last executing test programs: 5.025622022s ago: executing program 2 (id=3790): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000085) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x3, 0x1, 0x3, 0x8, 0xe, 0x6, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000140), &(0x7f00000000c0)='GPL\x00', 0x563, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 4.439603364s ago: executing program 2 (id=3794): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket(0x2b, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, 0x1402, 0x2, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000005) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x4810) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x18, 0x1, 0x0, r8}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)="083b0000fdb29a09add7be2d19", 0xd}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 3.070901631s ago: executing program 3 (id=3802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25041100800c0002"], 0x114}], 0x1}, 0x0) 3.012202667s ago: executing program 2 (id=3803): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xa96) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000007b80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010108}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x40, 0x0, 0x0, 0x0, 0x2009, 0x0, 0x200001, 0x1ff, 0x9}) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x3}], 0x1, 0x62, 0x0) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r7, 0x4002f516, &(0x7f0000000100)={0x7f, 0x4}) (async) recvmmsg(r0, &(0x7f0000002080)=[{{&(0x7f0000000340)=@alg, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000600)=""/252, 0xfc}, {&(0x7f0000000bc0)=""/178, 0xb2}, {&(0x7f0000000c80)=""/34, 0x22}, {&(0x7f0000000cc0)=""/150, 0x96}], 0x4, &(0x7f0000000dc0)=""/180, 0xb4}, 0x7}, {{&(0x7f0000000e80)=@alg, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f00)=""/140, 0x8c}, {&(0x7f0000000fc0)=""/125, 0x7d}], 0x2, &(0x7f0000001080)=""/4096, 0x1000}, 0x8}], 0x2, 0x1000, 0x0) (async) splice(r0, 0x0, r7, 0x0, 0xf3a, 0x0) (async) ioctl$XFS_IOC_GETPARENTS(r2, 0xc028583e, &(0x7f0000000700)={{[0x2, 0x6, 0x2, 0x7ff]}, 0x0, 0x2, 0x8, 0x0, &(0x7f0000000440)=[{{@align=0xe, {0x9, 0x5, 0x4, 0x6}}, 0x1, 0x0, 'skcipher\x00'}, {{@align=0x8000000000000000, {0x9, 0x1, 0x9, 0x6}}, 0x3, 0x0, '\x00'}, {{@align=0x100000000, {0x5, 0x1, 0x7, 0x3}}, 0x8, 0x0, 'GPL\x00'}, {{@_ha_fsid={[0xef23, 0x7]}, {0x9, 0xfffb, 0x7}}, 0xf8db, 0x0, '\xff\xff\xff\xff\xff\xff'}, {{@_ha_fsid={[0x8000, 0x7ff]}, {0x1, 0xe80, 0xc885, 0x8}}, 0x7fff, 0x0, 'GPL\x00'}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc8, &(0x7f0000000240)=""/200, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 2.680496404s ago: executing program 3 (id=3806): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0xc}, {0x0, 0xffff}, {0x4, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r7, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0xc008}, 0x4008010) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x701, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) 2.36651387s ago: executing program 2 (id=3808): r0 = socket$inet(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000480)=""/247, 0xf7}, {&(0x7f0000000040)=""/99, 0x63}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f00000002c0)=""/255, 0xff}], 0x6}, 0xfffffffe}], 0x1, 0xaef785430bf970c3, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f00000000c0)) 2.171430018s ago: executing program 3 (id=3811): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r5, &(0x7f0000000300)={@void, @void, @eth={@multicast, @local, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f617", {"2e7c8cbccc480860f94cd609888bc51a", "59aef8a800000000000000002000"}}}}}}}}}, 0xd6) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfbfffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x40, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x24020805) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r8, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x58, r1, 0x300, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:shell_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0xa804}, 0x10) 2.163367158s ago: executing program 2 (id=3812): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000000), 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20091}, 0x0) 1.923405923s ago: executing program 2 (id=3814): r0 = socket(0x10, 0x80002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f00000000c0)={0x8, 'batadv_slave_0\x00', {'bridge0\x00'}, 0x8001}) unshare(0x6a040000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtaction={0x328, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x314, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0xc0, 0xd, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x84, 0x6, "05d2996d577ea4f63fa10c35adb203de2bd127f041e91c907235928082847b089b05f27b185fe321cc01d4aed8bf22570be4a29c41b958c411b27b611b9951ef67eb3e4f9429312ad7f9c3171d8725c93ce713e46ad19bee52cfece6f81558048ce208b45abcdf07d30a7714ea0400b84173096aa78f5771789ce9a3294e8ae1"}, {0xc}, {0xc, 0x8, {0x1, 0x6}}}}, @m_mpls={0x5c, 0xe, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x4, 0x6, 0x5, 0x8}, 0x4}}]}, {0x14, 0x6, "4b9a8883785cd10241ec385a7549d204"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_connmark={0xb4, 0xf, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffa, 0xf6, 0xffffffffffffffff, 0x0, 0x2612}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x1, 0x1, 0x9}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x4, 0x800007, 0xffffffff}, 0x800}}]}, {0x30, 0x6, "5498909e98f0c0387c67dfd8d7dc1ba1919ec48c06867bc007172d9646ec84c50bccbc094d421a8b93bb3df3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0xb8, 0x5, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x1, 0x0, 0x1, 0xe}, 0x53d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xfffffffc, 0x20000000, 0xfffffff9, 0x101}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xc, 0x0, 0x3, 0x5}, 0x800}}]}, {0x32, 0x6, "4c95bb871fe6b91e07d3c4b6da366a8a54bc5aacef55c21f4c2cad1065d8049e2858ceed40c3540d6e21a8a54d3d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x328}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000080)) socket$inet(0x2, 0x2, 0x7ff) 1.837623164s ago: executing program 0 (id=3816): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={0xffffffffffffffff, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0], 0x0, 0x76, &(0x7f0000001380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0x21, 0x8, 0x8, &(0x7f0000001480)}}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001680)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0x377, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)=@dellinkprop={0x38, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000100)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x6, 0x8, 0x7, 0x1, 0x4}], &(0x7f0000000180)='GPL\x00', 0x76c1, 0x1000, &(0x7f00000002c0)=""/4096, 0x41100, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001640)={0x0, 0x0, 0xe, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001740)=[0xffffffffffffffff, r2, r3, r6, 0xffffffffffffffff], &(0x7f0000001780)=[{0x5, 0x5, 0xa, 0xa}, {0x4, 0x4, 0x8, 0x3}], 0x10, 0x33}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0) 1.692007875s ago: executing program 1 (id=3817): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0x20000080) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}}, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x6, 0x19, &(0x7f0000000200)=r3, 0x21) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket(0x2a, 0x2, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r6, 0x80186e84, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x9, 0xd, 0x2}, {0x2, 0x9, 0x2}, {0x5, 0xff, 0x1}, {0x76e23c0a, 0x401, 0x1}, {0x1, 0x9, 0x2}], 0x5, 0x10, 0xc8, 0xb92e}) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x44) (async) write$cgroup_subtree(r8, &(0x7f0000000240)={[{0x2b, 'net_cls'}, {0x2b, 'cpu'}, {0x2d, 'freezer'}, {0x2b, 'perf_event'}, {0x2b, 'hugetlb'}, {0x2d, 'io'}]}, 0x30) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0xfffffffffffffd58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0xb03b}]}}]}, 0x50}}, 0x4000) r10 = socket$netlink(0x10, 0x3, 0x0) recvfrom$l2tp6(r6, &(0x7f00000004c0)=""/82, 0x52, 0x40000000, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x20) (async) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 1.544108015s ago: executing program 4 (id=3818): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, 0x0, &(0x7f00000029c0)=0xfffffffffffffdcc) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x2, 0x1, 0x1}, 0x15, 0x1, 0x0, 0x0, "6de69d0ee889d443ca9ca935e6d3b80ca409287c0f59557a03be8041f1df1d7cee9b9b1c8f467c7e45882a28b2149e8eaaf49bedffe3a279d123903a142865a8"}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x78, 0x8}, 0xc) (async, rerun: 64) r6 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth1\x00', 0x0}) (async) pipe(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000002900)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0xb9, 0x6, 0x10, 0x8, 0xa0, 0x200, 0x8}, &(0x7f0000002a00)=0x9c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000002a40)={r10, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) (async, rerun: 64) r11 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) sendmsg$inet6(r11, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x40, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x79000000}}], 0x18}, 0x40080) (async, rerun: 32) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (rerun: 32) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r8, 0x40}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}, {&(0x7f0000000a80)="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", 0x252}], 0x2}, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000028c0)={r5, &(0x7f0000001880)="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", &(0x7f0000002880)=""/32}, 0x20) (async) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000080)) (async, rerun: 32) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000d00)={{r0, &(0x7f00000002c0)='*-/,\x00', 0xe8a69f1c09fd93f5, &(0x7f0000000300)={@_ha_fsid={[0x1, 0x3]}, {0x8, 0x5, 0x6, 0x9}}, 0x7f, &(0x7f0000000340), &(0x7f0000000380)=0xafe}, 0x9, &(0x7f0000000bc0)=[{0x1, 0x8, &(0x7f00000003c0)='GPL\x00', &(0x7f0000000400)="507ab3c05a9cad451b1db2668a38c4693009e34ff193ad0efd37f73d3aff49bceeac61ab891aa10d330459a366af67e6254f9f2a0e98702a00ad5960efecbf9d8409e48f84b708f69782cb698b423e867df6fbd156c0a9b112adc21547aceabae6ca9315c403d0", 0x67, 0x8}, {0x1, 0x9, &(0x7f0000000480)=',\x00', &(0x7f00000004c0)="c6c0142bb0c2eba48d93dad558025106ab1e46a2a2b1de", 0x17}, {0x1, 0xde58, &(0x7f00000005c0)='/dev/net/tun\x00', &(0x7f0000000600)="15048f523ba12e26c00e31bad7210f768a5d5be88912cb1d9dcff4f2948cce06de8616dee6967248ba4e6fca4d1750442bddc60c4377e87686ba0edb3b9c64cd572505b246b4ed520f8bf17279f04d5f02d7703b27bd61e0379277e5255863f373800f39ee16af642cf0a8ff74faeab7cb417b01b0b6becc9c7fea4e13add9e89ae0cae009454fadd2a861c69156a7a67d67973ccabba9b541550697ba80030410", 0xa1, 0x12}, {0x3, 0x1, &(0x7f00000006c0)='GPL\x00', &(0x7f0000000700)="67b6b0e370514d798b33c72d79d104b2ad5cab6ecd11e1daf52118a8639631978be55c7b8dab16fbb88a1d13a0ad76634a9438070e6f84fcb7180aa1a742b66fe6a154b077a30cbc0017cf4fd0876c35e7a520bad1f1993dbe3a7626f3add330e98a41142c9c12340a9e4dc7a78ebab838ec8439100a138f08aec9f384251d3d563b6eaeef902167bc18da34a81f02c99c8d9ade196f6fff38363568aaf3005f9a", 0xa1}, {0x1, 0x8, &(0x7f0000000d80)='syzkaller1\x00', &(0x7f0000000800)="bafe55df398ef0b7693a0ab10d3ad027fdb12c9f42ea90c90f6cf19062854dda5aea82bee025804181ebea876d7a0b60b6492cc2965d343932b03af4bb001f", 0x3f}, {0x3, 0xfffff800, &(0x7f0000000840)='-\\\x00', &(0x7f0000000880)="29a6d2443414c5ae1b688f8779d5efb6dadb7c8dcd4e6adf7327b448895c073df802c03f30fb0f5c28e60c06e87827a21c853cfa1b528bd08ad9d8103ff69f8798a2140d308f52675d3ab85468ead2b619639d3139b8a31720e7b566984d67cde16bed8a88c01c30bbb4f811dd21650ddcd33e7ca3dd791813e56316e00e5ae83927c7ce1b629c3fa8820d46bc0de7b234f7699901cd8a49adbb84738e8b71d696d0b30e9055d210609eba33a63a0f5af11382d9ac6fd347cc5cbdbfa5ce9d00ac526c5ba99a74150171cb20b19d0c875568161d942915f64f5015052a338735d83c96f96b7dd9a696", 0xe9, 0x30}, {0xd1ef87b92c9e0b53, 0x9, &(0x7f0000000980)='/\x00', &(0x7f00000009c0)="8328728704026f5259de350587ae25ef93e0c08619a51cdfc627c3e7ad441645c7b690602cf7262cba8454395ba104", 0x2f, 0x10}, {0x3, 0xfffffff9, &(0x7f0000000a00)='@#$\x00', &(0x7f0000000a40)="4a8de527702901c2aa88b1f6ca631202786fe43caadc", 0x16, 0x20}, {0x3, 0x2, &(0x7f0000000a80)='\x00', &(0x7f0000000ac0)="b53e0e5e8b5db839a12d513f22875c3b47f943ae04b165846a009c99d169ffac72d3c4d2f302b6e9abccbbc531a8e452e0ebc66e6fc22225ca8fc297184864a522d888388cd2b5a65731b3aa2f072e66be4f4e3b609b3129d99b31f45acd01d66cd617f3169556d51bd3a98c320337938c65edfb1d52d555e025dd6f3e6a17420da4c1edf73a8ee50a7b902c896eab30672983b0d345c8bd7302b985a6dd0c821d77d955127762b8a2ad63d2a2b8991a24d0d603badd0a3591f35a7a05bf3aa42fd639ece4e23f08dd307890898f8e2b48322d1978e7f22704ace499f7c49b97dd49", 0xe2}]}) (rerun: 32) 1.393946s ago: executing program 1 (id=3819): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10, 0x59}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async, rerun: 64) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) (rerun: 64) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001740)={0x0, 0x6, &(0x7f0000001700)={&(0x7f0000000440)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4) (rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) 1.239734152s ago: executing program 0 (id=3820): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="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"], 0x37c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008004) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000003ec0)={0x20, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x8a, 0x0, 0x0, @uid=0xee00}]}, 0x20}], 0x1, 0x0, 0x0, 0x24000001}, 0x20001020) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000000)={'macsec0\x00', 0x7ff}) 1.076772484s ago: executing program 1 (id=3821): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30004001) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {}, {0x1, 0x0, 0x0, 0xfffffffffffffffd}}}, 0xb8}}, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, &(0x7f00000000c0), 0x4) 1.045443392s ago: executing program 0 (id=3822): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 992.03761ms ago: executing program 4 (id=3823): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r0}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) (async) r1 = socket(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) 941.019301ms ago: executing program 1 (id=3824): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001980)={0x1c, r2, 0xc0f, 0x70bd29, 0x7, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x200008d0) 940.686955ms ago: executing program 3 (id=3825): unshare(0x6020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$unix(0x1, 0x1, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) unshare(0x22020400) (async) close(r1) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0) 860.861626ms ago: executing program 0 (id=3826): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000004000008000000020000b0e42846f000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001000d00000001000000", @ANYRES32, @ANYBLOB="473823a92825ce549dd64fdd7f0900"/24, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf250400000008000800", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYRES64=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@loopback, @in6=@initdev}}, {{}, 0x0, @in=@private}}, &(0x7f0000000500)=0xfffffffffffffebc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x44, 0x0, 0x0, 0x116}, {0x6}]}, 0x10) r6 = socket(0x1, 0x803, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1d, 0x5, 0x470, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x8000000, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 774.560061ms ago: executing program 1 (id=3827): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) accept4$packet(r1, 0x0, 0x0, 0x81000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000001000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c40000000000800084040"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40040c0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 725.103162ms ago: executing program 4 (id=3828): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/70, 0x46}, {&(0x7f0000000240)=""/91, 0x5b}, {&(0x7f00000002c0)=""/183, 0xb7}], 0x3, &(0x7f00000003c0)=""/61, 0x3d}, 0x10100) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x48010000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x1402, 0x210, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x20000095) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x4000001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000840)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r3, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x13}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4008081) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20048044) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x101252}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x40010) syz_emit_ethernet(0x5e, &(0x7f0000000b80)={@local, @local, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0x4}}, {@canfd={0xd, {{0x0, 0x1, 0x1, 0x1}, 0x25, 0x0, 0x0, 0x0, "8542f3ee0a117430a76cd8605adbe959b79fdc898c4d1eaf91b390c29cecf7d2d03b9640020a28d08009e5f6a3e135218eca7e267fd9c6c01d8360408b600d19"}}}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000012c0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001280)={&(0x7f0000000c80)={0x5f0, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x11c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x536}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3eef}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @private2, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6a}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x280000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeae2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x415}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4fb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1686a478}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65ef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe01}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c00000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x167c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3209}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26d56fab}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x5f0}, 0x1, 0x0, 0x0, 0x28140}, 0x48014) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0xc4, 0xb, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040804}, 0x4000000) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), r1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x94, r8, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x33c}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}]}, 0x94}}, 0x4004000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000001680)=0x425db411, 0x4) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r9, 0x0, &(0x7f00000016c0), 0x800) socketpair(0x2c, 0x6, 0x9, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001780)={@broadcast, @multicast1, 0x0}, &(0x7f00000017c0)=0xc) sendmsg$nl_route_sched(r10, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)=@newqdisc={0x50, 0x24, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x7, 0xffff}, {0xffff, 0xffff}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9d}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7fffffff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001940), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x5c, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xd}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x386}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xb}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x40}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xd}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008805}, 0x0) 696.753025ms ago: executing program 3 (id=3829): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x24, 0x0, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x4, 0x7, 0x5, 0xffffffffffffffff, 0xe1, 0x10000, 0xff, 0xbf20}, &(0x7f0000000140)={0x1, 0xfffffffffffffff8, 0x9, 0x356, 0x80000000, 0x8, 0x401, 0x81e}, &(0x7f0000000240)={0x6, 0x100000001, 0xdec6, 0x0, 0xd45, 0x5, 0xfffffffffffffffb, 0x8}, &(0x7f00000002c0), &(0x7f0000000380)={&(0x7f0000000300)={[0x5]}, 0x8}) (async) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "5fe419697b513bec", "65f1e51ed2ac7ffb81aedab50d9020a63c00bb14db86890e6db8662800", "f589b068", "c3ec07ad8faf1630"}, 0x38) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "8b99713c49ae53e4", "b26ac9163f2291edf70bc132ba23165e", "39a8b9d7", "a0391c4630086180"}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x84, &(0x7f0000000040)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}, 0x6a}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0xeb78, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, @in6={0xa, 0x4e23, 0x0, @remote, 0x3}, @in={0x2, 0x6e21, @empty}]}, &(0x7f0000000000)=0x10) 636.403166ms ago: executing program 0 (id=3830): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 424.25801ms ago: executing program 4 (id=3831): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x800, 0x1, 0xff, 0x8, 0x0, 0xfa}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x1c, {{0xa, 0x4e20, 0x9, @mcast2, 0x2}}}, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000001100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 423.038257ms ago: executing program 3 (id=3832): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x0, 0x4000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async) close(r4) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005", 0x2b}], 0x1}, 0x48000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) poll(&(0x7f00000001c0)=[{r6}, {r4, 0x2000}], 0x2, 0xfffffffd) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}]}], {0x14}}, 0x68}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r8, 0x4040942c, &(0x7f0000000240)={0x0, 0x0, [0xcb0c, 0xbd5, 0x7, 0x800, 0x3, 0x4]}) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0xfffffffd, 0x800, 0x0, 0x0, 0x2, 0x3a}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r10, 0x1, 0x0, &(0x7f00000014c0)=""/145, &(0x7f0000000080)=0x91) 422.660843ms ago: executing program 1 (id=3833): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xfffbffff) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={r6, 0xad}, 0x8) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3], 0x7c}}, 0x20000000) 249.851636ms ago: executing program 4 (id=3834): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, 0x0, &(0x7f0000001040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 45.162631ms ago: executing program 0 (id=3835): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x42d}, {&(0x7f0000000740)="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", 0x614}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @local}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa42123972"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r3, 0xff, 0x7, &(0x7f0000000900)="7c73c6e9", 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x6008804) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x7ffffffe, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x7ffffffe, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket(0x2b, 0x1, 0x1) 0s ago: executing program 4 (id=3836): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x883e}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x2, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x46) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRESDEC=r1, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48844) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r8, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) kernel console output (not intermixed with test programs): mode [ 228.577287][T13221] syz_tun: left allmulticast mode [ 228.702803][T13232] netlink: 'syz.4.1957': attribute type 4 has an invalid length. [ 228.734259][T13232] netlink: 'syz.4.1957': attribute type 4 has an invalid length. [ 229.048824][T13248] wireguard0: entered promiscuous mode [ 229.054458][T13248] wireguard0: entered allmulticast mode [ 229.148421][T13256] __nla_validate_parse: 2 callbacks suppressed [ 229.148442][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'. [ 229.170968][T13253] tipc: Enabled bearer , priority 0 [ 229.179765][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1966'. [ 229.204783][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1966'. [ 229.236679][T13253] syzkaller0: entered promiscuous mode [ 229.242197][T13253] syzkaller0: entered allmulticast mode [ 229.254955][T13253] tipc: Resetting bearer [ 229.325532][T13253] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1965'. [ 229.366036][T13252] tipc: Resetting bearer [ 229.377832][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'. [ 229.398692][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1966'. [ 229.429549][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1966'. [ 231.312963][T13252] tipc: Disabling bearer [ 231.531372][T13284] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1972'. [ 231.905018][T13306] tipc: Failed to obtain node identity [ 231.922474][T13306] tipc: Enabling of bearer rejected, failed to enable media [ 232.009550][T13309] netem: change failed [ 232.070310][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 232.126645][T13316] IPVS: Unknown mcast interface: rose0 [ 232.399825][T13332] bond8 (unregistering): Released all slaves [ 232.633938][T13354] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1993'. [ 232.732277][T13359] netlink: 'syz.0.1994': attribute type 12 has an invalid length. [ 232.767991][T13362] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 233.847602][T13427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.966170][T13430] netlink: 'syz.3.2019': attribute type 11 has an invalid length. [ 233.982101][T13432] netlink: 'syz.2.2020': attribute type 7 has an invalid length. [ 233.991229][T13430] netlink: 'syz.3.2019': attribute type 11 has an invalid length. [ 234.002666][T13432] netlink: 'syz.2.2020': attribute type 8 has an invalid length. [ 234.297409][T13453] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.326022][T13453] netlink: 'syz.4.2025': attribute type 1 has an invalid length. [ 234.761494][T13484] netlink: 'syz.0.2034': attribute type 1 has an invalid length. [ 234.767307][T13486] __nla_validate_parse: 9 callbacks suppressed [ 234.767326][T13486] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2033'. [ 234.873874][T13487] bond0: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 234.908341][T13484] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 235.091616][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'. [ 235.162185][T13512] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 235.202359][T13512] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 235.370162][T13523] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2045'. [ 235.623630][T13532] x_tables: unsorted underflow at hook 1 [ 235.626099][T13534] x_tables: unsorted underflow at hook 1 [ 235.842660][T13551] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20000 [ 236.091008][T13564] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2055'. [ 236.321346][T13585] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2060'. [ 236.332618][T13588] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2061'. [ 236.430615][T13590] lo: Caught tx_queue_len zero misconfig [ 236.494639][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2063'. [ 236.612812][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'. [ 236.660825][T13598] tipc: Enabling of bearer rejected, failed to enable media [ 236.673657][T13604] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2068'. [ 236.978326][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2072'. [ 237.116550][T13629] syzkaller0: entered promiscuous mode [ 237.145628][T13629] syzkaller0: entered allmulticast mode [ 237.453919][T13646] vlan0: entered promiscuous mode [ 237.461996][T13646] macvtap0: entered promiscuous mode [ 237.477016][T13646] vlan0: entered allmulticast mode [ 237.490905][T13646] macvtap0: entered allmulticast mode [ 237.497402][T13646] veth0_macvtap: entered allmulticast mode [ 237.551782][T13649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.843890][T13663] vlan2: entered promiscuous mode [ 237.862282][T13663] bridge0: entered promiscuous mode [ 238.065892][T13675] vlan3: entered allmulticast mode [ 238.072483][T13675] bond0: entered allmulticast mode [ 238.640997][T13714] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.498920][T13735] team0: Port device vlan0 removed [ 240.006917][T13760] netlink: 'syz.1.2113': attribute type 7 has an invalid length. [ 240.182501][T13760] netlink: 'syz.1.2113': attribute type 7 has an invalid length. [ 240.341574][T13774] __nla_validate_parse: 8 callbacks suppressed [ 240.341592][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2115'. [ 240.943529][T13799] netlink: 'syz.2.2120': attribute type 1 has an invalid length. [ 242.987129][T13799] bond6: entered promiscuous mode [ 242.992824][T13799] 8021q: adding VLAN 0 to HW filter on device bond6 [ 243.081447][T13811] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 243.108013][T13811] syzkaller1: linktype set to 823 [ 243.259385][T13826] syzkaller0: entered promiscuous mode [ 243.389647][T13826] syzkaller0: entered allmulticast mode [ 243.590571][T13831] bond7: Unable to set down delay as MII monitoring is disabled [ 243.615751][T13831] bond7 (unregistering): Released all slaves [ 244.912289][T13894] batadv_slave_0: Caught tx_queue_len zero misconfig [ 245.288560][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 245.451664][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 245.511652][T13925] netlink: 'syz.0.2148': attribute type 5 has an invalid length. [ 245.612365][T13925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2148'. [ 245.615853][T13930] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 245.733279][T13925] geneve5: entered promiscuous mode [ 245.779349][T13929] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 245.788588][T13925] geneve5: entered allmulticast mode [ 245.842318][ T6522] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 245.902110][ T6522] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 245.974654][ T6522] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 247.169113][T14007] bridge4: entered promiscuous mode [ 247.203996][T14007] bridge4: entered allmulticast mode [ 247.274077][T14009] bridge5: entered promiscuous mode [ 247.284545][T14009] bridge5: entered allmulticast mode [ 247.824382][T14044] netlink: 'syz.3.2176': attribute type 1 has an invalid length. [ 248.065823][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2179'. [ 248.131172][T14062] sctp: [Deprecated]: syz.1.2181 (pid 14062) Use of int in max_burst socket option. [ 248.131172][T14062] Use struct sctp_assoc_value instead [ 248.245612][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2182'. [ 248.522519][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2185'. [ 248.906009][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'. [ 248.917619][T14092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2190'. [ 250.091115][T14140] vlan2: entered promiscuous mode [ 250.109934][T14140] bridge0: entered promiscuous mode [ 250.144875][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2203'. [ 250.166923][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2204'. [ 250.428804][T14155] netlink: 320 bytes leftover after parsing attributes in process `syz.2.2205'. [ 250.458429][T14160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2207'. [ 250.639885][T14170] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2211'. [ 250.672890][T14170] openvswitch: netlink: Message has 5 unknown bytes. [ 251.161409][T14195] netlink: 'syz.0.2218': attribute type 4 has an invalid length. [ 251.201494][T14195] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2218'. [ 251.340355][T14199] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 251.981796][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'. [ 252.380501][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2233'. [ 252.509902][T14253] 8021q: VLANs not supported on lo [ 252.563169][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2234'. [ 252.720977][T14267] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2239'. [ 252.745317][T14267] netlink: 'syz.3.2239': attribute type 2 has an invalid length. [ 252.756896][T14267] netlink: 'syz.3.2239': attribute type 1 has an invalid length. [ 253.135855][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2247'. [ 253.147182][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2247'. [ 253.156772][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2247'. [ 253.190385][T14293] netlink: 'syz.2.2248': attribute type 58 has an invalid length. [ 253.398339][T14303] x_tables: duplicate underflow at hook 2 [ 253.427977][T14303] x_tables: duplicate underflow at hook 2 [ 253.855226][T14327] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 253.929925][T14327] xt_hashlimit: size too large, truncated to 1048576 [ 254.382172][T14341] syzkaller0: entered promiscuous mode [ 254.388828][T14341] syzkaller0: entered allmulticast mode [ 254.412173][T14346] tipc: Invalid UDP bearer configuration [ 254.412219][T14346] tipc: Enabling of bearer rejected, failed to enable media [ 254.446611][T14347] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 255.278621][T14388] openvswitch: netlink: Flow actions attr not present in new flow. [ 255.359295][T14390] netlink: 'syz.3.2274': attribute type 12 has an invalid length. [ 257.245444][T14359] netlink: 'syz.4.2265': attribute type 29 has an invalid length. [ 257.255282][T14382] 8021q: VLANs not supported on gre0 [ 257.292519][T14390] bond7: option primary_reselect: invalid value (255) [ 257.304127][T14390] bond7 (unregistering): Released all slaves [ 257.337533][T14352] netlink: 'syz.4.2265': attribute type 29 has an invalid length. [ 257.524013][T14404] syz_tun: entered allmulticast mode [ 257.549167][T14404] syz_tun: left allmulticast mode [ 257.935186][T14427] vcan1: entered promiscuous mode [ 257.971340][T14427] vcan1: entered allmulticast mode [ 258.110342][T14436] __nla_validate_parse: 11 callbacks suppressed [ 258.110359][T14436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2289'. [ 258.222938][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'. [ 258.874551][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2300'. [ 258.893426][T14475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2300'. [ 258.936055][T14479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.294993][T14495] veth5: entered allmulticast mode [ 259.472465][T14511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'. [ 259.515325][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2311'. [ 259.524967][T14515] netem: change failed [ 259.524963][T14511] netlink: 'syz.2.2312': attribute type 61 has an invalid length. [ 259.527715][T14509] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2311'. [ 259.700018][T14509] veth7: entered promiscuous mode [ 259.762564][T14529] netlink: 'syz.0.2316': attribute type 1 has an invalid length. [ 259.902904][T14533] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2318'. [ 259.923198][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2320'. [ 259.934140][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2318'. [ 260.082728][T14533] 8021q: adding VLAN 0 to HW filter on device bond13 [ 260.440572][T14565] xt_hashlimit: size too large, truncated to 1048576 [ 260.595887][T14572] netlink: 'syz.4.2327': attribute type 64 has an invalid length. [ 260.667218][T14572] netlink: 'syz.4.2327': attribute type 6 has an invalid length. [ 261.829851][T14614] xfrm1: entered promiscuous mode [ 261.852453][T14614] xfrm1: entered allmulticast mode [ 261.911677][T14617] pimreg3: entered allmulticast mode [ 262.117915][T14629] xt_TCPMSS: Only works on TCP SYN packets [ 262.337595][T14643] netlink: 'syz.1.2350': attribute type 5 has an invalid length. [ 262.758737][T14661] veth9: entered allmulticast mode [ 262.831288][T14674] geneve4: entered promiscuous mode [ 262.847127][T14674] geneve4: entered allmulticast mode [ 263.083675][T14691] netlink: 'syz.3.2364': attribute type 58 has an invalid length. [ 264.229226][T14752] x_tables: unsorted entry at hook 3 [ 264.480817][T14766] __nla_validate_parse: 141 callbacks suppressed [ 264.480835][T14766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2381'. [ 264.521403][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2382'. [ 264.532713][T14777] netlink: 'syz.2.2383': attribute type 62 has an invalid length. [ 264.545794][T14775] ip6tnl0: Caught tx_queue_len zero misconfig [ 264.619720][T14775] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2384'. [ 264.690458][T14775] nbd: illegal input index -8454144 [ 264.939904][T14798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2389'. [ 264.949497][T14798] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2389'. [ 264.966435][T14798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2389'. [ 265.070363][T14795] bond9: entered promiscuous mode [ 265.083250][T14795] bond9: entered allmulticast mode [ 265.103358][T14795] 8021q: adding VLAN 0 to HW filter on device bond9 [ 265.158876][T14799] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2390'. [ 265.233462][T14816] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2395'. [ 265.283092][T14815] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2395'. [ 265.500018][T14823] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 265.502600][T14827] Bluetooth: MGMT ver 1.23 [ 265.715471][T14827] Cannot find set identified by id 65534 to match [ 265.853419][T14813] syzkaller0: entered promiscuous mode [ 265.865571][T14813] syzkaller0: entered allmulticast mode [ 265.906534][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2401'. [ 268.868663][T14875] netlink: 'syz.2.2407': attribute type 10 has an invalid length. [ 269.493863][T14912] __nla_validate_parse: 6 callbacks suppressed [ 269.493881][T14912] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.2416'. [ 269.575554][T14916] netlink: 'syz.1.2417': attribute type 24 has an invalid length. [ 270.125466][T14929] netlink: 'syz.2.2424': attribute type 12 has an invalid length. [ 270.616080][T14953] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2431'. [ 270.836042][T14960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2433'. [ 270.862434][T14960] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2433'. [ 271.157886][T14977] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2440'. [ 271.451950][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'. [ 271.496329][T14998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2444'. [ 271.644674][T15004] netlink: 'syz.2.2446': attribute type 10 has an invalid length. [ 271.859651][T15022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2449'. [ 272.320404][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 272.332601][T15045] xt_cgroup: path and classid specified [ 272.548761][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2455'. [ 273.391795][T15091] "syz.4.2470" (15091) uses obsolete ecb(arc4) skcipher [ 274.507595][T15140] vlan0: entered promiscuous mode [ 274.624475][T15138] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 274.633983][T15138] bond7: option packets_per_slave: allowed values 0 - 65535 [ 274.645304][T15138] bond7 (unregistering): Released all slaves [ 275.004113][T15176] netlink: 'syz.0.2489': attribute type 2 has an invalid length. [ 275.014939][T15174] syzkaller0: entered promiscuous mode [ 275.024422][T15174] syzkaller0: entered allmulticast mode [ 275.060084][T15176] s5: renamed from vlan1 [ 275.166828][T15185] __nla_validate_parse: 5 callbacks suppressed [ 275.166859][T15185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2492'. [ 275.245215][T15189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'. [ 275.309980][T15189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.281155][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2503'. [ 276.471800][T15235] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2506'. [ 276.534448][T15239] netlink: 'syz.1.2507': attribute type 1 has an invalid length. [ 276.555452][T15239] netlink: 'syz.1.2507': attribute type 2 has an invalid length. [ 276.754893][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2509'. [ 276.977501][T15260] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20000 [ 277.039435][T15263] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 277.320822][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2518'. [ 277.329916][T15280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2518'. [ 277.339539][T15280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2518'. [ 277.363730][T15263] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.381427][T15273] ipvlan0: entered allmulticast mode [ 277.389272][T15273] bond7: entered allmulticast mode [ 277.457758][T15277] bond7: (slave bridge7): making interface the new active one [ 277.477302][T15277] bridge7: entered allmulticast mode [ 277.494005][T15277] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 277.588233][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2518'. [ 277.624345][T15280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2518'. [ 280.572057][T15309] __nla_validate_parse: 1 callbacks suppressed [ 280.572073][T15309] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2525'. [ 280.639360][T15313] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 280.671066][T15309] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2525'. [ 280.730367][T15320] netlink: 'syz.4.2526': attribute type 1 has an invalid length. [ 280.766732][T15320] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2526'. [ 280.824258][T15320] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2526'. [ 280.859637][T15320] netlink: 'syz.4.2526': attribute type 1 has an invalid length. [ 280.892880][T15320] netlink: 'syz.4.2526': attribute type 8 has an invalid length. [ 280.918316][T15320] netlink: 606 bytes leftover after parsing attributes in process `syz.4.2526'. [ 281.000941][T15331] openvswitch: netlink: IP tunnel dst address not specified [ 281.104802][T15339] xt_hashlimit: size too large, truncated to 1048576 [ 281.175855][T15331] syzkaller0: entered promiscuous mode [ 281.182087][T15331] syzkaller0: entered allmulticast mode [ 281.191840][T15338] tipc: Started in network mode [ 281.212182][T15338] tipc: Node identity e0000001, cluster identity 4711 [ 281.221538][T15347] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2533'. [ 281.250252][T15338] tipc: Enabling of bearer rejected, failed to enable media [ 281.262636][T15345] : renamed from vxcan1 (while UP) [ 281.466249][T15356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 281.576874][T15351] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2536'. [ 281.664472][T15364] veth1_macvtap: entered allmulticast mode [ 281.725259][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2539'. [ 284.932602][T15405] netlink: 'syz.1.2551': attribute type 1 has an invalid length. [ 284.999753][T15405] 8021q: adding VLAN 0 to HW filter on device bond9 [ 285.035680][T15410] bond9: (slave ip6erspan0): making interface the new active one [ 285.045801][T15410] bond9: (slave ip6erspan0): Enslaving as an active interface with an up link [ 285.110535][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2554'. [ 285.148768][T15417] netlink: 'syz.0.2555': attribute type 1 has an invalid length. [ 285.377350][T15424] netlink: 'syz.2.2557': attribute type 1 has an invalid length. [ 285.394138][T15424] netlink: 'syz.2.2557': attribute type 1 has an invalid length. [ 285.907224][T15449] netlink: 'syz.2.2563': attribute type 39 has an invalid length. [ 286.007088][T15457] __nla_validate_parse: 6 callbacks suppressed [ 286.007122][T15457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2566'. [ 286.024735][T15460] netlink: 'syz.4.2564': attribute type 9 has an invalid length. [ 286.375078][T15476] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2567'. [ 286.592923][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 286.624497][T15484] netlink: 'syz.1.2570': attribute type 30 has an invalid length. [ 286.681307][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 286.729553][T15485] netlink: 'syz.1.2570': attribute type 30 has an invalid length. [ 287.130147][T15505] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2576'. [ 287.149611][T15507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2577'. [ 287.193803][T15510] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2579'. [ 287.248240][T15507] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.269515][T15513] macvlan1: entered promiscuous mode [ 287.311619][T15513] macvlan1: entered allmulticast mode [ 287.429904][T15524] netlink: zone id is out of range [ 287.438063][T15524] netlink: zone id is out of range [ 287.451314][T15518] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 287.463572][T15524] netlink: zone id is out of range [ 287.463659][T15524] netlink: zone id is out of range [ 287.463710][T15524] netlink: zone id is out of range [ 287.464031][T15524] netlink: zone id is out of range [ 287.464104][T15524] netlink: zone id is out of range [ 287.492850][T15524] netlink: zone id is out of range [ 287.498762][T15524] netlink: zone id is out of range [ 287.503944][T15524] netlink: zone id is out of range [ 287.554582][T15518] bond10: (slave lo): Enslaving as an active interface with an up link [ 287.740583][T15533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2585'. [ 288.125556][T15544] netlink: 'syz.2.2589': attribute type 10 has an invalid length. [ 288.244571][T15550] syzkaller1: entered promiscuous mode [ 288.265283][T15550] syzkaller1: entered allmulticast mode [ 288.360828][T15554] ip6t_srh: unknown srh match flags 4000 [ 288.479867][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2592'. [ 288.500622][T15560] smc: net device team0 applied user defined pnetid SYZ2 [ 288.509469][T15552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.575859][T15564] smc: net device team0 erased user defined pnetid SYZ2 [ 288.622298][T15552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.656055][T15570] sctp: [Deprecated]: syz.2.2596 (pid 15570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.656055][T15570] Use struct sctp_sack_info instead [ 288.682478][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2597'. [ 289.400644][T15605] pim6reg: entered allmulticast mode [ 289.434265][T15605] pim6reg: left allmulticast mode [ 289.659678][T15605] tipc: Enabled bearer , priority 0 [ 289.823890][T15598] syzkaller0: entered promiscuous mode [ 289.851743][T15598] syzkaller0: entered allmulticast mode [ 289.860503][T15598] tipc: Resetting bearer [ 290.061949][ T73] tipc: Resetting bearer [ 290.074849][T15640] Cannot find set identified by id 65534 to match [ 290.131874][T15597] tipc: Resetting bearer [ 292.643138][T15597] tipc: Disabling bearer [ 293.043970][T15683] __nla_validate_parse: 5 callbacks suppressed [ 293.043994][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2629'. [ 293.073095][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2628'. [ 293.192701][T15693] netlink: 'syz.3.2627': attribute type 2 has an invalid length. [ 293.201261][T15693] netlink: 'syz.3.2627': attribute type 2 has an invalid length. [ 293.322254][T15685] bond11: option xmit_hash_policy: invalid value (64) [ 293.338520][T15685] bond11 (unregistering): Released all slaves [ 293.550610][T15704] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2632'. [ 294.125627][T15741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2641'. [ 294.254963][T15736] bond11: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 294.293455][T15736] bond11 (unregistering): Released all slaves [ 294.728436][T15760] xt_hashlimit: size too large, truncated to 1048576 [ 294.778347][T15761] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2648'. [ 294.796879][T15761] ip6gre0: Caught tx_queue_len zero misconfig [ 294.980816][T15774] veth0_to_bridge: left allmulticast mode [ 295.088405][T15747] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2643'. [ 295.666061][T15803] net_ratelimit: 45 callbacks suppressed [ 295.666083][T15803] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 295.904663][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'. [ 295.936980][T15817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2664'. [ 295.963102][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'. [ 296.008095][T15817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2664'. [ 296.028540][T15824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.941156][T15869] netlink: 'syz.1.2673': attribute type 1 has an invalid length. [ 297.065651][T15869] 8021q: adding VLAN 0 to HW filter on device bond10 [ 297.081416][T15873] vlan3: entered allmulticast mode [ 297.086702][T15873] bond10: entered allmulticast mode [ 297.124156][T15880] bond10: (slave geneve3): making interface the new active one [ 297.133523][T15880] geneve3: entered allmulticast mode [ 297.183487][T15880] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 297.750353][T15914] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 297.905272][T15924] tipc: Started in network mode [ 297.921554][T15924] tipc: Node identity 4, cluster identity 4711 [ 297.941522][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.942731][T15924] tipc: Node number set to 4 [ 298.147322][T15935] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 298.374631][T15946] __nla_validate_parse: 3 callbacks suppressed [ 298.374651][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2691'. [ 298.745792][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'. [ 298.791031][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2698'. [ 298.813995][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'. [ 298.837609][T15969] netlink: 'syz.3.2698': attribute type 1 has an invalid length. [ 298.870983][T15970] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 298.900612][T15969] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 298.905804][T15972] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 298.975397][T15972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2699'. [ 299.179744][T15998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2704'. [ 299.206118][T15999] bridge8: entered promiscuous mode [ 299.213947][T15999] bridge8: entered allmulticast mode [ 299.461811][T16012] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2709'. [ 299.782305][T16027] netlink: 'syz.0.2712': attribute type 13 has an invalid length. [ 299.809639][T16027] netlink: 'syz.0.2712': attribute type 58 has an invalid length. [ 299.830614][T16027] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2712'. [ 300.510076][T16062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2722'. [ 300.565317][T16062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2722'. [ 300.622620][T16070] netlink: 'syz.3.2724': attribute type 1 has an invalid length. [ 301.048881][T16091] IPv6: sit2: Disabled Multicast RS [ 301.558508][T16125] openvswitch: netlink: Unknown key attributes 2 [ 301.565173][T16124] openvswitch: netlink: Unknown key attributes 2 [ 301.718417][T16132] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 302.755714][T16175] openvswitch: netlink: Missing key (keys=40, expected=100) [ 302.777211][T16168] bond8: option lacp_active: mode dependency failed, not supported in mode balance-xor(2) [ 302.834495][T16168] bond8 (unregistering): Released all slaves [ 302.932540][T16169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.989352][T16175] batadv_slave_1: entered promiscuous mode [ 303.104929][T16181] batadv_slave_1: left promiscuous mode [ 303.394198][T16199] __nla_validate_parse: 8 callbacks suppressed [ 303.394215][T16199] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2764'. [ 303.505143][T16201] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2765'. [ 303.549060][T16203] netlink: 'syz.1.2766': attribute type 4 has an invalid length. [ 303.770099][T16214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2770'. [ 303.800851][T16212] netlink: 'syz.4.2769': attribute type 13 has an invalid length. [ 303.805422][T16214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2770'. [ 304.181726][T16232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 304.472607][T16253] netlink: 'syz.4.2780': attribute type 64 has an invalid length. [ 304.752387][T16263] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2784'. [ 305.263997][T16287] bond16: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 305.278021][T16287] bond16 (unregistering): Released all slaves [ 305.552981][T16306] syzkaller0: entered promiscuous mode [ 305.560556][T16306] syzkaller0: entered allmulticast mode [ 305.571174][T16307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2796'. [ 305.692810][T16313] netlink: 'syz.0.2798': attribute type 30 has an invalid length. [ 305.735365][T16314] netlink: 'syz.3.2799': attribute type 1 has an invalid length. [ 305.847590][T16314] 8021q: adding VLAN 0 to HW filter on device bond8 [ 306.000050][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2800'. [ 306.035366][T16321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.139883][T16325] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 306.903997][T16360] syzkaller0: entered promiscuous mode [ 307.229252][T16376] netlink: 'syz.2.2819': attribute type 29 has an invalid length. [ 307.256710][T16376] netlink: 'syz.2.2819': attribute type 29 has an invalid length. [ 307.271988][T16376] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2819'. [ 307.281523][T16376] unsupported nla_type 58 [ 307.339373][T16380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2821'. [ 307.349231][T16380] netlink: 'syz.1.2821': attribute type 7 has an invalid length. [ 307.362414][T16383] netlink: 'syz.0.2822': attribute type 58 has an invalid length. [ 308.251443][T16416] netlink: 'syz.3.2832': attribute type 1 has an invalid length. [ 308.288001][T16419] 0: renamed from hsr0 (while UP) [ 308.314482][T16419] 0: entered allmulticast mode [ 308.320105][T16419] hsr_slave_0: entered allmulticast mode [ 308.325889][T16419] hsr_slave_1: entered allmulticast mode [ 308.352148][T16419] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 308.403937][T16417] ip6tnl0: Caught tx_queue_len zero misconfig [ 308.437637][T16427] __nla_validate_parse: 3 callbacks suppressed [ 308.437653][T16427] netlink: 6056 bytes leftover after parsing attributes in process `syz.1.2836'. [ 308.438552][T16423] tunl0: entered promiscuous mode [ 308.609393][T16433] lo speed is unknown, defaulting to 1000 [ 308.704616][T16433] lo speed is unknown, defaulting to 1000 [ 308.721282][T16437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2839'. [ 308.731529][T16437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2839'. [ 308.755441][T16441] IPv6: NLM_F_CREATE should be specified when creating new route [ 308.771142][T16433] lo speed is unknown, defaulting to 1000 [ 308.784161][T16441] netlink: 'syz.0.2840': attribute type 1 has an invalid length. [ 308.935854][T16446] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2843'. [ 309.329882][T16457] netlink: 'syz.0.2847': attribute type 1 has an invalid length. [ 309.436400][T16463] IPVS: ip_vs_add_dest(): server weight less than zero [ 309.439700][T16457] 8021q: adding VLAN 0 to HW filter on device bond17 [ 309.664130][T16472] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 309.683054][T16472] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 309.691918][T16472] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 309.832160][ T8422] lo speed is unknown, defaulting to 1000 [ 309.840163][T16433] infiniband syz0: set down [ 309.848176][T16433] infiniband syz0: added lo [ 309.864654][T16433] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 309.871146][T16433] infiniband syz0: Couldn't open port 1 [ 309.890734][T16433] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 309.909294][T16433] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 309.949695][T16433] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 310.027358][T16492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2858'. [ 310.028714][T16433] RDS/IB: syz0: added [ 310.041939][T16492] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 310.045098][T16433] smc: adding ib device syz0 with port count 1 [ 310.055488][T16492] bond0: (slave lo): Error: Device can not be enslaved while up [ 310.061347][T16433] smc: ib device syz0 port 1 has no pnetid [ 310.079465][ T5729] lo speed is unknown, defaulting to 1000 [ 310.129810][T16433] lo speed is unknown, defaulting to 1000 [ 310.298393][T16497] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 310.629546][T16509] sctp: [Deprecated]: syz.1.2864 (pid 16509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.629546][T16509] Use struct sctp_sack_info instead [ 310.654398][T16478] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 310.673866][T16478] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 310.987313][T16518] openvswitch: netlink: Missing key (keys=40, expected=100) [ 311.079194][T16524] syzkaller0: entered promiscuous mode [ 311.087835][T16524] syzkaller0: entered allmulticast mode [ 311.115749][T16433] lo speed is unknown, defaulting to 1000 [ 311.425622][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 311.491620][T16544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2873'. [ 311.535895][T16544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2873'. [ 311.667244][T16552] netlink: 'syz.0.2877': attribute type 10 has an invalid length. [ 314.054224][T16433] lo speed is unknown, defaulting to 1000 [ 314.315945][T16570] netlink: 'syz.2.2881': attribute type 24 has an invalid length. [ 314.325730][T16566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'. [ 314.337800][T16570] netlink: 'syz.2.2881': attribute type 24 has an invalid length. [ 314.349139][T16570] netlink: 'syz.2.2881': attribute type 24 has an invalid length. [ 314.358430][T16570] netlink: 'syz.2.2881': attribute type 24 has an invalid length. [ 314.377580][T16570] netlink: 'syz.2.2881': attribute type 24 has an invalid length. [ 314.402211][T16570] netlink: 'syz.2.2881': attribute type 24 has an invalid length. [ 314.448779][T16570] netlink: 'syz.2.2881': attribute type 24 has an invalid length. [ 314.483846][T16570] netlink: 'syz.2.2881': attribute type 24 has an invalid length. [ 314.513230][T16574] netlink: 'syz.0.2884': attribute type 1 has an invalid length. [ 314.982886][T16433] lo speed is unknown, defaulting to 1000 [ 315.507544][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2898'. [ 315.992991][T16433] lo speed is unknown, defaulting to 1000 [ 316.028013][T16643] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2903'. [ 316.141979][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.152713][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.161363][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.173264][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.184357][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.297996][T16655] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 316.326472][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.341810][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.352685][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.368289][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.379980][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.380664][T16656] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2906'. [ 316.920241][T16665] syzkaller0: entered promiscuous mode [ 316.950566][T16665] syzkaller0: entered allmulticast mode [ 317.241749][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2911'. [ 317.445719][T16691] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 317.551425][T16646] lo speed is unknown, defaulting to 1000 [ 317.639949][T16698] validate_nla: 58 callbacks suppressed [ 317.639969][T16698] netlink: 'syz.0.2915': attribute type 3 has an invalid length. [ 317.689856][T16701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2917'. [ 317.772440][T16710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2918'. [ 317.825781][T16710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2918'. [ 317.830551][T16703] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 317.862488][T16703] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 318.004423][T16706] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 318.038771][T16706] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 318.040530][T16718] sctp: [Deprecated]: syz.0.2920 (pid 16718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.040530][T16718] Use struct sctp_sack_info instead [ 318.121998][T16701] macvlan2: entered promiscuous mode [ 318.127922][T16701] macvlan2: entered allmulticast mode [ 318.133797][T16701] bond11: (slave macvlan2): Error -98 calling set_mac_address [ 318.385982][T16726] netlink: 'syz.2.2923': attribute type 3 has an invalid length. [ 318.429915][T16726] netlink: 'syz.2.2923': attribute type 1 has an invalid length. [ 318.482714][T16726] bond8: entered promiscuous mode [ 318.489251][T16726] 8021q: adding VLAN 0 to HW filter on device bond8 [ 318.497939][ T50] Bluetooth: hci5: command tx timeout [ 318.550170][T16736] bond8: (slave bridge9): making interface the new active one [ 318.564869][T16736] bridge9: entered promiscuous mode [ 318.592546][T16736] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 318.600681][T16741] ip6t_srh: unknown srh match flags 5F28 [ 318.705080][T16726] bond8: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 318.745569][T16726] bond8: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 319.081991][T16765] pimreg3: entered allmulticast mode [ 319.371775][T16776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 319.399652][T16779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2936'. [ 319.469092][T16779] IPVS: Unknown mcast interface: vcan0 [ 319.480407][T16780] netlink: 'syz.2.2937': attribute type 1 has an invalid length. [ 319.505497][T16780] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2937'. [ 319.523622][T16788] netem: change failed [ 319.535259][T16646] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.560755][T16780] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2937'. [ 319.578577][T16646] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.609078][T16646] bridge_slave_0: entered allmulticast mode [ 319.633857][T16646] bridge_slave_0: entered promiscuous mode [ 319.652291][T16646] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.661191][T16646] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.681230][T16646] bridge_slave_1: entered allmulticast mode [ 319.699187][T16646] bridge_slave_1: entered promiscuous mode [ 319.710889][T16794] bridge0: port 1(hsr0) entered disabled state [ 319.764232][T16802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2942'. [ 319.938801][T16646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.966778][T16802] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2942'. [ 319.967882][T16646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.052778][T16646] team0: Port device team_slave_0 added [ 320.092337][T16646] team0: Port device team_slave_1 added [ 320.188054][T16646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.214646][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.278414][T16646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.311912][T16646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.332014][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.442563][T16646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.577005][ T50] Bluetooth: hci5: command tx timeout [ 320.599882][T16646] hsr_slave_0: entered promiscuous mode [ 320.608047][T16646] hsr_slave_1: entered promiscuous mode [ 320.672684][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'. [ 320.718144][T16832] netlink: 'syz.0.2952': attribute type 3 has an invalid length. [ 320.871623][T16840] tipc: Started in network mode [ 320.881515][T16840] tipc: Node identity 4, cluster identity 4711 [ 320.897393][T16840] tipc: Node number set to 4 [ 320.923312][T16843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2955'. [ 321.211293][T16851] netlink: 'syz.4.2958': attribute type 10 has an invalid length. [ 321.253620][T16851] netlink: 396 bytes leftover after parsing attributes in process `syz.4.2958'. [ 321.445365][T16646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.490609][T16646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.844316][T16646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.868983][T16646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.894578][T16875] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 321.945368][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2961'. [ 322.147757][T16646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.169846][T16646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.226797][T16885] 8021q: adding VLAN 0 to HW filter on device bond9 [ 322.347875][T16891] netlink: 'syz.4.2964': attribute type 1 has an invalid length. [ 322.446557][T16646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.523988][T16646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.657487][ T50] Bluetooth: hci5: command tx timeout [ 322.777050][T16915] veth0_macvtap: Caught tx_queue_len zero misconfig [ 322.884570][T16917] bond10: (slave lo): Releasing backup interface [ 323.021811][T16921] netlink: 'syz.3.2970': attribute type 1 has an invalid length. [ 323.025514][T16917] bond10: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 323.164490][T16917] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 323.227579][T16917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.640694][T16944] netlink: 'syz.4.2973': attribute type 12 has an invalid length. [ 323.970335][T16937] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 324.001871][T16944] netlink: 'syz.4.2973': attribute type 12 has an invalid length. [ 324.112780][ T6513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 324.141368][ T6513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 324.261227][T16970] xt_TCPMSS: Only works on TCP SYN packets [ 324.391014][T16646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.431249][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.455758][T16646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.490035][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.517824][T16646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.554899][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.588101][T16646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.638942][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.747218][ T50] Bluetooth: hci5: command tx timeout [ 324.860163][T16999] __nla_validate_parse: 9 callbacks suppressed [ 324.860182][T16999] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2985'. [ 325.030773][T16646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.099245][T16646] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.129305][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.136514][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.184801][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.192009][ T6518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.775335][T16935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 325.997800][T17026] xt_hashlimit: size too large, truncated to 1048576 [ 326.082248][T16935] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 326.125612][T17029] IPVS: length: 59 != 8 [ 326.271527][T17033] : renamed from vxcan1 (while UP) [ 326.513544][T17043] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 326.684646][ T6525] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.830630][ T6525] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.904435][ T1160] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 326.951976][T17048] lo speed is unknown, defaulting to 1000 [ 326.970621][ T48] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 327.162326][T16646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.268121][T17074] xt_HMARK: spi-set and port-set can't be combined [ 327.365288][T16646] veth0_vlan: entered promiscuous mode [ 327.464220][T16646] veth1_vlan: entered promiscuous mode [ 327.538904][T17081] netem: change failed [ 327.602809][T16646] veth0_macvtap: entered promiscuous mode [ 327.635353][T16646] veth1_macvtap: entered promiscuous mode [ 327.707849][T16646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.769073][T16646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.799963][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3002'. [ 327.812535][ T1160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.847403][ T1160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.875135][ T1160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.922764][ T1160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.272596][T17098] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 328.333823][T17102] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3005'. [ 328.363298][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.391099][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.518255][T17107] lo speed is unknown, defaulting to 1000 [ 328.565450][T17111] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3007'. [ 328.575858][T17112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3007'. [ 328.633866][ T6522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.666152][ T6522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.865222][T17119] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3008'. [ 328.935303][T17119] netlink: 'syz.0.3008': attribute type 4 has an invalid length. [ 329.245055][T17132] syz_tun: entered allmulticast mode [ 329.287456][T17131] syz_tun: left allmulticast mode [ 329.555838][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'. [ 329.640784][T17146] netlink: 152692 bytes leftover after parsing attributes in process `syz.3.3018'. [ 329.653889][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'. [ 329.680782][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.703363][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.712179][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.727938][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.738609][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.878569][T17146] bond9: (slave bond_slave_1): Device is not bonding slave [ 329.899251][T17146] bond9: option active_slave: invalid value (bond_slave_1) [ 329.935206][T17146] bond9 (unregistering): Released all slaves [ 330.251227][T17166] netlink: 'syz.2.3020': attribute type 1 has an invalid length. [ 330.383804][T17174] sctp: [Deprecated]: syz.4.3022 (pid 17174) Use of int in max_burst socket option. [ 330.383804][T17174] Use struct sctp_assoc_value instead [ 330.654445][T17143] lo speed is unknown, defaulting to 1000 [ 330.820532][T17191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3028'. [ 330.857945][T17193] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3029'. [ 331.371674][T17208] bond1: Removing last arp target with arp_interval on [ 331.552849][T17211] lo speed is unknown, defaulting to 1000 [ 331.560344][T17218] netlink: 'syz.4.3036': attribute type 1 has an invalid length. [ 331.582658][T17218] netlink: 'syz.4.3036': attribute type 2 has an invalid length. [ 331.636149][T17220] syzkaller0: entered promiscuous mode [ 331.643493][T17220] syzkaller0: entered allmulticast mode [ 331.654892][T17220] netlink: 'syz.2.3038': attribute type 13 has an invalid length. [ 331.663118][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'. [ 331.682670][T17220] netlink: 'syz.2.3038': attribute type 13 has an invalid length. [ 331.682743][ T6522] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.692127][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'. [ 331.723466][ T6513] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.744162][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3038'. [ 331.783436][ T5631] Bluetooth: hci1: command tx timeout [ 331.825526][ T73] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.850984][ T73] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.886921][T17226] bond0: (slave bond_slave_1): Releasing backup interface [ 332.279017][T17243] netlink: 'syz.1.3043': attribute type 1 has an invalid length. [ 332.516819][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3044'. [ 332.550317][T17143] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.571757][T17143] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.587216][T17143] bridge_slave_0: entered allmulticast mode [ 332.598000][T17143] bridge_slave_0: entered promiscuous mode [ 332.605956][T17143] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.613725][T17143] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.621724][T17143] bridge_slave_1: entered allmulticast mode [ 332.630294][T17143] bridge_slave_1: entered promiscuous mode [ 332.801040][T17143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.849305][T17143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.178767][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3049'. [ 333.242250][T17143] team0: Port device team_slave_0 added [ 333.269716][T17143] team0: Port device team_slave_1 added [ 333.359027][T17143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.375016][T17143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.437927][T17143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.464838][T17278] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3050'. [ 333.476781][T17143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.502446][T17143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.538654][T17143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.755240][T17143] hsr_slave_0: entered promiscuous mode [ 333.792483][T17143] hsr_slave_1: entered promiscuous mode [ 333.801808][T17298] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3054'. [ 333.832624][T17143] debugfs: 'hsr0' already exists in 'hsr' [ 333.864164][ T5631] Bluetooth: hci1: command tx timeout [ 333.877664][T17143] Cannot create hsr debugfs directory [ 334.073376][T17305] netlink: 'syz.2.3056': attribute type 1 has an invalid length. [ 334.157891][T17305] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 334.331062][T17317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3059'. [ 334.439057][T17317] macsec3: entered promiscuous mode [ 334.460357][T17317] bridge0: entered promiscuous mode [ 334.469075][T17317] macsec3: entered allmulticast mode [ 334.480995][T17317] bridge0: entered allmulticast mode [ 334.509087][T17317] bridge0: port 1(macsec3) entered blocking state [ 334.535873][T17317] bridge0: port 1(macsec3) entered disabled state [ 334.551351][T17317] bridge0: left allmulticast mode [ 334.595263][ T807] bridge0: left promiscuous mode [ 334.823255][T17143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.900701][T17143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.918511][T17143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 335.007090][T17337] syzkaller1: entered promiscuous mode [ 335.012816][T17337] syzkaller1: entered allmulticast mode [ 335.165176][T17143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.175785][T17143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.204015][T17143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 335.240033][T17351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.247342][T17351] IPv6: NLM_F_CREATE should be set when creating new route [ 335.254845][T17351] IPv6: NLM_F_CREATE should be set when creating new route [ 335.262149][T17351] IPv6: NLM_F_CREATE should be set when creating new route [ 335.272419][T17351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.342061][T17143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.357136][T17143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.396334][T17143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 335.937082][ T5631] Bluetooth: hci1: command tx timeout [ 335.946924][T17376] __nla_validate_parse: 3 callbacks suppressed [ 335.946940][T17376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3076'. [ 335.981805][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3074'. [ 336.043559][T17383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3075'. [ 336.161279][T17143] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 336.199918][T17143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.228368][T17143] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 336.277856][T17143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.308564][T17143] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 336.362482][T17143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.403933][T17143] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.449731][T17143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 336.662652][T17143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.720954][T17143] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.752328][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.759584][ T6520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.790908][ T6520] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.798149][ T6520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.352062][T17437] sctp: [Deprecated]: syz.1.3091 (pid 17437) Use of int in max_burst socket option. [ 337.352062][T17437] Use struct sctp_assoc_value instead [ 337.424745][T17443] netlink: 'syz.3.3092': attribute type 1 has an invalid length. [ 337.670089][T17448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3095'. [ 337.896664][T17460] vlan0: entered promiscuous mode [ 337.913347][T17458] syzkaller0: entered promiscuous mode [ 337.930611][T17458] syzkaller0: entered allmulticast mode [ 338.017637][ T5631] Bluetooth: hci1: command tx timeout [ 338.108920][T17467] netem: change failed [ 338.114717][T17468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3101'. [ 338.306005][T17143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.495163][T17143] veth0_vlan: entered promiscuous mode [ 338.515864][T17143] veth1_vlan: entered promiscuous mode [ 338.661876][T17143] veth0_macvtap: entered promiscuous mode [ 338.715309][T17143] veth1_macvtap: entered promiscuous mode [ 338.831344][T17143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.894414][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'. [ 339.028432][T17143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.067396][T17498] tunl0: Caught tx_queue_len zero misconfig [ 339.081243][T17490] syzkaller0: entered promiscuous mode [ 339.111360][T17490] syzkaller0: entered allmulticast mode [ 339.132641][T17502] netlink: 'syz.2.3112': attribute type 1 has an invalid length. [ 339.224336][T17506] netlink: 'syz.3.3113': attribute type 1 has an invalid length. [ 339.259217][T17502] 8021q: adding VLAN 0 to HW filter on device bond11 [ 339.281642][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3113'. [ 339.291480][T17507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3113'. [ 339.313618][T17504] bond11: (slave batadv0): Opening slave failed [ 339.388954][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.437840][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.451775][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.514168][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.660626][T17518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3116'. [ 339.774801][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.826980][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.973324][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.013551][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.031310][T17533] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 340.142539][T17533] bond2: entered promiscuous mode [ 340.148488][T17533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 340.216712][T17534] bond2: (slave bridge1): making interface the new active one [ 340.247714][T17545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3122'. [ 340.256294][T17534] bridge1: entered promiscuous mode [ 340.267934][T17534] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 340.548426][ T9] IPVS: starting estimator thread 0... [ 340.657364][T17554] IPVS: using max 28 ests per chain, 67200 per kthread [ 340.857447][T17561] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 340.875014][T17561] bond3: (slave lo): Enslaving as an active interface with an up link [ 340.889002][T17561] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 341.088979][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.101663][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.113858][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.125182][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.135725][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.665202][T17586] netlink: 'syz.0.3132': attribute type 4 has an invalid length. [ 341.709346][T17586] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3132'. [ 341.950984][T17569] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 342.310666][T17563] lo speed is unknown, defaulting to 1000 [ 342.473218][T17627] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 342.560727][T17629] netlink: 'syz.0.3144': attribute type 5 has an invalid length. [ 342.892793][T17640] syzkaller0: entered promiscuous mode [ 342.945108][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 342.965697][T17640] syzkaller0: entered allmulticast mode [ 343.012726][T17655] netlink: 'syz.1.3149': attribute type 75 has an invalid length. [ 343.195129][T17663] netlink: 'syz.1.3152': attribute type 1 has an invalid length. [ 343.218557][ T5631] Bluetooth: hci2: command tx timeout [ 343.402062][T17663] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.403204][T17674] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3154'. [ 343.440378][T17676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3156'. [ 343.480648][T17671] bond4: (slave ip6gretap1): making interface the new active one [ 343.492270][T17681] netlink: 'syz.4.3155': attribute type 1 has an invalid length. [ 343.502292][T17671] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 343.512999][T17682] netlink: 'syz.4.3155': attribute type 1 has an invalid length. [ 343.962893][T17707] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 344.359736][T17727] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3170'. [ 344.545463][T17563] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.564657][T17563] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.573114][T17563] bridge_slave_0: entered allmulticast mode [ 344.583229][T17563] bridge_slave_0: entered promiscuous mode [ 344.639860][T17563] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.687046][T17563] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.723734][T17563] bridge_slave_1: entered allmulticast mode [ 344.750658][T17563] bridge_slave_1: entered promiscuous mode [ 344.864916][T17752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3175'. [ 344.938328][T17563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.023767][T17563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.074266][T17760] wg1 speed is unknown, defaulting to 1000 [ 345.124657][T17764] siw: device registration error -23 [ 345.149183][T17760] wg1 speed is unknown, defaulting to 1000 [ 345.164160][T17768] netlink: 'syz.0.3177': attribute type 1 has an invalid length. [ 345.195396][T17767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 345.208074][T17563] team0: Port device team_slave_0 added [ 345.218092][T17563] team0: Port device team_slave_1 added [ 345.222771][T17762] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3177'. [ 345.223795][T17760] wg1 speed is unknown, defaulting to 1000 [ 345.265822][T17760] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 345.302026][ T5631] Bluetooth: hci2: command tx timeout [ 345.306333][T17760] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 345.328052][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3177'. [ 345.364205][T17760] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 345.375012][T17563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.415113][T17563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.439497][T17760] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 345.469750][T17780] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 345.478076][T17563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.552203][T17760] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 345.575478][T17776] bridge_slave_0: left allmulticast mode [ 345.593463][T17776] bridge_slave_0: left promiscuous mode [ 345.634744][T17776] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.710273][T17776] bridge_slave_1: left allmulticast mode [ 345.717686][T17776] bridge_slave_1: left promiscuous mode [ 345.729578][T17776] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.748578][T17776] bond0: (slave bond_slave_0): Releasing backup interface [ 345.782717][T17776] bond0: (slave bond_slave_1): Releasing backup interface [ 345.812795][T17776] team0: Port device team_slave_0 removed [ 345.825341][T17776] team0: Port device team_slave_1 removed [ 345.835807][T17776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.848846][T17776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.884376][T17776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.911043][T17776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.943075][T17776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 346.030108][T17563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.047646][T17563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.080639][T17563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.320440][T17760] wg1 speed is unknown, defaulting to 1000 [ 346.369414][T17794] syzkaller0: entered promiscuous mode [ 346.377122][T17794] syzkaller0: entered allmulticast mode [ 346.468660][T17760] wg1 speed is unknown, defaulting to 1000 [ 346.500691][T17760] wg1 speed is unknown, defaulting to 1000 [ 346.605274][T17760] wg1 speed is unknown, defaulting to 1000 [ 346.638657][T17563] hsr_slave_0: entered promiscuous mode [ 346.645510][T17563] hsr_slave_1: entered promiscuous mode [ 346.652882][T17563] debugfs: 'hsr0' already exists in 'hsr' [ 346.674311][T17563] Cannot create hsr debugfs directory [ 346.712824][T17760] wg1 speed is unknown, defaulting to 1000 [ 346.784007][T17760] wg1 speed is unknown, defaulting to 1000 [ 346.848889][T17760] wg1 speed is unknown, defaulting to 1000 [ 346.870128][T17760] wg1 speed is unknown, defaulting to 1000 [ 347.211561][T17815] netlink: 'syz.0.3188': attribute type 1 has an invalid length. [ 347.230300][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3188'. [ 347.244899][T17815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3188'. [ 347.257490][T17815] netlink: 'syz.0.3188': attribute type 2 has an invalid length. [ 347.277480][T17815] netlink: 'syz.0.3188': attribute type 2 has an invalid length. [ 347.291134][T17563] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.295674][T17815] netlink: 'syz.0.3188': attribute type 2 has an invalid length. [ 347.325885][T17837] netlink: 'syz.3.3190': attribute type 16 has an invalid length. [ 347.343897][T17563] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 347.362683][T17837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3190'. [ 347.381562][ T5631] Bluetooth: hci2: command tx timeout [ 347.624825][T17563] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.684335][T17563] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 347.684663][T17850] netlink: 'syz.1.3195': attribute type 3 has an invalid length. [ 347.721155][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3196'. [ 347.741186][T17850] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3195'. [ 347.865497][T17863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 347.900667][T17854] bond2: entered promiscuous mode [ 347.914248][T17854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.978624][T17563] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.001369][T17563] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 348.139442][T17866] sch_tbf: burst 0 is lower than device lo mtu (1294) ! [ 348.194678][T17563] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.217268][T17563] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 348.349716][T17882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3204'. [ 348.354555][T17880] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3203'. [ 348.411221][T17884] netlink: 'syz.0.3205': attribute type 49 has an invalid length. [ 348.642293][T17884] ip6gretap0: entered promiscuous mode [ 348.650139][T17884] ip6gretap0: entered allmulticast mode [ 349.074368][T17906] : renamed from team_slave_1 [ 349.127883][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'. [ 349.212915][T17912] openvswitch: netlink: IPv4 tun info is not correct [ 349.424687][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3215'. [ 349.451569][T17563] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.456416][ T5631] Bluetooth: hci2: command tx timeout [ 349.512749][T17563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.562666][T17563] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.619048][T17563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.649808][T17563] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.703321][T17563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.838207][T17934] netlink: 'syz.0.3221': attribute type 1 has an invalid length. [ 349.850705][T17563] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.917268][T17563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 350.271711][T17563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.405614][T17563] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.462304][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.469557][ T6518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.561821][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.569040][ T6518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.847214][T17980] syzkaller0: entered promiscuous mode [ 350.880489][T17980] syzkaller0: entered allmulticast mode [ 351.094257][T17991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.680883][T18008] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 351.787732][T18011] : entered promiscuous mode [ 351.879387][T18018] lo: Caught tx_queue_len zero misconfig [ 351.960002][T18025] netlink: 'syz.0.3238': attribute type 1 has an invalid length. [ 351.974320][T18025] netlink: 'syz.0.3238': attribute type 1 has an invalid length. [ 352.011685][T18025] netlink: 'syz.0.3238': attribute type 8 has an invalid length. [ 352.086818][T18018] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.251337][T18041] __nla_validate_parse: 6 callbacks suppressed [ 352.252537][T18044] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.276306][T18041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3241'. [ 352.364144][T18046] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 352.395382][T17563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.500272][T18057] netlink: 'syz.3.3247': attribute type 11 has an invalid length. [ 352.611970][T18051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.664372][T18066] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.705386][T17563] veth0_vlan: entered promiscuous mode [ 352.793677][T17563] veth1_vlan: entered promiscuous mode [ 352.848958][T18068] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3249'. [ 352.902387][T18076] netlink: 'syz.4.3251': attribute type 1 has an invalid length. [ 352.929680][T18076] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 352.991878][T17563] veth0_macvtap: entered promiscuous mode [ 353.058565][T17563] veth1_macvtap: entered promiscuous mode [ 353.099405][T17563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.119667][T17563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.179675][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.206324][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.222501][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3256'. [ 353.276596][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.316895][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.577331][T18092] syzkaller1: entered promiscuous mode [ 353.585585][T18092] syzkaller1: entered allmulticast mode [ 353.739520][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.781957][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.852294][T18110] syzkaller1: entered promiscuous mode [ 353.863076][T18110] syzkaller1: entered allmulticast mode [ 353.876874][ T6518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.883674][T18102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3257'. [ 353.885733][ T6518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.919587][T18110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3260'. [ 353.930944][T18102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3257'. [ 353.990469][T18116] netlink: 'syz.4.3263': attribute type 2 has an invalid length. [ 354.029085][T18116] netlink: 'syz.4.3263': attribute type 2 has an invalid length. [ 354.260808][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.263705][T18122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'. [ 354.563110][T18124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3266'. [ 354.672648][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.689423][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.699789][T18124] netlink: 'syz.3.3266': attribute type 5 has an invalid length. [ 354.720487][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 354.735360][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.753005][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 354.914054][T18131] syzkaller0: entered promiscuous mode [ 354.937782][T18131] syzkaller0: entered allmulticast mode [ 355.110375][T18148] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3271'. [ 356.828380][ T50] Bluetooth: hci4: command tx timeout [ 358.307967][T18148] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 358.348882][ T5622] bond0: (slave syz_tun): Releasing backup interface [ 358.669917][T18180] netlink: 'syz.0.3277': attribute type 12 has an invalid length. [ 358.897039][ T50] Bluetooth: hci4: command tx timeout [ 358.975499][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3278'. [ 359.019155][T18203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3280'. [ 359.047930][T18202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3280'. [ 359.101353][T18207] netlink: 'syz.1.3281': attribute type 11 has an invalid length. [ 359.117502][ T1160] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.127103][T18207] netlink: 'syz.1.3281': attribute type 11 has an invalid length. [ 359.147309][T18207] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3281'. [ 359.157035][ T1160] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.171041][T18208] netlink: 'syz.1.3281': attribute type 11 has an invalid length. [ 359.179966][ T1160] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.191617][T18208] netlink: 'syz.1.3281': attribute type 11 has an invalid length. [ 359.200065][ T1160] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.209509][T18208] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3281'. [ 359.288175][T18128] lo speed is unknown, defaulting to 1000 [ 359.694250][T18128] wg1 speed is unknown, defaulting to 1000 [ 359.729016][T18228] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 359.937678][T18236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3290'. [ 359.966952][T18236] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3290'. [ 360.215760][T18256] netlink: 'syz.3.3294': attribute type 1 has an invalid length. [ 360.248142][T18256] netlink: 'syz.3.3294': attribute type 2 has an invalid length. [ 360.468535][T18263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3296'. [ 360.591332][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3297'. [ 360.809164][T18128] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.819871][T18128] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.827922][T18128] bridge_slave_0: entered allmulticast mode [ 360.835852][T18128] bridge_slave_0: entered promiscuous mode [ 360.845642][T18128] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.867224][T18128] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.879610][T18128] bridge_slave_1: entered allmulticast mode [ 360.895159][T18128] bridge_slave_1: entered promiscuous mode [ 360.976423][ T50] Bluetooth: hci4: command tx timeout [ 361.007108][T18272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'. [ 361.041569][T18272] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 361.062051][T18128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.113863][T18128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.346974][T18265] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 361.371264][T18128] team0: Port device team_slave_0 added [ 361.404194][T18128] team0: Port device team_slave_1 added [ 361.484040][T18274] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 361.505528][T18274] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 361.613553][T18128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.645296][T18128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.692713][T18309] xt_hashlimit: size too large, truncated to 1048576 [ 361.711810][T18128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.734291][T18274] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 361.739465][T18128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.751724][T18274] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 361.768918][T18128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.816375][T18128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.853907][T18274] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.881138][T18274] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 362.144001][T18274] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 362.168282][T18274] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 362.174952][T18128] hsr_slave_0: entered promiscuous mode [ 362.210548][T18128] hsr_slave_1: entered promiscuous mode [ 362.242452][T18128] debugfs: 'hsr0' already exists in 'hsr' [ 362.261715][T18128] Cannot create hsr debugfs directory [ 363.040585][T18128] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.076256][T18128] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.304400][T18128] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.337558][T18128] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.540446][T18128] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.577153][T18128] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.738534][T18383] netlink: 'syz.0.3319': attribute type 2 has an invalid length. [ 363.764598][T18383] netlink: 'syz.0.3319': attribute type 2 has an invalid length. [ 363.920362][T18128] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.958591][T18128] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.325937][T18411] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 364.458553][T18421] __nla_validate_parse: 1 callbacks suppressed [ 364.458573][T18421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3328'. [ 364.522243][T18423] tipc: Enabling of bearer rejected, failed to enable media [ 364.648255][T18429] 8021q: adding VLAN 0 to HW filter on device bond6 [ 364.708909][T18429] bond6 (unregistering): Released all slaves [ 364.761771][T18128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.771341][T18128] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.784281][T18128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.802274][T18128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.828174][T18128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.859106][T18128] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.880910][T18128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 364.894182][T18128] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 365.102331][T18128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.250451][T18463] netlink: 'syz.0.3338': attribute type 1 has an invalid length. [ 365.259348][T18128] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.285858][ T6513] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.293115][ T6513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.311593][T18463] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3338'. [ 365.325769][T18463] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3338'. [ 365.353997][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.361263][ T6518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.392684][T18467] netlink: 'syz.0.3338': attribute type 1 has an invalid length. [ 365.405008][T18463] netlink: 'syz.0.3338': attribute type 1 has an invalid length. [ 365.435819][T18463] netlink: 'syz.0.3338': attribute type 8 has an invalid length. [ 365.446910][T18463] netlink: 582 bytes leftover after parsing attributes in process `syz.0.3338'. [ 365.533065][T18467] bond3: entered promiscuous mode [ 365.557241][T18467] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.624613][T18471] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 365.676236][T18471] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 365.696233][T18471] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 366.317737][T18477] h: entered promiscuous mode [ 366.457619][T18487] openvswitch: netlink: IPv4 tun info is not correct [ 366.466641][T18488] netlink: 'syz.2.3342': attribute type 1 has an invalid length. [ 366.486910][T18488] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3342'. [ 366.863186][T18498] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 366.923847][T18498] bond6 (unregistering): Released all slaves [ 366.991853][T18513] x_tables: unsorted entry at hook 1 [ 367.014340][T18511] x_tables: unsorted entry at hook 1 [ 367.030735][T18513] xt_socket: unknown flags 0x50 [ 367.277531][T18521] netlink: 808 bytes leftover after parsing attributes in process `syz.1.3352'. [ 367.379615][T18521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3352'. [ 367.618651][T18539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3356'. [ 367.924674][T18556] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3359'. [ 367.953895][T18556] netlink: 'syz.0.3359': attribute type 3 has an invalid length. [ 367.977147][T18556] netlink: 'syz.0.3359': attribute type 1 has an invalid length. [ 367.990338][T18556] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3359'. [ 368.151644][T18128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.265029][ T9] IPVS: starting estimator thread 0... [ 368.271229][T18570] wireguard: wg0: Could not create IPv4 socket [ 368.367551][T18572] IPVS: using max 32 ests per chain, 76800 per kthread [ 368.517835][T18581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.764219][T18598] syzkaller1: entered promiscuous mode [ 368.784845][T18598] syzkaller1: entered allmulticast mode [ 368.893499][T18593] bond6: (slave bond_slave_1): Device is not bonding slave [ 368.905600][T18593] bond6: option active_slave: invalid value (bond_slave_1) [ 368.918970][T18593] bond6 (unregistering): Released all slaves [ 369.048515][T18609] netlink: 'syz.2.3374': attribute type 2 has an invalid length. [ 369.071930][T18128] veth0_vlan: entered promiscuous mode [ 369.107744][T18609] netlink: 'syz.2.3374': attribute type 11 has an invalid length. [ 369.142051][T18128] veth1_vlan: entered promiscuous mode [ 369.255229][T18128] veth0_macvtap: entered promiscuous mode [ 369.276317][T18128] veth1_macvtap: entered promiscuous mode [ 369.364509][T18128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.419980][T18128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.446957][ T6518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.496298][ T6518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.539138][ T6518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.575904][ T6518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.867356][T18635] __nla_validate_parse: 4 callbacks suppressed [ 369.867376][T18635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3385'. [ 369.979493][T18638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'. [ 370.020583][ T6525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.060346][ T6525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.292100][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.317812][T18658] netlink: 'syz.3.3391': attribute type 1 has an invalid length. [ 370.325804][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.352580][T18651] netlink: 'syz.1.3389': attribute type 16 has an invalid length. [ 370.393084][T18651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3389'. [ 370.457039][T18658] 8021q: adding VLAN 0 to HW filter on device bond10 [ 370.502890][T18663] x_tables: duplicate underflow at hook 2 [ 371.307983][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.319414][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.328946][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.340446][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.350105][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.474206][T18692] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 371.841387][T18706] netlink: 'syz.1.3403': attribute type 1 has an invalid length. [ 372.017450][T18706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 372.070492][T18707] syzkaller0: entered promiscuous mode [ 372.088511][T18707] syzkaller0: entered allmulticast mode [ 372.138651][T18706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3403'. [ 372.156002][T18703] bond6: (slave veth0_to_bond): making interface the new active one [ 372.169650][T18703] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 372.233045][T18717] bond6: entered promiscuous mode [ 372.273921][T18717] veth0_to_bond: entered promiscuous mode [ 372.300083][T18717] bond6: entered allmulticast mode [ 372.308421][T18717] veth0_to_bond: entered allmulticast mode [ 372.432655][T18706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 372.674331][ T6513] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.687831][ T6513] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.709781][T18719] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3406'. [ 372.804105][ T6513] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.815418][ T6513] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.930514][T18685] lo speed is unknown, defaulting to 1000 [ 372.971287][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3412'. [ 373.054382][ T6513] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.123909][ T6513] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.376756][ T50] Bluetooth: hci0: command tx timeout [ 373.423495][ T6513] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.440888][ T6513] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.576105][T18769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3418'. [ 373.629705][T18769] openvswitch: netlink: Flow key attr not present in new flow. [ 373.957111][T18778] netlink: 'syz.1.3419': attribute type 21 has an invalid length. [ 373.965245][T18778] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3419'. [ 375.459965][ T50] Bluetooth: hci0: command tx timeout [ 376.383337][T18685] wg1 speed is unknown, defaulting to 1000 [ 376.399360][T18775] kthread_run failed with err -4 [ 376.407125][T18778] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3419'. [ 376.864891][T18794] IPVS: ip_vs_add_dest(): server weight less than zero [ 376.891412][T18791] macvlan2: entered promiscuous mode [ 376.921143][T18791] macvlan2: entered allmulticast mode [ 377.320972][ T6513] hsr0: left allmulticast mode [ 377.348072][ T6513] hsr_slave_0: left allmulticast mode [ 377.359584][ T6513] hsr_slave_1: left allmulticast mode [ 377.413476][ T6513] hsr0: left promiscuous mode [ 377.436920][ T6513] bridge0: port 1(hsr0) entered disabled state [ 377.532207][T18826] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3431'. [ 377.541763][ T50] Bluetooth: hci0: command tx timeout [ 377.568361][T18826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3431'. [ 377.579761][T18826] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3431'. [ 377.596864][T18826] netlink: 'syz.1.3431': attribute type 3 has an invalid length. [ 377.604738][T18826] netlink: 'syz.1.3431': attribute type 2 has an invalid length. [ 377.623794][T18826] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3431'. [ 378.367790][ T6513] bond3 (unregistering): (slave geneve2): Releasing active interface [ 378.542439][ T6513]  (unregistering): Released all slaves [ 378.553984][ T6513] bond1 (unregistering): Released all slaves [ 378.568013][ T6513] bond2 (unregistering): Released all slaves [ 378.632682][ T6513] bond0 (unregistering): Released all slaves [ 378.646677][ T6513] bond3 (unregistering): Released all slaves [ 378.663201][ T6513] bond4 (unregistering): Released all slaves [ 378.680575][ T6513] bond5 (unregistering): Released all slaves [ 378.694589][ T6513] bond6 (unregistering): Released all slaves [ 378.742940][ T6513] bond7 (unregistering): Released all slaves [ 378.759917][ T6513] bond8 (unregistering): Released all slaves [ 378.791164][ T6513] bond9 (unregistering): Released all slaves [ 378.811418][ T6513] bond10 (unregistering): Released all slaves [ 378.857902][T18804] vxcan3: entered allmulticast mode [ 378.910204][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 379.073118][ T9] wg1 speed is unknown, defaulting to 1000 [ 379.125085][T18861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3437'. [ 379.148860][ T9] syz2: Port: 1 Link DOWN [ 379.153897][ T6513] tipc: Left network mode [ 379.172348][T18860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3437'. [ 379.617511][ T50] Bluetooth: hci0: command tx timeout [ 380.440195][T18877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3440'. [ 380.464093][T18685] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.471808][T18685] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.480069][T18685] bridge_slave_0: entered allmulticast mode [ 380.500162][T18685] bridge_slave_0: entered promiscuous mode [ 380.560295][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 380.587846][T18685] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.633250][T18685] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.652886][T18685] bridge_slave_1: entered allmulticast mode [ 380.679308][T18685] bridge_slave_1: entered promiscuous mode [ 380.838612][T18685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.884899][T18685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.090146][T18685] team0: Port device team_slave_0 added [ 381.109571][T18685] team0: Port device team_slave_1 added [ 381.203372][T18685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.212612][T18685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.250556][T18685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.282013][T18685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.292363][T18685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.322076][T18685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.604801][T18685] hsr_slave_0: entered promiscuous mode [ 381.611519][T18685] hsr_slave_1: entered promiscuous mode [ 381.623667][T18685] debugfs: 'hsr0' already exists in 'hsr' [ 381.636017][T18685] Cannot create hsr debugfs directory [ 381.648323][ T6513] hsr_slave_0: left promiscuous mode [ 381.654603][ T6513] hsr_slave_1: left promiscuous mode [ 381.678105][ T6513] veth0_macvtap: left allmulticast mode [ 381.683864][ T6513] veth0_macvtap: left promiscuous mode [ 381.697144][ T50] Bluetooth: hci0: command tx timeout [ 382.043453][ T73] smbdirect: ib_dev[syz2] removed [ 382.154447][T18863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.578113][T18935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3453'. [ 382.594560][T18938] netlink: 'syz.0.3454': attribute type 1 has an invalid length. [ 382.665038][T18935] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3453'. [ 382.703749][T18935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3453'. [ 382.789639][T18943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3455'. [ 382.802693][T18938] bond4: entered promiscuous mode [ 382.853506][T18938] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.970633][T18939] bridge3: entered promiscuous mode [ 382.989445][T18939] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 383.011656][ T6520] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 383.188722][ T6513] IPVS: stop unused estimator thread 0... [ 383.197606][ T6520] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 383.613016][T18974] netlink: 'syz.4.3459': attribute type 29 has an invalid length. [ 383.647659][ T50] block nbd2: Receive control failed (result -32) [ 384.105644][T18991] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3465'. [ 384.137994][T19000] netlink: 'syz.4.3465': attribute type 1 has an invalid length. [ 384.172518][T19000] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3465'. [ 384.856465][T19027] Cannot find add_set index 0 as target [ 384.927707][T19027] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 385.425089][T19028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3471'. [ 385.493493][T19044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3471'. [ 385.630030][T19054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3476'. [ 385.788700][T19055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3471'. [ 385.934693][T19060] vlan3: entered allmulticast mode [ 385.952330][T19060] bond0: entered allmulticast mode [ 385.970620][T19060] bond_slave_0: entered allmulticast mode [ 386.259006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.467811][T19079] netlink: 'syz.1.3482': attribute type 1 has an invalid length. [ 386.506974][T19079] netlink: 'syz.1.3482': attribute type 4 has an invalid length. [ 388.144478][T19039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.158708][T18685] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.221645][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.250272][T18685] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.292269][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.349340][T18685] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 388.402285][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.431426][T18685] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 388.469403][T18685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.548991][T19149] syzkaller0: entered promiscuous mode [ 388.565674][T19149] syzkaller0: entered allmulticast mode [ 388.612827][T19149] tipc: Started in network mode [ 388.624789][T19149] tipc: Node identity , cluster identity 4711 [ 388.632047][T19149] tipc: Failed to obtain node identity [ 388.639140][T19149] tipc: Enabling of bearer rejected, failed to enable media [ 388.860226][T18685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.884424][T18685] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.931251][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.938456][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.013984][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.021197][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.083197][T19181] __nla_validate_parse: 3 callbacks suppressed [ 389.083216][T19181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3496'. [ 389.120126][T19181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3496'. [ 389.155075][T19181] geneve2: entered promiscuous mode [ 389.169330][T19180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3497'. [ 389.171172][T19181] geneve2: entered allmulticast mode [ 389.244231][T19180] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 389.294740][T19181] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3496'. [ 389.351968][T19181] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3496'. [ 389.374921][T19181] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3496'. [ 389.910572][T18685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.971967][T18685] veth0_vlan: entered promiscuous mode [ 389.984650][T18685] veth1_vlan: entered promiscuous mode [ 390.024559][T18685] veth0_macvtap: entered promiscuous mode [ 390.045837][T18685] veth1_macvtap: entered promiscuous mode [ 390.070502][T18685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.083786][T18685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.104894][ T136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.119150][ T136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.132999][ T136] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.144892][ T136] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.503846][T19153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.657195][ T6513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.692617][ T6513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.872208][ T6520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.887345][ T6520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.084984][T19230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3507'. [ 392.145142][T19235] x_tables: duplicate underflow at hook 2 [ 392.172822][T19230] block nbd0: reconnected socket [ 392.197245][T19230] nbd: socks must be embedded in a SOCK_ITEM attr [ 392.237251][ T50] block nbd0: Receive control failed (result -32) [ 392.313000][T19237] netlink: 'syz.4.3510': attribute type 1 has an invalid length. [ 392.347714][T19237] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3510'. [ 392.377718][T19237] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3510'. [ 392.394070][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3511'. [ 392.858090][T19260] vlan2: entered promiscuous mode [ 392.863353][T19260] bridge0: entered promiscuous mode [ 392.871910][T19267] mac80211_hwsim hwsim35 : renamed from wlan1 [ 393.430201][T19302] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 393.642298][T19310] tun0: tun_chr_ioctl cmd 1074025675 [ 393.658948][T19313] IPVS: length: 151 != 8 [ 393.659554][T19310] tun0: persist disabled [ 393.893942][ T29] audit: type=1107 audit(1778070380.204:11): pid=19326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='r e'CeA}Ï9?J&>]ӡ&' [ 393.898471][T19327] netlink: 'syz.4.3535': attribute type 21 has an invalid length. [ 394.271821][T19339] __nla_validate_parse: 8 callbacks suppressed [ 394.271839][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3540'. [ 394.360482][T19343] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3540'. [ 394.403894][T19347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3542'. [ 394.864495][T19373] sctp: [Deprecated]: syz.3.3544 (pid 19373) Use of int in max_burst socket option deprecated. [ 394.864495][T19373] Use struct sctp_assoc_value instead [ 395.123670][T19388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.497213][T19407] tipc: Enabling of bearer rejected, failed to enable media [ 395.688243][T19418] netem: change failed [ 395.728354][T19418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3555'. [ 396.179109][T19442] sctp: [Deprecated]: syz.1.3561 (pid 19442) Use of int in maxseg socket option. [ 396.179109][T19442] Use struct sctp_assoc_value instead [ 396.203154][T19431] syzkaller0: entered promiscuous mode [ 396.227879][T19431] syzkaller0: entered allmulticast mode [ 396.749367][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3565'. [ 397.882240][ T8423] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 398.079926][T19474] fido_id[19474]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 400.314004][T19491] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3574'. [ 400.482388][T19490] syzkaller0: entered promiscuous mode [ 400.488296][T19490] syzkaller0: entered allmulticast mode [ 403.824827][T19521] netlink: 'syz.0.3582': attribute type 1 has an invalid length. [ 404.167267][T19539] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 404.198568][T19541] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3587'. [ 404.221553][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3588'. [ 404.232348][T19541] openvswitch: netlink: Message has 1 unknown bytes. [ 404.237099][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3588'. [ 404.252334][T19541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.565001][T19560] netlink: 'syz.3.3591': attribute type 1 has an invalid length. [ 404.670836][T19560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.698946][T19560] bond1: (slave geneve2): making interface the new active one [ 404.708888][T19560] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 405.055812][T19575] xt_CONNSECMARK: invalid mode: 0 [ 405.061359][T19577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3598'. [ 405.352219][T19588] dvmrp0: entered allmulticast mode [ 405.544617][T19598] netlink: 'syz.2.3604': attribute type 5 has an invalid length. [ 405.706044][T19605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3607'. [ 405.822819][T19605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3607'. [ 405.913715][ T136] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.928140][ T136] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.941353][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.971980][T19615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.267820][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.310008][T19627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'. [ 406.435992][T19630] syz_tun: entered allmulticast mode [ 406.555382][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3614'. [ 406.625451][T19630] syzkaller0: entered promiscuous mode [ 406.649834][T19630] syzkaller0: entered allmulticast mode [ 406.659005][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.848121][T19648] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3620'. [ 406.864585][T19629] syz_tun: left allmulticast mode [ 407.550812][T19681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3629'. [ 407.967703][T19698] xt_bpf: check failed: parse error [ 408.212503][T19714] lo: entered promiscuous mode [ 408.336059][T19714] tunl0: entered promiscuous mode [ 408.374575][T19714] gre0: entered promiscuous mode [ 408.409074][T19714] gretap0: entered promiscuous mode [ 408.434921][T19714] erspan0: entered promiscuous mode [ 408.452453][T19725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3639'. [ 408.459225][T19714] ip_vti0: entered promiscuous mode [ 408.479090][T19724] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 408.500451][T19688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3631'. [ 408.702933][T19727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3639'. [ 408.724868][T19727] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3639'. [ 408.833860][T19731] pim6reg1: entered promiscuous mode [ 408.863203][T19731] pim6reg1: entered allmulticast mode [ 409.062263][T19739] bridge_slave_0: left allmulticast mode [ 409.071799][T19741] openvswitch: netlink: Multiple metadata blocks provided [ 409.107794][T19739] bridge_slave_0: left promiscuous mode [ 409.138191][T19739] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.202486][T19739] bridge_slave_1: left allmulticast mode [ 409.217833][T19669] Bluetooth: hci0: command 0x0405 tx timeout [ 409.221503][T19739] bridge_slave_1: left promiscuous mode [ 409.233368][T19739] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.262797][T19739] bond0: (slave bond_slave_0): Releasing backup interface [ 409.284818][T19739] bond0: (slave bond_slave_1): Releasing backup interface [ 409.352260][T19739] team0: Port device team_slave_0 removed [ 409.385863][T19739] team0: Port device team_slave_1 removed [ 409.395190][T19739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.404395][T19739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.414973][T19739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.425613][T19739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.444854][T19739] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 409.616397][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.854234][T19741] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 409.877159][T19741] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 409.929090][T19761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.616509][T19780] veth3: entered allmulticast mode [ 410.624126][T19789] netlink: 'syz.0.3658': attribute type 30 has an invalid length. [ 410.712707][T19795] __nla_validate_parse: 7 callbacks suppressed [ 410.712729][T19795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 410.745564][T19795] netlink: 'syz.0.3658': attribute type 30 has an invalid length. [ 410.840022][T19798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3660'. [ 410.870659][T19798] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3660'. [ 410.929627][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3660'. [ 411.222467][T19818] netlink: 'syz.4.3664': attribute type 1 has an invalid length. [ 411.266899][T19818] netlink: 'syz.4.3664': attribute type 2 has an invalid length. [ 411.294041][T19818] netlink: 'syz.4.3664': attribute type 1 has an invalid length. [ 411.329857][T19818] netlink: 'syz.4.3664': attribute type 3 has an invalid length. [ 411.388381][T19818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3664'. [ 411.404402][T19822] netlink: 'syz.1.3667': attribute type 4 has an invalid length. [ 411.455513][T19822] netlink: 'syz.1.3667': attribute type 9 has an invalid length. [ 411.823180][T19847] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 412.400631][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3683'. [ 412.925369][T19899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3692'. [ 412.954640][T19904] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.171946][T19913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 413.259975][T19918] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3698'. [ 413.284203][T19913] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 413.380705][T19913] team1: entered promiscuous mode [ 413.413514][T19913] team1: entered allmulticast mode [ 413.432475][T19918] netlink: 'syz.2.3698': attribute type 1 has an invalid length. [ 413.664466][T19936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3704'. [ 413.802480][T19941] netlink: 'syz.1.3705': attribute type 3 has an invalid length. [ 414.004263][T19963] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 414.301828][T19975] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.449523][T19979] tipc: Enabling of bearer rejected, failed to enable media [ 414.645984][T19992] macsec1: entered promiscuous mode [ 414.671902][T19992] macsec1: entered allmulticast mode [ 414.713455][T19992] bridge0: entered allmulticast mode [ 415.829571][T20056] __nla_validate_parse: 5 callbacks suppressed [ 415.829592][T20056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3736'. [ 416.137901][T20075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.174656][T20051] IPVS: set_ctl: invalid protocol: 51 172.20.20.48:20000 [ 416.603140][T20094] veth1_to_bond: entered allmulticast mode [ 416.642558][T20094] veth1_to_bond: left allmulticast mode [ 416.712300][T20100] netlink: 'syz.1.3749': attribute type 1 has an invalid length. [ 416.782364][T20102] bond6: (slave veth0_to_bond): Releasing active interface [ 416.811030][T20102] veth0_to_bond: left promiscuous mode [ 416.843827][T20102] veth0_to_bond: left allmulticast mode [ 416.872006][T20100] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 416.976349][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.050470][T20117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3753'. [ 417.319132][T20124] netlink: 'syz.3.3756': attribute type 58 has an invalid length. [ 417.345558][T20107] syzkaller0: entered promiscuous mode [ 417.354690][T20124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3756'. [ 417.365017][T20107] syzkaller0: entered allmulticast mode [ 417.381556][T20125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3756'. [ 417.830139][T20148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3762'. [ 418.060518][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3765'. [ 418.073693][T20160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3765'. [ 418.114722][T20164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3766'. [ 418.199018][T20164] netlink: 'syz.4.3766': attribute type 3 has an invalid length. [ 418.290631][T20171] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3767'. [ 418.338429][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3763'. [ 421.199333][T20158] macvtap1: entered promiscuous mode [ 421.204990][T20158] macvtap1: entered allmulticast mode [ 421.211570][T20158] veth1_vlan: entered allmulticast mode [ 421.244994][T20162] macvtap2: entered promiscuous mode [ 421.250450][T20162] macvtap2: entered allmulticast mode [ 421.272844][T20176] __nla_validate_parse: 1 callbacks suppressed [ 421.272863][T20176] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.3768'. [ 421.294554][T20176] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 421.384070][T20154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.345026][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3781'. [ 423.104883][T20307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3787'. [ 423.109500][T20306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3787'. [ 423.248077][T20307] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3787'. [ 423.304802][T20323] sctp: [Deprecated]: syz.1.3788 (pid 20323) Use of int in max_burst socket option deprecated. [ 423.304802][T20323] Use struct sctp_assoc_value instead [ 423.490806][T20306] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3787'. [ 423.521020][T20306] workqueue: Failed to create a rescuer kthread for wq "phy6": -EINTR [ 423.678395][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3791'. [ 424.120670][T20378] netlink: 'syz.4.3795': attribute type 1 has an invalid length. [ 424.209592][T20378] bond1: entered promiscuous mode [ 424.215264][T20378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.374471][T20383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.389507][T20383] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 424.398959][T20402] tipc: Can't bind to reserved service type 0 [ 424.401575][T20383] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 424.453226][T20383] bond1: (slave ip6gre1): making interface the new active one [ 424.562293][T20383] ip6gre1: entered promiscuous mode [ 424.609409][T20383] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 424.751542][T20367] erspan0: entered promiscuous mode [ 424.788648][T20367] erspan0: entered allmulticast mode [ 424.833796][T20367] x_tables: unsorted entry at hook 1 [ 424.962788][T20429] netem: change failed [ 425.350117][T20445] netlink: 'syz.3.3802': attribute type 2 has an invalid length. [ 425.362786][T20227] workqueue: Failed to create a rescuer kthread for wq "nfc10_nci_rx_wq": -EINTR [ 425.391556][T20445] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3802'. [ 425.468353][T20455] syzkaller1: entered promiscuous mode [ 425.474134][T20455] syzkaller1: entered allmulticast mode [ 425.893308][T20464] s5: renamed from vlan1 (while UP) [ 425.933014][T20472] netem: incorrect gi model size [ 425.972519][T20472] netem: change failed [ 426.337845][T20489] ip6t_srh: unknown srh match flags 4000 [ 426.778586][T20500] bond5: invalid ARP target 0.0.0.0 specified for addition [ 426.850404][T20500] bond5: option arp_ip_target: invalid value (0) [ 426.903684][T20500] bond5 (unregistering): Released all slaves [ 427.013939][T20503] lo speed is unknown, defaulting to 1000 [ 427.600082][T20541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3826'. [ 427.678590][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'. [ 427.788222][T20545] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 427.823396][T20545] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3827'. [ 427.901850][T20554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3830'. [ 428.126853][T20561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.428407][T20559] [ 428.430790][T20559] ====================================================== [ 428.437888][T20559] WARNING: possible circular locking dependency detected [ 428.444921][T20559] syzkaller #0 Not tainted [ 428.449342][T20559] ------------------------------------------------------ [ 428.456368][T20559] syz.1.3833/20559 is trying to acquire lock: [ 428.462452][T20559] ffff88802713aac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 428.471888][T20559] [ 428.471888][T20559] but task is already holding lock: [ 428.479331][T20559] ffff88802713a5a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 428.489512][T20559] [ 428.489512][T20559] which lock already depends on the new lock. [ 428.489512][T20559] [ 428.499922][T20559] [ 428.499922][T20559] the existing dependency chain (in reverse order) is: [ 428.508924][T20559] [ 428.508924][T20559] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 428.517518][T20559] blk_alloc_queue+0x546/0x680 [ 428.522804][T20559] __blk_mq_alloc_disk+0x197/0x390 [ 428.528437][T20559] nbd_dev_add+0x499/0xb50 [ 428.533370][T20559] nbd_init+0x168/0x1f0 [ 428.538056][T20559] do_one_initcall+0x250/0x870 [ 428.543354][T20559] do_initcall_level+0x104/0x190 [ 428.548838][T20559] do_initcalls+0x59/0xa0 [ 428.553763][T20559] kernel_init_freeable+0x2a6/0x3e0 [ 428.559489][T20559] kernel_init+0x1d/0x1d0 [ 428.564341][T20559] ret_from_fork+0x514/0xb70 [ 428.569442][T20559] ret_from_fork_asm+0x1a/0x30 [ 428.574717][T20559] [ 428.574717][T20559] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 428.581915][T20559] fs_reclaim_acquire+0x71/0x100 [ 428.587376][T20559] __kmalloc_cache_node_noprof+0x46/0x6b0 [ 428.593644][T20559] create_worker+0x113/0x7e0 [ 428.598773][T20559] workqueue_prepare_cpu+0xe4/0x170 [ 428.604559][T20559] cpuhp_invoke_callback+0x445/0x860 [ 428.610379][T20559] _cpu_up+0x2ce/0x5b0 [ 428.614965][T20559] cpu_up+0x1d2/0x220 [ 428.619461][T20559] cpuhp_bringup_mask+0xb2/0x1a0 [ 428.624913][T20559] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 428.631286][T20559] bringup_nonboot_cpus+0x17/0x30 [ 428.636838][T20559] smp_init+0x32/0x110 [ 428.641437][T20559] kernel_init_freeable+0x288/0x3e0 [ 428.647177][T20559] kernel_init+0x1d/0x1d0 [ 428.652137][T20559] ret_from_fork+0x514/0xb70 [ 428.657281][T20559] ret_from_fork_asm+0x1a/0x30 [ 428.662567][T20559] [ 428.662567][T20559] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 428.670297][T20559] cpus_read_lock+0x42/0x160 [ 428.675400][T20559] static_key_slow_inc+0x12/0x30 [ 428.680872][T20559] nbd_genl_reconfigure+0x132f/0x1ea0 [ 428.686758][T20559] genl_family_rcv_msg_doit+0x22a/0x330 [ 428.692855][T20559] genl_rcv_msg+0x61c/0x7a0 [ 428.697904][T20559] netlink_rcv_skb+0x232/0x4b0 [ 428.703194][T20559] genl_rcv+0x28/0x40 [ 428.707719][T20559] netlink_unicast+0x75c/0x8e0 [ 428.708898][T20578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3836'. [ 428.713010][T20559] netlink_sendmsg+0x813/0xb40 [ 428.713040][T20559] ____sys_sendmsg+0x972/0x9f0 [ 428.713063][T20559] ___sys_sendmsg+0x2a5/0x360 [ 428.737719][T20559] __x64_sys_sendmsg+0x1bd/0x2a0 [ 428.743195][T20559] do_syscall_64+0x15f/0xf80 [ 428.748322][T20559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.754748][T20559] [ 428.754748][T20559] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 428.762391][T20559] __mutex_lock+0x1a3/0x1550 [ 428.767553][T20559] nbd_queue_rq+0x37b/0x1100 [ 428.772654][T20559] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 428.778724][T20559] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 428.785641][T20559] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 428.792184][T20559] blk_mq_run_hw_queue+0x348/0x4f0 [ 428.797840][T20559] blk_mq_dispatch_list+0xd16/0xe10 [ 428.803560][T20559] blk_mq_flush_plug_list+0x48d/0x570 [ 428.809588][T20559] __blk_flush_plug+0x3ed/0x4d0 [ 428.815003][T20559] __submit_bio+0x28d/0x580 [ 428.820086][T20559] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 428.826242][T20559] block_read_full_folio+0x599/0x830 [ 428.832039][T20559] filemap_read_folio+0x137/0x3b0 [ 428.837589][T20559] do_read_cache_folio+0x358/0x590 [ 428.843241][T20559] read_part_sector+0xb6/0x2b0 [ 428.848546][T20559] adfspart_check_ICS+0xb1/0x960 [ 428.854032][T20559] bdev_disk_changed+0x817/0x1770 [ 428.859588][T20559] blkdev_get_whole+0x380/0x510 [ 428.864959][T20559] bdev_open+0x31e/0xd30 [ 428.869735][T20559] blkdev_open+0x470/0x610 [ 428.874664][T20559] do_dentry_open+0x785/0x14e0 [ 428.879935][T20559] vfs_open+0x3b/0x340 [ 428.884538][T20559] path_openat+0x2e08/0x3860 [ 428.889642][T20559] do_file_open+0x23e/0x4a0 [ 428.894660][T20559] do_sys_openat2+0x113/0x200 [ 428.899850][T20559] __x64_sys_openat+0x138/0x170 [ 428.905426][T20559] do_syscall_64+0x15f/0xf80 [ 428.910526][T20559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.916931][T20559] [ 428.916931][T20559] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 428.924225][T20559] __mutex_lock+0x1a3/0x1550 [ 428.929334][T20559] nbd_queue_rq+0xc6/0x1100 [ 428.934342][T20559] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 428.940410][T20559] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 428.947288][T20559] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 428.953812][T20559] blk_mq_run_hw_queue+0x348/0x4f0 [ 428.959455][T20559] blk_mq_dispatch_list+0xd16/0xe10 [ 428.965217][T20559] blk_mq_flush_plug_list+0x48d/0x570 [ 428.971103][T20559] __blk_flush_plug+0x3ed/0x4d0 [ 428.976478][T20559] __submit_bio+0x28d/0x580 [ 428.981494][T20559] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 428.987643][T20559] block_read_full_folio+0x599/0x830 [ 428.993459][T20559] filemap_read_folio+0x137/0x3b0 [ 428.999003][T20559] do_read_cache_folio+0x358/0x590 [ 429.004636][T20559] read_part_sector+0xb6/0x2b0 [ 429.009927][T20559] adfspart_check_ICS+0xb1/0x960 [ 429.015385][T20559] bdev_disk_changed+0x817/0x1770 [ 429.021016][T20559] blkdev_get_whole+0x380/0x510 [ 429.026385][T20559] bdev_open+0x31e/0xd30 [ 429.031148][T20559] blkdev_open+0x470/0x610 [ 429.036081][T20559] do_dentry_open+0x785/0x14e0 [ 429.041367][T20559] vfs_open+0x3b/0x340 [ 429.045966][T20559] path_openat+0x2e08/0x3860 [ 429.051248][T20559] do_file_open+0x23e/0x4a0 [ 429.056285][T20559] do_sys_openat2+0x113/0x200 [ 429.061511][T20559] __x64_sys_openat+0x138/0x170 [ 429.066884][T20559] do_syscall_64+0x15f/0xf80 [ 429.071988][T20559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.078391][T20559] [ 429.078391][T20559] -> #1 (set->srcu){.+.+}-{0:0}: [ 429.085508][T20559] __synchronize_srcu+0xca/0x300 [ 429.090985][T20559] elevator_switch+0x1e8/0x7a0 [ 429.096290][T20559] elevator_change+0x2cc/0x450 [ 429.101574][T20559] elevator_set_default+0x36c/0x430 [ 429.107300][T20559] blk_register_queue+0x3e9/0x4e0 [ 429.112874][T20559] __add_disk+0x677/0xd50 [ 429.117813][T20559] add_disk_fwnode+0xfb/0x480 [ 429.123086][T20559] nbd_dev_add+0x72c/0xb50 [ 429.128010][T20559] nbd_init+0x168/0x1f0 [ 429.132677][T20559] do_one_initcall+0x250/0x870 [ 429.137980][T20559] do_initcall_level+0x104/0x190 [ 429.143467][T20559] do_initcalls+0x59/0xa0 [ 429.148342][T20559] kernel_init_freeable+0x2a6/0x3e0 [ 429.154060][T20559] kernel_init+0x1d/0x1d0 [ 429.158927][T20559] ret_from_fork+0x514/0xb70 [ 429.164031][T20559] ret_from_fork_asm+0x1a/0x30 [ 429.169319][T20559] [ 429.169319][T20559] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 429.177131][T20559] __lock_acquire+0x15a5/0x2cf0 [ 429.182500][T20559] lock_acquire+0x106/0x350 [ 429.187521][T20559] __mutex_lock+0x1a3/0x1550 [ 429.192650][T20559] elevator_change+0x1b3/0x450 [ 429.197967][T20559] elevator_set_none+0xb5/0x140 [ 429.203420][T20559] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 429.209821][T20559] nbd_start_device+0x17f/0xb10 [ 429.215176][T20559] nbd_genl_connect+0x165b/0x1cf0 [ 429.220709][T20559] genl_family_rcv_msg_doit+0x22a/0x330 [ 429.226791][T20559] genl_rcv_msg+0x61c/0x7a0 [ 429.231807][T20559] netlink_rcv_skb+0x232/0x4b0 [ 429.237094][T20559] genl_rcv+0x28/0x40 [ 429.241619][T20559] netlink_unicast+0x75c/0x8e0 [ 429.246910][T20559] netlink_sendmsg+0x813/0xb40 [ 429.252184][T20559] ____sys_sendmsg+0x972/0x9f0 [ 429.257460][T20559] ___sys_sendmsg+0x2a5/0x360 [ 429.262647][T20559] __x64_sys_sendmsg+0x1bd/0x2a0 [ 429.268091][T20559] do_syscall_64+0x15f/0xf80 [ 429.273192][T20559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.279614][T20559] [ 429.279614][T20559] other info that might help us debug this: [ 429.279614][T20559] [ 429.289952][T20559] Chain exists of: [ 429.289952][T20559] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 429.289952][T20559] [ 429.303691][T20559] Possible unsafe locking scenario: [ 429.303691][T20559] [ 429.311152][T20559] CPU0 CPU1 [ 429.316521][T20559] ---- ---- [ 429.321876][T20559] lock(&q->q_usage_counter(io)#52); [ 429.327242][T20559] lock(fs_reclaim); [ 429.333734][T20559] lock(&q->q_usage_counter(io)#52); [ 429.341644][T20559] lock(&q->elevator_lock); [ 429.346250][T20559] [ 429.346250][T20559] *** DEADLOCK *** [ 429.346250][T20559] [ 429.354389][T20559] 6 locks held by syz.1.3833/20559: [ 429.359589][T20559] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 429.367776][T20559] #1: ffffffff8fe3e620 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 429.376736][T20559] #2: ffff8880271d19c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 429.388130][T20559] #3: ffff8880271d18d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 429.399136][T20559] #4: ffff88802713a5a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 429.409788][T20559] #5: ffff88802713a5d8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 429.421107][T20559] [ 429.421107][T20559] stack backtrace: [ 429.426995][T20559] CPU: 1 UID: 0 PID: 20559 Comm: syz.1.3833 Not tainted syzkaller #0 PREEMPT(full) [ 429.427023][T20559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.427041][T20559] Call Trace: [ 429.427051][T20559] [ 429.427057][T20559] dump_stack_lvl+0xe8/0x150 [ 429.427073][T20559] print_circular_bug+0x2e1/0x300 [ 429.427090][T20559] check_noncircular+0x12e/0x150 [ 429.427105][T20559] __lock_acquire+0x15a5/0x2cf0 [ 429.427121][T20559] ? elevator_change+0x1b3/0x450 [ 429.427136][T20559] lock_acquire+0x106/0x350 [ 429.427146][T20559] ? elevator_change+0x1b3/0x450 [ 429.427164][T20559] __mutex_lock+0x1a3/0x1550 [ 429.427178][T20559] ? elevator_change+0x1b3/0x450 [ 429.427193][T20559] ? rcu_is_watching+0x15/0xb0 [ 429.427207][T20559] ? work_grab_pending+0x3d1/0x990 [ 429.427219][T20559] ? elevator_change+0x1b3/0x450 [ 429.427233][T20559] ? __pfx___mutex_lock+0x10/0x10 [ 429.427246][T20559] ? enable_work+0x17f/0x230 [ 429.427264][T20559] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.427289][T20559] ? __cancel_work_sync+0xf7/0x110 [ 429.427313][T20559] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 429.427337][T20559] elevator_change+0x1b3/0x450 [ 429.427353][T20559] elevator_set_none+0xb5/0x140 [ 429.427367][T20559] ? __pfx_elevator_set_none+0x10/0x10 [ 429.427383][T20559] ? xa_load+0x1db/0x210 [ 429.427397][T20559] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 429.427411][T20559] ? kernfs_add_one+0x477/0x5c0 [ 429.427426][T20559] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 429.427439][T20559] ? sysfs_add_file_mode_ns+0x259/0x300 [ 429.427451][T20559] nbd_start_device+0x17f/0xb10 [ 429.427464][T20559] ? device_create_file+0xf4/0x1b0 [ 429.427475][T20559] nbd_genl_connect+0x165b/0x1cf0 [ 429.427484][T20559] ? __pfx___nla_validate_parse+0x10/0x10 [ 429.427502][T20559] ? __pfx_nbd_genl_connect+0x10/0x10 [ 429.427513][T20559] ? rcu_is_watching+0x15/0xb0 [ 429.427530][T20559] ? trace_kmalloc+0x2a/0xf0 [ 429.427546][T20559] ? __nla_parse+0x40/0x60 [ 429.427561][T20559] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 429.427578][T20559] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 429.427597][T20559] genl_family_rcv_msg_doit+0x22a/0x330 [ 429.427614][T20559] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.427633][T20559] ? __lock_acquire+0x6b5/0x2cf0 [ 429.427646][T20559] genl_rcv_msg+0x61c/0x7a0 [ 429.427662][T20559] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.427677][T20559] ? __pfx_nbd_genl_connect+0x10/0x10 [ 429.427690][T20559] netlink_rcv_skb+0x232/0x4b0 [ 429.427702][T20559] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.427717][T20559] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.427733][T20559] ? down_read+0x270/0x2e0 [ 429.427746][T20559] ? genl_rcv+0xd/0x40 [ 429.427761][T20559] genl_rcv+0x28/0x40 [ 429.427775][T20559] netlink_unicast+0x75c/0x8e0 [ 429.427788][T20559] netlink_sendmsg+0x813/0xb40 [ 429.427803][T20559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.427816][T20559] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.427830][T20559] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.427845][T20559] ____sys_sendmsg+0x972/0x9f0 [ 429.427859][T20559] ? __might_fault+0xaf/0x130 [ 429.427873][T20559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.427888][T20559] ? import_iovec+0x73/0xa0 [ 429.427903][T20559] ___sys_sendmsg+0x2a5/0x360 [ 429.427916][T20559] ? __lock_acquire+0x6b5/0x2cf0 [ 429.427927][T20559] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.427942][T20559] ? futex_wake+0x4ac/0x580 [ 429.427962][T20559] ? __fget_files+0x2a/0x420 [ 429.427974][T20559] ? __fget_files+0x3a0/0x420 [ 429.427988][T20559] __x64_sys_sendmsg+0x1bd/0x2a0 [ 429.428002][T20559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.428017][T20559] ? rcu_is_watching+0x15/0xb0 [ 429.428031][T20559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.428042][T20559] do_syscall_64+0x15f/0xf80 [ 429.428055][T20559] ? trace_irq_disable+0x3b/0x140 [ 429.428070][T20559] ? clear_bhb_loop+0x40/0x90 [ 429.428082][T20559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.428092][T20559] RIP: 0033:0x7efe83f9cdd9 [ 429.428104][T20559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.428114][T20559] RSP: 002b:00007efe821f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.428125][T20559] RAX: ffffffffffffffda RBX: 00007efe84215fa0 RCX: 00007efe83f9cdd9 [ 429.428133][T20559] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 429.428140][T20559] RBP: 00007efe84032d69 R08: 0000000000000000 R09: 0000000000000000 [ 429.428147][T20559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.428154][T20559] R13: 00007efe84216038 R14: 00007efe84215fa0 R15: 00007ffde19e5aa8 [ 429.428165][T20559] [ 429.962816][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'. [ 429.972388][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'. [ 429.981697][ T50] block nbd3: Receive control failed (result -32) [ 429.988367][ T50] block nbd3: Receive control failed (result -32) [ 430.023546][T20559] nbd3: detected capacity change from 0 to 63 [ 430.061021][T20372] block nbd3: Dead connection, failed to find a fallback [ 430.071955][T20372] block nbd3: shutting down sockets [ 430.077983][T20372] blk_print_req_error: 138 callbacks suppressed [ 430.077999][T20372] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.094107][T20372] buffer_io_error: 138 callbacks suppressed [ 430.094120][T20372] Buffer I/O error on dev nbd3, logical block 0, async page read [ 430.094477][T20577] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 430.101112][T20372] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.143202][T20372] Buffer I/O error on dev nbd3, logical block 1, async page read [ 430.185207][T20372] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.207756][T20372] Buffer I/O error on dev nbd3, logical block 2, async page read [ 430.227864][T20372] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.237564][T20372] Buffer I/O error on dev nbd3, logical block 3, async page read [ 430.245449][T20372] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.255339][T20372] Buffer I/O error on dev nbd3, logical block 0, async page read [ 430.263768][T20372] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.273492][T20372] Buffer I/O error on dev nbd3, logical block 1, async page read [ 430.282065][T20372] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.291756][T20372] Buffer I/O error on dev nbd3, logical block 2, async page read [ 430.299750][T20372] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.312523][T20372] Buffer I/O error on dev nbd3, logical block 3, async page read [ 430.320423][T20372] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.329980][T20372] Buffer I/O error on dev nbd3, logical block 0, async page read [ 430.338447][T20372] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 430.348127][T20372] Buffer I/O error on dev nbd3, logical block 1, async page read [ 430.358309][T20372] ldm_validate_partition_table(): Disk read failed. [ 430.366050][T20372] Dev nbd3: unable to read RDB block 0 [ 430.373660][T20372] nbd3: unable to read partition table [ 430.395453][T20372] ldm_validate_partition_table(): Disk read failed. [ 430.414930][T20372] Dev nbd3: unable to read RDB block 0 [ 430.428459][T20372] nbd3: unable to read partition table [ 431.066410][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!