr not present in new flow. [ 530.053396][T24235] wg2: Caught tx_queue_len zero misconfig [ 530.085777][T24235] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5042'. [ 530.293061][T24248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5045'. [ 530.306618][T24246] netlink: 'syz.2.5047': attribute type 3 has an invalid length. [ 530.437463][T24246] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.447960][T24246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.490162][T24246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.500443][T24246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.513289][T24246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 530.524668][T24246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.544926][T24246] veth1_macvtap: left promiscuous mode [ 530.551957][T24246] veth0_macvtap: left promiscuous mode [ 530.561165][T24246] veth0_macvtap: entered promiscuous mode [ 530.568559][T24246] veth1_macvtap: entered promiscuous mode [ 530.625745][T24246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.640606][T24246] 8021q: adding VLAN 0 to HW filter on device eth0 [ 530.652365][T24246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 530.663527][T24246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 530.673085][T24246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 530.705081][ T9688] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.712439][ T9688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.752235][ T9688] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.759670][ T9688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.798339][ T9688] bridge4: port 1(veth0_to_bond) entered blocking state [ 530.805485][ T9688] bridge4: port 1(veth0_to_bond) entered forwarding state [ 530.816223][T24266] netlink: 'syz.2.5051': attribute type 1 has an invalid length. [ 530.876362][T24261] veth1_to_team: Caught tx_queue_len zero misconfig [ 530.946918][T24266] netlink: 'syz.2.5051': attribute type 1 has an invalid length. [ 530.964424][T24266] netlink: 'syz.2.5051': attribute type 1 has an invalid length. [ 531.009150][T24266] netlink: 'syz.2.5051': attribute type 1 has an invalid length. [ 531.077167][T24266] netlink: 'syz.2.5051': attribute type 1 has an invalid length. [ 531.097360][T24274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5053'. [ 531.128454][T24266] netlink: 'syz.2.5051': attribute type 1 has an invalid length. [ 531.129458][ T30] audit: type=1804 audit(1781299023.237:17): pid=24278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5055" name="/newroot/429/cgroup.controllers" dev="tmpfs" ino=2200 res=1 errno=0 [ 531.155013][T24274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5053'. [ 531.191870][T24266] netlink: 'syz.2.5051': attribute type 1 has an invalid length. [ 531.224874][T24282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5053'. [ 531.235016][T24266] netlink: 'syz.2.5051': attribute type 1 has an invalid length. [ 531.237626][ T30] audit: type=1800 audit(1781299023.237:18): pid=24278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5055" name="cgroup.controllers" dev="tmpfs" ino=2200 res=0 errno=0 [ 531.244894][T24280] tipc: Enabling of bearer rejected, failed to enable media [ 531.282306][T24266] netlink: 'syz.2.5051': attribute type 1 has an invalid length. [ 531.330725][T24283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5057'. [ 531.453677][T24288] syzkaller0: entered promiscuous mode [ 531.465955][T24288] syzkaller0: entered allmulticast mode [ 531.479734][T24288] TC_ACT_REPEAT abuse ? [ 531.487979][T17540] block nbd7: Receive control failed (result -32) [ 531.650751][T24298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 531.694588][T24296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5061'. [ 532.146612][T24330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5070'. [ 532.156868][T24330] nbd: must specify at least one socket [ 532.862618][T24361] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5082'. [ 532.864471][T24363] bridge4: port 1(veth0_to_bond) entered disabled state [ 532.945932][T24363] veth0_to_bond (unregistering): left allmulticast mode [ 532.983725][T24363] veth0_to_bond (unregistering): left promiscuous mode [ 533.017462][T24363] bridge4: port 1(veth0_to_bond) entered disabled state [ 533.372410][T24382] FAULT_INJECTION: forcing a failure. [ 533.372410][T24382] name failslab, interval 1, probability 0, space 0, times 0 [ 533.408858][T24382] CPU: 1 UID: 0 PID: 24382 Comm: syz.2.5087 Not tainted syzkaller #0 PREEMPT(full) [ 533.408883][T24382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 533.408893][T24382] Call Trace: [ 533.408899][T24382] [ 533.408907][T24382] dump_stack_lvl+0xe8/0x150 [ 533.408932][T24382] should_fail_ex+0x412/0x560 [ 533.408965][T24382] should_failslab+0xa8/0x100 [ 533.408983][T24382] __kmalloc_cache_noprof+0x88/0x660 [ 533.409006][T24382] ? nfnetlink_rcv+0xfdf/0x27b0 [ 533.409032][T24382] nfnetlink_rcv+0xfdf/0x27b0 [ 533.409083][T24382] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 533.409121][T24382] ? ref_tracker_free+0x693/0x840 [ 533.409256][T24382] ? __netlink_deliver_tap+0x807/0x850 [ 533.409289][T24382] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.409310][T24382] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.409338][T24382] netlink_unicast+0x75c/0x8e0 [ 533.409371][T24382] netlink_sendmsg+0x813/0xb40 [ 533.409395][T24382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.409414][T24382] ? aa_sock_msg_perm+0xf1/0x1b0 [ 533.409438][T24382] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.409461][T24382] ____sys_sendmsg+0x972/0x9f0 [ 533.409478][T24382] ? __might_fault+0xaf/0x130 [ 533.409504][T24382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.409530][T24382] ? import_iovec+0x73/0xa0 [ 533.409554][T24382] ___sys_sendmsg+0x2a5/0x360 [ 533.409577][T24382] ? __lock_acquire+0x6b5/0x2cf0 [ 533.409598][T24382] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.409655][T24382] ? __fget_files+0x2a/0x420 [ 533.409672][T24382] ? __fget_files+0x3a0/0x420 [ 533.409705][T24382] __x64_sys_sendmsg+0x1bd/0x2a0 [ 533.409725][T24382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.409751][T24382] ? __pfx_ksys_write+0x10/0x10 [ 533.409783][T24382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.409801][T24382] do_syscall_64+0x174/0x580 [ 533.409818][T24382] ? trace_irq_disable+0x3b/0x140 [ 533.409840][T24382] ? clear_bhb_loop+0x40/0x90 [ 533.409860][T24382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.409876][T24382] RIP: 0033:0x7f5a97b9ce59 [ 533.409892][T24382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.409906][T24382] RSP: 002b:00007f5a98a41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.409923][T24382] RAX: ffffffffffffffda RBX: 00007f5a97e15fa0 RCX: 00007f5a97b9ce59 [ 533.409935][T24382] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 533.409945][T24382] RBP: 00007f5a98a41090 R08: 0000000000000000 R09: 0000000000000000 [ 533.409955][T24382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.409964][T24382] R13: 00007f5a97e16038 R14: 00007f5a97e15fa0 R15: 00007fff62883d18 [ 533.409994][T24382] [ 533.982418][T24407] x_tables: duplicate entry at hook 1 [ 534.014818][T24412] x_tables: duplicate entry at hook 1 [ 534.070564][T24410] SET target dimension over the limit! [ 534.336007][T24428] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 534.419175][T24423] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.877584][T24456] netem: change failed [ 535.237622][T24476] erspan0: left allmulticast mode [ 535.415165][T24476] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.441984][T24476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 535.467269][T24476] batadv0: entered promiscuous mode [ 535.476864][T24476] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 535.520961][T24490] xfrm2: entered allmulticast mode [ 535.706472][T24512] vlan3: entered allmulticast mode [ 535.719873][T24512] bond0: entered allmulticast mode [ 535.731328][T24512] bridge3: entered allmulticast mode [ 535.743494][T24514] __nla_validate_parse: 7 callbacks suppressed [ 535.743509][T24514] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.5123'. [ 535.934890][T24527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5130'. [ 536.049276][T24529] bond5: option lp_interval: invalid value (0) [ 536.073930][T24529] bond5: option lp_interval: allowed values 1 - 2147483647 [ 536.108035][T24529] bond5 (unregistering): Released all slaves [ 536.697841][T24581] validate_nla: 59 callbacks suppressed [ 536.697859][T24581] netlink: 'syz.3.5143': attribute type 1 has an invalid length. [ 536.726842][T24581] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5143'. [ 536.747973][T24588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5146'. [ 536.989144][T24602] syzkaller1: entered promiscuous mode [ 537.010382][T24602] syzkaller1: entered allmulticast mode [ 537.012914][T24605] sctp: [Deprecated]: syz.0.5149 (pid 24605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 537.012914][T24605] Use struct sctp_sack_info instead [ 537.343675][T24623] syzkaller0: entered promiscuous mode [ 537.349553][T24623] syzkaller0: entered allmulticast mode [ 537.445562][T24640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5158'. [ 537.620042][T24628] syzkaller1: entered promiscuous mode [ 537.625700][T24628] syzkaller1: entered allmulticast mode [ 537.794327][T24654] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5161'. [ 537.806751][T24654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5161'. [ 540.590060][T24639] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 540.687489][T24665] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 540.710061][T24667] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5166'. [ 540.753423][T24670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5167'. [ 540.773370][T24668] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5166'. [ 540.787752][T24667] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5166'. [ 540.846132][T24682] netlink: 'syz.0.5168': attribute type 10 has an invalid length. [ 540.868763][T24682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5168'. [ 540.893205][T24682] team0: entered allmulticast mode [ 540.916274][T24682] bridge0: port 3(team0) entered blocking state [ 540.942027][T24682] bridge0: port 3(team0) entered disabled state [ 540.961779][T24682] team0: entered promiscuous mode [ 541.152977][T24705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5172'. [ 541.339598][T24712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5178'. [ 541.444994][T24715] only policy match revision 0 supported [ 541.445020][T24715] unable to load match [ 541.795274][T24741] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5186'. [ 542.065040][T24760] syzkaller0: entered promiscuous mode [ 542.075777][T24760] syzkaller0: entered allmulticast mode [ 542.127231][T24757] TC_ACT_REPEAT abuse ? [ 542.156359][T24760] TC_ACT_REPEAT abuse ? [ 542.348092][T24780] netlink: 'syz.4.5195': attribute type 1 has an invalid length. [ 542.646788][T24780] 8021q: adding VLAN 0 to HW filter on device bond4 [ 542.804193][T24812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5201'. [ 543.002390][T24822] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 543.019948][T24824] netlink: 'syz.2.5206': attribute type 4 has an invalid length. [ 543.043403][T24824] netlink: 'syz.2.5206': attribute type 1 has an invalid length. [ 543.254748][T24850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5208'. [ 543.291042][T24849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5212'. [ 543.332567][T24852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.641324][T24869] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 543.705824][T24878] openvswitch: netlink: Missing key (keys=40, expected=80) [ 543.755527][T24880] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 544.220086][T24906] bond5 (unregistering): Released all slaves [ 545.224599][T24976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 545.231959][T24976] IPv6: NLM_F_CREATE should be set when creating new route [ 545.464717][T24991] netlink: 'syz.4.5251': attribute type 1 has an invalid length. [ 545.500700][T24991] 8021q: adding VLAN 0 to HW filter on device bond5 [ 545.510093][T24994] netlink: 'syz.1.5252': attribute type 11 has an invalid length. [ 545.520536][T24996] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 545.539481][T24991] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 545.587728][T24991] macvlan3: entered promiscuous mode [ 545.594786][T24991] macvlan3: entered allmulticast mode [ 545.601600][T24991] bond5: entered promiscuous mode [ 545.614755][T24991] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 545.623376][T24991] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 545.647034][T24991] bond5: left promiscuous mode [ 545.673391][T25000] vlan3: entered allmulticast mode [ 545.680135][T25000] bond0: entered allmulticast mode [ 545.685328][T25000] bond_slave_0: entered allmulticast mode [ 545.691700][T25000] bond_slave_1: entered allmulticast mode [ 547.910195][T24955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.921839][T24968] __nla_validate_parse: 6 callbacks suppressed [ 547.921854][T24968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5243'. [ 548.138853][T25022] Cannot find set identified by id 3 to match [ 548.159397][T25022] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5259'. [ 548.192313][T25023] tipc: Started in network mode [ 548.210572][T25023] tipc: Node identity 56ceb0bbc4c6, cluster identity 4711 [ 548.236886][T25023] tipc: Enabled bearer , priority 0 [ 548.255089][T25026] netlink: 'syz.3.5262': attribute type 1 has an invalid length. [ 548.295543][T25026] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5262'. [ 548.307715][T25019] tipc: Disabling bearer [ 548.634603][T25052] tipc: Enabled bearer , priority 10 [ 548.733167][T25067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5272'. [ 548.763451][T25070] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 548.808324][T25070] xt_hashlimit: size too large, truncated to 1048576 [ 549.191105][T25092] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5277'. [ 549.209852][T25092] bridge0: port 3(gretap0) entered disabled state [ 549.217247][T25092] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.279276][T25094] pim6reg1: entered promiscuous mode [ 549.295874][T25094] pim6reg1: entered allmulticast mode [ 549.662250][T25106] bond6: entered promiscuous mode [ 549.736092][T25116] macvlan3: entered promiscuous mode [ 549.760213][T25116] macvlan3: entered allmulticast mode [ 549.790057][T25116] bond6: (slave macvlan3): Opening slave failed [ 549.858530][T25113] netlink: 2068 bytes leftover after parsing attributes in process `syz.3.5287'. [ 549.905933][T25132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5290'. [ 549.955110][T25118] syzkaller0: entered promiscuous mode [ 549.994111][T25118] syzkaller0: entered allmulticast mode [ 550.059064][T25118] netlink: 2068 bytes leftover after parsing attributes in process `syz.3.5287'. [ 550.265426][T25151] netlink: 'syz.2.5296': attribute type 1 has an invalid length. [ 550.935706][T25197] openvswitch: netlink: Flow key attr not present in new flow. [ 550.978067][T25197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5310'. [ 551.003722][T25197] veth1_to_bridge: left allmulticast mode [ 551.011235][T25197] veth1_to_bridge: left promiscuous mode [ 551.017376][T25197] bridge0: port 3(veth1_to_bridge) entered disabled state [ 551.017768][T25203] openvswitch: netlink: Multiple metadata blocks provided [ 551.038091][T25197] bridge_slave_1: left allmulticast mode [ 551.058705][T25197] bridge_slave_1: left promiscuous mode [ 551.065431][T25197] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.076954][T25197] bridge_slave_0: left allmulticast mode [ 551.083300][T25197] bridge_slave_0: left promiscuous mode [ 551.090923][T25197] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.105062][T25206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5312'. [ 551.123424][T25206] netlink: 'syz.4.5312': attribute type 30 has an invalid length. [ 551.206252][T25207] netlink: 'syz.3.5314': attribute type 58 has an invalid length. [ 552.749877][ T9688] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 554.883086][T25244] __nla_validate_parse: 3 callbacks suppressed [ 554.883103][T25244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5327'. [ 555.036352][T25260] syzkaller0: entered promiscuous mode [ 555.044989][T25260] syzkaller0: entered allmulticast mode [ 555.474901][T25295] netlink: 'syz.0.5344': attribute type 1 has an invalid length. [ 555.510615][T25295] 8021q: adding VLAN 0 to HW filter on device bond10 [ 555.519929][T25295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5344'. [ 555.636941][T25301] 8021q: adding VLAN 0 to HW filter on device bond11 [ 555.652684][T25301] bond10: (slave bond11): Enslaving as an active interface with a down link [ 555.684107][T25295] netlink: 'syz.0.5344': attribute type 1 has an invalid length. [ 556.039671][ T5827] C speed is unknown, defaulting to 1000 [ 556.210338][T25319] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5349'. [ 556.378346][T25339] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5354'. [ 556.415040][T25345] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5356'. [ 556.425382][T25345] openvswitch: netlink: Missing key (keys=40, expected=100) [ 556.455848][T25349] netlink: 'syz.0.5354': attribute type 1 has an invalid length. [ 556.591253][T25349] 8021q: adding VLAN 0 to HW filter on device bond12 [ 557.137633][T25388] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5366'. [ 557.477720][T25397] tipc: Enabled bearer , priority 0 [ 557.564345][T25396] tipc: Disabling bearer [ 557.911126][T25431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5379'. [ 557.953276][T25435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5381'. [ 558.454961][T25469] netlink: 'syz.0.5388': attribute type 21 has an invalid length. [ 558.463772][T25469] netlink: 'syz.0.5388': attribute type 6 has an invalid length. [ 558.472984][T25469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5388'. [ 560.983502][T25437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.997434][T25478] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5392'. [ 561.181530][T25486] netlink: 'syz.2.5394': attribute type 2 has an invalid length. [ 561.204381][T25489] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 561.215544][T25486] netlink: 'syz.2.5394': attribute type 2 has an invalid length. [ 561.230734][T25486] netlink: 67 bytes leftover after parsing attributes in process `syz.2.5394'. [ 561.278532][T25491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5396'. [ 561.373077][T25491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5396'. [ 561.402606][T25491] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5396'. [ 561.429092][T25501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5399'. [ 561.710247][T25525] netlink: 'syz.2.5406': attribute type 1 has an invalid length. [ 561.870041][T25525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 561.878075][T25530] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 561.971674][T25538] bond5: (slave ip6gretap1): making interface the new active one [ 561.981708][T25538] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 562.041404][T25545] syzkaller1: entered promiscuous mode [ 562.057456][T25548] x_tables: duplicate underflow at hook 3 [ 562.063198][T25545] syzkaller1: entered allmulticast mode [ 562.136193][T25551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5413'. [ 562.168158][T25551] netlink: 'syz.0.5413': attribute type 1 has an invalid length. [ 562.236307][T25551] ip6gretap1: entered promiscuous mode [ 562.244196][T25551] ip6gretap1: entered allmulticast mode [ 562.457202][T25567] bond6: Removing last arp target with arp_interval on [ 562.666466][T25583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.706135][T25583] netlink: 'syz.3.5422': attribute type 18 has an invalid length. [ 562.717243][T25586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5425'. [ 562.734632][T25586] netlink: 'syz.2.5425': attribute type 7 has an invalid length. [ 562.743257][T25586] netlink: 'syz.2.5425': attribute type 8 has an invalid length. [ 562.754981][T25586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5425'. [ 562.793287][T25595] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 562.801240][T25586] erspan0: entered promiscuous mode [ 562.813660][T25586] gretap0: entered promiscuous mode [ 562.820821][T25586] debugfs: 'hsr1' already exists in 'hsr' [ 562.826660][T25586] Cannot create hsr debugfs directory [ 563.105879][T25616] veth0_to_bridge: entered promiscuous mode [ 563.173790][T25615] veth0_to_bridge: left promiscuous mode [ 563.228370][T25625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5436'. [ 563.864459][T25661] syzkaller1: entered promiscuous mode [ 563.885522][T25661] syzkaller1: entered allmulticast mode [ 563.982302][T25670] netlink: 'syz.1.5444': attribute type 58 has an invalid length. [ 564.031625][T25666] netlink: 'syz.3.5446': attribute type 1 has an invalid length. [ 564.041431][T25666] netlink: 'syz.3.5446': attribute type 1 has an invalid length. [ 564.123707][T25677] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 564.300809][T25687] openvswitch: netlink: Missing key (keys=40, expected=80) [ 564.552491][T25702] bond7: option resend_igmp: invalid value (32767) [ 564.561447][T25702] bond7: option resend_igmp: allowed values 0 - 255 [ 564.577040][T25702] bond7 (unregistering): Released all slaves [ 564.745566][T25721] xt_TCPMSS: Only works on TCP SYN packets [ 565.441625][T25770] IPv6: sit2: Disabled Multicast RS [ 565.459965][T25770] sit2: entered allmulticast mode [ 565.513307][T25777] vlan1: entered allmulticast mode [ 568.422726][T25771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.847817][T25825] __nla_validate_parse: 10 callbacks suppressed [ 568.847836][T25825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5493'. [ 568.876098][T25825] veth0_macvtap: left promiscuous mode [ 569.218530][T25846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5499'. [ 569.603084][T25869] netlink: 51 bytes leftover after parsing attributes in process `syz.1.5505'. [ 569.675529][T25874] syzkaller0: entered promiscuous mode [ 569.684852][T25874] syzkaller0: entered allmulticast mode [ 569.978012][T25891] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 569.987853][T25891] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 570.218724][T25910] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 570.235799][T25911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5516'. [ 570.538477][T25925] validate_nla: 1 callbacks suppressed [ 570.538492][T25925] netlink: 'syz.4.5516': attribute type 1 has an invalid length. [ 570.555301][T25925] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5516'. [ 571.065840][T25928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5517'. [ 571.261836][T25932] netlink: 'syz.0.5518': attribute type 2 has an invalid length. [ 571.272073][T25932] netlink: 'syz.0.5518': attribute type 1 has an invalid length. [ 571.294331][T25933] netlink: 'syz.0.5518': attribute type 2 has an invalid length. [ 571.302462][T25933] netlink: 'syz.0.5518': attribute type 1 has an invalid length. [ 571.322548][T25932] SET target dimension over the limit! [ 573.176374][T25928] vlan0: entered allmulticast mode [ 573.181740][T25928] bond0: entered allmulticast mode [ 573.186868][T25928] geneve2: entered allmulticast mode [ 573.197845][T25932] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 573.215745][T25933] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 573.240612][T25911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.417629][T25943] netlink: 'syz.3.5521': attribute type 4 has an invalid length. [ 573.460764][T25943] netlink: 'syz.3.5521': attribute type 4 has an invalid length. [ 573.642810][T25952] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5525'. [ 573.762411][T25968] tipc: Enabling of bearer rejected, already enabled [ 573.823354][T25968] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5530'. [ 573.873844][T25968] netlink: Conntrack attr has 4 unknown bytes [ 573.884108][T25971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5532'. [ 573.907619][T25971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5532'. [ 573.921326][T25971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5532'. [ 573.937521][T25979] ip6t_REJECT: ECHOREPLY is not supported [ 574.172768][T25984] veth1_vlan (unregistering): left allmulticast mode [ 574.418334][T25984] vlan1 (unregistering): left allmulticast mode [ 574.449586][T25999] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5539'. [ 574.484453][T26002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5540'. [ 574.510271][T26002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5540'. [ 574.543775][T25996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5538'. [ 574.573958][T25996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5538'. [ 574.625284][T26014] veth0: Caught tx_queue_len zero misconfig [ 574.632233][T25996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5538'. [ 574.642566][T26014] netlink: 'syz.3.5542': attribute type 3 has an invalid length. [ 574.650883][T25996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5538'. [ 574.670313][ T3285] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.706358][ T3285] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.745683][ T3285] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.780841][ T3285] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.023489][T26039] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 575.115317][T26028] xt_hashlimit: size too large, truncated to 1048576 [ 575.308066][T26057] Bluetooth: MGMT ver 1.23 [ 575.313107][T26051] openvswitch: netlink: Missing key (keys=40, expected=80) [ 575.332815][T26057] netlink: 'syz.0.5553': attribute type 1 has an invalid length. [ 575.609667][T10446] IPVS: ip_vs_send_async error -101 [ 576.416400][T26118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.932073][T26155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.006751][T26161] vlan4: entered allmulticast mode [ 577.027347][T26161] bridge_slave_0: entered allmulticast mode [ 577.210117][T26175] netlink: 'syz.1.5580': attribute type 4 has an invalid length. [ 577.650951][T26195] bridge: RTM_NEWNEIGH with invalid ether address [ 577.831706][T26205] netlink: 'syz.4.5590': attribute type 5 has an invalid length. [ 577.866738][T26210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.873836][T26211] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 577.879583][T26202] bond8: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 577.899609][T26210] netlink: 'syz.3.5592': attribute type 12 has an invalid length. [ 577.912085][T26202] bond8 (unregistering): Released all slaves [ 577.951321][T26214] netlink: 'syz.0.5593': attribute type 21 has an invalid length. [ 578.049302][T26214] bond14: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 578.074964][T26214] bond14 (unregistering): Released all slaves [ 578.086703][T26220] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 578.188962][T26225] openvswitch: netlink: Flow actions attr not present in new flow. [ 578.365640][T26230] Cannot find del_set index 4 as target [ 578.394051][T26230] IPVS: length: 239 != 24 [ 578.399124][T26232] netlink: zone id is out of range [ 578.413393][T26232] netlink: del zone limit has 4 unknown bytes [ 578.996548][T26264] __nla_validate_parse: 46 callbacks suppressed [ 578.996565][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5610'. [ 579.053908][T26268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5612'. [ 579.078518][T26268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5612'. [ 579.090190][T26268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5612'. [ 579.201222][T26283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5616'. [ 579.321418][T26290] mac80211_hwsim hwsim43 wlan1: Caught tx_queue_len zero misconfig [ 579.588494][T26305] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5621'. [ 579.619644][T26305] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 579.676368][T26305] netlink: 'syz.4.5621': attribute type 1 has an invalid length. [ 579.698941][T26305] netlink: 'syz.4.5621': attribute type 2 has an invalid length. [ 579.717944][T26315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5624'. [ 579.732426][T26315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5624'. [ 579.746816][T26305] netlink: 'syz.4.5621': attribute type 1 has an invalid length. [ 579.775794][T26305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5621'. [ 579.947998][T26327] netlink: 'syz.0.5627': attribute type 83 has an invalid length. [ 579.977663][T26332] sit0: entered promiscuous mode [ 580.006503][T26332] netlink: 'syz.3.5630': attribute type 1 has an invalid length. [ 580.032479][T26332] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5630'. [ 580.611957][T26366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.683319][T26371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.055263][T26392] xt_ecn: cannot match TCP bits for non-tcp packets [ 581.279529][T26410] nbd: couldn't find a device at index 0 [ 581.301723][T26404] tipc: New replicast peer: 0.0.0.0 [ 581.324449][T26404] tipc: Enabled bearer , priority 10 [ 581.548544][T26422] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 581.721948][T26438] netlink: 'syz.4.5666': attribute type 3 has an invalid length. [ 582.306836][T26477] 8021q: adding VLAN 0 to HW filter on device bond8 [ 582.438869][ T5769] tipc: Node number set to 1 [ 582.655450][T26503] validate_nla: 3 callbacks suppressed [ 582.655466][T26503] netlink: 'syz.0.5685': attribute type 3 has an invalid length. [ 582.825549][T26512] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 582.856564][T26511] syzkaller0: entered promiscuous mode [ 582.873071][T26511] syzkaller0: entered allmulticast mode [ 582.963172][T26520] netlink: 'syz.2.5689': attribute type 10 has an invalid length. [ 583.322581][T26538] netlink: 'syz.0.5696': attribute type 2 has an invalid length. [ 583.546564][T26548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.770510][ T9709] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 583.902002][T26559] netlink: 'syz.1.5703': attribute type 21 has an invalid length. [ 583.915869][T26559] xt_CT: You must specify a L4 protocol and not use inversions on it [ 584.128390][T26571] __nla_validate_parse: 32 callbacks suppressed [ 584.128410][T26571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5707'. [ 584.149793][T26571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5707'. [ 584.322678][T26578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5710'. [ 584.406742][T26585] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5713'. [ 584.445507][T26585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5713'. [ 584.579981][T26597] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5718'. [ 584.614749][T26600] netlink: 'syz.3.5719': attribute type 11 has an invalid length. [ 584.653146][T26607] netlink: 'syz.2.5722': attribute type 1 has an invalid length. [ 584.653257][T26600] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5719'. [ 584.700241][T26612] netlink: 'syz.4.5720': attribute type 210 has an invalid length. [ 584.768103][T26607] bond8: entered promiscuous mode [ 584.774455][T26607] 8021q: adding VLAN 0 to HW filter on device bond8 [ 584.888460][T26617] tipc: Trying to set illegal importance in message [ 585.025142][T26639] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5729'. [ 585.037335][T26639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5729'. [ 585.056278][T26629] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.063883][T26629] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.115724][T26629] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 585.247053][T26652] netlink: 'syz.2.5734': attribute type 21 has an invalid length. [ 585.257645][T26653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5733'. [ 585.428304][T26664] netlink: 'syz.0.5736': attribute type 21 has an invalid length. [ 585.447638][T26664] netlink: 'syz.0.5736': attribute type 5 has an invalid length. [ 585.826500][T26690] syzkaller0: entered promiscuous mode [ 585.841933][T26690] syzkaller0: entered allmulticast mode [ 586.485879][T26725] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 586.911791][T26757] bond0: ARP target 8.4.0.0 is already present [ 586.960022][T26757] bond0: option arp_ip_target: invalid value (1032) [ 587.953225][T26787] xt_HMARK: spi-set and port-set can't be combined [ 589.841295][T26751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.852180][T26760] validate_nla: 3 callbacks suppressed [ 589.852196][T26760] netlink: 'syz.3.5770': attribute type 1 has an invalid length. [ 589.879653][T26760] __nla_validate_parse: 10 callbacks suppressed [ 589.879669][T26760] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5770'. [ 589.895326][T26760] netlink: 'syz.3.5770': attribute type 1 has an invalid length. [ 589.905712][T26760] netlink: 'syz.3.5770': attribute type 8 has an invalid length. [ 589.917166][T26760] netlink: 582 bytes leftover after parsing attributes in process `syz.3.5770'. [ 590.145260][T26803] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 590.163613][T26803] bond7 (unregistering): Released all slaves [ 590.174993][T26805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5781'. [ 590.217833][T26813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5785'. [ 590.451666][T26826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5789'. [ 590.472349][T26829] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 590.508195][T26827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5788'. [ 590.551969][T26827] netem: invalid attributes len -5 [ 590.571671][T26827] netem: change failed [ 590.573294][T26836] x_tables: unsorted entry at hook 1 [ 590.609774][T26836] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5792'. [ 590.624404][T26827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5788'. [ 590.742072][T26843] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 590.757797][T26843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5795'. [ 590.795262][T26848] netlink: 'syz.3.5796': attribute type 21 has an invalid length. [ 590.799201][T26846] netlink: 'syz.2.5797': attribute type 1 has an invalid length. [ 590.818245][T26848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5796'. [ 590.871992][T26846] 8021q: adding VLAN 0 to HW filter on device bond9 [ 591.026443][T26853] bond9: (slave veth7): Enslaving as an active interface with a down link [ 591.212548][T10446] IPVS: ip_vs_send_async error -101 [ 591.256397][T26881] netlink: 'syz.4.5805': attribute type 266 has an invalid length. [ 591.351467][T26863] nbd9: detected capacity change from 0 to 63 [ 591.363685][ T5651] block nbd9: Receive control failed (result -32) [ 591.364212][T17540] block nbd9: Receive control failed (result -32) [ 591.374822][T25442] block nbd9: Send control failed (result -32) [ 591.398140][T25442] block nbd9: Request send failed, requeueing [ 591.433712][ T1735] block nbd9: Dead connection, failed to find a fallback [ 591.450150][ T1735] block nbd9: shutting down sockets [ 591.458561][ T1735] blk_print_req_error: 138 callbacks suppressed [ 591.469052][ T1735] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.479401][ T1735] buffer_io_error: 138 callbacks suppressed [ 591.479417][ T1735] Buffer I/O error on dev nbd9, logical block 0, async page read [ 591.498262][T25442] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.512081][T25442] Buffer I/O error on dev nbd9, logical block 1, async page read [ 591.520943][T25442] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.530863][T25442] Buffer I/O error on dev nbd9, logical block 2, async page read [ 591.539543][T25442] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.549602][T25442] Buffer I/O error on dev nbd9, logical block 3, async page read [ 591.558348][T25442] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.568186][T25442] Buffer I/O error on dev nbd9, logical block 0, async page read [ 591.576633][T25442] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.586484][T25442] Buffer I/O error on dev nbd9, logical block 1, async page read [ 591.594930][T25442] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.604590][T25442] Buffer I/O error on dev nbd9, logical block 2, async page read [ 591.614245][T25442] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.623853][T25442] Buffer I/O error on dev nbd9, logical block 3, async page read [ 591.632170][T25442] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.642127][T25442] Buffer I/O error on dev nbd9, logical block 0, async page read [ 591.650261][T26895] ip6tnl1: entered promiscuous mode [ 591.650715][T25442] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.670513][T25442] Buffer I/O error on dev nbd9, logical block 1, async page read [ 591.684693][T25442] ldm_validate_partition_table(): Disk read failed. [ 591.695690][T25442] Dev nbd9: unable to read RDB block 0 [ 591.704243][T25442] nbd9: unable to read partition table [ 591.723272][T25442] ldm_validate_partition_table(): Disk read failed. [ 591.744701][T25442] Dev nbd9: unable to read RDB block 0 [ 591.752686][T25442] nbd9: unable to read partition table [ 591.807266][T26903] netlink: 'syz.4.5813': attribute type 12 has an invalid length. [ 591.868865][ T30] audit: type=1804 audit(1781299083.977:19): pid=26906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5814" name="/newroot/548/cgroup.controllers" dev="tmpfs" ino=2807 res=1 errno=0 [ 591.930707][T26909] netlink: 'syz.4.5815': attribute type 1 has an invalid length. [ 591.939215][ T30] audit: type=1800 audit(1781299083.977:20): pid=26906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5814" name="cgroup.controllers" dev="tmpfs" ino=2807 res=0 errno=0 [ 592.050541][T26913] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 592.226202][T26925] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 592.266018][T26925] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 592.288344][T26930] netlink: 'syz.1.5822': attribute type 1 has an invalid length. [ 592.325740][T26930] netlink: 'syz.1.5822': attribute type 2 has an invalid length. [ 592.594775][T26948] xt_hashlimit: size too large, truncated to 1048576 [ 592.685030][T26954] pim6reg1: entered promiscuous mode [ 592.696426][T26954] pim6reg1: entered allmulticast mode [ 592.913125][T26967] vxcan1 speed is unknown, defaulting to 1000 [ 592.951283][T26974] vxcan1 speed is unknown, defaulting to 1000 [ 593.063698][T26982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.100667][T26990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.168500][T26993] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 593.186402][T26993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.276461][T26996] netlink: zone id is out of range [ 593.298153][T26996] netlink: zone id is out of range [ 593.333897][T26996] netlink: zone id is out of range [ 593.364746][T26996] netlink: zone id is out of range [ 593.399561][T26996] netlink: zone id is out of range [ 593.399663][T27005] openvswitch: netlink: IPv4 tun info is not correct [ 593.562692][T27014] bond_slave_1: entered promiscuous mode [ 593.591756][T27014] bond_slave_1: entered allmulticast mode [ 593.830597][T27034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.866187][T27034] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 593.936294][T27034] team0: Failed to send options change via netlink (err -105) [ 593.973803][T27034] team0: Port device batadv0 added [ 594.003842][T27039] batadv0: entered promiscuous mode [ 594.024289][T27039] ip6gretap0: entered promiscuous mode [ 594.044328][T27039] debugfs: 'hsr1' already exists in 'hsr' [ 594.057099][T27039] Cannot create hsr debugfs directory [ 594.069708][T27039] hsr1: entered promiscuous mode [ 594.643899][T27090] syzkaller1: entered promiscuous mode [ 594.651508][T27090] syzkaller1: entered allmulticast mode [ 594.753961][T27097] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 594.767655][T27097] bond7 (unregistering): Released all slaves [ 595.093085][T27109] __nla_validate_parse: 17 callbacks suppressed [ 595.093102][T27109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5874'. [ 595.096888][T27115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5874'. [ 595.217173][T27122] validate_nla: 6 callbacks suppressed [ 595.217191][T27122] netlink: 'syz.1.5879': attribute type 1 has an invalid length. [ 595.523353][T27146] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5884'. [ 595.549344][T27146] tipc: Started in network mode [ 595.554285][T27146] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 595.566040][T27146] tipc: Enabling of bearer rejected, failed to enable media [ 595.746385][T27163] netlink: 'syz.0.5890': attribute type 2 has an invalid length. [ 595.895173][T27150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.917094][T27150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.970506][T27166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5891'. [ 596.014001][T27169] ipvlan2: entered promiscuous mode [ 596.136914][T27187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5894'. [ 596.244583][T27150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.263015][T27150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.424091][T27202] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5900'. [ 596.438084][T27150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.450863][T27202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5900'. [ 596.460534][T27150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.473719][T27202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5900'. [ 596.633589][T27150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.646459][T27150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.011776][ T3298] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.017007][T27220] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5907'. [ 597.031587][ T3298] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.046953][T27226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5910'. [ 597.076523][ T9709] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.107483][ T9709] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.207860][ T9709] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.224392][ T9709] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.315591][ T9706] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.324220][ T9706] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.404289][T27251] syzkaller1: entered promiscuous mode [ 597.410764][T27251] syzkaller1: entered allmulticast mode [ 597.679488][T27274] netlink: 'syz.4.5925': attribute type 21 has an invalid length. [ 597.691103][T27274] netlink: 'syz.4.5925': attribute type 1 has an invalid length. [ 597.755820][T27279] x_tables: duplicate underflow at hook 1 [ 597.966233][T27299] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 598.002620][T27299] netlink: 'syz.4.5933': attribute type 1 has an invalid length. [ 598.699639][ T30] audit: type=1804 audit(1781299090.797:21): pid=27347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5945" name="/newroot/570/memory.events" dev="tmpfs" ino=2924 res=1 errno=0 [ 598.797087][ T30] audit: type=1800 audit(1781299090.807:22): pid=27347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5945" name="memory.events" dev="tmpfs" ino=2924 res=0 errno=0 [ 598.884172][T17540] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 598.897995][T17540] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 598.912048][T17540] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 598.920418][T17540] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 598.934498][T17540] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 598.950988][T27351] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 598.966947][T27359] netlink: 'syz.3.5949': attribute type 1 has an invalid length. [ 598.978223][T27359] netlink: 'syz.3.5949': attribute type 2 has an invalid length. [ 599.002572][T27354] net_ratelimit: 824 callbacks suppressed [ 599.002588][T27354] bond_slave_0: mtu less than device minimum [ 599.736914][T16876] syz_tun (unregistering): left allmulticast mode [ 599.811922][T27381] team0: Port device team_slave_0 removed [ 599.850139][T27349] vxcan1 speed is unknown, defaulting to 1000 [ 600.551908][T27428] __nla_validate_parse: 11 callbacks suppressed [ 600.551926][T27428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5961'. [ 600.605066][T27427] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5964'. [ 600.774942][T27439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5966'. [ 600.813737][T27439] ip6gretap0 (unregistering): left promiscuous mode [ 600.833866][T27446] netlink: 45 bytes leftover after parsing attributes in process `syz.3.5969'. [ 600.847719][T27349] hsr0 speed is unknown, defaulting to 1000 [ 600.865500][T27349] C speed is unknown, defaulting to 1000 [ 601.054218][ T5651] Bluetooth: hci0: command tx timeout [ 601.136970][T27458] syzkaller0: entered promiscuous mode [ 601.151006][T27458] syzkaller0: entered allmulticast mode [ 601.222599][T27472] veth0_macvtap: entered allmulticast mode [ 601.236008][T27472] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 601.714142][T27487] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 601.740086][T27487] syzkaller1: Refused to change device type [ 601.922909][T27495] vxcan1 speed is unknown, defaulting to 1000 [ 601.996666][T27506] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5984'. [ 602.005924][T27506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5984'. [ 602.021952][T27502] sctp: [Deprecated]: syz.3.5984 (pid 27502) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.021952][T27502] Use struct sctp_sack_info instead [ 602.040138][T27349] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.047381][T27349] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.055926][T27349] bridge_slave_0: entered allmulticast mode [ 602.064408][T27349] bridge_slave_0: entered promiscuous mode [ 602.072204][T27509] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5985'. [ 602.088698][T27509] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5985'. [ 602.119755][T27349] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.129660][T27349] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.159308][T27349] bridge_slave_1: entered allmulticast mode [ 602.194547][T27349] bridge_slave_1: entered promiscuous mode [ 602.268788][T27520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5986'. [ 602.326282][T27519] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5988'. [ 602.346057][T27519] netlink: 'syz.2.5988': attribute type 6 has an invalid length. [ 602.364934][T27519] netlink: 'syz.2.5988': attribute type 5 has an invalid length. [ 602.380258][T27349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.417068][T27349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.495121][T27525] sch_fq: defrate 0 ignored. [ 602.569560][T27349] team0: Port device team_slave_0 added [ 602.591739][T27349] team0: Port device team_slave_1 added [ 602.696754][T27349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.715154][T27349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.747773][T27349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.768149][T27349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.780616][T27349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.808013][T27349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.922691][T27495] hsr0 speed is unknown, defaulting to 1000 [ 602.943985][T27495] C speed is unknown, defaulting to 1000 [ 602.944209][T27550] syzkaller0: entered promiscuous mode [ 602.957705][T27550] syzkaller0: entered allmulticast mode [ 603.026525][T27349] hsr_slave_0: entered promiscuous mode [ 603.033327][T27349] hsr_slave_1: entered promiscuous mode [ 603.039936][T27349] debugfs: 'hsr0' already exists in 'hsr' [ 603.045800][T27349] Cannot create hsr debugfs directory [ 603.128781][ T5651] Bluetooth: hci0: command tx timeout [ 603.596885][T27541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 603.875862][T27349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.891246][T27349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.976999][T27571] can: request_module (can-proto-0) failed. [ 604.155453][T27349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.187619][T27349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.406839][T27349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.419492][T27349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.507386][T27591] xt_TPROXY: Can be used only with -p tcp or -p udp [ 604.531576][T27585] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 604.669348][T27349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.691975][T27349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.997869][T27613] netlink: 'syz.0.6015': attribute type 1 has an invalid length. [ 605.173759][T27621] bond10: option fail_over_mac: invalid value (16) [ 605.202310][T27621] bond10 (unregistering): Released all slaves [ 605.209247][ T5651] Bluetooth: hci0: command tx timeout [ 605.283581][T27633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.298240][T27626] bond7: option resend_igmp: invalid value (32767) [ 605.323750][T27626] bond7: option resend_igmp: allowed values 0 - 255 [ 605.356262][T27626] bond7 (unregistering): Released all slaves [ 605.398375][T27628] bond0: ARP target 8.4.0.0 is already present [ 605.409356][T27628] bond0: option arp_ip_target: invalid value (1032) [ 605.486485][T27635] C: entered promiscuous mode [ 605.493261][T27635] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 605.625558][T27349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 605.650567][T27648] __nla_validate_parse: 9 callbacks suppressed [ 605.650585][T27648] netlink: 280 bytes leftover after parsing attributes in process `syz.0.6028'. [ 605.670696][T27349] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.679499][T27349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 605.687504][T27648] openvswitch: netlink: Flow key attr not present in new flow. [ 605.699624][T27349] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.723218][T27349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 605.744916][T27349] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.764378][T27349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 605.809679][T27349] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 606.059616][T27676] sctp: [Deprecated]: syz.0.6035 (pid 27676) Use of int in maxseg socket option. [ 606.059616][T27676] Use struct sctp_assoc_value instead [ 606.083617][T27349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.130758][T27349] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.187137][ T9689] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.194370][ T9689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.260831][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.268081][ T3298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.284275][T27688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6038'. [ 606.326131][T27689] bond14: entered promiscuous mode [ 606.333316][T27689] bond14: entered allmulticast mode [ 606.340273][T27689] 8021q: adding VLAN 0 to HW filter on device bond14 [ 606.348175][T27691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6038'. [ 606.366667][T27688] ip6gretap0: entered allmulticast mode [ 606.397617][T27693] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6039'. [ 606.430311][T27693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6039'. [ 606.633068][T27701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6041'. [ 606.687098][T27701] netlink: 'syz.2.6041': attribute type 1 has an invalid length. [ 606.791965][T27713] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6045'. [ 606.840125][T27713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6045'. [ 607.193012][T27731] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6049'. [ 607.231601][T27734] netlink: 'syz.4.6050': attribute type 3 has an invalid length. [ 607.252418][T27734] netlink: 'syz.4.6050': attribute type 1 has an invalid length. [ 607.264532][T27734] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6050'. [ 607.289636][ T5651] Bluetooth: hci0: command tx timeout [ 607.386285][T27349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.536848][T27750] netlink: 'syz.2.6053': attribute type 1 has an invalid length. [ 607.559911][T27349] veth0_vlan: entered promiscuous mode [ 607.636907][T27750] 8021q: adding VLAN 0 to HW filter on device bond10 [ 607.713958][T27752] bond10: (slave gretap3): making interface the new active one [ 607.742462][T27752] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 607.804919][T27761] IPVS: ip_vs_edit_dest(): server weight less than zero [ 607.865412][T27349] veth1_vlan: entered promiscuous mode [ 608.002410][T27349] veth0_macvtap: entered promiscuous mode [ 608.028206][T27349] veth1_macvtap: entered promiscuous mode [ 608.086173][T27349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.131358][T27349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.160574][ T9688] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.187602][ T9688] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.332432][ T9688] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.403856][ T9688] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.639565][ T9689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.667718][ T9689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.830263][ T9700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.867834][ T9700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.122867][T27790] gtp0: entered allmulticast mode [ 609.157365][T27790] team0: Device gtp0 is of different type [ 609.200173][T27793] netlink: 'syz.4.6067': attribute type 1 has an invalid length. [ 609.486982][T17540] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 609.504069][T17540] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 609.514515][T17540] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 609.533773][T17540] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 609.545264][T17540] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 609.659636][T27811] netlink: 'syz.4.6069': attribute type 15 has an invalid length. [ 610.484257][T27801] vxcan1 speed is unknown, defaulting to 1000 [ 610.514834][T27853] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 610.514913][T27852] syzkaller0: entered promiscuous mode [ 610.558730][T27852] syzkaller0: entered allmulticast mode [ 610.738979][T27862] block nbd10: Unsupported socket: should be TCP or UNIX. [ 611.119870][T27870] tipc: Started in network mode [ 611.134546][T27870] tipc: Node identity ac14140f, cluster identity 4711 [ 611.158963][T27870] tipc: New replicast peer: 255.255.255.255 [ 611.165734][T27870] tipc: Enabled bearer , priority 10 [ 611.411116][T27801] hsr0 speed is unknown, defaulting to 1000 [ 611.442748][T27801] C speed is unknown, defaulting to 1000 [ 611.611691][T17540] Bluetooth: hci3: command tx timeout [ 611.662521][T27890] syzkaller1: entered promiscuous mode [ 611.668380][T27890] syzkaller1: entered allmulticast mode [ 611.837515][T27903] ip6t_srh: unknown srh invflags 4000 [ 611.988018][T27910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.163783][T27918] syzkaller0: entered promiscuous mode [ 612.187987][T27918] syzkaller0: entered allmulticast mode [ 612.220755][T27801] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.234056][T27801] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.245595][T27936] x_tables: duplicate underflow at hook 1 [ 612.260384][T27801] bridge_slave_0: entered allmulticast mode [ 612.285988][T27801] bridge_slave_0: entered promiscuous mode [ 612.357688][T27944] __nla_validate_parse: 4 callbacks suppressed [ 612.357706][T27944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6104'. [ 612.391266][ T5827] tipc: Node number set to 2886997007 [ 612.398920][T27801] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.417937][T27801] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.444182][T27801] bridge_slave_1: entered allmulticast mode [ 612.488955][T27801] bridge_slave_1: entered promiscuous mode [ 612.686049][T27801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.725397][T27801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.830334][T27969] syzkaller0: entered promiscuous mode [ 612.836239][T27969] syzkaller0: entered allmulticast mode [ 612.855986][T27801] team0: Port device team_slave_0 added [ 612.883442][T27801] team0: Port device team_slave_1 added [ 612.949483][T27980] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6110'. [ 612.963116][T27801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.971841][T27801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.999678][T27801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.037154][T27801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.066541][T27801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.105830][T27801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.240765][T27801] hsr_slave_0: entered promiscuous mode [ 613.247643][T27801] hsr_slave_1: entered promiscuous mode [ 613.256713][T27801] debugfs: 'hsr0' already exists in 'hsr' [ 613.263476][T27801] Cannot create hsr debugfs directory [ 613.294617][T27997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6116'. [ 613.331351][T27997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6116'. [ 613.381461][T27997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6116'. [ 613.512137][T28013] Bluetooth: MGMT ver 1.23 [ 613.523419][T28013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6122'. [ 613.595316][T28008] syzkaller0: entered allmulticast mode [ 613.646892][T28020] netlink: 'syz.3.6123': attribute type 2 has an invalid length. [ 613.689196][T17540] Bluetooth: hci3: command tx timeout [ 613.749802][T28026] xt_hashlimit: overflow, rate too high: 0 [ 614.062236][T27801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 614.077300][T27801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.170703][T28047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6130'. [ 614.341686][T28055] netlink: 'syz.2.6133': attribute type 1 has an invalid length. [ 614.361606][T27801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 614.390013][T27801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.412218][T28057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6133'. [ 614.461759][T28073] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6137'. [ 614.486743][T28055] 8021q: adding VLAN 0 to HW filter on device bond11 [ 614.645460][T27801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 614.685649][T27801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.800540][ T3298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 614.971875][T27801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 614.994465][T27801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.079013][T28119] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.6148'. [ 615.458551][T27801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 615.477585][T27801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 615.496457][T27801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 615.510781][T27801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 615.528321][T27801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 615.552474][T27801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 615.564597][T27801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 615.601864][T27801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 615.670894][T28151] netlink: 'syz.2.6161': attribute type 1 has an invalid length. [ 615.769282][T17540] Bluetooth: hci3: command tx timeout [ 615.902075][T27801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.975282][T27801] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.011426][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.020467][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.161346][T28169] syzkaller0: entered promiscuous mode [ 616.182867][T28169] syzkaller0: entered allmulticast mode [ 616.203019][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.210256][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.461695][T28184] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 616.580132][T28183] netlink: 'syz.3.6171': attribute type 8 has an invalid length. [ 617.860789][T17540] Bluetooth: hci3: command tx timeout [ 619.887339][T28183] veth1_to_team: entered promiscuous mode [ 619.895762][T28183] veth1_to_team: left promiscuous mode [ 620.032849][T28189] __nla_validate_parse: 7 callbacks suppressed [ 620.032867][T28189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6174'. [ 620.056365][T28194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6172'. [ 620.180563][T28203] xt_l2tp: invalid flags combination: 0 [ 620.348484][T28212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6178'. [ 620.569690][T28222] lo: entered promiscuous mode [ 620.574975][T28222] tunl0: entered promiscuous mode [ 620.606654][T28222] gre0: entered promiscuous mode [ 620.618568][T28222] ip_vti0: entered promiscuous mode [ 620.794820][T27801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.976439][T28250] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6187'. [ 620.977665][T27801] veth0_vlan: entered promiscuous mode [ 621.000976][T28245] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6186'. [ 621.050835][T27801] veth1_vlan: entered promiscuous mode [ 621.154302][T27801] veth0_macvtap: entered promiscuous mode [ 621.182966][T27801] veth1_macvtap: entered promiscuous mode [ 621.258820][T27801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.311099][T27801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.363132][ T1175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.387423][ T1175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.407958][ T1175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.427628][ T1175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.549627][T28276] dvmrp0: entered allmulticast mode [ 621.627621][T28281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6197'. [ 621.741413][T28285] netlink: 'syz.4.6198': attribute type 8 has an invalid length. [ 621.872942][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.888163][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.760327][ T9709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.796545][ T9709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.859908][T28339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6209'. [ 625.915531][T28347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6212'. [ 625.941313][T28343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6210'. [ 626.251150][T28363] netlink: 'syz.0.6215': attribute type 83 has an invalid length. [ 626.530153][ T5651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 626.552077][ T5651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 626.562192][ T5651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 626.582408][ T5651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 626.590720][ T5651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 626.837343][T28392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6223'. [ 627.174486][T28411] netlink: 'syz.0.6227': attribute type 1 has an invalid length. [ 627.196737][T28416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6229'. [ 627.205872][T28411] netlink: 'syz.0.6227': attribute type 1 has an invalid length. [ 627.281071][T28411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6227'. [ 627.307244][T28422] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 3, id = 0 [ 627.319757][T28375] vxcan1 speed is unknown, defaulting to 1000 [ 627.337273][T28424] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.6232'. [ 627.372808][T28411] team0 (unregistering): Port device team_slave_0 removed [ 627.415972][T28411] team0 (unregistering): Port device team_slave_1 removed [ 627.784431][T28447] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 627.832627][T28447] netlink: 'syz.1.6238': attribute type 5 has an invalid length. [ 627.841061][T28455] nbd: nbd4 already in use [ 627.846171][T28455] block nbd4: NBD_DISCONNECT [ 627.854123][T28447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6238'. [ 627.865029][T28455] block nbd4: Send disconnect failed -32 [ 627.886781][T28455] block nbd4: shutting down sockets [ 627.960760][T28457] vxcan2: entered allmulticast mode [ 628.222609][T28375] hsr0 speed is unknown, defaulting to 1000 [ 628.229004][T28470] syzkaller0: entered promiscuous mode [ 628.229036][T28470] syzkaller0: entered allmulticast mode [ 628.246616][T28476] netlink: 'syz.2.6245': attribute type 4 has an invalid length. [ 628.260564][T28375] C speed is unknown, defaulting to 1000 [ 628.272691][T28470] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6244'. [ 628.649892][ T5651] Bluetooth: hci5: command tx timeout [ 629.283113][T28514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6256'. [ 630.412208][T28375] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.429213][T28375] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.444865][T28375] bridge_slave_0: entered allmulticast mode [ 630.473253][T28375] bridge_slave_0: entered promiscuous mode [ 630.553917][T28540] dvmrp0: entered allmulticast mode [ 630.579113][T28375] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.597997][T28375] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.643180][T28375] bridge_slave_1: entered allmulticast mode [ 630.684597][T28375] bridge_slave_1: entered promiscuous mode [ 630.733153][ T5651] Bluetooth: hci5: command tx timeout [ 630.970702][T28375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.046759][T28568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.075442][T28375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.245890][T28375] team0: Port device team_slave_0 added [ 631.246282][T28577] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 631.281116][T28375] team0: Port device team_slave_1 added [ 631.593256][T28375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.605276][T28375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.680938][T28375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.721401][T28375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.738821][T28375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.767842][T28375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.866796][T28605] Cannot find add_set index 0 as target [ 631.887184][T28605] Cannot find add_set index 0 as target [ 631.927589][T28375] hsr_slave_0: entered promiscuous mode [ 631.946381][T28375] hsr_slave_1: entered promiscuous mode [ 631.956884][T28375] debugfs: 'hsr0' already exists in 'hsr' [ 631.970474][T28375] Cannot create hsr debugfs directory [ 632.105859][ T30] audit: type=1800 audit(1781299124.217:23): pid=28614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6277" name="memory.events" dev="tmpfs" ino=3068 res=0 errno=0 [ 632.155742][T28608] syzkaller0: entered promiscuous mode [ 632.161767][T28608] syzkaller0: entered allmulticast mode [ 632.814416][ T5651] Bluetooth: hci5: command tx timeout [ 634.892056][ T5651] Bluetooth: hci5: command tx timeout [ 635.974473][T28625] macvlan2: entered promiscuous mode [ 635.979914][T28625] macvlan2: entered allmulticast mode [ 636.133054][T28635] __nla_validate_parse: 1 callbacks suppressed [ 636.133073][T28635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6283'. [ 636.204051][T28635] vxcan1 speed is unknown, defaulting to 1000 [ 636.228463][T28640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6283'. [ 636.283152][T28647] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6285'. [ 636.316398][T28647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6285'. [ 636.503595][T28375] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.503755][T28658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.516810][T28375] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.599684][T28658] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.6289'. [ 636.601948][ T9706] tipc: Subscription rejected, illegal request [ 636.757389][T28375] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.774694][T28375] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.952303][T28375] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.995543][T28375] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.106542][T28375] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.127630][T28375] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.179351][T28689] syzkaller0: entered promiscuous mode [ 637.184870][T28689] syzkaller0: entered allmulticast mode [ 637.571023][T28705] can: request_module (can-proto-3) failed. [ 639.485159][T28659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.542532][T28375] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 639.597662][T28375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 639.635163][T28375] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 639.678344][T28375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 639.717645][T28375] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 639.770432][T28375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 639.785807][T28375] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 639.815656][T28375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 639.868438][T28733] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6307'. [ 639.971572][T28736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6308'. [ 640.011464][T28736] syzkaller1: entered promiscuous mode [ 640.017222][T28740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6310'. [ 640.033080][T28736] syzkaller1: entered allmulticast mode [ 640.126748][T28375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.192257][T28375] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.234295][ T9709] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.241648][ T9709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.277118][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.284292][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.353696][T28375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.513382][T28375] veth0_vlan: entered promiscuous mode [ 641.578998][T28375] veth1_vlan: entered promiscuous mode [ 641.709714][T28375] veth0_macvtap: entered promiscuous mode [ 641.807125][T28375] veth1_macvtap: entered promiscuous mode [ 641.877003][T28375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.922722][T28375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.930609][T17540] Bluetooth: hci5: command 0x0405 tx timeout [ 641.971281][T17358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.026345][T17358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.105563][T17358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.126784][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6327'. [ 642.157732][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6327'. [ 642.221382][T28819] tipc: Enabled bearer , priority 0 [ 642.245517][T17358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.417264][T28832] netlink: 'syz.4.6329': attribute type 1 has an invalid length. [ 642.521479][T28811] syzkaller0: entered promiscuous mode [ 642.549436][T28811] syzkaller0: entered allmulticast mode [ 642.577466][T28811] tipc: Resetting bearer [ 642.813238][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.842749][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.108272][T28860] netlink: 'syz.1.6332': attribute type 1 has an invalid length. [ 643.130787][T28860] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6332'. [ 643.200339][ T9700] tipc: Resetting bearer [ 643.247907][T28810] tipc: Resetting bearer [ 643.345828][T28870] netlink: 'syz.1.6335': attribute type 15 has an invalid length. [ 645.722751][ T3298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 647.146145][T28810] tipc: Disabling bearer [ 647.173082][T28868] geneve3: entered promiscuous mode [ 647.178308][T28868] geneve3: entered allmulticast mode [ 647.194052][ T5747] tipc: Node number set to 2450043067 [ 647.230633][ T9700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.248802][ T9700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.295217][T28882] openvswitch: netlink: IP tunnel TTL not specified. [ 647.509602][T28891] netlink: 'syz.4.6340': attribute type 1 has an invalid length. [ 647.614803][T28892] bond5: (slave veth0_to_bond): Releasing active interface [ 647.695634][T28902] batadv1: entered allmulticast mode [ 647.750676][T28904] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 647.832095][T28913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6344'. [ 648.145688][T17540] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 648.171132][T17540] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 648.181067][T17540] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 648.192897][T17540] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 648.203786][T17540] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 648.536057][T28947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6355'. [ 648.552355][T28944] ip6t_srh: unknown srh match flags 5F28 [ 648.747525][T28954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6356'. [ 648.797685][T11291] IPVS: starting estimator thread 0... [ 648.889622][T28956] IPVS: using max 35 ests per chain, 84000 per kthread [ 648.918251][T28965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6360'. [ 648.956346][T28961] syzkaller0: entered promiscuous mode [ 648.974766][T28961] syzkaller0: entered allmulticast mode [ 649.062591][T28969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6361'. [ 649.146619][T28972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6362'. [ 649.260239][T28926] vxcan1 speed is unknown, defaulting to 1000 [ 649.273428][T28979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6363'. [ 649.297180][T28982] netlink: 'syz.3.6364': attribute type 1 has an invalid length. [ 649.396522][T28992] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6365'. [ 649.397771][T28991] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 649.546159][T28995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6368'. [ 649.724988][T29004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6371'. [ 649.747713][T29004] syzkaller0: entered promiscuous mode [ 649.762052][T29004] syzkaller0: entered allmulticast mode [ 649.883372][T29019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.133451][T28926] hsr0 speed is unknown, defaulting to 1000 [ 650.142308][T28926] C speed is unknown, defaulting to 1000 [ 650.329936][ T5651] Bluetooth: hci4: command tx timeout [ 650.945840][T29082] xt_ecn: cannot match TCP bits for non-tcp packets [ 650.953736][T28926] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.963327][T28926] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.973537][T28926] bridge_slave_0: entered allmulticast mode [ 650.982080][T28926] bridge_slave_0: entered promiscuous mode [ 650.993012][T28926] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.000611][T28926] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.012378][T28926] bridge_slave_1: entered allmulticast mode [ 651.031300][T28926] bridge_slave_1: entered promiscuous mode [ 651.168561][T28926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.217715][T29097] netlink: 'syz.0.6393': attribute type 1 has an invalid length. [ 651.219069][T28926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.257934][T29099] netlink: 'syz.3.6394': attribute type 1 has an invalid length. [ 651.296970][T29085] syzkaller0: entered promiscuous mode [ 651.303413][T29085] syzkaller0: entered allmulticast mode [ 651.333307][T28926] team0: Port device team_slave_0 added [ 651.358349][T29099] vlan2: entered promiscuous mode [ 651.363887][T29099] veth1_virt_wifi: entered promiscuous mode [ 651.372953][T29099] vlan2: entered allmulticast mode [ 651.378313][T29099] veth1_virt_wifi: entered allmulticast mode [ 651.429568][T28926] team0: Port device team_slave_1 added [ 651.657915][T28926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.678063][T28926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.707842][T28926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.747821][T28926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.766169][T28926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.838677][T28926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.880946][T29127] netlink: 'syz.1.6397': attribute type 15 has an invalid length. [ 652.011837][T29127] netlink: 'syz.1.6397': attribute type 15 has an invalid length. [ 652.044129][ T3298] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 652.114474][T28926] hsr_slave_0: entered promiscuous mode [ 652.149496][T28926] hsr_slave_1: entered promiscuous mode [ 652.176451][T28926] debugfs: 'hsr0' already exists in 'hsr' [ 652.185934][T28926] Cannot create hsr debugfs directory [ 652.193265][ T3298] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 652.217184][ T3298] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 652.235900][T29145] netlink: 'syz.0.6402': attribute type 1 has an invalid length. [ 652.244298][T29145] netlink: 'syz.0.6402': attribute type 2 has an invalid length. [ 652.254695][T29145] netlink: 'syz.0.6402': attribute type 1 has an invalid length. [ 652.279069][ T3298] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 652.400942][T29153] netlink: 'syz.2.6406': attribute type 3 has an invalid length. [ 652.420335][ T5651] Bluetooth: hci4: command tx timeout [ 652.700253][T28926] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.717387][T28926] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.807622][T28926] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.822633][T28926] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.874992][T29176] sctp: [Deprecated]: syz.0.6414 (pid 29176) Use of struct sctp_assoc_value in delayed_ack socket option. [ 652.874992][T29176] Use struct sctp_sack_info instead [ 652.883391][T29178] __nla_validate_parse: 7 callbacks suppressed [ 652.883408][T29178] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6415'. [ 652.915475][T29178] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6415'. [ 652.929059][T29178] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.936299][T29178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.943892][T29178] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.951128][T29178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.963512][T29178] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6415'. [ 652.977873][T29178] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.985302][T29178] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.025144][T28926] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.041967][T28926] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.083353][T29182] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 653.121989][T28926] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.167743][T28926] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.343073][T29196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6421'. [ 653.520773][T29203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6423'. [ 653.656339][T29213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6425'. [ 653.675004][T29214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.389686][T29205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.413005][T28926] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 654.445854][T28926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 654.515994][ T5651] Bluetooth: hci4: command tx timeout [ 654.548220][T29227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6429'. [ 654.632826][T29236] sctp: [Deprecated]: syz.3.6431 (pid 29236) Use of int in max_burst socket option. [ 654.632826][T29236] Use struct sctp_assoc_value instead [ 654.648051][T28926] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 654.673323][T28926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 654.689627][T28926] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 654.705284][T28926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 654.720836][T28926] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 654.777240][T28926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 655.000343][T29265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6438'. [ 655.012625][T29265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6438'. [ 655.033837][T29265] netlink: zone id is out of range [ 655.040989][T29265] netlink: del zone limit has 4 unknown bytes [ 655.112368][T29270] netlink: 808 bytes leftover after parsing attributes in process `syz.0.6439'. [ 655.118344][T29271] validate_nla: 1 callbacks suppressed [ 655.118360][T29271] netlink: 'syz.0.6439': attribute type 8 has an invalid length. [ 655.136653][T29271] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.144252][T29271] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.569193][ T5651] Bluetooth: hci4: command tx timeout [ 657.701955][T29239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.930606][T29285] __nla_validate_parse: 1 callbacks suppressed [ 657.930624][T29285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6442'. [ 658.019450][T29287] netlink: 'syz.3.6441': attribute type 21 has an invalid length. [ 658.048937][T29297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6442'. [ 658.054206][T29285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 658.109712][T29293] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 658.113859][T29287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6441'. [ 658.192849][T29297] bond1 (unregistering): Released all slaves [ 658.298043][T28926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.384891][T28926] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.433419][ T9700] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.440679][ T9700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.450155][T29316] netlink: 'syz.1.6450': attribute type 2 has an invalid length. [ 658.468139][T29316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6450'. [ 658.503953][ T9700] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.511203][ T9700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.555505][T29295] erspan0: entered allmulticast mode [ 658.590278][T11291] IPVS: starting estimator thread 0... [ 658.689853][T29322] IPVS: using max 29 ests per chain, 69600 per kthread [ 659.037142][T29342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6454'. [ 659.068774][T29342] block nbd4: Unsupported socket: should be TCP or UNIX. [ 659.242065][T29354] veth1_macvtap: left promiscuous mode [ 659.255105][T29354] macsec0: entered promiscuous mode [ 659.271576][T29354] macsec0: entered allmulticast mode [ 659.323932][T29357] veth1_macvtap: entered promiscuous mode [ 659.352068][T29357] veth1_macvtap: entered allmulticast mode [ 659.383704][T29357] macsec0: left promiscuous mode [ 659.406436][T29357] macsec0: left allmulticast mode [ 659.419369][T29357] veth1_macvtap: left allmulticast mode [ 659.558450][ T9] IPVS: starting estimator thread 0... [ 659.615552][T28926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.679901][T29370] IPVS: using max 35 ests per chain, 84000 per kthread [ 660.744600][ T5651] block nbd4: Receive control failed (result -32) [ 663.725830][T29413] netlink: 'syz.0.6472': attribute type 27 has an invalid length. [ 663.757844][T29413] netlink: 'syz.0.6472': attribute type 4 has an invalid length. [ 663.779346][T29413] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6472'. [ 663.813128][T28926] veth0_vlan: entered promiscuous mode [ 663.835498][T28926] veth1_vlan: entered promiscuous mode [ 663.914254][T28926] veth0_macvtap: entered promiscuous mode [ 663.950308][T28926] veth1_macvtap: entered promiscuous mode [ 664.001182][T28926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.056876][T28926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.110251][T17358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.123101][T29428] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 664.164722][T29434] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 664.183543][T17358] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.226093][T17358] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.247929][T17358] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.284681][T29442] xt_hashlimit: size too large, truncated to 1048576 [ 664.499257][ T3298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.520191][ T3298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.662553][ T9700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.677444][ T9700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.957324][T29463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6485'. [ 665.022948][T29463] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.030193][T29463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.038019][T29463] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.045252][T29463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.263529][T29473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6488'. [ 665.286204][T17540] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 665.303898][ T1175] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 665.324086][ T1175] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 665.333656][T17540] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 665.344965][T17540] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 665.355706][T17540] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 665.375341][T17540] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 665.477046][T29473] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 665.549985][T29473] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 665.569419][T29473] gretap1: entered promiscuous mode [ 665.582608][T29473] gretap1: entered allmulticast mode [ 665.591153][ T1175] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 665.601263][ T1175] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 665.696342][T29490] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 665.805052][T29494] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6490'. [ 665.821691][T29493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6491'. [ 665.838957][T29494] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6490'. [ 665.889497][T29494] netlink: 'syz.4.6490': attribute type 6 has an invalid length. [ 665.912187][T29494] netlink: 'syz.4.6490': attribute type 5 has an invalid length. [ 665.923380][T29494] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6490'. [ 666.014768][T29503] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6493'. [ 666.468204][T29471] vxcan1 speed is unknown, defaulting to 1000 [ 666.597684][T29525] openvswitch: netlink: Flow key attr not present in new flow. [ 666.655948][T29529] openvswitch: netlink: IPv4 tun info is not correct [ 666.767986][T29531] tipc: Enabling of bearer rejected, failed to enable media [ 666.794396][T29534] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 666.890634][T29533] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 667.339512][T29557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6507'. [ 667.363795][T29557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6507'. [ 667.449216][ T5651] Bluetooth: hci1: command tx timeout [ 667.560114][T29471] hsr0 speed is unknown, defaulting to 1000 [ 667.592831][T29471] C speed is unknown, defaulting to 1000 [ 668.610025][T29631] netlink: 'syz.3.6530': attribute type 2 has an invalid length. [ 668.631075][T29631] netlink: 'syz.3.6530': attribute type 11 has an invalid length. [ 668.656591][T29471] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.693942][T29471] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.727945][T29471] bridge_slave_0: entered allmulticast mode [ 668.750733][T29471] bridge_slave_0: entered promiscuous mode [ 668.781024][T29471] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.806570][T29471] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.833010][T29471] bridge_slave_1: entered allmulticast mode [ 668.857929][T29471] bridge_slave_1: entered promiscuous mode [ 668.999507][T29471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.049856][T29471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.136710][T29659] 8021q: VLANs not supported on wg0 [ 669.173742][T29471] team0: Port device team_slave_0 added [ 669.192907][T29471] team0: Port device team_slave_1 added [ 669.250434][T29471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.267572][T29471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.297269][T29471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.310612][T29471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.317670][T29471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.344535][T29471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.367263][T29668] syzkaller0: entered promiscuous mode [ 669.384575][T29668] syzkaller0: entered allmulticast mode [ 669.525737][T29471] hsr_slave_0: entered promiscuous mode [ 669.533250][T29471] hsr_slave_1: entered promiscuous mode [ 669.539866][ T5651] Bluetooth: hci1: command tx timeout [ 669.540413][T29471] debugfs: 'hsr0' already exists in 'hsr' [ 669.551688][T29471] Cannot create hsr debugfs directory [ 669.820197][T29652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 669.988470][T29694] __nla_validate_parse: 8 callbacks suppressed [ 669.988487][T29694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6543'. [ 670.010327][T29694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6543'. [ 670.012621][ T9700] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 670.036590][T29471] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.070531][T29471] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.260779][T29699] can: request_module (can-proto-0) failed. [ 670.277037][T29471] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.303282][T29471] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.450877][T29471] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.461242][T29471] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.544594][T29471] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.556731][T29471] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.135686][T29718] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.609521][ T5651] Bluetooth: hci1: command tx timeout [ 671.797001][T29748] syzkaller0: entered promiscuous mode [ 671.802886][T29748] syzkaller0: entered allmulticast mode [ 672.796923][T29686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 672.872898][T29471] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 672.947895][T29471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 672.975799][T29471] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 672.999271][T29471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.073098][T29471] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 673.104028][T29471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.110747][T29763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6565'. [ 673.125480][T29471] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 673.162274][T29471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 673.340000][T29781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6569'. [ 673.356108][T29785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6571'. [ 673.366139][T29785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6571'. [ 673.379998][T29781] netlink: 13 bytes leftover after parsing attributes in process `syz.3.6569'. [ 673.392320][T29786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6569'. [ 673.415761][T29786] netlink: 13 bytes leftover after parsing attributes in process `syz.3.6569'. [ 673.510884][T29781] veth3: entered promiscuous mode [ 673.593009][T29786] veth5: entered promiscuous mode [ 673.617148][T29471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.669778][T29471] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.689480][ T5651] Bluetooth: hci1: command tx timeout [ 673.722835][ T9700] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.730097][ T9700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.784842][ T9689] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.792079][ T9689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.803035][T29804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6575'. [ 674.106382][T29817] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 674.262163][T29823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.282329][T29823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.305153][T29823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.327107][T29823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.374083][T29828] erspan0: entered promiscuous mode [ 674.384004][T29828] vlan2: entered promiscuous mode [ 674.545372][T29471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.568276][T29838] netlink: 'syz.1.6584': attribute type 2 has an invalid length. [ 674.657821][T29471] veth0_vlan: entered promiscuous mode [ 674.664091][ T5651] Bluetooth: hci3: link tx timeout [ 674.677040][ T5651] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 674.700773][ T5651] Bluetooth: hci3: link tx timeout [ 674.704288][T29471] veth1_vlan: entered promiscuous mode [ 674.708244][ T5651] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 674.737249][T29841] syzkaller0: entered promiscuous mode [ 674.750080][T29841] syzkaller0: entered allmulticast mode [ 674.804570][T29845] vcan1: entered promiscuous mode [ 674.817728][T29845] vcan1: entered allmulticast mode [ 674.836356][T29849] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 675.027545][T29861] __nla_validate_parse: 2 callbacks suppressed [ 675.027562][T29861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6591'. [ 675.150359][T29471] veth0_macvtap: entered promiscuous mode [ 675.175270][T29471] veth1_macvtap: entered promiscuous mode [ 675.238186][T29471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.367290][T29471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.414071][ T9706] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.458937][ T9706] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.493149][ T9706] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.505054][ T9706] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.563621][T29891] netlink: 'syz.3.6595': attribute type 13 has an invalid length. [ 675.912578][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.938363][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.977559][T29902] netlink: 'syz.1.6599': attribute type 83 has an invalid length. [ 675.998397][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.007201][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.032845][T29906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6601'. [ 676.045720][T29905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6601'. [ 676.221820][T29919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6603'. [ 676.317116][T29927] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 676.334628][T29923] : renamed from vlan0 (while UP) [ 676.730928][ T5651] Bluetooth: hci3: command 0x0406 tx timeout [ 676.750974][ T9689] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 676.925569][T29966] netlink: 'syz.1.6613': attribute type 1 has an invalid length. [ 677.044154][T29966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.197770][T29984] xt_hashlimit: size too large, truncated to 1048576 [ 677.242751][T29986] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 677.252462][T29989] netlink: 'syz.3.6622': attribute type 1 has an invalid length. [ 677.320521][T29995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6622'. [ 677.357234][T29989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.443421][T29994] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 677.463651][T29994] bond2: option packets_per_slave: allowed values 0 - 65535 [ 677.508236][T29994] bond2 (unregistering): Released all slaves [ 677.630044][T30006] macsec1: entered allmulticast mode [ 677.964884][T30024] syzkaller0: entered promiscuous mode [ 677.972888][T30024] syzkaller0: entered allmulticast mode [ 678.002095][T30029] netlink: 'syz.1.6632': attribute type 21 has an invalid length. [ 678.035891][T30029] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6632'. [ 678.057520][T30025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6630'. [ 678.075641][T30024] tipc: Started in network mode [ 678.083989][T30025] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6630'. [ 678.098215][T30024] tipc: Node identity 3aaa8c141d6b, cluster identity 4711 [ 678.106939][T30024] tipc: Enabled bearer , priority 0 [ 678.142976][T30022] tipc: Resetting bearer [ 678.241381][T30022] tipc: Disabling bearer [ 678.295969][T30039] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6635'. [ 678.309671][T30040] netlink: 'syz.2.6636': attribute type 1 has an invalid length. [ 678.320843][T30040] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6636'. [ 678.566727][T30055] bond2: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 678.598158][T30055] bond2 (unregistering): Released all slaves [ 678.810145][ T5651] Bluetooth: hci3: command 0x0406 tx timeout [ 679.055422][T30094] ip6t_srh: unknown srh invflags 4000 [ 679.136468][T30099] lo: entered promiscuous mode [ 679.176188][T30099] tunl0: entered promiscuous mode [ 679.187404][T30099] gre0: entered promiscuous mode [ 679.213066][T30099] gretap0: entered promiscuous mode [ 679.221856][T30099] erspan0: entered promiscuous mode [ 679.230814][T30099] ip_vti0: entered promiscuous mode [ 679.261611][T30102] xt_hashlimit: size too large, truncated to 1048576 [ 679.316916][T30108] netlink: 'syz.4.6650': attribute type 5 has an invalid length. [ 679.411303][T30108] geneve2: entered promiscuous mode [ 679.427315][T30108] geneve2: entered allmulticast mode [ 679.462630][ T1175] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 679.506514][ T1175] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 679.534663][T17358] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 679.554747][T17358] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 679.646176][T30126] : renamed from bond0 (while UP) [ 679.890908][T30138] tipc: Started in network mode [ 679.903266][T30138] tipc: Node identity d28fb0404ddd, cluster identity 4711 [ 679.914809][T30138] tipc: Enabled bearer , priority 0 [ 679.925014][T30138] syzkaller0: entered promiscuous mode [ 679.932640][T30138] syzkaller0: entered allmulticast mode [ 679.979351][T30138] tipc: Resetting bearer [ 680.075770][T30136] tipc: Resetting bearer [ 680.114951][ C1] vcan0: j1939_tp_rxtimer: 0xffff888099918800: rx timeout, send abort [ 680.171727][T30155] __nla_validate_parse: 13 callbacks suppressed [ 680.171746][T30155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6666'. [ 680.176589][T30136] tipc: Disabling bearer [ 680.288284][T30163] netlink: 'syz.3.6669': attribute type 1 has an invalid length. [ 680.296582][T30163] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6669'. [ 680.324960][T30166] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6670'. [ 680.375413][T30170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6672'. [ 680.424479][T30170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6672'. [ 680.620361][ C1] vcan0: j1939_tp_rxtimer: 0xffff88809991ac00: rx timeout, send abort [ 680.629313][ C1] vcan0: j1939_tp_rxtimer: 0xffff888099918800: abort rx timeout. Force session deactivation [ 680.669060][T30185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6676'. [ 680.671917][T30186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6675'. [ 680.748233][T30190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6678'. [ 680.823690][T30197] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6679'. [ 680.941202][T30183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6675'. [ 681.129325][ C1] vcan0: j1939_tp_rxtimer: 0xffff88809991ac00: abort rx timeout. Force session deactivation [ 681.245691][T30203] Cannot find set identified by id 0 to match [ 681.520065][T30219] bond2: entered promiscuous mode [ 681.535515][T30220] ±ÿª¨úrBº“: renamed from lo [ 681.597959][T30227] netlink: 'syz.3.6689': attribute type 49 has an invalid length. [ 681.640585][T30230] sctp: [Deprecated]: syz.0.6691 (pid 30230) Use of int in max_burst socket option. [ 681.640585][T30230] Use struct sctp_assoc_value instead [ 681.857958][T30227] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 681.875850][T30227] ip6gretap0: entered promiscuous mode [ 681.884587][T30227] ip6gretap0: entered allmulticast mode [ 681.934253][T30240] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 681.944751][T30240] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 682.003652][T30247] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 682.016184][T30247] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 682.291084][T30274] pimreg3: entered allmulticast mode [ 682.614216][T30298] team0: Caught tx_queue_len zero misconfig [ 683.165520][T30337] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 683.234811][T30337] bond0: (slave lo): Enslaving as an active interface with an up link [ 683.249290][T30337] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 683.318999][T30342] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 683.372846][T30342] bond3: (slave lo): Enslaving as an active interface with an up link [ 683.413439][T30342] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 683.447954][T30351] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 683.710353][T30384] syzkaller1: entered promiscuous mode [ 683.727519][T30384] syzkaller1: entered allmulticast mode [ 683.840291][T30390] syzkaller0: entered promiscuous mode [ 683.845936][T30390] syzkaller0: entered allmulticast mode [ 683.919459][T30391] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.957063][T30394] syzkaller0: entered promiscuous mode [ 683.962846][T30394] syzkaller0: entered allmulticast mode [ 685.032825][T30417] x_tables: duplicate underflow at hook 1 [ 686.400807][T30363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 686.636844][T30433] __nla_validate_parse: 11 callbacks suppressed [ 686.636861][T30433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6743'. [ 686.667950][T30433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6743'. [ 686.790540][T30442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6744'. [ 686.931019][T30455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6747'. [ 687.002615][T30458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6750'. [ 687.040551][T30458] netlink: 'syz.4.6750': attribute type 7 has an invalid length. [ 687.072830][T30458] netlink: 'syz.4.6750': attribute type 8 has an invalid length. [ 687.096287][T30458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6750'. [ 687.108489][T30462] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6754'. [ 687.133987][T30458] gretap0: entered promiscuous mode [ 687.142871][T30458] gretap0: left promiscuous mode [ 687.174024][T30472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6755'. [ 687.268161][T30472] syzkaller0: entered promiscuous mode [ 687.275326][T30472] syzkaller0: entered allmulticast mode [ 687.330684][T30480] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6757'. [ 691.211943][T30510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6761'. [ 691.642200][T30529] __nla_validate_parse: 2 callbacks suppressed [ 691.642215][T30529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6772'. [ 691.864050][T30545] syzkaller1: entered promiscuous mode [ 691.870908][T30545] syzkaller1: entered allmulticast mode [ 691.952600][T30560] netlink: 'syz.2.6780': attribute type 1 has an invalid length. [ 692.055576][T30560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.146004][T30560] bond1: (slave geneve2): making interface the new active one [ 692.186106][T30560] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 692.232071][T30560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6780'. [ 692.233653][T30574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6783'. [ 692.323429][T30574] syzkaller0: entered promiscuous mode [ 692.344837][T30574] syzkaller0: entered allmulticast mode [ 692.541551][T30598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6787'. [ 692.586284][T30600] netlink: 'syz.4.6789': attribute type 3 has an invalid length. [ 692.645272][T30603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.340084][T30647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.347688][T30647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.355966][T30647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.364065][T30647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.743092][T30610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 695.947318][T30669] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 695.986549][T30672] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 696.012980][T30672] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 696.546079][T30717] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6815'. [ 696.610165][T30720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6816'. [ 696.695637][T30724] bond0: (slave bond_slave_1): Releasing backup interface [ 696.785570][T30730] syzkaller0: entered promiscuous mode [ 696.791295][T30731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6820'. [ 696.810999][T30730] syzkaller0: entered allmulticast mode [ 696.980615][T30738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 696.987911][T30738] IPv6: NLM_F_CREATE should be set when creating new route [ 696.995206][T30738] IPv6: NLM_F_CREATE should be set when creating new route [ 697.179939][T30746] SET target dimension over the limit! [ 697.346157][T30753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6826'. [ 697.355539][T30753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6826'. [ 698.417266][T30771] RDS: rds_bind could not find a transport for 400:0:1200:0:1030::, load rds_tcp or rds_rdma? [ 698.683258][T30786] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.6833'. [ 698.772513][T30784] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 698.824700][T30792] vcan0: tx address claim with different name [ 699.157359][T30811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6840'. [ 699.188488][T30813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6841'. [ 699.271448][T30823] No such timeout policy "syz1" [ 699.545954][T30839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6848'. [ 699.653211][T30846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6849'. [ 699.726530][T30846] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6849'. [ 699.762105][T30846] netlink: 'syz.1.6849': attribute type 5 has an invalid length. [ 699.887576][T30862] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6855'. [ 699.956651][T30864] xfrm1: entered promiscuous mode [ 699.971926][T30864] xfrm1: entered allmulticast mode [ 700.027180][T30868] netlink: 'syz.1.6857': attribute type 1 has an invalid length. [ 700.032748][T30869] netlink: 'syz.1.6857': attribute type 1 has an invalid length. [ 700.150266][T30868] bond2: entered promiscuous mode [ 700.162641][T30883] netlink: 'syz.4.6861': attribute type 1 has an invalid length. [ 700.176889][T30868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 700.234850][T30883] bond4: entered promiscuous mode [ 700.246046][T30883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 700.265251][T30883] netlink: 'syz.4.6861': attribute type 1 has an invalid length. [ 700.284863][T30887] 8021q: adding VLAN 0 to HW filter on device bond4 [ 700.296256][T30887] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 700.309434][T30887] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 700.324502][T30887] bond4: (slave ip6gre1): making interface the new active one [ 700.332378][T30887] ip6gre1: entered promiscuous mode [ 700.347776][T30887] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 700.357382][T30883] netlink: 'syz.4.6861': attribute type 1 has an invalid length. [ 700.371178][T30883] netlink: 'syz.4.6861': attribute type 1 has an invalid length. [ 700.385056][T30883] netlink: 'syz.4.6861': attribute type 1 has an invalid length. [ 700.407777][T30883] netlink: 'syz.4.6861': attribute type 1 has an invalid length. [ 700.421692][T30883] netlink: 'syz.4.6861': attribute type 1 has an invalid length. [ 700.445308][T30891] tipc: Failed to obtain node identity [ 700.462585][T30891] tipc: Enabling of bearer rejected, failed to enable media [ 700.936024][T30923] syzkaller1: entered promiscuous mode [ 700.959386][T30923] syzkaller1: entered allmulticast mode [ 701.028544][T30926] macvtap1: entered promiscuous mode [ 701.041234][T30926] macvtap1: entered allmulticast mode [ 701.057777][T30926] veth1_vlan: entered allmulticast mode [ 701.098465][T30929] macvtap2: entered promiscuous mode [ 701.106318][T30929] macvtap2: entered allmulticast mode [ 702.333851][T30997] __nla_validate_parse: 7 callbacks suppressed [ 702.333870][T30997] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6891'. [ 702.411592][T31003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6893'. [ 702.464698][T31009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6894'. [ 702.545713][T31009] veth1_to_team: entered promiscuous mode [ 702.557705][T31009] debugfs: 'hsr1' already exists in 'hsr' [ 702.565147][T31009] Cannot create hsr debugfs directory [ 702.601372][T31009] hsr1: entered promiscuous mode [ 702.806880][T31027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6900'. [ 702.810674][T31024] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 702.850819][T31024] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 703.186967][T31048] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6906'. [ 703.212404][T31048] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6906'. [ 703.226558][T31048] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6906'. [ 703.297505][T31053] 8021q: adding VLAN 0 to HW filter on device bond5 [ 703.513012][T31059] bond5: (slave geneve3): making interface the new active one [ 703.523602][T31059] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 703.684045][T31078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6918'. [ 703.728319][T31078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.771184][T31085] team0: Port device team_slave_0 removed [ 703.850093][T31078] syz_tun: entered promiscuous mode [ 703.894518][T31078] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 703.942389][T31090] ip6erspan0: entered allmulticast mode [ 703.961068][T31090] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6921'. [ 704.130084][T31109] openvswitch: netlink: Missing valid actions attribute. [ 704.142808][T31109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.176023][T31115] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 704.195066][T31115] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 704.608233][T31135] syz.3.6932: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 704.629402][T31135] CPU: 0 UID: 0 PID: 31135 Comm: syz.3.6932 Not tainted syzkaller #0 PREEMPT(full) [ 704.629426][T31135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 704.629437][T31135] Call Trace: [ 704.629445][T31135] [ 704.629453][T31135] dump_stack_lvl+0xe8/0x150 [ 704.629480][T31135] warn_alloc+0x249/0x340 [ 704.629504][T31135] ? stack_trace_save+0xa9/0x100 [ 704.629565][T31135] ? __pfx_warn_alloc+0x10/0x10 [ 704.629593][T31135] ? kasan_save_track+0x4f/0x80 [ 704.629612][T31135] ? kasan_save_track+0x3e/0x80 [ 704.629630][T31135] ? __kasan_kmalloc+0x93/0xb0 [ 704.629649][T31135] ? __kmalloc_cache_noprof+0x31c/0x660 [ 704.629669][T31135] ? xskq_create+0x56/0x170 [ 704.629761][T31135] ? xsk_setsockopt+0x54c/0x990 [ 704.629780][T31135] ? do_sock_setsockopt+0x17c/0x1b0 [ 704.629834][T31135] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 704.629852][T31135] ? do_syscall_64+0x174/0x580 [ 704.629872][T31135] __vmalloc_node_range_noprof+0x132/0x1750 [ 704.629918][T31135] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 704.629943][T31135] ? __kasan_kmalloc+0x93/0xb0 [ 704.629969][T31135] vmalloc_user_noprof+0xad/0xe0 [ 704.629988][T31135] ? xskq_create+0xbf/0x170 [ 704.630009][T31135] xskq_create+0xbf/0x170 [ 704.630031][T31135] xsk_init_queue+0x8a/0xe0 [ 704.630054][T31135] xsk_setsockopt+0x54c/0x990 [ 704.630076][T31135] ? __pfx_xsk_setsockopt+0x10/0x10 [ 704.630096][T31135] ? __pfx_aa_sk_perm+0x10/0x10 [ 704.630154][T31135] ? aa_sock_opt_perm+0xff/0x1a0 [ 704.630179][T31135] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 704.630200][T31135] ? __pfx_xsk_setsockopt+0x10/0x10 [ 704.630222][T31135] do_sock_setsockopt+0x17c/0x1b0 [ 704.630249][T31135] __x64_sys_setsockopt+0x13d/0x1b0 [ 704.630273][T31135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.630292][T31135] do_syscall_64+0x174/0x580 [ 704.630307][T31135] ? trace_irq_disable+0x3b/0x140 [ 704.630330][T31135] ? clear_bhb_loop+0x40/0x90 [ 704.630349][T31135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.630364][T31135] RIP: 0033:0x7f019d79ce59 [ 704.630381][T31135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.630394][T31135] RSP: 002b:00007f019b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 704.630412][T31135] RAX: ffffffffffffffda RBX: 00007f019da15fa0 RCX: 00007f019d79ce59 [ 704.630424][T31135] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 704.630433][T31135] RBP: 00007f019d832d6f R08: 0000000000000004 R09: 0000000000000000 [ 704.630442][T31135] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.630452][T31135] R13: 00007f019da16038 R14: 00007f019da15fa0 R15: 00007ffc6a1b95c8 [ 704.630481][T31135] [ 704.630495][T31135] Mem-Info: [ 704.972914][T31135] active_anon:5885 inactive_anon:0 isolated_anon:0 [ 704.972914][T31135] active_file:3404 inactive_file:40201 isolated_file:0 [ 704.972914][T31135] unevictable:2304 dirty:87 writeback:0 [ 704.972914][T31135] slab_reclaimable:13665 slab_unreclaimable:155908 [ 704.972914][T31135] mapped:30923 shmem:2832 pagetables:1380 [ 704.972914][T31135] sec_pagetables:0 bounce:0 [ 704.972914][T31135] kernel_misc_reclaimable:0 [ 704.972914][T31135] free:1248240 free_pcp:20949 free_cma:0 [ 705.047483][T31151] validate_nla: 64 callbacks suppressed [ 705.047509][T31151] netlink: 'syz.2.6936': attribute type 1 has an invalid length. [ 705.098650][T31135] Node 0 active_anon:24140kB inactive_anon:0kB active_file:13616kB inactive_file:160604kB unevictable:7680kB isolated(anon):0kB isolated(file):0kB mapped:62252kB dirty:348kB writeback:0kB shmem:9792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:20512kB pagetables:5492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 705.187524][T31135] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:61440kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 705.257353][T31135] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 705.297576][T31135] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 705.307314][T31135] Node 0 DMA32 free:1209092kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23640kB inactive_anon:0kB active_file:13616kB inactive_file:160604kB unevictable:7680kB writepending:348kB zspages:0kB present:3129332kB managed:2552776kB mlocked:6144kB bounce:0kB free_pcp:44444kB local_pcp:21752kB free_cma:0kB [ 705.351174][T31135] lowmem_reserve[]: 0 0 0 0 0 [ 705.357592][T31135] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 705.362895][T31159] pimreg: entered allmulticast mode [ 705.397571][T31135] lowmem_reserve[]: 0 0 0 0 0 [ 705.405648][T31135] Node 1 Normal free:3772244kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:39672kB local_pcp:13096kB free_cma:0kB [ 705.452380][T31135] lowmem_reserve[]: 0 0 0 0 0 [ 705.495037][T31135] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 705.523884][T31162] bond2: (slave ip6gretap1): making interface the new active one [ 705.540566][T31135] Node 0 DMA32: 11955*4kB (UME) 7943*8kB (UME) 3754*16kB (UME) 224*32kB (UME) 68*64kB (UME) 463*128kB (UME) 804*256kB (UM) 471*512kB (UME) 283*1024kB (UM) 112*2048kB (UM) 0*4096kB = 1208356kB [ 705.560118][T31162] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 705.569728][T31165] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 705.577213][T31135] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 705.592074][T31135] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 16*16kB (UM) 15*32kB (UM) 10*64kB (UM) 8*128kB (UM) 8*256kB (UM) 7*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 917*4096kB (M) = 3772296kB [ 705.618141][T31135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 705.630242][T31135] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 705.654571][T31135] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 705.678287][T31135] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 705.712145][T31135] 46433 total pagecache pages [ 705.723492][T31135] 0 pages in swap cache [ 705.736464][T31135] Free swap = 124996kB [ 705.757199][T31135] Total swap = 124996kB [ 705.763995][T31135] 2097051 pages RAM [ 705.773080][T31135] 0 pages HighMem/MovableOnly [ 705.780012][T31135] 427072 pages reserved [ 705.786615][T31135] 0 pages cma reserved [ 705.800075][T31179] openvswitch: netlink: Key type 239 is out of range max 32 [ 705.892511][T31181] openvswitch: netlink: IP tunnel dst address not specified [ 706.012376][T31192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6949'. [ 706.021727][T31192] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 706.041359][T31195] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 706.093408][T31160] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 706.543795][T31226] openvswitch: netlink: IPv4 tun info is not correct [ 707.182494][T31260] lo: Caught tx_queue_len zero misconfig [ 707.370053][T17540] Bluetooth: hci0: command 0x080f tx timeout [ 707.380089][T31271] syzkaller1: entered promiscuous mode [ 707.386058][T31262] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 707.386441][T31270] netlink: 'syz.1.6969': attribute type 4 has an invalid length. [ 707.412786][T31271] syzkaller1: entered allmulticast mode [ 707.537625][T17365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.553304][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.563124][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.616733][T31279] veth0: entered promiscuous mode [ 707.627598][T31282] veth0: left promiscuous mode [ 707.646255][T31278] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.776988][ T1175] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 707.790205][T31300] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 707.859012][T31290] syzkaller1: entered promiscuous mode [ 707.871032][T31290] syzkaller1: entered allmulticast mode [ 707.887338][T31300] __nla_validate_parse: 13 callbacks suppressed [ 707.887356][T31300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6977'. [ 708.216832][T31319] netlink: 'syz.1.6983': attribute type 5 has an invalid length. [ 708.260976][T31320] syzkaller0: entered promiscuous mode [ 708.270034][T31320] syzkaller0: entered allmulticast mode [ 708.286449][T31327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.313944][T31326] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.409258][T31337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6986'. [ 708.416462][T31339] netlink: 'syz.0.6985': attribute type 1 has an invalid length. [ 708.448541][T31339] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6985'. [ 708.534785][T31345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6986'. [ 708.957474][T31376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6998'. [ 709.019166][T31380] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6997'. [ 709.132017][T31379] lo: entered promiscuous mode [ 709.142213][T31379] netlink: 'syz.1.6999': attribute type 2 has an invalid length. [ 709.175957][T31379] net_ratelimit: 7 callbacks suppressed [ 709.175971][T31379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.320247][T31397] syzkaller0: entered promiscuous mode [ 709.331718][T31397] syzkaller0: entered allmulticast mode [ 709.461568][T17540] Bluetooth: hci0: command 0x080f tx timeout [ 709.493019][T31402] batadv_slave_1: entered promiscuous mode [ 709.526143][T31402] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7004'. [ 709.622726][T31409] Bluetooth: MGMT ver 1.23 [ 709.655839][T31401] batadv_slave_1: left promiscuous mode [ 710.052507][T31439] netlink: 'syz.4.7016': attribute type 1 has an invalid length. [ 710.091911][ T5367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.279174][T31452] netlink: 'syz.2.7019': attribute type 11 has an invalid length. [ 710.405805][T31457] netlink: 216 bytes leftover after parsing attributes in process `syz.1.7022'. [ 710.432266][T31457] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 710.536850][T31469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7025'. [ 710.570746][T31471] netlink: 'syz.0.7026': attribute type 1 has an invalid length. [ 710.612586][T31479] bond3: (slave lo): Releasing backup interface [ 710.621497][T31479] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 710.637463][T31479] bridge_slave_0: left allmulticast mode [ 710.647016][T31479] bridge_slave_0: left promiscuous mode [ 710.651637][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.653247][T31479] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.664553][T31480] sctp: [Deprecated]: syz.4.7028 (pid 31480) Use of int in max_burst socket option. [ 710.664553][T31480] Use struct sctp_assoc_value instead [ 710.696210][T31479] bridge_slave_1: left allmulticast mode [ 710.704148][T31479] bridge_slave_1: left promiscuous mode [ 710.711294][T31479] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.733072][T31479] bond0: (slave bond_slave_0): Releasing backup interface [ 710.751528][T31479] bond0: (slave bond_slave_1): Releasing backup interface [ 710.775739][T31479] team0: Port device team_slave_0 removed [ 710.786266][T31479] team0: Port device team_slave_1 removed [ 710.793136][T31479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.802603][T31479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.814697][T31479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.823161][T31479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.832200][T31479] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 710.858075][T31472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7026'. [ 710.956036][T31480] team0: Port device xfrm0 added [ 710.978400][T31486] tipc: Started in network mode [ 710.994235][T31486] tipc: Node identity 0667d33f67f8, cluster identity 4711 [ 711.013708][T31486] tipc: Enabled bearer , priority 0 [ 711.141853][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.454033][T31505] bond3: entered promiscuous mode [ 711.460634][T31505] bond3: entered allmulticast mode [ 711.962418][T31538] netlink: 'syz.3.7043': attribute type 10 has an invalid length. [ 712.071368][T31547] netlink: 'syz.2.7044': attribute type 2 has an invalid length. [ 712.096526][T31551] netlink: 'syz.1.7045': attribute type 1 has an invalid length. [ 712.109102][T31538] syzkaller0: entered promiscuous mode [ 712.114614][T31538] syzkaller0: entered allmulticast mode [ 712.131130][ T5827] tipc: Node number set to 1637864255 [ 712.185025][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.288459][T31558] syzkaller0: entered promiscuous mode [ 712.309988][T31558] syzkaller0: entered allmulticast mode [ 712.397513][T31564] syzkaller0: entered promiscuous mode [ 712.405716][T31564] syzkaller0: entered allmulticast mode [ 712.452560][T31566] : entered promiscuous mode [ 712.499270][T31568] openvswitch: netlink: Key type 30 is not supported [ 712.517234][T31573] tipc: Enabling of bearer rejected, failed to enable media [ 712.653667][T31573] tc action pedit unable to extract header offset for header type (0x5) [ 712.826250][T31594] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 712.897841][T31594] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 713.210576][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.375695][T31625] __nla_validate_parse: 14 callbacks suppressed [ 713.375711][T31625] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7065'. [ 713.559209][T31636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7066'. [ 714.252664][ T9] net_ratelimit: 8 callbacks suppressed [ 714.252677][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.569699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.581549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.306697][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.334182][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.342426][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.662206][T31625] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7065'. [ 716.934516][T31661] netlink: 15420 bytes leftover after parsing attributes in process `syz.1.7072'. [ 716.937038][T31662] netlink: 15420 bytes leftover after parsing attributes in process `syz.1.7072'. [ 716.964831][T31661] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 716.975566][T31662] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 716.997547][T31649] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7070'. [ 717.059588][T31664] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7073'. [ 717.091493][T31664] netlink: 'syz.3.7073': attribute type 1 has an invalid length. [ 717.116212][T31664] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7073'. [ 717.139644][T31671] netem: change failed [ 717.152506][T31672] netem: change failed [ 717.286711][T31675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7077'. [ 717.322671][T31675] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7077'. [ 717.363536][T31684] tunl0: entered promiscuous mode [ 717.369693][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.420828][T31684] netlink: 'syz.4.7079': attribute type 3 has an invalid length. [ 717.513251][T31698] netlink: 'syz.2.7081': attribute type 1 has an invalid length. [ 717.674739][ T5827] IPVS: starting estimator thread 0... [ 717.797362][T31705] IPVS: using max 33 ests per chain, 79200 per kthread [ 717.876411][T31714] bond3: option xmit_hash_policy: invalid value (64) [ 717.927516][T31714] bond3 (unregistering): Released all slaves [ 718.454220][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.570513][T31750] __nla_validate_parse: 3 callbacks suppressed [ 718.570534][T31750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7097'. [ 718.715102][T31758] netem: unknown loss type 8 [ 718.725517][T31758] netem: change failed [ 718.882043][T31767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7100'. [ 719.214116][T31777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 719.374703][T11291] net_ratelimit: 3 callbacks suppressed [ 719.374720][T11291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.475935][T31792] openvswitch: netlink: Unknown key attributes 2 [ 719.494783][T31792] netlink: 'syz.1.7109': attribute type 3 has an invalid length. [ 719.532746][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.553154][T31792] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7109'. [ 719.724845][T31802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7113'. [ 719.758349][T31804] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.7114'. [ 719.916293][T31816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7117'. [ 719.942825][T31816] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7117'. [ 720.060831][T31827] netlink: 'syz.2.7121': attribute type 1 has an invalid length. [ 720.093583][T31827] 8021q: adding VLAN 0 to HW filter on device bond5 [ 720.120000][T31827] bond5: (slave geneve3): making interface the new active one [ 720.129773][T31827] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 720.156502][ T9690] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 720.175135][ T9690] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 720.193245][ T9690] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 720.261119][ T9690] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 720.410375][T31843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7124'. [ 720.570400][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.843097][T31851] syzkaller0: entered promiscuous mode [ 720.851583][T31851] syzkaller0: entered allmulticast mode [ 721.119603][T31859] Cannot find del_set index 0 as target [ 721.162021][T31859] netlink: 'syz.1.7132': attribute type 7 has an invalid length. [ 721.171654][T31859] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7132'. [ 721.187309][T31863] syzkaller0: entered promiscuous mode [ 721.204659][T31863] syzkaller0: entered allmulticast mode [ 721.253746][T31866] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7134'. [ 721.624020][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.267828][T17540] Bluetooth: hci1: command tx timeout [ 722.433330][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.671336][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.