last executing test programs: 3.790685866s ago: executing program 3 (id=5573): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x4, 0xfff, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x20, 0x8, 0x1b, 0x6}}) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e8860"}]}}}}}}, 0x0) 3.572467312s ago: executing program 3 (id=5574): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) 3.454874535s ago: executing program 3 (id=5577): syz_emit_ethernet(0x96, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x884) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000000)=0xb39852455848e2f1, 0x4) 2.691096822s ago: executing program 3 (id=5585): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0x401, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 2.663974122s ago: executing program 1 (id=5586): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x3, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000900)=0xe1d, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) 2.23047513s ago: executing program 1 (id=5591): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0xc000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314018028bd7000fbdbdf250900020073797a30000000000800410073697700140033007767308500000000000000000000007152b17c15b5fb7a7d7800"], 0x38}, 0x1, 0x0, 0x0, 0x3db5ef462cb09b24}, 0x4c840) socket$nl_generic(0x10, 0x3, 0x10) 2.229854691s ago: executing program 4 (id=5592): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x10cc, 0x4) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r2) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r5, 0x203}, 0x14}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, 0x0, 0x0) socket(0x1d, 0xa, 0x4) 2.090881958s ago: executing program 3 (id=5593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000008010200000000000000000000000106000240060e00000900010073797a3100000000050003008800000014000480080001400000000708000340fffffffe1c9f703f0c605e8dfd7b9dc5192854d46e6070e386a70d03d619d991e0e399a999f73e81f75390966b6ec138110293ace8cff8c9ae5e5956fd1833996a19204376aa39758ffa3512"], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="2c385aa3d49100dc6626c892b6bc436a456d08f6c82a1cc8dd15b2e9a390bb983806d71ba939322573a104cf9729076ef9a124f175f46ab61eebdb404c03226717df5c642083a0a3b0f6e628b414da30f5186e", 0x53) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0xf) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) r8 = socket$inet(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x3e}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) write$tun(r5, &(0x7f0000000500)=ANY=[@ANYBLOB='E\x00\x00'], 0x1c) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001332564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r9, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048004}, 0x41) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 1.97977495s ago: executing program 2 (id=5594): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000f1f9cb3b3ae7550d29deffeb9aa5df82b852bf5965a24a805b931ec82246922248e674b40ebda9462684984a71ce801f80a52e23e9f9356b9536681f54d8f47684ee492da28e36428a9d86f50dbda03d147e3d6362dfcb5be02af6bcf396787aaf5e84a1296fda5341f48c33c527c3a449de1c738136a530c6f6eb87b724a8ab30414569fe37aa1b1f9f3a2d5000af860c3570ed0f0000000000003b7e823d7381", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x4000000000002, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000700000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x35, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.741439943s ago: executing program 1 (id=5595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb29d453e94df581d7575dd5b7ff0f58e200", '\x00\t\x00', "1f00000000000080"}, 0x38) writev(r3, &(0x7f0000001580)=[{&(0x7f00000000c0)="81454920f4355b30bdcac3903eea1ab1c967", 0x12}, {&(0x7f0000000100)="f19b4cfeaddd0a9327aac595a43dcc7a8529acc1318575", 0x17}, {&(0x7f0000001880)="d6e53f92715a3e0d76d37844c967dab58b012b9d4e4a9946469d94f363e1d8ee09b57f2851b6b0e1a940560dacf2d90b8f558385afb5a89fa6de574859bc08bc0e9ea023193263b2c5b5127d42b8b342acebc45f88516612e138bbcac1f463ef615ad0ce8a75cc989e58066795eb3950a614002b0d2f78bcaa17ff2bf8984608e3a32700bc5110b5c5585b2b5dfbdeb935e49f23284a8f4073f0f0fc8f1e415154c05ada8a55fd36b8888425e508724887568098b10d4c4b2aab605cd428df65ab854cbdd89ba423a3d7d958da165072b370b058ff2237a46309c45d7486f6aef62ced1a26e8b722ac43364a5b4b92624c330875bec057baf09bfaf32220253357800e1c6ec27753412890cc1b87857d5d0eb48bb01dbad137affde5ca0663a2cb215d787b7d98546ce209c62d5551e4debeedeabcb2f6e35a7c0f7a30e2e6e566bfcd271015e02ed85d54b071ce125f255c5c7d6785c8d77ca5aea2d229b283b80e4777e25eed22bd2f332bf7840290db736bf8310dbfc530d00938921ad6aed6642d511e487d351ae20a1b2defd2ba4c5a6d3777030524379ca1ab91ff939cbfa5a73396328aee9e4ce6180a75432962d8b9e850483ffaf345326e10658b9112957615fd2afc62e52e2fc5ebf479f1e7f1cf6db20ef7d4e16d9a6997c431013b1b741db1f0bd83a210e6cff09c31bb449b6aba95ac1163e4dec9abdd04a477d278645eff01f55456d41e2542b682b79619c4f6a4ce67c30d89c32e91832882872276a9fcfc4653bc03d4b15919d4f4afa78aba39ada927b671636cebb2606ea484f278472f3390542fb8a7d5221ab173a0efc637731ac252f94554cbbf3ce84464efced8a6933faaf4ea780aacdf3e84e3ac96c27ba434bf5123960ccf730b465a9bbcaee1ee690586ddb52a6c26650359eadd06c7e82414712a63d835abe159ed7d876adbb6cada4919e3634541408783053084fd446c265916a80d6d64a58333a7445d1ce0dd53faacc85a4ab532a612c1844476e7a679e55a275e32fc5c950ef18bbec2c3bd2d3c99f865757e67e6da3e9c6840313073930c76ed32ed857b9e75f40f92e2c9ec6804aeb4504c2bce5210166b4b4d1fffb630f34d211b2e3ce3d79c9248f20a9be6e29e45e1f6dcf2387b75cb33a0aa5d8061493750c8cb209cc2b0a2f0cf556becbbbfb87e14ada1adf9b1399fe9242c4e22dbc7fb5d723181bc5d88afc65cebe3c560db503d99f7f9f09feb9378caefa8d9b57e6d4eab5fe15c28135bcf1116c91851eb5eb451ca3344576fa5c548e514010d9711528c25d180faf2e6f5c08168229c32ea95d13eb66ae50c33b2337088eceb0d16c8fa4fcffbe78e7220029b5a840e2c0ffe4018ee2bd8511de110ad5c323fe330f88b96d463dfccc2ab01898401871731ed49b70245698fc3e7fb59cee72bf7f9113d0d8d0ed5cff32ecf7d5aab17eb315b505d3586c63c4f8dd60f1fd7151340e25fc044680d4167ae334e2f7c1ce7c713021f0b5089ab891cd3783650796277e332f767562d6689b643ba435051e5680b0c678a56575db354b434349899c45cf5e625060bf9b22ff43ff94b7364914ab2f48cf678602cef73d3e5ae1157e404d3c5bc6da2ec9c32e634cec35933ce5362fe52ea9b95d5bc8385827a3504034ccc58d5bcac8c87a23619779ebbd638b2c3c52c1497b86d0da948b9c7bced5c6fd2da352e84438ca0725d275a00f697ec544dddfc65bd6232a6df54bff091dea01b449ab4aadaba3f86e7968b115dab0a96fbe581b16aa6b5e6bf73b3e8d9bdc3124736358ab044458dc14572b24a71393a99c012bd93d3145f55289402b88550d6df830579e4e31c2de0d1bbe7315fc872887181c8ad84280e2819a856da4fe423a81010970e4c6f47490f112eb5eee1dec90d3504be6d97b92ad6c7b93d84d3ee87aadc7f66ea3f7d401c38e34cea1188c339351c7644004ff3f52a3ec186ac78eed763920aa81efa0ebac84c5739dae0c6fe38e36e203ddc44b52f0d9084971e839b159a3d85a512ee723e39ed8218f96d05cf6de52c70c762689a7983d29524f446e97120683469942b7f27983e9a08c9d326cd70d6046a620501107f64e698b42e2c2478193243bca86d10dcef92f1e678df0c197f80886cfb9799a96ffd96bbcd657ba3519c75682895501ac4529451fda11a97e3f678fd4a315dc0613a338a68bcfa4b05f316fbafada22fc88390efcdafddcb01c42cdb3c04facb615754095dd561956f2f2997ac1a2f6e0b3c2ddaab567926d2336aa018f73d25ae001eec561b0bd3b29c67378481dfa56fdf244cbc31a3bbb577168d5ff34df68ccd704808a1435edef3339d227146268899ae97fa28ec3d94c5f172440a41afce1c0cd72e546549f7d78096870681f3f98fa3850ef26cf8f1d95a47230ad7fd4a78ff1f7311c9201420afc0addcfe0bcd848ab0eabe499e0fdb084f433dd60b9d1260c537761369a2bd3939265e35dfd2c6e5eb9ecacffa359cb7c537de711328bcebc7a2246b93bcb59a000ab76ed15c32c2c3cf641ee9b0fae52f2fe583ac8a962cca7f82e4a7375653a0584a28f5adb5871186cd7a5d7dacd36bbaa03f81d0e4c82ba47889980a88abc3664e62a6d5f853398a0e3f084a56ef9d4b95f4ec311e8363103506be6c60f5af12cb42ae5ee99adfff14afdee712f190cb873a64f645bea851361586d8e257e8484724adbffe55e2cad04ec786ed1b4c45794c950aab42bfa8913738acdb0e018472bf3090ade6190d3213d2e1b101565e414305c6e7174e628d5856386f1a767f0756c20ed23c385490870e206314a5eaec9d84b7467361147dc9f2bd09eac2178f940fe67ed95efd1ae533a77e01ef6933efb976f1498000390854a0488b290370ccf42c222af197100a9803831802", 0x818}], 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200"], 0x44}}, 0x48000) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES16=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a0102000000000000000001002000090003"], 0xa8}}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a3000000000080003400000000320000480060001"], 0xa4}}, 0x20000000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r8, &(0x7f00000009c0)=ANY=[@ANYBLOB="011ce600c90005"], 0x7) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00'/20, @ANYRES32=r2, @ANYBLOB="12030000000800000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000140)={'veth0_virt_wifi\x00', {0x2, 0x4e21, @remote}}) 1.663045745s ago: executing program 4 (id=5596): r0 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x30}}, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001000400000008000400", @ANYRES32=r4], 0x2c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000180)={@private1, 0x32, r4}) (async) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0xa1, "48e96ffe7e167d6b71d2972262464266cf39e755063ed41251ffa03a78ba7c884eb2769562e3fac189057b148875179ac53810716374772d5a87bc5426355c107489bc76527567ac7860c99ac186b1e45b5ad41837e311691d6dbcc4a466fc5e9a620a9a9180c0f33aa273eba5604f5661fc29efa15b63f746d92bca39964f73a380a1229102e20aa67532fd9dfbccd730f3d9cea6890d6b895a921aa499f0be54"}, &(0x7f0000000140)=0xc5) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.591351154s ago: executing program 0 (id=5597): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f004000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) 1.584120156s ago: executing program 2 (id=5598): socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06711e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000008c0)="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", 0x13a}, {&(0x7f0000000280)="4c08df39f312195d2a7ea0ef989a2e96900e028835038c4cb07738980600b22beef36dac3ef7585aa2d5b3dc032525b81ab020845a0e578abc3a38ccb8f11db842121d26e4e88bd27d970a1432c1ede757dbbd242bc6d66a8da0998e33ebe4e795aedadab0da8bd48096038bb82b32b75a8b3234e0bfde89ce56c886be6fa2e297da3d27b4264163ec006cc12bfe1bb19fae1ec2526afd040368db84", 0x9c}, {&(0x7f00000007c0)="31e07aede160b356930f7ea6e224decd348062710ce3c5e5967b8397768067751c3545618dee7a300765b213a5aa2ae1ba750497a17321a2d40d6a14165d64715e9869362bda714161dd40b8d15d625e0f0b2fd52b2414a72d3a891b14db3ec61967a5de7a462e15a8f385bee1903846c45c3b6c4bcf85c2a6c00298cfdab6e8e3c83997ddbd7567295deb3af994d3d07aa331890f206d25656e1bd167a24791bdc660f6f5a5c2fef5fa20a333a096f9beca32e4e0841d202844dd9657f9d44ba6a68bc108a8373725db8a9656f42eb255d2aaf5bda35221f8971882d125dd5a2ac43a84773e2ec45a58332b4b96ad2d4d41cb8624", 0xf5}], 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8d80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002b80)={0x1028, 0x42, 0x8, 0x0, 0x25dfdbf8, {0x3, 0x1}, [@typed={0x8, 0x6b, 0x0, 0x0, @uid}, @generic="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", @nested={0x8, 0x8002, 0x0, 0x1, [@typed={0x4, 0x6f}]}, @nested={0x4, 0x8003}]}, 0x1028}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000c8685ba64d80049a1c826c7f8f6f9500f3cc01e51af102c88aeff90018ac40da1fde194739f06d94efceb4c4a6f9ecba9d7662c09e3b4fc483e4f725115cb096b0a731561c910a8c6a65fa540884f62fe270c193674b9b1a17789531396e20f702315", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000480)="d6cb576c755ed6e013ac89c8ba8a743486dfab0f9c22591d56ce56d205d5bfc310b800c54c12e8fcc6635f68ec7b7a9177ec5da9707ea780e05affc0951091cde755040f650cb37dde2b56f5fef98695a1df25bc4db2af5231081c85819d33cee5", &(0x7f00000006c0)=""/55, 0x4}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000200)={'wg2\x00'}) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, r5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 1.399128702s ago: executing program 0 (id=5599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00'}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000004c0)={0x969c, {{0xa, 0x4e21, 0x5, @loopback, 0x2}}, {{0xa, 0x4e21, 0x3, @private1, 0xa9e}}}, 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.339918218s ago: executing program 0 (id=5600): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x21}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c041}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 1.273672139s ago: executing program 0 (id=5601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20018}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}]}}}]}, 0x40}}, 0x0) 1.151087417s ago: executing program 4 (id=5602): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newsa={0x144, 0x10, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0x60}}, @iptfs_reorder_window={0x6, 0x25, 0x40}]}, 0x144}}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12100, 0x60000}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd70000000400a0100000007000100272a000014000500fc01000000000000000000000000000108000c000200000006000b000a0000000800020005000000080004000000000014000600"], 0x78}, 0x1, 0x2000000}, 0x50) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x3, 0x7fff, 0x4, 0xffffff5b, 0xff}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000640)={r7, @in6={{0xa, 0x4e20, 0x4, @local}}}, &(0x7f0000000700)=0x84) 1.040741069s ago: executing program 1 (id=5603): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3, 0x0, 0x0, 0x2}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="bb3443fa09f73565bd7f53e1a9d5c9d1c0f088cd599d155f09f7e0a0d7a2b45b53f08cbf41470d6a146b55b36fbe48093380b0bf9d42d09e25a864c438c5691a09cc4f2b387a13f93f08bdd81aaa4b23ff7776bfcd16235177f1004c6ab4b6f27ef4fa7ab3de2b3ce50a7dec77d2ce8bfd550e80760bd31cba6e880097aebd897484ea", @ANYRES64=0x0], 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x100000) 975.081341ms ago: executing program 3 (id=5604): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x3, 0x80001, 0x39) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x4c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000100)={@mcast2, r4}, 0x14) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) getsockopt(r2, 0x5, 0x9, &(0x7f0000000280)=""/125, &(0x7f0000000300)=0x7d) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r4, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000080)={0x2, @short}, 0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'vcan0\x00', {0x9}, 0x2000}) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6gre0\x00'}) close(0x4) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f00000002c0)=0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1f, 0x2d9f, 0x7, 0x800, 0x102, 0xffffffffffffffff, 0x40, '\x00', r4, r1, 0x0, 0x0, 0x5}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x101}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, [], [0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x2ca9570ab73812e0, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) 907.081851ms ago: executing program 0 (id=5605): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000004f00), 0x256200, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x401c5820, &(0x7f0000000080)) 763.474048ms ago: executing program 2 (id=5606): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) (async) write$cgroup_int(r0, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000100)={0x4, 0xef2, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd24}) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd24}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r3, r2, 0x0, 0xfffbffff) 608.183354ms ago: executing program 2 (id=5607): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x7}, 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000900)={{r0, &(0x7f00000000c0)=':[-\\\x00', 0x8000, &(0x7f0000000100)={@_ha_fsid={[0x8, 0xffff]}, {0x0, 0x1, 0x7, 0x9}}, 0x8, &(0x7f0000000140), &(0x7f0000000180)}, 0x7, &(0x7f0000000800)=[{0x3, 0x0, &(0x7f00000001c0)='$$\x00', &(0x7f0000000200)="0c9983739167561158183b625ecc9c86e33174218142bc3f5919a2c2be7d28448f9bc196e240d026c15812c76fa9ee1ec1b099d1c0d1ece12a73af3eda556ac036abc00a23c7755c1ae2a48ffdc2e2f49c50ba3bfc61e1ab9dd60f6835fd1439d38a24165fce41f4af66c8f8fd6f06369aa030f1d9fea221a01b4342e404a6a662d3ee7d1e5aea4955d9880f03", 0x8d, 0x48}, {0x2, 0xa, &(0x7f00000002c0)='}}&\x00', &(0x7f0000000300)="f846c7ae8d680d98e5741b60a35a1e", 0xf, 0x10}, {0x2, 0x3, &(0x7f0000000340)='\x00', &(0x7f0000000380)="ed6476f37faa2c21e360852b0d429e35c3b99c483c17664c78d1997b486473c04c25164171c17e994e4a059087b3c005ea934e08fb9ad794151602917752d8e7c501b10c87002a335fb69e659357490aeacc213f6fc8a2e3baead1544e7d82d5dd7417e7749fc1fe227be2ec6aa0166d607c61dd5e31d3f291f567e708ece69de935c0a63f3a5beb27aa1989d63b0ab7123270d0b1f206ac73d00b98e4e842e782cefa19a50cf01e5e0e9a7ea54e7388faf0035caebe556d23f53b8b226a68da8c93da588bceefd4299b7c3f062453b9c013c7471c78889b7f70bb6e0756041782", 0xe1}, {0x3, 0xa, &(0x7f0000000480)='\x00', &(0x7f00000004c0)="33df230c52589e160ae011bb699bedfaccb0a17a538f48b3d28c8b37b6ad4212b92e80d2118b8fb210fe17a6ef38a0120621b0c19378970b30a305014a3d5e8ee75aa954649d6390c231a750c6c530cdf3c52586ddbe34f6cd453d95018b636210feba55c35d949dc67b6442a00cc940d5c12b63d4340da51472d5a2bc5f1bf30475ad60954378cbaf887b70", 0x8c, 0x2}, {0x2, 0x4, &(0x7f0000000580)='#.\x00', &(0x7f00000005c0)="e27962af9b9192bb32b6a813d364f86ec9e3e745881e45453fb0713bfd570ae6003dbc184f17928b465e67c9bc3831b168f303ede8626e07641c8322fbb5c22d101475f7a2b50a5b9ff83003baa37f9b50becf2ed1b5a81d53083d316cd588b9ac1b56d3d28b989ebe275645b77932c11d7652007f0e02e7211545b76fd71981aa7abf75b67287432e88f14a7ba0249600f9607de255a4b2fe4811ebecf7f4f28ec97ffe06ebe154f8217420f1b87918e482aa3cce417521d637e379c7d9037e6582e540f423f288a6", 0xc9, 0x30}, {0x1, 0x3, &(0x7f00000006c0)='/$^}/\x00', &(0x7f0000000700)="a5b691aa50eb341132290b3516da7335588fb2d1cd0c94780818a8786491855c1c9a6de6e039b48b8588ea4b6c0d8ae109c16b0bafe6551ed1b75e356817d3304e0db6fe9a782cfb50fe7cde71ebc3df2b9802ec45", 0x55, 0x28}, {0x3, 0x7b4dd852, &(0x7f0000000780)='![.&\\\'\x92![\x00', &(0x7f00000007c0)="0c75ce06ca361f36f9", 0x9, 0x3a}]}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000980)={r1, 0x1, 0x20, 0x9, 0x7}, &(0x7f00000009c0)=0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00'}) bind(r0, &(0x7f0000000a40)=@l2={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0x2}, 0x80) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) r4 = accept4$phonet_pipe(r2, &(0x7f0000000ac0), &(0x7f0000000b00)=0x10, 0x800) accept4$phonet_pipe(r4, 0x0, &(0x7f0000000b40), 0x80000) listen(r4, 0x7) r5 = accept4(r4, &(0x7f0000000b80)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000c00)=0x80, 0x80000) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000c40)=0x1, 0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000c80)={r1, 0x0, 0xfadd, 0x0, 0x3ff, 0x37}, 0x14) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000dc0)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000e00)={0x0, 0xc3}, &(0x7f0000000e40)=0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000e80), 0x40, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001040)={&(0x7f0000000ec0)="21a285bbc314d9c7e91f64776abe74496c1142eec21d3ae9cd4c7704504f66c70ad83669216929fd88fb3b8fd8f23a4383813642d91763610387", &(0x7f0000000f00)=""/99, &(0x7f0000000f80), &(0x7f0000000fc0)="70b34b14536989ef1d82570ff48de81da67734ef5f4d46a72b0dbf77fcf71193bdf542e8e096fbd718a65a717240c0c87d9f1a441289cfe5078a30e2c67df95915ac7034e4f6bc5ceb", 0x7, r2}, 0x38) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000001080)={r3, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x3}, &(0x7f0000001140)=0x90) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000001180)=0x2) getsockname$l2tp6(r2, &(0x7f00000011c0), &(0x7f0000001200)=0x20) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000001240), 0x4) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000001280)={'syzkaller0\x00', {0x2, 0x0, @dev}}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000012c0)={r6, 0x81}, &(0x7f0000001300)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001340)={r7, 0x6}, &(0x7f0000001380)=0x8) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f00000013c0)) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x4) 426.406833ms ago: executing program 1 (id=5608): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a8", 0x3}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32618) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0xe8, 0x700001b, 0x148, 0xe8, 0x148, 0x218, 0x206, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0xe8, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x12}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0xa, 0x3, 0x3, 0x2, 0x5, 0x1], 0x1, 0x4}}}, @common=@set={{0x40}, {{0x2, [0x1, 0x2, 0x0, 0x4, 0x3, 0x2], 0x1, 0x9}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000440)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x1000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x9, 0xfffd, 0x4}, 0xc) syz_emit_ethernet(0x458, &(0x7f0000000b00)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@mpls_uc={0x8847, {[{0xc0e, 0x0, 0x1}, {0xd}, {0x1b4, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xa1a9, 0x0, 0x1}, {0xd8, 0x0, 0x1}], @ipv6=@dccp_packet={0x1, 0x6, "b090ad", 0x40a, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@dstopts={0x32, 0x1c, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x31, 0x54, "9e7bb3a5c6d96390ea3f50c09161fb2d7f9eabdf1ea9380d73d2b5ff6fcc085f2f3cb86526e1069e0c7e412cfc281791e2677a117d32b22031b83efb54e1a844481eec25d55bb9849ead424c25eb7e00c08533a6"}, @enc_lim={0x4, 0x1, 0xfa}, @generic={0x4, 0x78, "af6a1a038addae9b35a59d13151843d2fa347ee36f7ef7a25ea13323c6bc2d98209ae7de6364cc562769bed709a7dea2c0a67846062c449b171c496d5e42c6ec0040a7975f0801cee76394cdeda9260021a2d55544fc4696b3333ea914cd640dcc37d6b884fb3922ff375c5539b7527f98ded1a2ce583d41"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x3, 0x28, 0x0, [@empty]}, @dstopts={0x2b, 0x3a, '\x00', [@pad1, @generic={0x6, 0xd4, "543ad2380764c07c6dad6744e3c944e8c32fdc6b9bf64d1d16baadc5e898ad5ba6682079530c50b6c52a8b30bfc15ade50687627243f8991519484b694426c8932f5685e7c10a43296b555be9f8de43bd0da80d53d036f66ef29067a3c5a76b685222fd44548b6719d78c98dfd48e4a25533073611209d8786107b8980c5fdce58bf8f20aebaaf8c596a79f7577bc63a011e28a9ba7336fce923ca7c1c13f9d98ef77c58959a63a1f156405c0c9384bdf23295792d0fdb580974b55b2883a5301de8601488a1e5c3cab4cf38c048810e505fe35a"}, @generic={0xf4, 0xe4, "21da43ba45d38d65081d50baddbf9b6c8e73007bbbe63ac1b31eba5b2431e013bdec111ce370d38aad7a2b75fdfaa6c46864e23715571fb6c4a02b5157be4319ffb359bde2bcbd7422e2cfb213dcbc1cbe1553cd600ddb4835b5a1423bbdf3773f57e55ec7bf63026ad5a417e52672afeb9f1c9241784e03dcfefb5fe6793caded822dfd25b692f91efc941666bf0aeec9d2632cbf3cb52f0582cc927e24c1fa93ad0cff161ac3795a9f29d529ac78d645d205fefda470ffa82099fa1ce10637921c1c2918dff336e46042de2c7df3f065e278f55ca00ccad704f2d0ea6d3d240b0929f3"}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x7}]}, @srh={0x3c, 0x14, 0x4, 0xa, 0x3f, 0x8, 0x3, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @empty, @rand_addr=' \x01\x00']}, @srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x60, 0x5, [@dev={0xfe, 0x80, '\x00', 0x29}, @empty]}], {{0x4e21, 0x4e23, 0x4, 0x1, 0x3, 0x0, 0x0, 0x5, 0x0, "b55ef2", 0xd8, 'AxQ'}, "af90535ccbebed5dea30c791ca7a0d6b604eb43a86ad4fec20a1ca6155633baffd4fc16b8972c88a5425c15a585477f4d7fff5b3d7137e0bea7c0389cc75a568e0f9"}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x7a, &(0x7f0000000080)=""/51, &(0x7f0000000140)=0x33) 424.348788ms ago: executing program 4 (id=5609): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0380000010000600faffffff0a002fbb295736e4621014000d15010069706f69", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 423.400363ms ago: executing program 0 (id=5610): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pB \x00'}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000380)={@rand_addr, @multicast2, 0x0}, &(0x7f00000003c0)=0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@volatile={0x1, 0x0, 0x0, 0x9, 0x4}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x2}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x8}}, @struct={0x6, 0x4, 0x0, 0x4, 0x0, 0x3, [{0x1, 0x5, 0xe70}, {0xb, 0x1, 0xd}, {0xe, 0x5}, {0x6, 0x1, 0x364e7822}]}, @float={0xa, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0xa}]}, {0x0, [0x5f]}}, &(0x7f0000000680)=""/72, 0xb3, 0x48, 0x1, 0x10000}, 0x28) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$kcm(0x29, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000007c0)={r5, 0x6, 0x6, "b712471205aebcc3e6321a49096addb17614738c8829ea80336dad2724a80d4e17288df85c56cf232e5c1ea62fab683ca0039091688f33a28297c21193507ddcc8dfa059a113a2b76a9b22b6c6e36cacbef4ea5176439f71f67dd88bcf5b68325774e655af8512d8dbfe0dc3cf62a5aeaa6b6e78bd143e00e9169721e154ba8538ba04ce8018047319bd4c9d93ca1ad526ac28e59f59a49238163e6875424cca355e0f830fdcccb6bcc07dc0e46319b705a04bc907282e88cbf4f08941af340714eb9d0fd9aee32efbc681ae43c257d2"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x5e2, 0x8, 0x4, 0x20, r1, 0xfffffffc, '\x00', r2, r3, 0x4, 0x5, 0x2, 0x2}, 0x50) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r7}, 0x20) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0xf, &(0x7f00000001c0)=0x2, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r7, 0x1}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1}}]}, 0x4c}}, 0x20000011) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) 330.312137ms ago: executing program 2 (id=5611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="b3", 0x1}], 0x1}}], 0x1, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x80002, 0x64}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0xdac098b1337ed02a, 0xcd, 0x4}}, 0x44) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@local}, @in=@multicast2, {@in6=@mcast2, @in6=@private2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@offload={0xc}]}, 0x134}}, 0x0) 324.640978ms ago: executing program 4 (id=5612): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32], 0x68}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r3, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r0, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000040)={0x1, 0x10000, 0xfffff800, 0x1}) 35.425512ms ago: executing program 2 (id=5613): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xffffffffffffff47, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0xfffffffffffffffe, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0xbf, 0x4c}]}]}, 0xfc}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0207000902", @ANYRES64=r1], 0x10}}, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = socket(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f00000001c0)=@abs={0x1}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x6e22, 0xfffffffc, @remote, 0x7}, 0x80, 0x0}, 0x20000000) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000080)=0x2, 0x4) 34.93694ms ago: executing program 4 (id=5614): r0 = socket$unix(0x1, 0x1, 0x0) preadv(r0, &(0x7f00000002c0), 0x0, 0x19, 0x7) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@newchain={0x24, 0x64, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff3, 0x9}, {0xffff}, {0x9, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008888}, 0x24040084) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000002440)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a30000004000800024000000001140000001100010000000000000000000000000a"], 0xb0}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth1_to_team\x00', @random="fcbdde3164cf"}) r4 = accept(r0, 0x0, 0x0) unshare(0x100000) unshare(0x20080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="32b6936012ae06b6ff255500ff3ce1c7d4997aaa0bde4bec9c8b835636ad817c67e442bb0aa09ec804b9e54884f7aed9d1e7e828b9b9158e09f97c265eba370fe8176678b8e1f88d2c306c293b96d652c7cbfc7ae521556d46c4966240e2eefe15fb88d1aa26cc61bb9e024363e1e7f21d124c18e3d2cd5244fe5d2a77cbfb1661074bb7abfe37039d7a91074c630a4f9d96ab7c40d1f6ead56f3427a349c0ff731a705057a0cb84962839390347f8d1734c4f8754af4090cddf4d514a0af190fc2fb76794b1a8a5ad9a460d01592fc7628aff827c784e0dcdc892cef4700c3ca0db90f1c01dd76d97b07c7197dea5fd46db5eff99744c9d23", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xa34bd11bb054f53a}, 0x200000c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000600)=ANY=[@ANYRES16=r9], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0xa00, 0x4000000}, 0x28) ioctl$PPPIOCSNPMODE(r9, 0x4008744b, &(0x7f0000000100)={0xfb, 0x2}) 0s ago: executing program 1 (id=5615): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x81, 0x6}, 0x90) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x8}, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x2, 0xffffb104, 0x5, 0x4, 0x80000000}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r2, 0x7, 0x8, [0x40, 0x6, 0x0, 0xff80, 0x0, 0x0, 0x6, 0x80]}, 0x18) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'syzkaller0\x00', {0x2, 0x4e22, @rand_addr=0x64010100}}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000002c0)={0x5f}, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={r2, 0x1000, "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"}, &(0x7f0000001340)=0x1008) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000001380), &(0x7f00000013c0)=0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@fallback=r3, 0xe, 0x0, 0x8b, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001540)={r2, 0xffc0}, &(0x7f0000001580)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000015c0)=@assoc_value={r4, 0x2}, &(0x7f0000001600)=0x8) getsockname$inet(0xffffffffffffffff, &(0x7f0000001640)={0x2, 0x0, @dev}, &(0x7f0000001680)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000016c0)={r2, @in6={{0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0x9, 0xba, 0x1, 0x8, 0x9}, &(0x7f0000001780)=0x98) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000017c0)="0932b647db45a16c253e47b5608c7966858efff608b2533204c616b4b646d923a71cd950ceb4c40dc9083683b1cb218cbe7375424a909e064cef93948020a2072607d2ab8d376c03ca26686992b4592c79823a818ba7c2b45b6fa7119827684516233e5f58bf0a93db13ec997b0844f195c2f00290720dc1107480acf66b89fef087ee029179d2fe29f25706544ce2611413022b69c54871f42508d682b61039976f4f8a94c0c86a48904a", 0xab) r8 = accept4(r5, &(0x7f0000001880)=@rc, &(0x7f0000001900)=0x80, 0x80000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000001a80)={&(0x7f0000001940), 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x34, r9, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x101, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4001) r11 = accept4(r0, &(0x7f0000001b00)=@in={0x2, 0x0, @initdev}, &(0x7f0000001b80)=0x80, 0x80000) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001bc0)={0x1ff, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001ac0)={@fallback=r11, r5, 0x25, 0x30, r5, @void, @void, @void, @value=r12, r6}, 0x20) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c40), r11) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x78, r13, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000001d80)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000001e00)={r4, 0xe2, 0x10, 0x100, 0xff}, &(0x7f0000001e40)=0x18) kernel console output (not intermixed with test programs): tions per device. [ 491.767418][T20169] block nbd2: shutting down sockets [ 492.064361][ T1408] smc: removing ib device syz1 [ 492.237612][ T1398] smc: removing net device team0 with user defined pnetid SYZ2 [ 492.272829][T20142] netlink: 'syz.1.3623': attribute type 4 has an invalid length. [ 492.278822][T15866] infiniband syz1: ib_query_port failed (-19) [ 492.487284][ T1408] smbdirect: ib_dev[syz1] removed [ 492.716263][T20185] lo: entered promiscuous mode [ 492.771434][T20185] tunl0: entered promiscuous mode [ 492.789273][T20185] gre0: entered promiscuous mode [ 492.878247][T20187] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 492.878588][T20185] erspan0: entered promiscuous mode [ 492.935506][T20185] ip_vti0: entered promiscuous mode [ 492.997051][T20200] xt_hashlimit: size too large, truncated to 1048576 [ 493.147345][T20202] C: renamed from lo (while UP) [ 493.194956][T20202] net_ratelimit: 501 callbacks suppressed [ 493.194982][T20202] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 493.668602][T20214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.765894][T20217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3641'. [ 493.913896][T20224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3642'. [ 494.022905][ T52] Bluetooth: unknown link type 231 [ 494.022957][ T52] Bluetooth: hci5: connection err: -111 [ 494.023019][ T52] Bluetooth: unknown link type 231 [ 494.023034][ T52] Bluetooth: hci5: connection err: -111 [ 494.023095][ T52] Bluetooth: unknown link type 231 [ 494.023109][ T52] Bluetooth: hci5: connection err: -111 [ 494.023169][ T52] Bluetooth: unknown link type 231 [ 494.023183][ T52] Bluetooth: hci5: connection err: -111 [ 494.023242][ T52] Bluetooth: unknown link type 231 [ 494.023257][ T52] Bluetooth: hci5: connection err: -111 [ 494.023316][ T52] Bluetooth: unknown link type 231 [ 494.023329][ T52] Bluetooth: hci5: connection err: -111 [ 494.023390][ T52] Bluetooth: unknown link type 231 [ 494.023442][ T52] Bluetooth: hci5: connection err: -111 [ 494.023510][ T52] Bluetooth: unknown link type 231 [ 494.023526][ T52] Bluetooth: hci5: connection err: -111 [ 494.023587][ T52] Bluetooth: unknown link type 231 [ 494.023602][ T52] Bluetooth: hci5: connection err: -111 [ 494.023683][ T52] Bluetooth: unknown link type 231 [ 494.023698][ T52] Bluetooth: hci5: connection err: -111 [ 494.023763][ T52] Bluetooth: unknown link type 231 [ 494.023777][ T52] Bluetooth: hci5: connection err: -111 [ 494.023839][ T52] Bluetooth: unknown link type 231 [ 494.023854][ T52] Bluetooth: hci5: connection err: -111 [ 494.023921][ T52] Bluetooth: unknown link type 231 [ 494.023936][ T52] Bluetooth: hci5: connection err: -111 [ 494.023998][ T52] Bluetooth: unknown link type 231 [ 494.024013][ T52] Bluetooth: hci5: connection err: -111 [ 494.024075][ T52] Bluetooth: unknown link type 231 [ 494.024089][ T52] Bluetooth: hci5: connection err: -111 [ 494.024151][ T52] Bluetooth: unknown link type 231 [ 494.024168][ T52] Bluetooth: hci5: connection err: -111 [ 494.024231][ T52] Bluetooth: unknown link type 231 [ 494.024247][ T52] Bluetooth: hci5: connection err: -111 [ 494.024309][ T52] Bluetooth: unknown link type 231 [ 494.024325][ T52] Bluetooth: hci5: connection err: -111 [ 494.024388][ T52] Bluetooth: unknown link type 231 [ 494.024403][ T52] Bluetooth: hci5: connection err: -111 [ 494.024487][ T52] Bluetooth: unknown link type 231 [ 494.024537][ T52] Bluetooth: hci5: connection err: -111 [ 494.024603][ T52] Bluetooth: unknown link type 231 [ 494.024619][ T52] Bluetooth: hci5: connection err: -111 [ 494.024683][ T52] Bluetooth: unknown link type 231 [ 494.024700][ T52] Bluetooth: hci5: connection err: -111 [ 494.024764][ T52] Bluetooth: unknown link type 231 [ 494.024780][ T52] Bluetooth: hci5: connection err: -111 [ 494.024844][ T52] Bluetooth: unknown link type 231 [ 494.024860][ T52] Bluetooth: hci5: connection err: -111 [ 494.024928][ T52] Bluetooth: unknown link type 231 [ 494.024944][ T52] Bluetooth: hci5: connection err: -111 [ 494.025008][ T52] Bluetooth: unknown link type 231 [ 494.025025][ T52] Bluetooth: hci5: connection err: -111 [ 494.025097][ T52] Bluetooth: unknown link type 231 [ 494.025114][ T52] Bluetooth: hci5: connection err: -111 [ 494.025185][ T52] Bluetooth: unknown link type 231 [ 494.025200][ T52] Bluetooth: hci5: connection err: -111 [ 494.025264][ T52] Bluetooth: unknown link type 231 [ 494.025279][ T52] Bluetooth: hci5: connection err: -111 [ 494.025344][ T52] Bluetooth: unknown link type 231 [ 494.025360][ T52] Bluetooth: hci5: connection err: -111 [ 494.025425][ T52] Bluetooth: unknown link type 231 [ 494.025442][ T52] Bluetooth: hci5: connection err: -111 [ 494.025518][ T52] Bluetooth: unknown link type 231 [ 494.025533][ T52] Bluetooth: hci5: connection err: -111 [ 494.025599][ T52] Bluetooth: unknown link type 231 [ 494.025614][ T52] Bluetooth: hci5: connection err: -111 [ 494.692784][T13697] wlan0 speed is unknown, defaulting to 1000 [ 494.694122][T13697] syz0: Port: 1 Link ACTIVE [ 494.753283][T20243] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 494.753314][T20243] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 494.787926][T20232] syzkaller1: entered promiscuous mode [ 494.787953][T20232] syzkaller1: entered allmulticast mode [ 494.789293][T15870] wlan0 speed is unknown, defaulting to 1000 [ 494.789318][T15870] syz0: Port: 1 Link DOWN [ 495.125614][T20243] bond6 (unregistering): Released all slaves [ 495.197862][T20264] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3650'. [ 495.612743][T20278] netlink: 'syz.0.3655': attribute type 1 has an invalid length. [ 495.839195][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3660'. [ 495.902538][T20278] bond7: entered promiscuous mode [ 495.903017][T20278] 8021q: adding VLAN 0 to HW filter on device bond7 [ 496.016622][ T5992] IPVS: starting estimator thread 0... [ 496.035156][T20297] ipvlan2: entered allmulticast mode [ 496.035174][T20297] bond7: entered allmulticast mode [ 496.100365][T20309] IPVS: using max 26 ests per chain, 62400 per kthread [ 496.244396][T20302] bond7: (slave bridge4): making interface the new active one [ 496.244424][T20302] bridge4: entered promiscuous mode [ 496.244633][T20302] bridge4: entered allmulticast mode [ 496.297620][T20302] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 496.688574][T20331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3665'. [ 497.014631][T20343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3668'. [ 497.354356][T20355] netlink: zone id is out of range [ 497.354376][T20355] netlink: del zone limit has 4 unknown bytes [ 497.427489][T20357] netlink: 'syz.1.3672': attribute type 3 has an invalid length. [ 497.546981][T20357] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 497.626146][T20363] syzkaller1: entered promiscuous mode [ 497.626175][T20363] syzkaller1: entered allmulticast mode [ 497.719754][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3674'. [ 497.807543][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3674'. [ 497.846066][ T6737] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.846103][ T6737] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.846129][ T6737] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.916291][T20365] syzkaller1: entered promiscuous mode [ 497.916316][T20365] syzkaller1: entered allmulticast mode [ 497.931677][ T6735] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.953418][T20368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3676'. [ 498.119853][T20375] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3678'. [ 499.394338][T20430] gretap0: entered promiscuous mode [ 499.857626][T20443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3692'. [ 499.903566][T20443] xt_hashlimit: size too large, truncated to 1048576 [ 500.552437][T20474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3699'. [ 500.701796][ T1398] IPVS: stop unused estimator thread 0... [ 500.758564][T20463] syzkaller0: entered promiscuous mode [ 500.758592][T20463] syzkaller0: entered allmulticast mode [ 500.826993][T20484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3702'. [ 500.827030][T20484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3702'. [ 501.434661][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.979421][T20519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3707'. [ 501.997921][T20523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3707'. [ 502.857083][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3713'. [ 503.137182][T20568] macsec1: entered promiscuous mode [ 503.137207][T20568] bridge0: entered promiscuous mode [ 503.137397][T20568] macsec1: entered allmulticast mode [ 503.137413][T20568] bridge0: entered allmulticast mode [ 503.174461][T20568] bridge0: port 3(macsec1) entered blocking state [ 503.174581][T20568] bridge0: port 3(macsec1) entered disabled state [ 503.216749][T20569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3715'. [ 503.239773][T20568] bridge0: left allmulticast mode [ 503.299672][T20582] nbd: must specify an index to disconnect [ 503.413490][T20559] vlan2: entered promiscuous mode [ 503.413517][T20559] bridge0: entered promiscuous mode [ 503.418998][T20581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3718'. [ 503.565709][T13697] bridge0: left promiscuous mode [ 503.679548][T20569] netlink: 'syz.1.3715': attribute type 2 has an invalid length. [ 504.336167][T20614] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3720'. [ 505.027622][T20647] __nla_validate_parse: 1 callbacks suppressed [ 505.027661][T20647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3727'. [ 505.129771][T20652] ip_tables: iptables: counters copy to user failed while replacing table [ 505.322186][T20662] erspan0: entered promiscuous mode [ 505.339005][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3731'. [ 505.433406][T20667] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.584369][T20673] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3735'. [ 505.605516][T20673] netlink: 'syz.3.3735': attribute type 11 has an invalid length. [ 505.671026][T20677] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3736'. [ 505.877194][T20689] netlink: 'syz.1.3739': attribute type 1 has an invalid length. [ 505.877222][T20689] nbd: error processing sock list [ 505.923780][T20689] netlink: 'syz.1.3739': attribute type 10 has an invalid length. [ 505.924022][T20689] veth0_vlan: entered allmulticast mode [ 505.980768][T20689] team0: Device veth0_vlan failed to register rx_handler [ 506.507358][T20724] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3748'. [ 506.632823][T20724] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3748'. [ 506.868072][T20739] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20003 [ 507.138988][T20761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3755'. [ 507.355250][T20769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3756'. [ 507.355277][T20769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3756'. [ 507.385957][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3749'. [ 508.132074][T20805] netlink: 'syz.1.3764': attribute type 9 has an invalid length. [ 508.799382][T20833] siw: device registration error -23 [ 509.622781][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.622833][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.622871][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.622909][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.846017][T20880] openvswitch: netlink: Flow actions attr not present in new flow. [ 509.860759][T20881] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 509.878293][T20882] veth0_macvtap: left promiscuous mode [ 509.889629][T20882] macvtap0: entered allmulticast mode [ 510.171908][T20898] __nla_validate_parse: 16 callbacks suppressed [ 510.171933][T20898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3787'. [ 510.551724][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3793'. [ 510.553858][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3793'. [ 510.557412][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3793'. [ 510.558253][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3793'. [ 510.559920][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3793'. [ 510.569869][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3793'. [ 510.592830][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3793'. [ 510.603924][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3793'. [ 510.669268][T20918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3793'. [ 511.759933][T20974] gretap0: entered promiscuous mode [ 511.765115][T20974] bridge0: entered promiscuous mode [ 512.527263][T20999] netlink: 'syz.2.3817': attribute type 1 has an invalid length. [ 512.586687][T20999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 512.629232][T21006] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.364705][T21018] netlink: 'syz.1.3819': attribute type 1 has an invalid length. [ 513.647668][T21006] bridge_slave_1 (unregistering): left allmulticast mode [ 513.647768][T21006] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.760045][T21016] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 513.852077][ T5991] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 513.981195][ T59] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 514.232590][T21059] netlink: 'syz.1.3830': attribute type 13 has an invalid length. [ 514.232811][T21060] netlink: 'syz.1.3830': attribute type 13 has an invalid length. [ 516.322225][T21031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.724101][T21086] batman_adv: batadv0: Adding interface: veth0 [ 516.724124][T21086] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.724157][T21086] batman_adv: batadv0: Interface activated: veth0 [ 516.784967][T21086] __nla_validate_parse: 12 callbacks suppressed [ 516.784991][T21086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3835'. [ 516.785010][T21086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.785031][T21086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.851582][T21086] batman_adv: batadv0: Interface deactivated: veth0 [ 516.851609][T21086] batman_adv: batadv0: Removing interface: veth0 [ 516.978566][T21095] netlink: 'syz.2.3837': attribute type 4 has an invalid length. [ 517.085873][T21093] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3835'. [ 517.145590][T21104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.162705][T21096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3839'. [ 517.233668][T21112] netlink: 'syz.2.3837': attribute type 4 has an invalid length. [ 517.504021][T21088] wlan0 speed is unknown, defaulting to 1000 [ 517.679219][T21124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.838919][T21126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.839949][T21126] bridge0: port 3(bond2) entered blocking state [ 517.844946][T21126] bridge0: port 3(bond2) entered disabled state [ 517.845477][T21126] bond2: entered allmulticast mode [ 517.879746][T21126] bond2: entered promiscuous mode [ 517.905867][T21126] bridge0: port 3(bond2) entered blocking state [ 517.905998][T21126] bridge0: port 3(bond2) entered forwarding state [ 518.254329][T21151] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3847'. [ 518.277848][T21154] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3849'. [ 518.553196][T21156] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3850'. [ 518.557955][ T1408] bridge0: port 3(bond2) entered disabled state [ 518.934681][T21173] xt_REDIRECT: bad rangesize 26624. [ 518.956445][T21173] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 519.353039][ T1408] IPVS: starting estimator thread 0... [ 519.407558][T21193] x_tables: duplicate underflow at hook 2 [ 519.437209][T21193] x_tables: duplicate underflow at hook 2 [ 519.444778][T21197] openvswitch: netlink: Unknown key attributes 1 [ 519.455357][T21192] IPVS: using max 27 ests per chain, 64800 per kthread [ 519.683963][T21218] IPv6: NLM_F_CREATE should be specified when creating new route [ 519.875711][T21222] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 519.964783][T21222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3871'. [ 520.056352][T21231] netlink: Unknown NAT attribute (type=49, max=9) [ 520.056419][T21231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.308842][T21236] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000 [ 520.506430][T21236] netlink: Failed to add helper -22 [ 520.506488][T21236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.704375][T21254] netlink: 'syz.0.3879': attribute type 12 has an invalid length. [ 520.706556][T21259] netlink: 'syz.0.3879': attribute type 12 has an invalid length. [ 520.776357][T21267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3882'. [ 520.998990][T21274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3884'. [ 520.999027][T21274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3884'. [ 521.402060][T21295] netlink: Setting conntrack mark requires 'commit' flag. [ 521.402095][T21295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.734147][T21313] netlink: 'syz.1.3894': attribute type 1 has an invalid length. [ 521.832324][T21313] bond6: entered promiscuous mode [ 521.832773][T21313] 8021q: adding VLAN 0 to HW filter on device bond6 [ 521.977852][T21310] bond6: (slave bridge5): making interface the new active one [ 521.977881][T21310] bridge5: entered promiscuous mode [ 521.999360][T21310] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 522.075633][T21333] openvswitch: netlink: nsh attr 16382 is out of range max 3 [ 522.146888][T21317] syzkaller1: entered promiscuous mode [ 522.146913][T21317] syzkaller1: entered allmulticast mode [ 523.311275][T21382] __nla_validate_parse: 36 callbacks suppressed [ 523.315691][T21382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3913'. [ 523.339585][T21386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3913'. [ 523.362923][T21387] netlink: 'syz.0.3916': attribute type 1 has an invalid length. [ 523.502832][T21387] 8021q: adding VLAN 0 to HW filter on device bond8 [ 523.507459][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3918'. [ 523.530283][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3918'. [ 523.530575][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3918'. [ 523.530790][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3918'. [ 523.530991][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3918'. [ 523.531197][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3918'. [ 523.531892][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3918'. [ 523.532091][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3918'. [ 523.645711][T21407] bridge0: port 3(batadv1) entered blocking state [ 523.645909][T21407] bridge0: port 3(batadv1) entered disabled state [ 523.646056][T21407] batadv1: entered allmulticast mode [ 523.648222][T21407] batadv1: entered promiscuous mode [ 523.708674][T21387] bridge6: entered promiscuous mode [ 523.720415][T21387] bond8: (slave bridge6): making interface the new active one [ 523.722041][T21387] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 523.852761][T21388] bridge7: entered promiscuous mode [ 523.894223][T21388] bond8: (slave bridge7): Enslaving as a backup interface with an up link [ 524.133023][ T59] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 524.133077][ T59] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 524.289241][T21423] netlink: 'syz.0.3921': attribute type 2 has an invalid length. [ 524.342374][ T30] audit: type=1107 audit(1789970395.441:14): pid=21419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 524.402093][T21420] netlink: 'syz.1.3922': attribute type 10 has an invalid length. [ 524.455251][T21432] netlink: 'syz.2.3923': attribute type 4 has an invalid length. [ 524.508056][T21433] netlink: 'syz.2.3923': attribute type 4 has an invalid length. [ 524.524279][T21430] macvtap1: entered promiscuous mode [ 524.524304][T21430] vlan0: entered promiscuous mode [ 524.526763][T21430] macvtap1: entered allmulticast mode [ 524.526784][T21430] vlan0: entered allmulticast mode [ 524.526799][T21430] veth0_vlan: entered allmulticast mode [ 524.529535][T21420] veth1_macvtap: left promiscuous mode [ 524.582442][T21420] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 525.448119][T21494] xt_bpf: check failed: parse error [ 525.448611][T21494] xt_bpf: check failed: parse error [ 525.449076][T21494] xt_bpf: check failed: parse error [ 525.455601][T21494] xt_bpf: check failed: parse error [ 525.457177][T21494] xt_bpf: check failed: parse error [ 525.458737][T21494] xt_bpf: check failed: parse error [ 525.461236][T21494] xt_bpf: check failed: parse error [ 525.461971][T21494] xt_bpf: check failed: parse error [ 525.463516][T21494] xt_bpf: check failed: parse error [ 525.469180][T21494] xt_bpf: check failed: parse error [ 526.141412][T21529] batman_adv: batadv0: Adding interface: syzkaller0 [ 526.141434][T21529] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.141470][T21529] batman_adv: batadv0: Interface activated: syzkaller0 [ 526.596284][T21547] netlink: NAT attribute has 1 unknown bytes [ 526.596318][T21547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.775531][T21549] netlink: 'syz.2.3940': attribute type 1 has an invalid length. [ 527.024219][ T59] IPVS: starting estimator thread 0... [ 527.110733][T21556] IPVS: using max 27 ests per chain, 64800 per kthread [ 527.120778][T21529] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 527.232098][T21529] batman_adv: batadv0: Removing interface: syzkaller0 [ 527.332256][T21569] netlink: 'syz.0.3947': attribute type 39 has an invalid length. [ 527.532096][ T306] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.532257][ T306] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.611600][ T1398] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.611651][ T1398] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.029039][T21597] veth5: entered promiscuous mode [ 528.051926][T21600] netlink: NAT attribute has 8 unknown bytes [ 528.051961][T21600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.305865][T21613] ip_tables: iptables: counters copy to user failed while replacing table [ 528.308302][T21613] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 528.338342][T21613] __nla_validate_parse: 22 callbacks suppressed [ 528.338363][T21613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3961'. [ 528.361865][T21613] tipc: Started in network mode [ 528.361897][T21613] tipc: Node identity ac1414aa, cluster identity 4711 [ 528.362150][T21613] tipc: New replicast peer: 172.20.20.187 [ 528.362893][T21613] tipc: Enabled bearer , priority 10 [ 528.480104][T21620] netlink: 'syz.1.3962': attribute type 1 has an invalid length. [ 528.482196][T21620] netlink: 756 bytes leftover after parsing attributes in process `syz.1.3962'. [ 528.504557][T21620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3962'. [ 528.531739][T21620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3962'. [ 528.547178][T21620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3962'. [ 528.569963][T21620] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3962'. [ 528.615611][T21624] dvmrp8: left allmulticast mode [ 528.798658][T21620] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3962'. [ 528.975788][T21620] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3962'. [ 529.116384][T21562] Bluetooth: hci5: command 0x0406 tx timeout [ 529.131256][T21639] syzkaller0: entered promiscuous mode [ 529.131282][T21639] syzkaller0: entered allmulticast mode [ 529.170003][T21620] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3962'. [ 529.318845][T21641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3971'. [ 529.490241][T15869] tipc: Node number set to 2886997162 [ 529.882976][T21675] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 530.182417][T21687] bridge_slave_0: left allmulticast mode [ 530.182444][T21687] bridge_slave_0: left promiscuous mode [ 530.182681][T21687] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.268885][T21687] bridge0 (unregistering): left promiscuous mode [ 530.848750][T21706] syzkaller1: entered promiscuous mode [ 530.848773][T21706] syzkaller1: entered allmulticast mode [ 531.990695][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 532.056335][ T1398] nci: nci_rsp_packet: unknown rsp opcode 0x32 [ 532.649102][T21794] macsec0: entered allmulticast mode [ 532.811468][T21796] virt_wifi0: entered promiscuous mode [ 534.918165][T21759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.202267][T21804] __nla_validate_parse: 7 callbacks suppressed [ 535.202288][T21804] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4015'. [ 535.363971][T21817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4019'. [ 535.514024][T21824] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4019'. [ 535.536439][T21827] macvtap0: entered allmulticast mode [ 535.536467][T21827] veth0_macvtap: entered allmulticast mode [ 535.865770][ T30] audit: type=1804 audit(1789970406.961:15): pid=21834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4024" name="/newroot/193/cgroup.controllers" dev="tmpfs" ino=998 res=1 errno=0 [ 535.865826][ T30] audit: type=1800 audit(1789970406.961:16): pid=21834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4024" name="cgroup.controllers" dev="tmpfs" ino=998 res=0 errno=0 [ 535.933326][T21842] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 536.155850][T21855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4033'. [ 536.160059][T21855] netlink: 'syz.1.4033': attribute type 3 has an invalid length. [ 536.358891][T21855] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4033'. [ 536.502302][T21871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4035'. [ 536.561857][T21871] IPv6: sit1: Disabled Multicast RS [ 536.609477][T21871] netlink: 'syz.3.4035': attribute type 10 has an invalid length. [ 536.677181][T21871] team0: Port device dummy0 added [ 536.819199][T21879] netlink: 'syz.2.4034': attribute type 1 has an invalid length. [ 536.989288][T21893] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4040'. [ 537.183365][T21902] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4042'. [ 537.183450][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4042'. [ 537.999024][T21938] x_tables: duplicate underflow at hook 1 [ 538.167324][T21923] syzkaller0: entered promiscuous mode [ 538.167347][T21923] syzkaller0: entered allmulticast mode [ 538.480779][T21958] veth1_vlan: left promiscuous mode [ 538.609373][T21958] No such timeout policy "s" [ 538.609393][T21958] netlink: Failed to associated timeout policy 's' [ 538.785813][T21966] IPVS: set_ctl: invalid protocol: 4 100.1.1.0:20001 [ 538.973253][T21982] netlink: 'syz.3.4062': attribute type 3 has an invalid length. [ 539.168140][T21989] veth1_to_bond: entered allmulticast mode [ 539.178102][T21989] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 539.178130][T21989] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 539.271330][T21985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4063'. [ 539.306507][T21985] veth1_to_bond (unregistering): left allmulticast mode [ 539.335921][T21985] bond0: (slave bond_slave_1): Releasing backup interface [ 539.364707][T21998] ip_tables: iptables: counters copy to user failed while replacing table [ 539.366031][T21998] x_tables: duplicate underflow at hook 2 [ 539.395350][T21999] netlink: 'syz.3.4066': attribute type 11 has an invalid length. [ 539.426191][T21999] bond5: option all_slaves_active: invalid value (179) [ 539.427670][T21999] bond5 (unregistering): Released all slaves [ 539.456140][T22001] netlink: 'syz.3.4066': attribute type 11 has an invalid length. [ 539.508564][T22004] bond5: option all_slaves_active: invalid value (179) [ 539.526776][T22004] bond5 (unregistering): Released all slaves [ 540.359099][ T52] Bluetooth: hci3: link tx timeout [ 540.359872][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 540.373410][ T52] Bluetooth: hci3: link tx timeout [ 540.373430][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 540.448639][T22029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 540.633943][T22043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4077'. [ 540.633973][T22043] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4077'. [ 540.634022][T22043] netlink: 'syz.1.4077': attribute type 5 has an invalid length. [ 540.702411][T22047] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4078'. [ 540.771262][T22051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4079'. [ 540.850532][T22055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4079'. [ 540.919098][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4079'. [ 540.952761][T22055] bond5: Invalid ad_actor_system MAC address. [ 540.952785][T22055] bond5: option ad_actor_system: invalid value (1) [ 540.957539][T22055] bond5 (unregistering): Released all slaves [ 541.263028][T22066] ip_tables: iptables: counters copy to user failed while replacing table [ 541.275477][T22066] Bluetooth: hci0: unsupported parameter 5161 [ 541.275548][T22066] Bluetooth: hci0: unsupported parameter 8192 [ 541.275587][T22066] Bluetooth: hci0: unsupported parameter 5161 [ 541.275622][T22066] Bluetooth: hci0: unsupported parameter 8192 [ 541.343629][T22070] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 541.467841][T22064] team0: Device ipvlan0 failed to register rx_handler [ 541.573898][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4087'. [ 541.783340][T22091] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 541.909270][T22096] syzkaller0: entered promiscuous mode [ 541.909295][T22096] syzkaller0: entered allmulticast mode [ 541.943238][T22096] netlink: 'syz.1.4091': attribute type 3 has an invalid length. [ 541.943262][T22096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4091'. [ 542.093782][T22099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4093'. [ 542.397524][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 542.729523][T22126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4098'. [ 542.729560][T22126] netlink: 'syz.4.4098': attribute type 10 has an invalid length. [ 542.753848][T22122] netlink: get zone limit has 8 unknown bytes [ 542.777780][T22126] netlink: 'syz.4.4098': attribute type 10 has an invalid length. [ 542.802460][T22122] netlink: 'syz.3.4100': attribute type 16 has an invalid length. [ 542.802485][T22122] netlink: 'syz.3.4100': attribute type 1 has an invalid length. [ 543.315801][T22152] netlink: 'syz.4.4108': attribute type 6 has an invalid length. [ 543.315973][T22152] netlink: 'syz.4.4108': attribute type 6 has an invalid length. [ 543.316156][T22152] netlink: 'syz.4.4108': attribute type 6 has an invalid length. [ 543.316303][T22152] netlink: 'syz.4.4108': attribute type 6 has an invalid length. [ 543.316450][T22152] netlink: 'syz.4.4108': attribute type 6 has an invalid length. [ 543.479215][T22150] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 543.758591][T22159] bond4: (slave gretap2): making interface the new active one [ 543.827046][T22159] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 544.479388][T21562] Bluetooth: hci1: command 0x0406 tx timeout [ 544.479417][T22111] Bluetooth: hci0: command 0x0c1a tx timeout [ 544.872243][T22205] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 544.872600][T22205] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 544.872923][T22205] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 544.873234][T22205] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 544.873569][T22205] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 544.888838][T22205] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 544.896277][T22205] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 544.900966][T22205] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 544.909907][T22205] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 544.918085][T22205] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 545.505123][T22235] xt_ecn: cannot match TCP bits for non-tcp packets [ 545.642429][T22237] __nla_validate_parse: 13 callbacks suppressed [ 545.642453][T22237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4135'. [ 545.708463][T22246] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 545.708494][T22246] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 545.796488][T22251] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4139'. [ 546.293065][T22270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4144'. [ 546.720800][T22290] 8021q: adding VLAN 0 to HW filter on device bond6 [ 546.746007][T22291] bond6: entered promiscuous mode [ 546.746031][T22291] bond6: entered allmulticast mode [ 546.785795][T22299] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4152'. [ 546.853350][T22301] x_tables: duplicate underflow at hook 2 [ 547.024912][T22310] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 547.138839][T22316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4160'. [ 547.342292][T22331] validate_nla: 98 callbacks suppressed [ 547.342318][T22331] netlink: 'syz.4.4159': attribute type 1 has an invalid length. [ 547.346439][T22329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4161'. [ 547.568897][T22341] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4163'. [ 547.704490][T22352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4167'. [ 547.774864][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4165'. [ 547.774901][T22354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4165'. [ 547.880414][ T1393] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.895123][ T1393] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.898563][ T1393] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.900744][ T1398] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.988098][T22363] netlink: 'syz.4.4169': attribute type 9 has an invalid length. [ 548.084592][T22365] veth0: entered promiscuous mode [ 548.107974][T22364] veth0: left promiscuous mode [ 548.474958][ T59] tipc: Subscription rejected, illegal request [ 548.662309][T22398] vcan0: tx address claim with broadcast sa [ 548.662421][T22398] vcan0: tx address claim with broadcast sa [ 548.662518][T22398] vcan0: tx address claim with broadcast sa [ 548.662613][T22398] vcan0: tx address claim with broadcast sa [ 548.662723][T22398] vcan0: tx address claim with broadcast sa [ 548.662818][T22398] vcan0: tx address claim with broadcast sa [ 548.662913][T22398] vcan0: tx address claim with broadcast sa [ 548.663009][T22398] vcan0: tx address claim with broadcast sa [ 548.663108][T22398] vcan0: tx address claim with broadcast sa [ 548.663228][T22398] vcan0: tx address claim with broadcast sa [ 548.663497][T22398] vcan0: tx address claim with broadcast sa [ 548.663595][T22398] vcan0: tx address claim with broadcast sa [ 548.663692][T22398] vcan0: tx address claim with broadcast sa [ 548.663805][T22398] vcan0: tx address claim with broadcast sa [ 548.663904][T22398] vcan0: tx address claim with broadcast sa [ 548.664001][T22398] vcan0: tx address claim with broadcast sa [ 548.664133][T22398] vcan0: tx address claim with broadcast sa [ 548.664230][T22398] vcan0: tx address claim with broadcast sa [ 548.664473][T22398] vcan0: tx address claim with broadcast sa [ 548.664573][T22398] vcan0: tx address claim with broadcast sa [ 548.664675][T22398] vcan0: tx address claim with broadcast sa [ 548.664780][T22398] vcan0: tx address claim with broadcast sa [ 548.665451][T22398] vcan0: tx address claim with broadcast sa [ 548.665625][T22398] vcan0: tx address claim with broadcast sa [ 548.665731][T22398] vcan0: tx address claim with broadcast sa [ 548.665827][T22398] vcan0: tx address claim with broadcast sa [ 548.665922][T22398] vcan0: tx address claim with broadcast sa [ 548.666017][T22398] vcan0: tx address claim with broadcast sa [ 548.666137][T22398] vcan0: tx address claim with broadcast sa [ 548.666232][T22398] vcan0: tx address claim with broadcast sa [ 548.666327][T22398] vcan0: tx address claim with broadcast sa [ 548.666422][T22398] vcan0: tx address claim with broadcast sa [ 548.667790][T22398] vcan0: tx address claim with broadcast sa [ 548.667898][T22398] vcan0: tx address claim with broadcast sa [ 548.667996][T22398] vcan0: tx address claim with broadcast sa [ 548.668094][T22398] vcan0: tx address claim with broadcast sa [ 548.668217][T22398] vcan0: tx address claim with broadcast sa [ 548.668316][T22398] vcan0: tx address claim with broadcast sa [ 548.668414][T22398] vcan0: tx address claim with broadcast sa [ 548.668511][T22398] vcan0: tx address claim with broadcast sa [ 548.668611][T22398] vcan0: tx address claim with broadcast sa [ 548.668716][T22398] vcan0: tx address claim with broadcast sa [ 548.939532][T22398] netlink: 'syz.1.4178': attribute type 1 has an invalid length. [ 549.115984][T22398] block nbd296: server does not support multiple connections per device. [ 549.116313][T22398] block nbd296: shutting down sockets [ 549.605933][ T5732] hid-generic 0005:046D:0002.0003: unknown main item tag 0x0 [ 549.623799][T22435] netlink: 'syz.0.4187': attribute type 2 has an invalid length. [ 549.670057][ T5732] hid-generic 0005:046D:0002.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 549.721641][T22435] : entered promiscuous mode [ 550.151147][T22461] wireguard: wg2: Could not create IPv4 socket [ 550.328594][T22467] bridge_slave_0: invalid flags given to default FDB implementation [ 550.484713][T22471] net_ratelimit: 57 callbacks suppressed [ 550.484734][T22471] ip_tables: iptables: counters copy to user failed while replacing table [ 550.493977][T22474] ieee802154 phy1 wpan1: encryption failed: -22 [ 550.857702][T22489] __nla_validate_parse: 7 callbacks suppressed [ 550.857724][T22489] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4204'. [ 550.998322][ C1] Unknown status report in ack skb [ 551.028602][T22499] macvlan0: entered promiscuous mode [ 551.835740][T22527] Bluetooth: hci0: unsupported parameter 5135 [ 551.835765][T22527] Bluetooth: hci0: unsupported parameter 8192 [ 551.835780][T22527] Bluetooth: hci0: unsupported parameter 5135 [ 551.835794][T22527] Bluetooth: hci0: unsupported parameter 8192 [ 551.879589][T22529] IPVS: Unknown mcast interface: lo [ 552.285547][T22538] netlink: 'syz.4.4217': attribute type 1 has an invalid length. [ 552.402992][T22538] bond6: entered promiscuous mode [ 552.403527][T22538] 8021q: adding VLAN 0 to HW filter on device bond6 [ 552.458000][T22542] bond6: (slave bridge5): making interface the new active one [ 552.458027][T22542] bridge5: entered promiscuous mode [ 552.459986][T22542] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 552.994087][T22581] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4225'. [ 553.397357][T22592] Unsupported ieee802154 address type: 0 [ 553.407363][T22592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4229'. [ 553.409361][T22592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4229'. [ 555.327807][T22554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.642226][T22612] netlink: 'syz.2.4233': attribute type 1 has an invalid length. [ 555.675629][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4236'. [ 555.869193][T22612] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.926334][T22617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4234'. [ 556.258638][T22654] IPVS: length: 162 != 8 [ 557.275610][T22664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 557.473719][T22711] ip_tables: iptables: counters copy to user failed while replacing table [ 557.607259][T22722] openvswitch: netlink: Duplicate or invalid key (type 0). [ 557.646340][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4262'. [ 557.646375][T22718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4262'. [ 557.647099][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4262'. [ 557.647151][T22718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4262'. [ 557.709398][T22716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4261'. [ 557.793309][T22726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4264'. [ 557.793648][T22726] veth0_vlan: entered allmulticast mode [ 557.839028][T22726] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 558.018323][T22734] Unsupported ieee802154 address type: 0 [ 558.139997][T22741] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 558.583511][T22758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4273'. [ 558.709125][T22763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4273'. [ 558.725408][T22763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4273'. [ 559.678337][T22806] syzkaller0: entered promiscuous mode [ 559.678389][T22806] syzkaller0: entered allmulticast mode [ 559.708637][T22807] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 559.752112][T22807] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 559.761246][T22801] tipc: Started in network mode [ 559.761335][T22801] tipc: Node identity 265b22475d01, cluster identity 4711 [ 559.789310][T22801] tipc: Enabled bearer , priority 0 [ 559.812341][T22800] tipc: Resetting bearer [ 559.831214][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 559.935768][T22816] netlink: 'syz.2.4283': attribute type 83 has an invalid length. [ 559.969953][T22800] tipc: Disabling bearer [ 560.727218][T22839] netlink: 'syz.2.4292': attribute type 75 has an invalid length. [ 561.002513][T22860] __nla_validate_parse: 2 callbacks suppressed [ 561.002534][T22860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4297'. [ 561.002563][T22860] netlink: 'syz.3.4297': attribute type 7 has an invalid length. [ 561.002577][T22860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4297'. [ 561.230534][T22869] netlink: 'syz.4.4299': attribute type 2 has an invalid length. [ 561.230558][T22869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4299'. [ 561.743051][T22886] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4306'. [ 561.765986][T22891] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4306'. [ 561.904763][T22894] x_tables: duplicate underflow at hook 2 [ 561.914953][T22893] x_tables: duplicate underflow at hook 3 [ 561.917784][T22894] IPv6: NLM_F_CREATE should be specified when creating new route [ 561.918054][T22894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4307'. [ 562.153817][T22910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4311'. [ 562.481946][T22918] syzkaller0: entered promiscuous mode [ 562.481972][T22918] syzkaller0: entered allmulticast mode [ 562.517324][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4312'. [ 562.542603][T22915] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.618769][T22915] bridge_slave_1 (unregistering): left allmulticast mode [ 562.618798][T22915] bridge_slave_1 (unregistering): left promiscuous mode [ 562.618873][T22915] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.623515][T22923] openvswitch: netlink: Key type 166 is out of range max 32 [ 562.791444][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4312'. [ 562.791713][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4312'. [ 562.883869][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.009638][ T5992] bridge_slave_1: left allmulticast mode [ 563.009667][ T5992] bridge_slave_1: left promiscuous mode [ 563.013479][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.092231][ T5992] bridge_slave_0: left allmulticast mode [ 563.092260][ T5992] bridge_slave_0: left promiscuous mode [ 563.094247][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.100372][T22946] IPv4: Oversized IP packet from 127.202.26.0 [ 563.359461][ T5992] pim6reg: left allmulticast mode [ 563.359948][ T5992] pimreg: left allmulticast mode [ 563.649935][ T5992] erspan0 (unregistering): left promiscuous mode [ 563.679841][ T5992] 0XD (unregistering): left promiscuous mode [ 563.737712][ T5992] bond10 (unregistering): (slave gretap1): Releasing active interface [ 563.837170][ T5992] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 563.858430][ T5992] bond4 (unregistering): (slave bridge6): Releasing active interface [ 563.877417][ T5992] bond5 (unregistering): (slave bridge7): Releasing backup interface [ 563.877449][ T5992] bridge7 (unregistering): left promiscuous mode [ 563.939643][ T5992] bond11 (unregistering): (slave bridge11): Releasing backup interface [ 563.939675][ T5992] bridge11 (unregistering): left promiscuous mode [ 563.993546][ T5992] bond13 (unregistering): (slave bridge13): Releasing backup interface [ 564.015992][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.016332][ T5992] bond_slave_0: left promiscuous mode [ 564.019412][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.019783][ T5992] bond_slave_1: left promiscuous mode [ 564.056611][ T5992] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 564.057026][ T5992] batadv0: left promiscuous mode [ 564.058549][ T5992] bond0 (unregistering): Released all slaves [ 564.086014][ T5992] bond1 (unregistering): Released all slaves [ 564.104039][ T5992] bond2 (unregistering): Released all slaves [ 564.121564][ T5992] bond3 (unregistering): Released all slaves [ 564.154897][ T5992] bond4 (unregistering): Released all slaves [ 564.174341][ T5992] bond5 (unregistering): Released all slaves [ 564.193069][ T5992] bond6 (unregistering): Released all slaves [ 564.217156][ T5992] bond7 (unregistering): Released all slaves [ 564.238339][ T5992] bond8 (unregistering): Released all slaves [ 564.259442][ T5992] bond9 (unregistering): Released all slaves [ 564.276324][ T5992] bond10 (unregistering): Released all slaves [ 564.308642][ T5992] bond11 (unregistering): Released all slaves [ 564.326652][ T5992] bond12 (unregistering): Released all slaves [ 564.341940][ T5992] bond13 (unregistering): Released all slaves [ 564.359123][ T5992] bond14 (unregistering): Released all slaves [ 564.381663][ T5992] bond15 (unregistering): Released all slaves [ 564.399823][T22951] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 564.556543][ T5992] : left promiscuous mode [ 564.691580][T22975] netlink: 'syz.3.4329': attribute type 4 has an invalid length. [ 564.782977][ T5992] tipc: Left network mode [ 564.891152][T22986] veth0: entered promiscuous mode [ 565.107908][T22984] bond8: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 565.109945][T22984] bond8 (unregistering): Released all slaves [ 565.162767][T22985] veth0: left promiscuous mode [ 565.777104][T23018] xt_hashlimit: size too large, truncated to 1048576 [ 566.174792][T23038] x_tables: unsorted underflow at hook 3 [ 566.175190][ T5992] hsr_slave_1: left promiscuous mode [ 566.176200][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.176274][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.194791][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.194818][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.274208][ T5992] veth1_macvtap: left promiscuous mode [ 566.274249][ T5992] veth0_macvtap: left allmulticast mode [ 566.274268][ T5992] veth0_macvtap: left promiscuous mode [ 566.274372][ T5992] veth1_vlan: left promiscuous mode [ 566.274400][ T5992] veth0_vlan: left promiscuous mode [ 567.009517][T23066] nbd2: detected capacity change from 0 to 63 [ 567.360732][ T5619] block nbd2: Receive control failed (result -104) [ 567.705034][T23085] block nbd1: NBD_DISCONNECT [ 567.705072][T23085] block nbd1: Send disconnect failed -32 [ 567.705092][T23085] block nbd1: shutting down sockets [ 567.863974][T23085] __nla_validate_parse: 36 callbacks suppressed [ 567.863997][T23085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4351'. [ 567.864019][T23085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4351'. [ 567.922830][ T5992] IPVS: stop unused estimator thread 0... [ 568.179554][T23111] netlink: 'syz.3.4354': attribute type 1 has an invalid length. [ 568.237695][T23116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4354'. [ 568.305711][T23120] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4354'. [ 568.389687][T23120] bond5: entered allmulticast mode [ 568.407878][T23122] netlink: 'syz.2.4356': attribute type 1 has an invalid length. [ 568.411971][T23122] block nbd296: server does not support multiple connections per device. [ 568.429186][T23122] block nbd296: shutting down sockets [ 568.758519][T23140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4360'. [ 568.758543][T23140] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4360'. [ 568.824966][T23141] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4360'. [ 568.828895][T23140] veth7: entered promiscuous mode [ 568.855270][T23140] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4360'. [ 568.975442][T23152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4362'. [ 568.975482][T23152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4362'. [ 569.035663][T23155] netlink: 'syz.4.4363': attribute type 1 has an invalid length. [ 569.036051][T23156] netlink: 'syz.4.4363': attribute type 1 has an invalid length. [ 569.126917][T23155] 8021q: adding VLAN 0 to HW filter on device bond7 [ 569.431298][T23175] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 569.432626][T23175] ip_tables: iptables: counters copy to user failed while replacing table [ 569.465823][T23176] netlink: 'syz.4.4367': attribute type 10 has an invalid length. [ 569.482437][T23176] team0: Device veth0_vlan failed to register rx_handler [ 570.191712][T23188] netlink: NAT attribute has 1 unknown bytes [ 570.191740][T23188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.694395][T23133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.803048][T23257] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 575.264394][T23221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 575.595663][T23277] team0: Device ipvlan0 failed to register rx_handler [ 575.638505][T23278] __nla_validate_parse: 7 callbacks suppressed [ 575.638536][T23278] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4391'. [ 575.729889][T23284] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 575.781418][T23278] tipc: Enabling of bearer rejected, failed to enable media [ 575.785409][T23278] lo: entered allmulticast mode [ 575.785539][T23278] veth1_to_bond: entered promiscuous mode [ 575.789587][T23274] veth1_to_bond: left promiscuous mode [ 575.789822][T23274] lo: left allmulticast mode [ 575.850909][T23286] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4397'. [ 576.262788][T23309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4404'. [ 576.262814][T23309] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4404'. [ 576.262863][T23309] netlink: 'syz.3.4404': attribute type 5 has an invalid length. [ 576.264152][T23309] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.264914][T23309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4404'. [ 576.265314][T23309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4404'. [ 576.265644][T23309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4404'. [ 576.266471][T23309] netlink: 'syz.3.4404': attribute type 1 has an invalid length. [ 576.381310][T23309] 8021q: adding VLAN 0 to HW filter on device bond6 [ 576.400579][T23316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4406'. [ 576.547874][T23323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4407'. [ 576.804119][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4410'. [ 576.840706][T23317] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.840749][T23317] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.096396][T23317] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.096438][T23317] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.264375][T23317] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.264419][T23317] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.314149][T23350] syzkaller0: entered promiscuous mode [ 577.314173][T23350] syzkaller0: entered allmulticast mode [ 577.472897][T23317] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.472942][T23317] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.134632][T23380] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 578.212838][ T5985] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.212885][ T5985] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.212939][ T5985] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.212967][ T5985] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.213003][ T5985] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.213031][ T5985] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.216345][T23385] netlink: 'syz.1.4424': attribute type 21 has an invalid length. [ 578.219253][T23386] netlink: 'syz.1.4424': attribute type 21 has an invalid length. [ 578.370787][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.370825][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.457147][T22649] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 578.477273][T22649] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 578.477559][T22649] bridge0: port 3(wlan0) entered disabled state [ 578.524617][T22649] bridge_slave_1: left allmulticast mode [ 578.524645][T22649] bridge_slave_1: left promiscuous mode [ 578.526294][T22649] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.756088][T22649] pim6reg527: left allmulticast mode [ 579.367206][T22649] bond12 (unregistering): (slave gretap2): Releasing active interface [ 579.457848][T22649] bond10 (unregistering): (slave geneve3): Releasing active interface [ 579.483744][T22649] bond2 (unregistering): (slave geneve2): Releasing active interface [ 579.592850][T22649] bond4 (unregistering): (slave bridge1): Releasing active interface [ 579.653703][T22649] bond1 (unregistering): Released all slaves [ 579.702059][T22649] bond2 (unregistering): Released all slaves [ 579.751289][T22649] bond3 (unregistering): Released all slaves [ 579.799511][T22649] bond4 (unregistering): Released all slaves [ 579.853820][T22649] bond5 (unregistering): Released all slaves [ 579.880058][T22649] bond6 (unregistering): Released all slaves [ 579.898650][T22649] bond7 (unregistering): Released all slaves [ 579.926776][T22649] bond8 (unregistering): Released all slaves [ 579.946232][T22649] bond9 (unregistering): Released all slaves [ 579.979918][T22649] bond10 (unregistering): Released all slaves [ 580.002502][T22649] bond11 (unregistering): Released all slaves [ 580.039803][T22649] bond12 (unregistering): Released all slaves [ 580.067521][T22649] bond0 (unregistering): Released all slaves [ 580.088607][T22649] bond13 (unregistering): Released all slaves [ 580.115723][T22649] bond14 (unregistering): Released all slaves [ 580.325999][T23424] syzkaller0: entered promiscuous mode [ 580.326026][T23424] syzkaller0: entered allmulticast mode [ 580.330458][T22642] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 580.336135][T22642] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 580.366160][T15865] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 580.385584][T23422] tipc: Enabled bearer , priority 0 [ 580.440925][T15865] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 580.484740][T22649] ovs-s: left promiscuous mode [ 580.571571][T23438] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 580.611033][T22649] tipc: Disabling bearer [ 580.618154][T22649] tipc: Left network mode [ 580.712299][T23421] tipc: Resetting bearer [ 580.815696][T23421] tipc: Disabling bearer [ 581.112976][T15866] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 581.335575][T23458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.394614][T22649] hsr_slave_0: left promiscuous mode [ 582.395763][T22649] hsr_slave_1: left promiscuous mode [ 582.396707][T22649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.396733][T22649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.518846][T22649] veth1_macvtap: left promiscuous mode [ 582.518928][T22649] veth1_vlan: left promiscuous mode [ 583.365818][T22649] team0 (unregistering): Port device team_slave_1 removed [ 583.408820][T22649] team0 (unregistering): Port device team_slave_0 removed [ 584.002547][T22649] team0 (unregistering): Port device dummy0 removed [ 584.310549][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 584.667887][T23550] netlink: 'syz.1.4450': attribute type 2 has an invalid length. [ 584.667911][T23550] __nla_validate_parse: 9 callbacks suppressed [ 584.667924][T23550] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4450'. [ 584.728880][T23550] : entered promiscuous mode [ 584.826071][T23561] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4451'. [ 584.973758][T22649] IPVS: stop unused estimator thread 0... [ 585.174909][T23572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4454'. [ 585.257246][T23577] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 585.456209][T23584] xt_socket: unknown flags 0xc [ 585.730320][T23593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4459'. [ 585.753652][T23592] ip_tables: iptables: counters copy to user failed while replacing table [ 585.863116][T23592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4459'. [ 586.658626][T23625] syzkaller0: entered promiscuous mode [ 586.658652][T23625] syzkaller0: entered allmulticast mode [ 586.676626][T23634] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4466'. [ 586.834671][T23636] wireguard1: entered promiscuous mode [ 586.890900][T23638] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4466'. [ 586.943447][T23642] wireguard1: entered promiscuous mode [ 587.090703][T23647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4467'. [ 587.370457][T23651] netlink: 'syz.1.4468': attribute type 5 has an invalid length. [ 587.556191][T23460] Set syz1 is full, maxelem 65536 reached [ 587.598431][T23661] 7Ж: renamed from bond_slave_0 (while UP) [ 588.048187][T23688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4477'. [ 588.109462][T23690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4478'. [ 589.337793][T23613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.697298][T23714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 589.795099][T23721] xt_CT: You must specify a L4 protocol and not use inversions on it [ 589.816877][T23724] __nla_validate_parse: 2 callbacks suppressed [ 589.816899][T23724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4486'. [ 589.838656][T23724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4486'. [ 590.158977][T23736] tunl0: entered promiscuous mode [ 590.179156][T23736] netlink: 'syz.3.4489': attribute type 4 has an invalid length. [ 590.179180][T23736] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4489'. [ 590.235392][T23739] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4490'. [ 590.697960][T23760] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 590.938997][T23779] ip_tables: iptables: counters copy to user failed while replacing table [ 591.080583][T23789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4503'. [ 591.313922][T23805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4507'. [ 591.313960][T23805] netlink: 'syz.0.4507': attribute type 10 has an invalid length. [ 591.313977][T23805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4507'. [ 591.333015][T23805] geneve4: entered promiscuous mode [ 591.333082][T23805] geneve4: entered allmulticast mode [ 591.365581][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.365751][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.386107][T15865] wlan0 speed is unknown, defaulting to 1000 [ 591.387657][T15865] syz0: Port: 1 Link ACTIVE [ 591.467124][T23808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.474144][T23808] netlink: 'syz.1.4506': attribute type 15 has an invalid length. [ 592.004633][T23833] netlink: 'syz.4.4511': attribute type 1 has an invalid length. [ 592.192172][T23833] 8021q: adding VLAN 0 to HW filter on device bond8 [ 592.213995][T23834] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 592.310443][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 592.423924][T23855] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 593.173544][T23895] syzkaller0: entered promiscuous mode [ 593.173570][T23895] syzkaller0: entered allmulticast mode [ 593.256576][T23895] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4522'. [ 593.360870][T23903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4524'. [ 593.365606][T23904] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4523'. [ 593.411277][T23895] tipc: Enabled bearer , priority 0 [ 593.449801][T23891] tipc: Resetting bearer [ 593.566468][T23891] tipc: Disabling bearer [ 593.619390][T23910] sctp: [Deprecated]: syz.2.4527 (pid 23910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.619390][T23910] Use struct sctp_sack_info instead [ 593.648395][T23910] netlink: 'syz.2.4527': attribute type 4 has an invalid length. [ 594.044059][T23933] netlink: 'syz.0.4530': attribute type 39 has an invalid length. [ 594.638569][T23953] openvswitch: netlink: Message has 8 unknown bytes. [ 594.665368][T23954] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 595.118031][T23979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.437735][T23989] __nla_validate_parse: 12 callbacks suppressed [ 595.437759][T23989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4547'. [ 595.576647][T23995] netlink: 'syz.4.4548': attribute type 12 has an invalid length. [ 595.809248][T24006] ip_tables: iptables: counters copy to user failed while replacing table [ 595.874679][T24011] dvmrp0: left allmulticast mode [ 596.049122][T24027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4558'. [ 596.069851][T24027] ip_tables: iptables: counters copy to user failed while replacing table [ 596.097490][T24027] netlink: 'syz.3.4558': attribute type 5 has an invalid length. [ 596.097515][T24027] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4558'. [ 596.579538][T24046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4562'. [ 597.219435][T24076] sctp: [Deprecated]: syz.4.4569 (pid 24076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.219435][T24076] Use struct sctp_sack_info instead [ 599.326368][T24038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 599.721959][T24091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4575'. [ 599.721995][T24091] openvswitch: netlink: Flow actions attr not present in new flow. [ 599.729427][T24091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4575'. [ 599.784425][T24093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4575'. [ 599.994715][T24105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4575'. [ 600.217914][T24091] ip6tnl2: entered promiscuous mode [ 600.217941][T24091] ip6tnl2: entered allmulticast mode [ 600.348281][T24109] tipc: Started in network mode [ 600.348315][T24109] tipc: Node identity ac14140f, cluster identity 4711 [ 600.348651][T24109] tipc: New replicast peer: 255.255.255.255 [ 600.349735][T24109] tipc: Enabled bearer , priority 10 [ 600.378588][T24113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4579'. [ 600.601333][T24121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4581'. [ 600.603626][T24123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4582'. [ 600.655264][T24122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4583'. [ 600.656226][T24122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4583'. [ 600.906131][T24135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'. [ 600.920784][T24121] vlan3: entered allmulticast mode [ 600.920812][T24121] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 600.977869][T24135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'. [ 601.076808][T24126] ip6t_srh: unknown srh match flags 4000 [ 601.248614][T24148] netlink: 'syz.1.4591': attribute type 1 has an invalid length. [ 601.248640][T24148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4591'. [ 601.471303][T15865] tipc: Node number set to 2886997007 [ 601.476522][T24133] infiniband syz1: set active [ 601.476544][T24133] infiniband syz1: added team0 [ 601.545809][T24133] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 601.545852][T24133] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 601.547615][T24133] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 601.723522][T24171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 601.723541][T24171] IPv6: NLM_F_CREATE should be set when creating new route [ 601.723588][T24171] IPv6: NLM_F_CREATE should be set when creating new route [ 601.726863][T24133] RDS/IB: syz1: added [ 601.726918][T24133] smc: adding ib device syz1 with port count 1 [ 601.726996][T24133] smc: ib device syz1 port 1 has no pnetid [ 602.120492][T24153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4590'. [ 602.701494][T24198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4600'. [ 602.799636][T24201] syzkaller1: entered promiscuous mode [ 602.799662][T24201] syzkaller1: entered allmulticast mode [ 602.829995][T24201] netlink: 'syz.3.4602': attribute type 3 has an invalid length. [ 603.200564][T24205] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4603'. [ 603.606606][T24223] netlink: 'syz.0.4605': attribute type 2 has an invalid length. [ 603.667748][T24225] netlink: 'syz.2.4607': attribute type 4 has an invalid length. [ 604.149858][T24236] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 604.253249][T24239] IPVS: length: 8 != 1152 [ 605.611722][T24284] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 605.611759][T24284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.765499][T24286] __nla_validate_parse: 6 callbacks suppressed [ 605.765521][T24286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4624'. [ 605.780065][T24285] bond7 (unregistering): Released all slaves [ 605.826803][T24295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4628'. [ 605.827046][T24295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4628'. [ 606.017416][T24183] infiniband syz2: set active [ 606.017441][T24183] infiniband syz2: added team0 [ 606.036925][T24183] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 606.051918][T24183] infiniband syz2: Couldn't open port 1 [ 606.052279][T24183] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 606.052315][T24183] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 606.052360][T24183] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 606.213309][T24302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4629'. [ 606.234512][T24183] RDS/IB: syz2: added [ 606.234705][T24183] smc: adding ib device syz2 with port count 1 [ 606.234735][T24183] smc: ib device syz2 port 1 has no pnetid [ 606.530553][T24305] vlan0: entered promiscuous mode [ 606.679970][T24307] IPVS: set_ctl: invalid protocol: 53585 255.200.121.44:55296 [ 607.514614][T24347] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.4645'. [ 607.605832][T24349] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4645'. [ 608.416773][T24356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4647'. [ 608.416799][T24356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4647'. [ 608.468285][T24363] netlink: 'syz.4.4647': attribute type 83 has an invalid length. [ 608.508092][T24353] 8021q: adding VLAN 0 to HW filter on device bond9 [ 608.562309][T24365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4651'. [ 608.594303][T24365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4651'. [ 608.764669][T24371] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 608.796657][T24372] nbd: couldn't find device at index 15663104 [ 608.937297][T24371] tipc: Enabled bearer , priority 10 [ 608.951271][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 608.972945][T24371] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 609.211660][T24391] gretap3: entered promiscuous mode [ 609.295663][T24396] IPVS: set_ctl: invalid protocol: 137 172.30.1.4:20002 [ 609.319898][T24396] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20004 [ 609.737213][T24412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.909476][T24414] netlink: 'syz.4.4665': attribute type 1 has an invalid length. [ 610.049913][T24414] 8021q: adding VLAN 0 to HW filter on device bond10 [ 610.068838][T15867] tipc: Node number set to 2069504583 [ 610.410940][T24446] x_tables: duplicate underflow at hook 2 [ 610.631566][T24440] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.631605][T24440] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.845499][T24459] bond8: entered promiscuous mode [ 610.845527][T24459] bond8: entered allmulticast mode [ 610.887057][T24474] : renamed from bond0 (while UP) [ 610.941510][T24440] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.941541][T24440] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.984756][T24477] batman_adv: batadv0: Adding interface: veth0 [ 610.984771][T24477] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.984794][T24477] batman_adv: batadv0: Interface activated: veth0 [ 610.988710][T24477] __nla_validate_parse: 9 callbacks suppressed [ 610.988733][T24477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4681'. [ 610.988754][T24477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.988773][T24477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.989646][T24477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.989675][T24477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.996078][T24477] batman_adv: batadv0: Interface deactivated: veth0 [ 610.996138][T24477] batman_adv: batadv0: Removing interface: veth0 [ 611.065168][T24478] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4681'. [ 611.142613][T24440] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.142652][T24440] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.344797][T24440] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.344837][T24440] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.481142][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.481178][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.509119][ T37] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.509154][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.519763][T22645] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.519859][T22645] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.591053][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.591091][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.727499][T24492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4687'. [ 613.403050][T24447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.709378][T24504] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4691'. [ 613.822520][T24518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4695'. [ 613.822549][T24518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4695'. [ 613.933604][T24521] netlink: 'syz.1.4694': attribute type 1 has an invalid length. [ 614.060669][T24521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.102545][T24522] bond0: (slave syz_tun): Enslaving as a backup interface with an up link [ 614.143610][T24538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4696'. [ 614.143644][T24538] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 614.144528][T24537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4696'. [ 614.144551][T24537] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 614.426135][T24549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4698'. [ 614.510956][T24513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4693'. [ 614.751231][T24556] bond9: entered promiscuous mode [ 614.751683][T24556] 8021q: adding VLAN 0 to HW filter on device bond9 [ 614.898763][T24556] 8021q: adding VLAN 0 to HW filter on device bond9 [ 614.908723][T24556] bond9: (slave sit3): The slave device specified does not support setting the MAC address [ 614.929743][T24556] bond9: (slave sit3): Error -95 calling set_mac_address [ 615.174816][T24574] netlink: 'syz.2.4705': attribute type 7 has an invalid length. [ 615.174839][T24574] netlink: 'syz.2.4705': attribute type 8 has an invalid length. [ 615.241304][T24578] netlink: 'syz.2.4705': attribute type 7 has an invalid length. [ 615.241328][T24578] netlink: 'syz.2.4705': attribute type 8 has an invalid length. [ 616.015211][T24618] __nla_validate_parse: 9 callbacks suppressed [ 616.015233][T24618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4718'. [ 616.291401][T24632] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4723'. [ 616.638959][T24647] siw: device registration error -23 [ 616.715384][T24648] netlink: 'syz.4.4726': attribute type 2 has an invalid length. [ 616.715412][T24648] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4726'. [ 617.152641][T24665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.739383][T24694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4735'. [ 617.946977][T24711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 617.946998][T24711] IPv6: NLM_F_CREATE should be set when creating new route [ 618.213721][T24719] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4739'. [ 618.302264][T24722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4740'. [ 618.499769][T24728] IPVS: lc: TCP 127.0.0.1:5376 - no destination available [ 618.536823][T24734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4744'. [ 618.554414][T24738] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 618.555538][T24729] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 618.559973][T24734] macvtap0: entered allmulticast mode [ 618.559995][T24734] veth0_macvtap: entered allmulticast mode [ 618.938074][T24759] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4749'. [ 619.355651][T24776] netlink: 'syz.3.4755': attribute type 2 has an invalid length. [ 619.499918][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4756'. [ 619.848867][T24786] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 619.848898][T24786] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 619.997805][T24804] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.191471][T24813] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4762'. [ 620.568969][T24837] netlink: 'syz.3.4770': attribute type 8 has an invalid length. [ 620.914368][ T6737] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.915520][T22649] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.915651][T22649] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.915690][T22649] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.063369][T24859] sctp: [Deprecated]: syz.4.4774 (pid 24859) Use of int in maxseg socket option. [ 621.063369][T24859] Use struct sctp_assoc_value instead [ 621.526717][T24868] __nla_validate_parse: 19 callbacks suppressed [ 621.526741][T24868] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4775'. [ 621.527008][T24867] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4775'. [ 621.845331][T24881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4780'. [ 621.847513][T24878] netlink: 'syz.4.4778': attribute type 1 has an invalid length. [ 621.942731][T24878] 8021q: adding VLAN 0 to HW filter on device bond11 [ 622.016932][T24886] bond11: (slave geneve2): making interface the new active one [ 622.028809][T24886] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 622.055851][T24889] erspan0: entered promiscuous mode [ 622.254780][T24900] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 622.256241][T24899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4784'. [ 622.499475][ T5619] Bluetooth: hci4: connection err: -111 [ 622.586584][T24922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.756448][T24926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4791'. [ 622.783972][T24927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4790'. [ 623.144691][T24944] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4798'. [ 623.286877][T24952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.287302][T24952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4799'. [ 623.310377][T24952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.311190][T24952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4799'. [ 623.439664][T24959] set match dimension is over the limit! [ 623.452846][T24959] set match dimension is over the limit! [ 623.504264][T24964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4802'. [ 623.758191][T24976] netlink: 'syz.3.4804': attribute type 1 has an invalid length. [ 623.758217][T24976] netlink: 'syz.3.4804': attribute type 268 has an invalid length. [ 623.897373][T24984] sctp: [Deprecated]: syz.2.4807 (pid 24984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 623.897373][T24984] Use struct sctp_sack_info instead [ 624.064435][T24991] openvswitch: netlink: Flow key attribute not present in set flow. [ 624.093793][T24991] netlink: 'syz.0.4808': attribute type 1 has an invalid length. [ 624.316650][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.489470][T25008] netlink: 'syz.0.4813': attribute type 1 has an invalid length. [ 624.489497][T25008] netlink: 'syz.0.4813': attribute type 2 has an invalid length. [ 624.852289][T25026] xt_hashlimit: size too large, truncated to 1048576 [ 624.943748][T25028] xt_hashlimit: size too large, truncated to 1048576 [ 625.068549][T25041] openvswitch: netlink: Flow key attribute not present in set flow. [ 625.143646][T25043] veth1: entered promiscuous mode [ 625.168379][T25042] veth1: left promiscuous mode [ 625.532850][T25051] veth1_to_bond: entered allmulticast mode [ 625.617500][T25056] RDS: rds_bind could not find a transport for ::ffff:172.20.20.10, load rds_tcp or rds_rdma? [ 625.639160][T25051] veth1_to_bond (unregistering): left allmulticast mode [ 625.656397][T25063] RDS: rds_bind could not find a transport for ::ffff:172.20.20.10, load rds_tcp or rds_rdma? [ 625.659345][T25051] : (slave bond_slave_1): Releasing backup interface [ 627.148881][T25144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.227508][T25149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.345263][T25151] netlink: Unknown conntrack attr (type=11271, max=9) [ 627.383744][T25146] __nla_validate_parse: 12 callbacks suppressed [ 627.383773][T25146] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4844'. [ 627.386391][T25155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.485390][T25161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4852'. [ 627.485879][T25161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4852'. [ 627.630035][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4853'. [ 627.630065][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4853'. [ 627.747005][T25174] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 627.747043][T25174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.031335][T25187] netlink: 'syz.2.4860': attribute type 25 has an invalid length. [ 628.187153][T25201] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4863'. [ 628.433861][ T30] audit: type=1107 audit(1789970499.531:17): pid=25206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='4-#-1-XR&# }=6vIY^;kil9=hggS=4DųЀ Kc690‚=>TRչJYL-ՄO( uP' [ 628.693418][T25226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4868'. [ 628.843791][T25236] xt_LOG: prefix is not null-terminated [ 629.037043][T25245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4871'. [ 629.766667][T25274] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4879'. [ 629.783988][T25274] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4879'. [ 629.784107][T25274] 0{X: renamed from gretap0 [ 629.811843][T25274] 0{X: entered allmulticast mode [ 629.847782][T25274] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 629.898877][T25283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.222880][T25310] sctp: [Deprecated]: syz.1.4886 (pid 25310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 630.222880][T25310] Use struct sctp_sack_info instead [ 630.284666][T25315] netlink: zone id is out of range [ 630.284684][T25315] netlink: set zone limit has 4 unknown bytes [ 631.041890][T25352] netlink: 'syz.2.4899': attribute type 10 has an invalid length. [ 631.079134][T25352] netlink: 'syz.2.4899': attribute type 4 has an invalid length. [ 631.867168][T25374] bond11: Invalid ad_actor_system MAC address. [ 631.869650][T25374] bond11: option ad_actor_system: invalid value (1) [ 631.921582][T25374] bond11 (unregistering): Released all slaves [ 632.007569][T25375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.786259][T25408] __nla_validate_parse: 9 callbacks suppressed [ 633.786282][T25408] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4914'. [ 634.364160][T25405] tc_dump_action: action bad kind [ 634.603152][T25430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4918'. [ 634.603194][T25430] netlink: 'syz.0.4918': attribute type 8 has an invalid length. [ 634.603210][T25430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4918'. [ 635.397241][T25469] atomic_op ffff8880253f99e0 conn xmit_atomic 0000000000000000 [ 635.403945][T25471] atomic_op ffff888025f689e0 conn xmit_atomic 0000000000000000 [ 635.598807][T25476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4931'. [ 635.598938][T25476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.791200][T25476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.813860][T25491] veth0_to_hsr: entered allmulticast mode [ 636.243305][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4939'. [ 636.299033][T25513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4942'. [ 636.735240][T25533] netlink: 'syz.1.4947': attribute type 46 has an invalid length. [ 636.736772][T25532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4947'. [ 636.818876][T25536] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 637.158264][T25549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4953'. [ 637.907532][T25583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4965'. [ 637.937598][T25587] dvmrp1: entered allmulticast mode [ 637.951897][T25587] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4967'. [ 637.984032][T25582] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 638.578660][T15865] wlan0 speed is unknown, defaulting to 1000 [ 638.578686][T15865] syz0: Port: 1 Link DOWN [ 638.853457][T25634] __nla_validate_parse: 2 callbacks suppressed [ 638.853481][T25634] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4977'. [ 638.887155][T25631] netlink: 'syz.0.4975': attribute type 1 has an invalid length. [ 639.229114][T25644] bond11: (slave gretap0): making interface the new active one [ 639.229880][T25644] bond11: (slave gretap0): Enslaving as an active interface with an up link [ 639.507998][T25660] netlink: 'syz.4.4981': attribute type 23 has an invalid length. [ 640.004383][T25684] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 640.840385][T25708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4997'. [ 640.952037][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 641.587140][T25733] geneve4: entered promiscuous mode [ 641.611193][ T5992] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 44687 - 0 [ 641.613103][ T37] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 44687 - 0 [ 641.613160][ T37] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 44687 - 0 [ 641.613199][ T37] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 44687 - 0 [ 641.617492][T15865] hid-generic 0005:0001:0002.0004: unknown main item tag 0x0 [ 641.692402][T15865] hid-generic 0005:0001:0002.0004: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 641.748959][T25743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5005'. [ 641.822030][T25749] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5005'. [ 641.939691][T25734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5000'. [ 641.939726][T25734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5000'. [ 642.317240][T25771] netlink: NAT attribute has 5 unknown bytes [ 642.317266][T25771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.339465][T25774] netlink: NAT attribute has 5 unknown bytes [ 642.339491][T25774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.850053][T25794] syzkaller0: entered promiscuous mode [ 642.850205][T25794] syzkaller0: entered allmulticast mode [ 642.953049][T25798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5019'. [ 643.018887][T25800] netlink: 'syz.4.5021': attribute type 83 has an invalid length. [ 643.072209][T25800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5021'. [ 643.337117][T25814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5025'. [ 643.352692][T25814] netlink: 'syz.2.5025': attribute type 10 has an invalid length. [ 643.371773][T25814] bond1: (slave dummy0): Removing an active aggregator [ 643.377096][T25814] bond1: (slave dummy0): Releasing backup interface [ 643.414003][T25814] team0: Port device dummy0 added [ 643.427440][T25818] netlink: 'syz.0.5026': attribute type 4 has an invalid length. [ 643.427463][T25818] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5026'. [ 643.876152][T25831] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 643.911323][T25838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5035'. [ 643.911361][T25838] netlink: 'syz.2.5035': attribute type 24 has an invalid length. [ 643.913522][T25838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5035'. [ 643.913553][T25838] netlink: 'syz.2.5035': attribute type 24 has an invalid length. [ 643.978981][T25841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5036'. [ 644.249669][T25849] netlink: Unknown nat attribute (0) [ 644.249707][T25849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.640234][T25863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5042'. [ 644.756971][T25874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5042'. [ 645.261601][T25893] bond10: invalid ARP target 0.0.0.0 specified for addition [ 645.261631][T25893] bond10: option arp_ip_target: invalid value (0) [ 645.263693][T25893] bond10 (unregistering): Released all slaves [ 645.473380][T25899] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5048'. [ 647.599669][T25865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 647.848476][T25908] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5050'. [ 647.864950][T25908] netlink: 'syz.2.5050': attribute type 2 has an invalid length. [ 648.170556][T25918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5053'. [ 648.170590][T25918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5053'. [ 648.242864][T25932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5057'. [ 648.779928][T25957] bridge0: entered promiscuous mode [ 648.780005][T25957] bridge0: entered allmulticast mode [ 649.131447][T25965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5066'. [ 649.131769][T25976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5069'. [ 649.497559][T25993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5070'. [ 649.625093][T26005] netlink: 'syz.4.5073': attribute type 49 has an invalid length. [ 649.696577][T26011] netlink: 'syz.4.5073': attribute type 49 has an invalid length. [ 649.896732][T26005] ip6gretap0: entered promiscuous mode [ 649.896759][T26005] ip6gretap0: entered allmulticast mode [ 650.520603][T26044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5084'. [ 650.568602][T26043] netlink: 'syz.1.5083': attribute type 21 has an invalid length. [ 650.635149][T26046] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5085'. [ 650.637397][T26046] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5085'. [ 650.644618][T26047] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5085'. [ 651.026510][T26062] veth5: entered promiscuous mode [ 651.026536][T26062] veth5: entered allmulticast mode [ 651.540716][T26094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5094'. [ 651.540743][T26094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5094'. [ 651.647905][T26096] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5095'. [ 651.704041][T26109] x_tables: duplicate underflow at hook 2 [ 652.182550][T26138] gretap3: entered promiscuous mode [ 654.503663][T26094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.859645][T26170] __nla_validate_parse: 2 callbacks suppressed [ 654.859668][T26170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5107'. [ 654.883354][T26169] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5112'. [ 654.922579][ T5619] Bluetooth: hci5: ISO packet too small [ 654.989989][T26176] netlink: 'syz.4.5113': attribute type 1 has an invalid length. [ 655.553284][T26199] sctp: [Deprecated]: syz.2.5119 (pid 26199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.553284][T26199] Use struct sctp_sack_info instead [ 655.780594][T26209] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 655.863402][T26215] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 656.094260][T26231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5128'. [ 656.322404][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5130'. [ 656.455217][T26243] bond11: option xmit_hash_policy: invalid value (64) [ 656.457387][T26243] bond11 (unregistering): Released all slaves [ 656.526416][T26249] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 656.542902][T26254] syzkaller0: left promiscuous mode [ 656.542928][T26254] syzkaller0: left allmulticast mode [ 656.727881][T26263] netlink: 'syz.2.5135': attribute type 10 has an invalid length. [ 656.741253][T26263] team0: Device vxcan1 is of different type [ 656.867655][T26269] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 656.867685][T26269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 656.869722][T26269] netlink: 'syz.1.5137': attribute type 26 has an invalid length. [ 657.270515][T26266] bridge4: entered promiscuous mode [ 657.270586][T26266] bridge4: entered allmulticast mode [ 657.465689][T26292] netlink: 'syz.1.5140': attribute type 1 has an invalid length. [ 657.540845][T26298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5140'. [ 657.547425][T26292] bond10: entered promiscuous mode [ 657.547974][T26292] 8021q: adding VLAN 0 to HW filter on device bond10 [ 657.662688][T26298] 8021q: adding VLAN 0 to HW filter on device bond10 [ 657.676895][T26298] bond10: (slave wireguard2): The slave device specified does not support setting the MAC address [ 657.676973][T26298] bond10: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 657.735898][T26298] bond10: (slave wireguard2): making interface the new active one [ 657.735928][T26298] wireguard2: entered promiscuous mode [ 657.758520][T26298] bond10: (slave wireguard2): Enslaving as an active interface with an up link [ 658.072990][T26313] ip_tables: iptables: counters copy to user failed while replacing table [ 658.296551][T26322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5151'. [ 658.456070][T26317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5150'. [ 658.456106][T26317] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 658.514826][T26317] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 658.565662][T26330] netlink: 356 bytes leftover after parsing attributes in process `syz.1.5152'. [ 658.607861][T26336] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 658.658183][T26332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5154'. [ 658.658208][T26332] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5154'. [ 658.658257][T26332] netlink: 'syz.3.5154': attribute type 5 has an invalid length. [ 658.658503][T26335] netlink: 'syz.3.5154': attribute type 5 has an invalid length. [ 658.889959][T26345] hsr_slave_1 (unregistering): left promiscuous mode [ 659.100675][T26352] A link change request failed with some changes committed already. Interface 04rB may have been left with an inconsistent configuration, please check. [ 659.212134][T26352] A link change request failed with some changes committed already. Interface 04rB may have been left with an inconsistent configuration, please check. [ 659.409651][T26362] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 659.428017][T26363] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 659.984691][T26365] : (slave bond_slave_0): Releasing backup interface [ 660.147435][T26365] bond_slave_0: entered promiscuous mode [ 660.147463][T26365] bond_slave_0: entered allmulticast mode [ 660.327378][T26376] __nla_validate_parse: 4 callbacks suppressed [ 660.327402][T26376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5164'. [ 660.505649][T22649] bond5: (slave ): speed changed to 0 on port 1 [ 660.632083][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 660.688619][ T6736] bond5: (slave ): link status definitely down, disabling slave [ 660.755010][T26376] vlan2: entered promiscuous mode [ 660.755036][T26376] bridge0: entered promiscuous mode [ 660.921985][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5171'. [ 660.922013][T26413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5171'. [ 661.017526][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5171'. [ 661.017551][T26413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5171'. [ 661.088574][T26415] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5171'. [ 661.281265][T26428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5173'. [ 661.643923][T26437] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5174'. [ 661.942491][T26452] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5179'. [ 661.973507][T26452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5179'. [ 662.017686][T26452] hsr_slave_0: left promiscuous mode [ 662.045417][T26452] hsr_slave_1: left promiscuous mode [ 663.719463][T26489] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 664.320877][T26511] veth1_vlan: left promiscuous mode [ 664.324818][T26511] macvlan0: entered allmulticast mode [ 664.765987][T26522] bond13: invalid ARP target 0.0.0.0 specified for addition [ 664.766017][T26522] bond13: option arp_ip_target: invalid value (0) [ 664.792957][T26522] bond13 (unregistering): Released all slaves [ 665.014822][T26525] bond13: invalid ARP target 0.0.0.0 specified for addition [ 665.014853][T26525] bond13: option arp_ip_target: invalid value (0) [ 665.043932][T26525] bond13 (unregistering): Released all slaves [ 665.442864][T26552] netlink: 'syz.0.5199': attribute type 39 has an invalid length. [ 665.443112][T26552] netlink: 'syz.0.5199': attribute type 39 has an invalid length. [ 665.443297][T26552] netlink: 'syz.0.5199': attribute type 39 has an invalid length. [ 665.443491][T26552] netlink: 'syz.0.5199': attribute type 39 has an invalid length. [ 665.443689][T26552] netlink: 'syz.0.5199': attribute type 39 has an invalid length. [ 665.444444][T26552] netlink: 'syz.0.5199': attribute type 39 has an invalid length. [ 665.444648][T26552] netlink: 'syz.0.5199': attribute type 39 has an invalid length. [ 665.448328][T26552] netlink: 'syz.0.5199': attribute type 39 has an invalid length. [ 665.448539][T26552] netlink: 'syz.0.5199': attribute type 39 has an invalid length. [ 665.448724][T26552] netlink: 'syz.0.5199': attribute type 39 has an invalid length. [ 665.752857][T26533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.259504][T26558] __nla_validate_parse: 4 callbacks suppressed [ 666.259529][T26558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5200'. [ 666.414558][T26560] veth13: entered allmulticast mode [ 666.650051][T26601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5207'. [ 666.955731][T26620] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5213'. [ 667.339655][T26635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5216'. [ 668.318713][T26657] x_tables: duplicate entry at hook 1 [ 668.445402][T26657] A link change request failed with some changes committed already. Interface 7Ж may have been left with an inconsistent configuration, please check. [ 668.839684][T26682] team0: Device vxcan1 is of different type [ 669.007717][T26693] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5229'. [ 669.079971][T26692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5229'. [ 669.145416][T26699] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 669.176972][T26699] IPv6: NLM_F_CREATE should be specified when creating new route [ 669.177068][T26699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 669.177080][T26699] IPv6: NLM_F_CREATE should be set when creating new route [ 669.177201][T26699] IPv6: NLM_F_CREATE should be set when creating new route [ 669.177227][T26699] IPv6: NLM_F_CREATE should be set when creating new route [ 669.303879][T26703] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 670.098302][T26734] ip6t_rt: too many addresses specified [ 670.149822][T26734] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 670.149865][T26734] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 670.177025][T26734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5238'. [ 670.177055][T26734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5238'. [ 670.598305][T26753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5245'. [ 670.664964][T26756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5246'. [ 670.702131][T26756] vlan0: entered promiscuous mode [ 671.199188][T26778] validate_nla: 26 callbacks suppressed [ 671.199210][T26778] netlink: 'syz.0.5254': attribute type 1 has an invalid length. [ 671.226164][T26778] netlink: 'syz.0.5254': attribute type 1 has an invalid length. [ 671.588921][T26790] xt_hashlimit: size too large, truncated to 1048576 [ 672.638179][T26825] netlink: 'syz.2.5263': attribute type 22 has an invalid length. [ 672.638202][T26825] __nla_validate_parse: 5 callbacks suppressed [ 672.638215][T26825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5263'. [ 672.639372][T26825] netlink: 'syz.2.5263': attribute type 22 has an invalid length. [ 672.639392][T26825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5263'. [ 672.679232][T26825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5263'. [ 672.681889][T26823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5263'. [ 672.766594][T26829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5264'. [ 673.019366][T26834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5266'. [ 673.171731][T26838] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5267'. [ 673.273537][T26840] netlink: 'syz.4.5267': attribute type 1 has an invalid length. [ 673.273560][T26840] netlink: 'syz.4.5267': attribute type 2 has an invalid length. [ 673.736954][T26853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5269'. [ 674.038110][T26865] bond13: entered promiscuous mode [ 674.295153][T26865] macvlan2: entered promiscuous mode [ 674.295181][T26865] macvlan2: entered allmulticast mode [ 674.306952][T26865] bond13: (slave macvlan2): Opening slave failed [ 674.435585][T26877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5276'. [ 674.435625][T26877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5276'. [ 677.185372][T26970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 677.189467][T26970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 677.212080][T26970] 8021q: adding VLAN 0 to HW filter on device bond5 [ 677.213875][T26970] 8021q: adding VLAN 0 to HW filter on device bond6 [ 677.238408][T26984] netlink: 'syz.0.5300': attribute type 1 has an invalid length. [ 677.238566][T26970] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 677.248761][T15867] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 677.305299][T26984] bond12: entered promiscuous mode [ 677.308366][T26984] 8021q: adding VLAN 0 to HW filter on device bond12 [ 677.314119][T22642] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.314483][T22642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.395051][ T6737] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 677.428750][T26990] netlink: 'syz.0.5300': attribute type 1 has an invalid length. [ 677.654645][T26984] 8021q: adding VLAN 0 to HW filter on device bond12 [ 677.655098][T26984] bond12: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 677.655121][T26984] bond12: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 677.684899][T26984] bond12: (slave ip6gre2): making interface the new active one [ 677.684924][T26984] ip6gre2: entered promiscuous mode [ 677.711997][T26984] bond12: (slave ip6gre2): Enslaving as an active interface with an up link [ 678.074839][T15867] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 678.273371][T27023] __nla_validate_parse: 8 callbacks suppressed [ 678.273393][T27023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5306'. [ 678.277210][T27027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5306'. [ 678.323586][T27019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5304'. [ 678.588877][T27019] bridge_slave_1 (unregistering): left allmulticast mode [ 678.588905][T27019] bridge_slave_1 (unregistering): left promiscuous mode [ 678.588994][T27019] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.432029][T27056] syzkaller1: entered promiscuous mode [ 679.432052][T27056] syzkaller1: entered allmulticast mode [ 680.018536][T27084] pim6reg1: entered promiscuous mode [ 680.018574][T27084] pim6reg1: entered allmulticast mode [ 680.274546][T27110] netlink: 'syz.0.5321': attribute type 24 has an invalid length. [ 680.410825][T27111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 680.410849][T27111] IPv6: NLM_F_CREATE should be set when creating new route [ 680.430900][T27115] netlink: 'syz.1.5322': attribute type 21 has an invalid length. [ 680.596416][T27115] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5322'. [ 680.961208][T27134] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5324'. [ 680.961236][T27134] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5324'. [ 681.101697][T27139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5326'. [ 681.104657][T27147] netlink: 'syz.2.5328': attribute type 3 has an invalid length. [ 681.104954][T27148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5328'. [ 681.373803][T27157] ip_tables: iptables: counters copy to user failed while replacing table [ 681.448263][T27161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5330'. [ 681.486480][T27166] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5332'. [ 681.498881][T27168] ip_tables: iptables: counters copy to user failed while replacing table [ 681.750476][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 681.968956][T27186] netlink: 'syz.2.5336': attribute type 9 has an invalid length. [ 682.139619][T27201] netlink: 'syz.3.5339': attribute type 2 has an invalid length. [ 685.313637][T27214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.319901][T27225] netlink: 'syz.1.5343': attribute type 11 has an invalid length. [ 685.319925][T27225] netlink: 'syz.1.5343': attribute type 4 has an invalid length. [ 685.319940][T27225] __nla_validate_parse: 2 callbacks suppressed [ 685.319968][T27225] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5343'. [ 685.706272][T27325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5351'. [ 685.757216][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.768754][T27324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5352'. [ 685.818612][T27324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5352'. [ 685.818834][T27324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5352'. [ 685.819038][T27324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5352'. [ 685.819277][T27324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5352'. [ 685.819518][T27324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5352'. [ 685.819728][T27324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5352'. [ 685.819934][T27324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5352'. [ 686.386894][T27361] netlink: 'syz.1.5360': attribute type 10 has an invalid length. [ 686.399341][T27355] netlink: 'syz.2.5356': attribute type 12 has an invalid length. [ 686.475227][T27347] bond13 (unregistering): Released all slaves [ 686.623679][T27361] geneve2: entered promiscuous mode [ 686.623706][T27361] geneve2: entered allmulticast mode [ 686.719984][T27355] bond8: option primary_reselect: invalid value (255) [ 686.757361][T27355] bond8 (unregistering): Released all slaves [ 686.942559][T27367] tipc: Enabling of bearer rejected, already enabled [ 686.978976][T27382] netlink: 'syz.1.5362': attribute type 1 has an invalid length. [ 686.979007][T27382] netlink: 'syz.1.5362': attribute type 1 has an invalid length. [ 687.425543][T27399] netlink: 'syz.0.5368': attribute type 1 has an invalid length. [ 687.469149][T27397] bridge9: entered promiscuous mode [ 687.825684][T27401] veth7: entered allmulticast mode [ 688.041930][T27431] netlink: 'syz.3.5372': attribute type 12 has an invalid length. [ 688.045987][T27434] netlink: 'syz.3.5372': attribute type 12 has an invalid length. [ 688.850932][T27461] netlink: 'syz.2.5382': attribute type 21 has an invalid length. [ 689.574019][T27501] netlink: 'syz.4.5388': attribute type 10 has an invalid length. [ 689.731026][T27501] team0: Port device dummy0 added [ 690.230431][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 690.523705][T27533] ip_tables: iptables: counters copy to user failed while replacing table [ 690.545900][T27537] x_tables: duplicate underflow at hook 2 [ 690.796864][T27551] dvmrp8: entered allmulticast mode [ 690.915504][T27557] __nla_validate_parse: 35 callbacks suppressed [ 690.915528][T27557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5399'. [ 690.954852][T27558] siw: device registration error -23 [ 691.424125][T27576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5404'. [ 691.429706][T27576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5404'. [ 691.667945][T27593] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5409'. [ 692.402587][T27622] dvmrp0: left allmulticast mode [ 692.764271][T27642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5420'. [ 693.086441][T27659] set match dimension is over the limit! [ 693.087775][T27660] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5425'. [ 693.576684][T27686] ip_tables: iptables: counters copy to user failed while replacing table [ 694.013198][T27704] ip_tables: iptables: counters copy to user failed while replacing table [ 694.239268][T27712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5440'. [ 694.429846][T27717] validate_nla: 1 callbacks suppressed [ 694.429867][T27717] netlink: 'syz.3.5440': attribute type 16 has an invalid length. [ 697.165911][T27712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.412856][T27776] netlink: 'syz.4.5458': attribute type 7 has an invalid length. [ 697.452455][T27776] netlink: 'syz.4.5458': attribute type 7 has an invalid length. [ 697.481261][ T6736] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.481341][ T6736] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.481379][ T6736] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.481416][ T6736] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.584589][T27786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5457'. [ 697.736681][T27791] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 698.197853][T27818] netlink: 'syz.4.5462': attribute type 1 has an invalid length. [ 698.260519][T27830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5462'. [ 698.260555][T27830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5462'. [ 698.451738][T27818] 8021q: adding VLAN 0 to HW filter on device bond14 [ 698.481103][T27834] bond14: (slave geneve3): making interface the new active one [ 698.482553][T27834] bond14: (slave geneve3): Enslaving as an active interface with an up link [ 700.422614][T27782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 701.200009][T27869] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5469'. [ 701.200210][T27869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5469'. [ 701.200229][T27869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5469'. [ 701.275374][T27873] xt_TPROXY: Can be used only with -p tcp or -p udp [ 701.731388][T27883] : renamed from vlan1 [ 702.037899][T27857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5467'. [ 702.211160][T27894] vlan0: entered promiscuous mode [ 702.211187][T27894] hsr0: entered promiscuous mode [ 702.211578][T27894] vlan0: entered allmulticast mode [ 702.211596][T27894] hsr0: entered allmulticast mode [ 702.211610][T27894] hsr_slave_0: entered allmulticast mode [ 702.214507][T27894] hsr_slave_1: entered allmulticast mode [ 702.363428][T27905] macvlan0: entered promiscuous mode [ 702.433879][T27903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5478'. [ 702.784791][T27916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.844111][T27915] siw: device registration error -23 [ 702.845941][T27919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5486'. [ 702.845963][T27919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5486'. [ 702.856397][T27919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5486'. [ 702.856420][T27919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5486'. [ 702.934254][T27921] xt_CONNSECMARK: invalid mode: 0 [ 703.172480][T27926] netlink: 'syz.3.5488': attribute type 29 has an invalid length. [ 703.328204][T27932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5491'. [ 703.352100][T27934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5491'. [ 703.463387][T27942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5494'. [ 703.599269][T27955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5496'. [ 703.856054][T27957] bond14: entered promiscuous mode [ 703.856079][T27957] bond14: entered allmulticast mode [ 703.859989][T27974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5500'. [ 703.861237][T27974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5500'. [ 703.868967][T27974] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 703.875146][T27974] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 703.899384][T27974] hsr_slave_0: left promiscuous mode [ 703.909865][T27974] hsr_slave_1: left promiscuous mode [ 703.983580][T27976] vlan0: entered promiscuous mode [ 703.983748][T27976] vlan0: entered allmulticast mode [ 704.168646][T27980] vlan0: entered promiscuous mode [ 704.168812][T27980] vlan0: entered allmulticast mode [ 704.506197][T28002] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 704.512252][T28002] netlink: 'syz.0.5508': attribute type 3 has an invalid length. [ 704.675911][T28010] syzkaller0: entered promiscuous mode [ 704.675937][T28010] syzkaller0: entered allmulticast mode [ 705.751728][T28061] netlink: 'syz.2.5522': attribute type 1 has an invalid length. [ 705.751753][T28061] netlink: 'syz.2.5522': attribute type 7 has an invalid length. [ 705.751768][T28061] netlink: 'syz.2.5522': attribute type 8 has an invalid length. [ 705.751786][T28061] NCSI netlink: No device for ifindex 65584 [ 706.230353][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 706.640747][T28099] netlink: 'syz.0.5532': attribute type 10 has an invalid length. [ 706.641186][T28099] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 706.870869][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 707.043005][T28104] netlink: 'syz.3.5534': attribute type 1 has an invalid length. [ 707.289742][T28125] netlink: 'syz.4.5538': attribute type 3 has an invalid length. [ 708.150044][T28164] __nla_validate_parse: 28 callbacks suppressed [ 708.150614][T28164] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5552'. [ 708.339708][T28172] netlink: 'syz.2.5554': attribute type 11 has an invalid length. [ 708.339736][T28172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5554'. [ 708.422104][T28172] netlink: 'syz.2.5554': attribute type 11 has an invalid length. [ 708.422129][T28172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5554'. [ 708.651793][T28192] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 709.078227][T28213] xt_SECMARK: invalid mode: 9 [ 709.847114][T28229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5568'. [ 709.857483][T28229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5568'. [ 711.132981][T28164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 711.133333][T28165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 711.395212][T28239] xt_hashlimit: size too large, truncated to 1048576 [ 711.512007][T28244] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5571'. [ 711.957589][T28258] block nbd0: reconnected socket [ 711.957682][T28258] block nbd0: reconnected socket [ 711.975741][ T52] block nbd0: Receive control failed (result -32) [ 711.989497][ T5619] block nbd0: Receive control failed (result -32) [ 712.121930][T28264] veth1_macvtap: entered promiscuous mode [ 712.173728][T28262] netlink: 'syz.2.5580': attribute type 10 has an invalid length. [ 712.173989][T28262] veth0_vlan: entered allmulticast mode [ 712.233649][T28262] team0: Device veth0_vlan failed to register rx_handler [ 712.728881][T28296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5589'. [ 713.219845][T28306] can: request_module (can-proto-4) failed. [ 713.538323][T28330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5596'. [ 713.541934][T28334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5595'. [ 713.608909][T28328] netlink: 'syz.1.5595': attribute type 3 has an invalid length. [ 713.608933][T28328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5595'. [ 713.632132][T28332] team0: Port device dummy0 removed [ 714.004479][T28347] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 714.151333][T28352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5602'. [ 714.246512][T28361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5603'. [ 714.335652][T28368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5604'. [ 714.575638][T28363] xt_hashlimit: size too large, truncated to 1048576 [ 714.923984][T28392] netlink: 'syz.0.5610': attribute type 17 has an invalid length. [ 714.924013][T28392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5610'. [ 714.924069][T28392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5610'. [ 714.972839][T28368] veth0_macvtap (unregistering): left allmulticast mode [ 715.091915][T28368] [ 715.094318][T28368] ====================================================== [ 715.101373][T28368] WARNING: possible circular locking dependency detected [ 715.108460][T28368] syzkaller #0 Not tainted [ 715.112911][T28368] ------------------------------------------------------ [ 715.119959][T28368] syz.3.5604/28368 is trying to acquire lock: [ 715.126050][T28368] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 715.135937][T28368] [ 715.135937][T28368] but task is already holding lock: [ 715.143337][T28368] ffffffff8f802040 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 715.152184][T28368] [ 715.152184][T28368] which lock already depends on the new lock. [ 715.152184][T28368] [ 715.162648][T28368] [ 715.162648][T28368] the existing dependency chain (in reverse order) is: [ 715.171701][T28368] [ 715.171701][T28368] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 715.178971][T28368] __mutex_lock+0x19d/0x1550 [ 715.184241][T28368] get_device_parent+0x16f/0x3a0 [ 715.189746][T28368] device_add+0x2d4/0xb80 [ 715.194647][T28368] device_create+0x269/0x300 [ 715.199819][T28368] msr_device_create+0x33/0x50 [ 715.205132][T28368] cpuhp_invoke_callback+0x434/0x810 [ 715.210974][T28368] cpuhp_thread_fun+0x362/0x780 [ 715.216379][T28368] smpboot_thread_fn+0x565/0xa70 [ 715.221864][T28368] kthread+0x38b/0x480 [ 715.226602][T28368] ret_from_fork+0x514/0xb70 [ 715.231743][T28368] ret_from_fork_asm+0x1a/0x30 [ 715.237060][T28368] [ 715.237060][T28368] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 715.244642][T28368] cpuhp_thread_fun+0x127/0x780 [ 715.250061][T28368] smpboot_thread_fn+0x565/0xa70 [ 715.255553][T28368] kthread+0x38b/0x480 [ 715.260161][T28368] ret_from_fork+0x514/0xb70 [ 715.265289][T28368] ret_from_fork_asm+0x1a/0x30 [ 715.270607][T28368] [ 715.270607][T28368] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 715.278359][T28368] cpus_read_lock+0x42/0x160 [ 715.283676][T28368] static_key_slow_inc+0x12/0x30 [ 715.289155][T28368] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 715.295478][T28368] nbd_genl_foreach_sock+0x265/0x450 [ 715.301306][T28368] nbd_genl_reconfigure+0xbbb/0x1040 [ 715.307133][T28368] genl_family_rcv_msg_doit+0x233/0x340 [ 715.313278][T28368] genl_rcv_msg+0x614/0x7a0 [ 715.318324][T28368] netlink_rcv_skb+0x226/0x4a0 [ 715.323678][T28368] genl_rcv+0x28/0x40 [ 715.328211][T28368] netlink_unicast+0x7bd/0x940 [ 715.333520][T28368] netlink_sendmsg+0x813/0xb40 [ 715.338831][T28368] sock_sendmsg_nosec+0x13a/0x180 [ 715.344446][T28368] ____sys_sendmsg+0x54e/0x850 [ 715.349801][T28368] ___sys_sendmsg+0x2a5/0x360 [ 715.355019][T28368] __x64_sys_sendmsg+0x1b1/0x290 [ 715.360506][T28368] do_syscall_64+0x166/0x520 [ 715.365707][T28368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.372140][T28368] [ 715.372140][T28368] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 715.379807][T28368] __mutex_lock+0x19d/0x1550 [ 715.384940][T28368] nbd_queue_rq+0x373/0xff0 [ 715.389980][T28368] blk_mq_dispatch_rq_list+0x499/0x1990 [ 715.396121][T28368] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 715.403026][T28368] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 715.409554][T28368] blk_mq_run_work_fn+0x16c/0x300 [ 715.415396][T28368] process_scheduled_works+0xc3d/0x1630 [ 715.421498][T28368] worker_thread+0xa47/0xfb0 [ 715.426645][T28368] kthread+0x38b/0x480 [ 715.431275][T28368] ret_from_fork+0x514/0xb70 [ 715.436431][T28368] ret_from_fork_asm+0x1a/0x30 [ 715.441776][T28368] [ 715.441776][T28368] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 715.449013][T28368] __mutex_lock+0x19d/0x1550 [ 715.454155][T28368] nbd_queue_rq+0xc1/0xff0 [ 715.459120][T28368] blk_mq_dispatch_rq_list+0x499/0x1990 [ 715.465213][T28368] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 715.472087][T28368] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 715.478613][T28368] blk_mq_run_work_fn+0x16c/0x300 [ 715.484195][T28368] process_scheduled_works+0xc3d/0x1630 [ 715.490282][T28368] worker_thread+0xa47/0xfb0 [ 715.495415][T28368] kthread+0x38b/0x480 [ 715.500020][T28368] ret_from_fork+0x514/0xb70 [ 715.505151][T28368] ret_from_fork_asm+0x1a/0x30 [ 715.510461][T28368] [ 715.510461][T28368] -> #5 (set->srcu){.+.+}-{0:0}: [ 715.517620][T28368] __synchronize_srcu+0xc9/0x2f0 [ 715.523113][T28368] elevator_switch+0x1e8/0x7b0 [ 715.528480][T28368] elevator_change+0x2fa/0x480 [ 715.533787][T28368] elevator_set_default+0x375/0x440 [ 715.539546][T28368] blk_register_queue+0x3f3/0x4e0 [ 715.545210][T28368] __add_disk+0x6b8/0xdb0 [ 715.550128][T28368] add_disk_fwnode+0x100/0x3a0 [ 715.555531][T28368] nbd_dev_add+0x733/0xb60 [ 715.560505][T28368] nbd_init+0x168/0x1f0 [ 715.565218][T28368] do_one_initcall+0x250/0x870 [ 715.570541][T28368] do_initcall_level+0x10a/0x1a0 [ 715.576035][T28368] do_initcalls+0x59/0xa0 [ 715.580923][T28368] kernel_init_freeable+0x29d/0x3e0 [ 715.586686][T28368] kernel_init+0x22/0x1d0 [ 715.591575][T28368] ret_from_fork+0x514/0xb70 [ 715.596726][T28368] ret_from_fork_asm+0x1a/0x30 [ 715.602044][T28368] [ 715.602044][T28368] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 715.609909][T28368] __mutex_lock+0x19d/0x1550 [ 715.615051][T28368] elevator_change+0x1af/0x480 [ 715.620372][T28368] elevator_set_none+0xb5/0x140 [ 715.625765][T28368] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 715.632116][T28368] nbd_start_device+0x189/0xb30 [ 715.637511][T28368] nbd_genl_connect+0x167d/0x1cd0 [ 715.643089][T28368] genl_family_rcv_msg_doit+0x233/0x340 [ 715.649177][T28368] genl_rcv_msg+0x614/0x7a0 [ 715.654236][T28368] netlink_rcv_skb+0x226/0x4a0 [ 715.659550][T28368] genl_rcv+0x28/0x40 [ 715.664072][T28368] netlink_unicast+0x7bd/0x940 [ 715.669475][T28368] netlink_sendmsg+0x813/0xb40 [ 715.674786][T28368] sock_sendmsg_nosec+0x13a/0x180 [ 715.680345][T28368] ____sys_sendmsg+0x54e/0x850 [ 715.685662][T28368] ___sys_sendmsg+0x2a5/0x360 [ 715.690905][T28368] __x64_sys_sendmsg+0x1b1/0x290 [ 715.696473][T28368] do_syscall_64+0x166/0x520 [ 715.701612][T28368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.708057][T28368] [ 715.708057][T28368] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 715.716685][T28368] blk_alloc_queue+0x544/0x690 [ 715.721989][T28368] __blk_mq_alloc_disk+0x194/0x390 [ 715.727658][T28368] nbd_dev_add+0x494/0xb60 [ 715.732609][T28368] nbd_init+0x168/0x1f0 [ 715.737312][T28368] do_one_initcall+0x250/0x870 [ 715.742629][T28368] do_initcall_level+0x10a/0x1a0 [ 715.748109][T28368] do_initcalls+0x59/0xa0 [ 715.752983][T28368] kernel_init_freeable+0x29d/0x3e0 [ 715.758723][T28368] kernel_init+0x22/0x1d0 [ 715.763613][T28368] ret_from_fork+0x514/0xb70 [ 715.768764][T28368] ret_from_fork_asm+0x1a/0x30 [ 715.774077][T28368] [ 715.774077][T28368] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 715.781308][T28368] fs_reclaim_acquire+0x71/0x100 [ 715.786806][T28368] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 715.793073][T28368] alloc_inode+0xb8/0x1b0 [ 715.797945][T28368] iget_locked+0x131/0x6a0 [ 715.802903][T28368] kernfs_get_inode+0x4f/0x770 [ 715.808216][T28368] kernfs_get_tree+0x5cd/0x980 [ 715.813518][T28368] vfs_get_tree+0x92/0x2a0 [ 715.818471][T28368] do_new_mount+0x319/0xdc0 [ 715.823537][T28368] __se_sys_mount+0x31d/0x420 [ 715.828758][T28368] do_syscall_64+0x166/0x520 [ 715.833895][T28368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.840333][T28368] [ 715.840333][T28368] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 715.848354][T28368] down_write+0x96/0x200 [ 715.853150][T28368] kernfs_remove_by_name_ns+0x4e/0x140 [ 715.859148][T28368] device_links_driver_bound+0x4ab/0x1440 [ 715.865487][T28368] driver_bound+0xd8/0x2e0 [ 715.870509][T28368] really_probe+0x774/0xae0 [ 715.875557][T28368] __driver_probe_device+0x1e8/0x360 [ 715.881393][T28368] driver_probe_device+0x4f/0x240 [ 715.886959][T28368] __device_attach_driver+0x270/0x410 [ 715.892872][T28368] bus_for_each_drv+0x258/0x2f0 [ 715.898269][T28368] __device_attach+0x2c4/0x450 [ 715.903575][T28368] device_initial_probe+0xa1/0xd0 [ 715.909180][T28368] bus_probe_device+0x12a/0x220 [ 715.914651][T28368] device_add+0x7d7/0xb80 [ 715.919541][T28368] faux_device_create_with_groups+0x1a5/0x2b0 [ 715.926246][T28368] regulator_dummy_init+0x19/0x40 [ 715.931831][T28368] regulator_init+0xca/0x110 [ 715.936965][T28368] do_one_initcall+0x250/0x870 [ 715.942286][T28368] do_initcall_level+0x10a/0x1a0 [ 715.947769][T28368] do_initcalls+0x59/0xa0 [ 715.952652][T28368] kernel_init_freeable+0x29d/0x3e0 [ 715.958407][T28368] kernel_init+0x22/0x1d0 [ 715.963281][T28368] ret_from_fork+0x514/0xb70 [ 715.968421][T28368] ret_from_fork_asm+0x1a/0x30 [ 715.973725][T28368] [ 715.973725][T28368] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 715.982345][T28368] __lock_acquire+0x164c/0x2de0 [ 715.987736][T28368] lock_acquire+0x115/0x350 [ 715.992774][T28368] down_read+0x4a/0x330 [ 715.997475][T28368] kernfs_remove+0x35/0x80 [ 716.002425][T28368] __kobject_del+0xe0/0x310 [ 716.007525][T28368] kobject_del+0x45/0x60 [ 716.012310][T28368] cleanup_glue_dir+0x1a3/0x220 [ 716.017704][T28368] device_del+0x77d/0x8f0 [ 716.022574][T28368] device_destroy+0xb2/0x1a0 [ 716.027711][T28368] macvtap_device_event+0x226/0x400 [ 716.033628][T28368] notifier_call_chain+0x1a5/0x3d0 [ 716.039303][T28368] unregister_netdevice_many_notify+0x17f9/0x2140 [ 716.046353][T28368] macvlan_device_event+0x93a/0x9e0 [ 716.052098][T28368] notifier_call_chain+0x1a5/0x3d0 [ 716.057770][T28368] unregister_netdevice_many_notify+0x17f9/0x2140 [ 716.064749][T28368] rtnl_dellink+0x5be/0x810 [ 716.069850][T28368] rtnetlink_rcv_msg+0x802/0xc00 [ 716.075337][T28368] netlink_rcv_skb+0x226/0x4a0 [ 716.080664][T28368] netlink_unicast+0x7bd/0x940 [ 716.085976][T28368] netlink_sendmsg+0x813/0xb40 [ 716.091293][T28368] sock_sendmsg_nosec+0x13a/0x180 [ 716.096859][T28368] ____sys_sendmsg+0x54e/0x850 [ 716.102176][T28368] ___sys_sendmsg+0x2a5/0x360 [ 716.107395][T28368] __x64_sys_sendmsg+0x1b1/0x290 [ 716.112897][T28368] do_syscall_64+0x166/0x520 [ 716.118031][T28368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.124478][T28368] [ 716.124478][T28368] other info that might help us debug this: [ 716.124478][T28368] [ 716.134743][T28368] Chain exists of: [ 716.134743][T28368] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 716.134743][T28368] [ 716.148155][T28368] Possible unsafe locking scenario: [ 716.148155][T28368] [ 716.155635][T28368] CPU0 CPU1 [ 716.161016][T28368] ---- ---- [ 716.166398][T28368] lock(gdp_mutex); [ 716.170313][T28368] lock(cpuhp_state-up); [ 716.177210][T28368] lock(gdp_mutex); [ 716.183646][T28368] rlock(&root->kernfs_supers_rwsem); [ 716.189123][T28368] [ 716.189123][T28368] *** DEADLOCK *** [ 716.189123][T28368] [ 716.197383][T28368] locks held by syz.3.5604/28368: 2, last CPU#1: [ 716.203724][T28368] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x41b/0x810 [ 716.212729][T28368] #1: ffffffff8f802040 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 716.221894][T28368] [ 716.221894][T28368] stack backtrace: [ 716.227815][T28368] CPU: 1 UID: 0 PID: 28368 Comm: syz.3.5604 Not tainted syzkaller #0 PREEMPT(full) [ 716.237203][T28368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 716.247316][T28368] Call Trace: [ 716.250633][T28368] [ 716.253595][T28368] dump_stack_lvl+0xe8/0x150 [ 716.258223][T28368] print_circular_bug+0x2e2/0x300 [ 716.263292][T28368] check_noncircular+0x12f/0x150 [ 716.268265][T28368] __lock_acquire+0x164c/0x2de0 [ 716.273158][T28368] lock_acquire+0x115/0x350 [ 716.277687][T28368] ? kernfs_remove+0x35/0x80 [ 716.282311][T28368] down_read+0x4a/0x330 [ 716.286506][T28368] ? kernfs_remove+0x35/0x80 [ 716.291130][T28368] kernfs_remove+0x35/0x80 [ 716.295574][T28368] __kobject_del+0xe0/0x310 [ 716.300109][T28368] kobject_del+0x45/0x60 [ 716.304399][T28368] cleanup_glue_dir+0x1a3/0x220 [ 716.309277][T28368] device_del+0x77d/0x8f0 [ 716.313690][T28368] ? __pfx_device_del+0x10/0x10 [ 716.318584][T28368] ? kobject_put+0x50f/0x550 [ 716.323215][T28368] device_destroy+0xb2/0x1a0 [ 716.327832][T28368] ? __pfx_device_destroy+0x10/0x10 [ 716.333055][T28368] ? kernfs_remove_by_name_ns+0x101/0x140 [ 716.338804][T28368] macvtap_device_event+0x226/0x400 [ 716.344032][T28368] ? __pfx_ipvlan_device_event+0x10/0x10 [ 716.349762][T28368] ? __pfx_macvtap_device_event+0x10/0x10 [ 716.355510][T28368] notifier_call_chain+0x1a5/0x3d0 [ 716.360670][T28368] unregister_netdevice_many_notify+0x17f9/0x2140 [ 716.367121][T28368] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 716.373919][T28368] ? netdev_upper_dev_unlink+0x99/0xe0 [ 716.379401][T28368] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 716.385408][T28368] ? macvlan_dellink+0x3e4/0x470 [ 716.390440][T28368] macvlan_device_event+0x93a/0x9e0 [ 716.395658][T28368] ? __pfx_ipvlan_device_event+0x10/0x10 [ 716.401326][T28368] ? __pfx_macvlan_device_event+0x10/0x10 [ 716.407081][T28368] notifier_call_chain+0x1a5/0x3d0 [ 716.412248][T28368] unregister_netdevice_many_notify+0x17f9/0x2140 [ 716.418720][T28368] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 716.425524][T28368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.431633][T28368] ? __pfx_veth_dellink+0x10/0x10 [ 716.436775][T28368] ? __pfx_veth_dellink+0x10/0x10 [ 716.441831][T28368] rtnl_dellink+0x5be/0x810 [ 716.446379][T28368] ? __pfx_rtnl_dellink+0x10/0x10 [ 716.451435][T28368] ? lock_acquire+0x115/0x350 [ 716.456159][T28368] ? lock_acquire+0x115/0x350 [ 716.460853][T28368] ? __pfx_rtnl_dellink+0x10/0x10 [ 716.465903][T28368] ? __pfx_rtnl_dellink+0x10/0x10 [ 716.470947][T28368] rtnetlink_rcv_msg+0x802/0xc00 [ 716.475927][T28368] ? netlink_sendmsg+0x5d4/0xb40 [ 716.480907][T28368] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 716.486043][T28368] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 716.491533][T28368] ? __lock_acquire+0x747/0x2de0 [ 716.496500][T28368] netlink_rcv_skb+0x226/0x4a0 [ 716.501303][T28368] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 716.506798][T28368] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 716.512124][T28368] ? netlink_deliver_tap+0x2e/0x1b0 [ 716.517488][T28368] ? netlink_deliver_tap+0x2e/0x1b0 [ 716.522786][T28368] netlink_unicast+0x7bd/0x940 [ 716.527604][T28368] netlink_sendmsg+0x813/0xb40 [ 716.532408][T28368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.537734][T28368] ? apparmor_socket_sendmsg+0x18b/0x360 [ 716.543459][T28368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.548865][T28368] sock_sendmsg_nosec+0x13a/0x180 [ 716.553918][T28368] ____sys_sendmsg+0x54e/0x850 [ 716.558718][T28368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.564031][T28368] ? import_iovec+0x73/0xa0 [ 716.568617][T28368] ___sys_sendmsg+0x2a5/0x360 [ 716.573317][T28368] ? __lock_acquire+0x747/0x2de0 [ 716.578273][T28368] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.583497][T28368] ? futex_wait+0x2a2/0x390 [ 716.588048][T28368] ? __fget_files+0x2a/0x420 [ 716.592668][T28368] ? __fget_files+0x3a2/0x420 [ 716.597375][T28368] __x64_sys_sendmsg+0x1b1/0x290 [ 716.602339][T28368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 716.607834][T28368] do_syscall_64+0x166/0x520 [ 716.612448][T28368] ? trace_irq_disable+0x3b/0x140 [ 716.617502][T28368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.623616][T28368] ? clear_bhb_loop+0x70/0xc0 [ 716.628320][T28368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.634231][T28368] RIP: 0033:0x7fcc16b9e159 [ 716.638671][T28368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.658678][T28368] RSP: 002b:00007fcc17b07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.667118][T28368] RAX: ffffffffffffffda RBX: 00007fcc16e26090 RCX: 00007fcc16b9e159 [ 716.675148][T28368] RDX: 0000000024048004 RSI: 0000200000000200 RDI: 0000000000000004 [ 716.683173][T28368] RBP: 00007fcc16c3506b R08: 0000000000000000 R09: 0000000000000000 [ 716.691173][T28368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.699168][T28368] R13: 00007fcc16e26128 R14: 00007fcc16e26090 R15: 00007ffd16b71b88 [ 716.707177][T28368] [ 720.072195][ T4986] udevd[4986]: worker [5639] /devices/virtual/block/nbd2 is taking a long time