last executing test programs: 3.365997817s ago: executing program 3 (id=5371): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "adf83dd9149bc431", "bbc6ae386b11411f6ff3dce3504e9d5c", '\x00', "a5cc48f33a8300"}, 0x28) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x2, 0x2, 0x80000000, 0x262, 0x7, 0x2}) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xa7, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@ipv4_getrule={0x1c, 0x22, 0x10, 0x70bd2d, 0x25dfdbff, {0x2, 0x14, 0x20, 0x7, 0x9, 0x0, 0x0, 0x0, 0xd}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000091}, 0x24008c04) 2.359113614s ago: executing program 3 (id=5383): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x200000000000025e, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gre0\x00'}) 2.17380163s ago: executing program 3 (id=5389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000020000000a03000800001a009b2d"], 0x28}, 0x1, 0x0, 0x0, 0xfc699e3e9dd3966}, 0x0) 1.88609717s ago: executing program 3 (id=5395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x20, 0x7, 0x20, 0x1000000000}, 0x48) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x8, 0x5, 0x0, 0x0) read(r2, &(0x7f0000000180)=""/115, 0x73) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ad000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000000c0)='vlan0\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 1.837140296s ago: executing program 4 (id=5397): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x4, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r4, 0xee01}}]}, 0x28}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r6, r7+60000000}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000000c0)="1e6764878ca114d1ff82705e6878a42a54aced5b4c47a61d87996a8ed5e99575555f899f46721b9bbc5c784747f2c3adc0fec5c9fcbfd66a5d6b9f908535b5be30a47125145a33e2037b324f5fd41deb5222a77667b893b4860b4d2610a891c2feb7e547fada1266d07498f83566e7ab86c2913505a6f48cb318495536ecc14d574220c21dc76f3e717fc09ae96b9981f5892cdee6fc", 0x96) 1.274047784s ago: executing program 0 (id=5408): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e2a, 0xfffffffb, @local, 0x80009}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0xe325, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000003b005000128009000100766c616e000000004000028006000100000000000c00020000000000000000000c00020000000000000000001c0004800c00060004000000000800000a0001"], 0x80}, 0x1, 0xba01}, 0x0) 1.153772523s ago: executing program 0 (id=5410): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000300)=0xd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1811000000000000afe4000000000000630a00ff000000009500684000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x21) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.144244943s ago: executing program 2 (id=5411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000002300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000022c0)={&(0x7f00000010c0)={0x11dc, r3, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x71}}}}, [@NL80211_ATTR_TESTDATA={0x2d, 0x45, "44193a2b4e49d0463bf8249a6183ee8dafda883d749392c7af266b70063ce70e88b921905fd8e0659b"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xae, 0x45, "5cf043b43fb5c2eee24fe441a2b5b7bc80198e01614357784adff37bef04c76da192c461a8cbba16cc03dac6b1a45f37fb9291f77dbc4769a50cb01e1dfdfdbd32db7c2c3bea20e173d6db39db4413e1805be5529160326dacd2b8758d5f552879114ad73a40ac313e9ad52b147f9c1450b91a4dfd895fb301e89999bf6669494a00750834b833224e33e1c3bbf4e379c191566a7598de61f0b13416bbb30b63d87c1ff22740b5df86b9"}, @NL80211_ATTR_TESTDATA={0xae, 0x45, "d3d90d79acfbcc23f33a70f238cfd0bc8212cf82141c999b5cb5edeb8290c852fc246abd11368759c8350bead9b0a997ed81e6e811fde75b0ae16cb5dcc50450580e0a2c147d658f505a02ad3790df3a6aec0cdcbe75fb75230e8359feb2d23bf64737a1fb75bd6791544a176bc56fc221eec654eb1a3a1fb35a4c27d06b520aa8e82d44a633725b1881870a5e9f12baf31191e221b9d9494f23bf8be73726cf60dd240f5c885f3455c8"}, @NL80211_ATTR_TESTDATA={0x20, 0x45, "75a18ccee9c60a90722d645505ecee6f23ce0f927048d403279eebc8"}]}, 0x11dc}, 0x1, 0x0, 0x0, 0x4c840}, 0x8040) 953.773444ms ago: executing program 1 (id=5412): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 952.38847ms ago: executing program 0 (id=5413): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, 0x0) (async) ioctl$sock_netdev_private(r1, 0x89f6, &(0x7f0000000180)="a5029a1d6e2ff1838086eabd04") (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000007c0)={0x0, 0x1}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10002000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000090601020000000000000000020000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000002000bb06000440000400000500070006000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}}, 0x8000) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) (async) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r11, &(0x7f00000001c0)={&(0x7f0000000240)={0x1d, r8, 0x0, {0x2, 0x1, 0x4}, 0xfe}, 0x18, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x440c0}, 0x806e) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) 943.390423ms ago: executing program 2 (id=5414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0xfffffffc, 0x0, {0x7, 0x0, 0x0, r8}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x48000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x101, 0x0, 0x0, 0x41100, 0x6, '\x00', r8, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x10, 0x9, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000500)=[0x1], &(0x7f00000005c0)=[{0x1, 0x4, 0x8, 0xb}, {0x3, 0x1, 0xf, 0xc}, {0x5, 0x1, 0x4, 0x2}, {0x5, 0x3, 0xa, 0x6}, {0x2, 0x5, 0xa, 0xa}, {0x4, 0x1, 0xf, 0x1}], 0x10, 0xf21c}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000700)=r10, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x24, r9, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "06"}]}, 0x24}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "cf"}]}, 0x24}}, 0x0) 890.974643ms ago: executing program 1 (id=5415): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="01000000030000000500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001000000010000557b"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000100010000000000c5d760ae4f8b778499699d781a4448c629d34b565a93b9c92a5e972960482e10ce99f3d86425a3ad1bec5a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000069c0)={0x2, {{0xa, 0x4e21, 0x1, @mcast2, 0x1000}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x4, @private1, 0xffffffff}}]}, 0x110) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r3, 0x1}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYRES32=0x0, @ANYBLOB='\b\x00('], 0x44}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 829.129168ms ago: executing program 4 (id=5416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0x4, 0x4, 0xdfdd, 0x14, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1, &(0x7f00000003c0)=@raw=[@alu={0x7, 0x1, 0x1, 0x5, 0x4, 0x50, 0x8}], &(0x7f0000000400)='GPL\x00', 0x5, 0x54, &(0x7f0000000440)=""/84, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x5, 0x3, 0x1ff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x4, 0x6, 0x8}, {0x4, 0x1, 0x6, 0xa}, {0x4, 0x5, 0x10, 0x6}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x2d31}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='blkio.bfq.time\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f00000003c0)={{r5}, 0x0, 0x0}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x95b0, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0xed, 0x46, &(0x7f00000002c0)=""/70, 0x41100, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1984e, r2, 0x1, &(0x7f00000008c0)=[r3, r4, r5, r6, r7, r8], &(0x7f0000000900)=[{0x5, 0x4, 0x8, 0x4}], 0x10, 0x31bb}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="480000000b001305f8ffffff00000001162972cae45da20000000a", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000100000100c2800008000500", @ANYRES32=r11], 0x48}, 0x1, 0x0, 0x0, 0x408d5}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0x4, 0x4, 0xdfdd, 0x14, 0x1}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1, &(0x7f00000003c0)=@raw=[@alu={0x7, 0x1, 0x1, 0x5, 0x4, 0x50, 0x8}], &(0x7f0000000400)='GPL\x00', 0x5, 0x54, &(0x7f0000000440)=""/84, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x5, 0x3, 0x1ff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x4, 0x6, 0x8}, {0x4, 0x1, 0x6, 0xa}, {0x4, 0x5, 0x10, 0x6}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x2d31}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='blkio.bfq.time\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f00000003c0)={{r5}, 0x0, 0x0}, 0x20) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x95b0, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1}, 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0xed, 0x46, &(0x7f00000002c0)=""/70, 0x41100, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1984e, r2, 0x1, &(0x7f00000008c0)=[r3, r4, r5, r6, r7, r8], &(0x7f0000000900)=[{0x5, 0x4, 0x8, 0x4}], 0x10, 0x31bb}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="480000000b001305f8ffffff00000001162972cae45da20000000a", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000100000100c2800008000500", @ANYRES32=r11], 0x48}, 0x1, 0x0, 0x0, 0x408d5}, 0x4000) (async) 828.531197ms ago: executing program 3 (id=5417): r0 = socket$netlink(0x10, 0x3, 0x15) write(r0, &(0x7f0000000000)="2700000014000707030e0000120f0a0004000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x1e}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@getaddr={0x14, 0x16, 0x2, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}}, 0x15) socket$netlink(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x15) (async) write(r0, &(0x7f0000000000)="2700000014000707030e0000120f0a0004000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x1e}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@getaddr={0x14, 0x16, 0x2, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}}, 0x15) (async) socket$netlink(0x10, 0x3, 0x6) (async) 708.265802ms ago: executing program 1 (id=5418): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2}, 0x80) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061107e000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x300}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(r1, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r1, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 649.105295ms ago: executing program 0 (id=5419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x70bd25}, 0x24}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d000300686173683a6d616300"], 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) (async) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000980)=""/189, 0xbd}], 0x3}}], 0x1, 0x41, 0x0) (async) recvmsg$can_raw(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/187, 0xbb}], 0x3}, 0x2) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x64, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "2f5bf788c9914c000000df01006a97000000001000000087f80000000000000000f76e00"}}]}]}, 0x64}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24008085}, 0x20008000) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000002f0009002abd7000000000000400000045001180e796bffaf98941affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af68eb7e22475186e591e23ad38a08862df02baf33ef122e000000"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 606.083509ms ago: executing program 4 (id=5420): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x1, 0x0, 0x3, 0x84ba, 0x8}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) close(r2) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf2505000000080002000570"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) 605.621881ms ago: executing program 2 (id=5421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="380100001000010001000000fddbdf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d46c000000ac1414aa000000000000000000000000000000000000000092010000000000000600000000df2f6abaff0001000080001c250800000000000200000000000000f8ffffffffffffff020000000000e0fffeffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002900000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {0x6}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, &(0x7f00000000c0)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 599.617095ms ago: executing program 3 (id=5422): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000000)=0x18000000, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) connect$can_j1939(r0, &(0x7f0000000640)={0x1d, r1, 0xffffffffffffffff, {0x0, 0x1}}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0064990922bad37a4367b9f641a6fb0000e8111ced000000000000000000001d000000000000000000"], 0x48) r6 = socket(0x400000000010, 0x2, 0xceff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x9, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095", @ANYRESOCT=r5], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x41}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000340)={r10}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000040)={r11}) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e3, &(0x7f0000000180)={r10, r12}) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(0x4) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004c0000440000000000069078ac1414bbac1414aa441c0a010000000000000000ac14140000000000ac1414000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc20000907800003284b744302cee2d8072a58f69b7a972c089c2ec148494e3e731942e54094d513f75cb9d78e3fee5e8e4a7e4ddb898278e785c0e78f939c95db39f12c72238dd5133eb7897e2936cdb7987add740ab82a910593af1e61f36aa60a1b560c36ae803bd7ef891dcab521bc0d5df44fb4b28e18396d1541cd75b84b0160b91075ec458b7eb962c7df4ce4d83413a6c981082ea21deeaed"], 0x0) 486.379457ms ago: executing program 1 (id=5423): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r2, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa0940, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30c) 421.491426ms ago: executing program 4 (id=5424): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0x6}, 0x48) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000180)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000003940)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000040)="eb", 0x1}], 0x1}}], 0x1, 0x200080fc) 410.861994ms ago: executing program 0 (id=5425): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4, 0x4) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'macvlan1\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "0ee8a808941c4da72524b794b5edc676086190924ca70d8235ff19fd43cfbbdc", "bfe519402c358b35d3605adfd271a54806ff5004e7186adc2cccd48265ef3a4b", "49b2f2e05ac6b34d7b93d55fbea1d36c5a838fdd6f7c536af96335affbcf4c27", "89e6f349fd75d21b00d5f3c79164081b1202fe3586b20c1750be1146bcf001ec", "64fde8cc0b51858d4bbed89b789057adf7894f4b1c8bbeb0e1850144997bf967", "ae01013405af00004000", 0x4, 0x3, 0x1, 0xc0000, 0xaa}}) (async, rerun: 64) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) (async, rerun: 64) connect$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000002f00090027bd700000000000040000ec080018000cac0f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) 330.264678ms ago: executing program 2 (id=5426): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x2000) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x2e, 0x61]}}, 0x0, 0x29, 0x0, 0x1, 0x43}, 0x20) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000020300000000000000000000100c"], 0x0, 0x56}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000240)=0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x801}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_TARGET_NETNSID={0x0, 0x2e, 0x2}]}, 0x9d}, 0x1, 0x0, 0x0, 0x400c4}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}}, 0x0) 208.455498ms ago: executing program 4 (id=5427): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000611904000000000095000000000000000dbba8aa120d45e17ab24b7564cc1af46bcda4eb0948919f7b041e5d8f67c5a0881dafa0f5b4d1ee53cfd44f63dbadcde70b5e8b346394ad64ef1a32aaa341c2c1586cd833771dfe40a233514f838f71a401f542d7b951638842b4f33597fe46d91a65d5fb48007aa4211eacdc9ea35151cbcf49ae63b6dd2044b365a7b575335fe9a7168ab5e053eba024da5feaa995a6fd22f3b780c23e71988007a26db44c673e96c173e836f47f50ff1f6d4163de76e5"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000012c0)={'team_slave_1\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000140)=0x3, 0x4) (async) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000440)={[{0x2b, 'net'}, {0x2d, 'memory'}, {0x2b, 'net'}, {0x2b, 'cpu'}, {0x2b, 'freezer'}, {0x2d, 'cpuset'}, {0x16, 'net_prio'}, {0x2d, 'cpu'}, {0x6, 'rdma'}, {0x2d, 'hugetlb'}]}, 0x46) 202.393143ms ago: executing program 1 (id=5428): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0xfffffffe}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xffffffff}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x1042, 0x7, 0x2}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x2, 0x2}, 0x10) 187.480921ms ago: executing program 0 (id=5429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x74, 0x2c, 0xd3b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x2}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84, 0x3}, {0x5, 0x7, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x5}, {0xc, 0x1, 0x2, 0x1, 0x4}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 179.035256ms ago: executing program 2 (id=5430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="08040000", @ANYRES16=r1, @ANYBLOB="00022bbd7000fedbdf252b0000000c0099004b9b00002e0000001e00940002000f0500000000000000ff0000000c000000080009000000070000e800518028000080080007000000000011000100ce7a9afad27517af48daf713370000000800070000000000580000800400060008000700020000000b00040018cbb897aab2060011000100f3b1977edba8222332495ff206000000050009006a000000050002000500000009000100e1fbb8840a00000009000100ca376a8bb10000005800008010000880040002000400020004000100080007000200000008000700020000000c000880040001000400010008000700000000000400050005000200040000000800030001ac0f00040005000800030005ac0f000c0000800500090001000000"], 0x128}, 0x1, 0x0, 0x0, 0x8015}, 0x4010) 38.141094ms ago: executing program 2 (id=5431): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x80800) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authenc(sha512-generic,cbc-blowfish-asm))\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c0016"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 37.741898ms ago: executing program 1 (id=5432): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) socket$kcm(0x10, 0x2, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f00000000c0)={0x2, 0x4, 0x6, 0x10}) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r1], 0xa) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20, 0x1}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x34}}, 0x40800) 0s ago: executing program 4 (id=5433): r0 = socket(0x10, 0x4, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000100)={r0, 0x6, 0x8, "fd889785016f85746f5baddef55ababd00fb333b9cd84d230f4b3d5f346ab49bf9ffa2abda3fce13df07170032e14383f6acc257ef6446e7b3e8f9cdfa7263499653a19501c3b348c0f5ea0b65b8fe5804c1e7cd71fc895326d74b7f7b98c9fb"}) kernel console output (not intermixed with test programs): penvswitch: netlink: IP tunnel dst address not specified [ 528.650166][T19293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.715414][ T8005] dvmrp0: left allmulticast mode [ 528.737790][ T8005] dvmrp8: left allmulticast mode [ 529.305370][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'. [ 529.710503][ T8005] bond10 (unregistering): (slave bridge8): Releasing backup interface [ 529.727403][ T8005] bridge8 (unregistering): left promiscuous mode [ 529.798420][ T8005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.840382][ T8005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.862768][ T8005] bond0 (unregistering): Released all slaves [ 529.892289][ T8005] bond1 (unregistering): Released all slaves [ 529.945786][ T8005] bond2 (unregistering): Released all slaves [ 529.984563][ T8005] bond3 (unregistering): Released all slaves [ 530.018335][ T8005] bond4 (unregistering): Released all slaves [ 530.043532][ T8005] bond5 (unregistering): Released all slaves [ 530.065310][ T8005] bond6 (unregistering): Released all slaves [ 530.107652][ T8005] bond7 (unregistering): Released all slaves [ 530.132851][ T8005] bond8 (unregistering): Released all slaves [ 530.154396][ T8005] bond9 (unregistering): Released all slaves [ 530.188033][ T8005] bond10 (unregistering): Released all slaves [ 530.212806][ T8005] bond11 (unregistering): Released all slaves [ 530.246259][ T8005] bond12 (unregistering): Released all slaves [ 530.278646][ T8005] bond13 (unregistering): Released all slaves [ 530.608323][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'. [ 530.651685][T19350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'. [ 530.685907][T19350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3483'. [ 531.073770][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3489'. [ 531.253847][T19379] netlink: 'syz.3.3490': attribute type 2 has an invalid length. [ 531.286019][T19379] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 531.588238][T19388] netlink: 'syz.3.3492': attribute type 1 has an invalid length. [ 531.724388][T19385] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3491'. [ 531.848087][T19388] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 532.201492][T19413] set match dimension is over the limit! [ 532.315689][T18701] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 532.373283][T18701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 532.433650][T19420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3498'. [ 532.479842][T19420] block nbd2: Unsupported socket: should be TCP or UNIX. [ 532.504022][T18701] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 532.514662][T19427] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3499'. [ 532.523010][T19420] netlink: 'syz.1.3498': attribute type 1 has an invalid length. [ 532.555896][T18701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 532.591187][T18701] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 532.655973][T18701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.821252][T19438] netlink: 'syz.3.3499': attribute type 1 has an invalid length. [ 532.821929][T18701] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 532.829891][T19438] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3499'. [ 532.861509][T18701] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.973872][T19449] netlink: 'syz.4.3505': attribute type 1 has an invalid length. [ 532.993790][T19449] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3505'. [ 533.031294][T19430] xfrm0 speed is unknown, defaulting to 1000 [ 533.172334][T19435] xfrm0 speed is unknown, defaulting to 1000 [ 533.239672][T19459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3507'. [ 533.258678][T19460] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3507'. [ 533.356295][ T8005] hsr_slave_0: left promiscuous mode [ 533.376287][ T8005] hsr_slave_1: left promiscuous mode [ 533.533794][T19476] netlink: 'syz.3.3510': attribute type 2 has an invalid length. [ 533.702106][T19485] netlink: 'syz.3.3513': attribute type 4 has an invalid length. [ 533.753444][T19486] netlink: 'syz.3.3513': attribute type 4 has an invalid length. [ 533.873045][ T8005] team0 (unregistering): Port device team_slave_1 removed [ 534.623597][T18701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.737068][T18701] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.786786][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.794083][ T8016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.821954][T19520] raw_sendmsg: syz.0.3518 forgot to set AF_INET. Fix it! [ 534.875156][T19521] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 535.009342][ T8013] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.016615][ T8013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.132414][ T8005] IPVS: stop unused estimator thread 0... [ 535.214736][T19529] netlink: 'syz.1.3522': attribute type 9 has an invalid length. [ 535.801077][T19553] bond0: entered promiscuous mode [ 535.813872][T19553] bond_slave_0: entered promiscuous mode [ 535.838792][T19553] bond_slave_1: entered promiscuous mode [ 535.864743][T19553] batadv0: entered promiscuous mode [ 535.904794][T19553] debugfs: 'hsr1' already exists in 'hsr' [ 535.927928][T19553] Cannot create hsr debugfs directory [ 535.943654][T19553] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 535.954724][T19553] bond0: left promiscuous mode [ 535.960371][T19553] bond_slave_0: left promiscuous mode [ 535.973164][T19553] bond_slave_1: left promiscuous mode [ 535.984104][T19553] batadv0: left promiscuous mode [ 536.206884][T19572] lo: entered promiscuous mode [ 536.218148][T19572] tunl0: entered promiscuous mode [ 536.226954][T19572] gre0: entered promiscuous mode [ 536.290597][T19572] gretap0: entered promiscuous mode [ 536.326429][T19572] erspan0: entered promiscuous mode [ 536.346591][T19572] ip_vti0: entered promiscuous mode [ 536.370162][T19585] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 536.697199][T19602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.711415][T19599] block nbd4: NBD_DISCONNECT [ 536.861289][T19609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3538'. [ 537.034399][T19620] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 537.205861][T19630] netlink: 'syz.1.3543': attribute type 11 has an invalid length. [ 537.246056][T19638] netlink: 'syz.1.3543': attribute type 11 has an invalid length. [ 537.293006][ T30] audit: type=1800 audit(1785591271.736:7): pid=19635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3542" name=0A dev="tmpfs" ino=271 res=0 errno=0 [ 537.377706][T19641] pimreg: entered allmulticast mode [ 537.437934][T18701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.636279][T18701] veth0_vlan: entered promiscuous mode [ 537.696229][T18701] veth1_vlan: entered promiscuous mode [ 537.765979][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'. [ 537.797078][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'. [ 537.916212][T18701] veth0_macvtap: entered promiscuous mode [ 537.967318][T18701] veth1_macvtap: entered promiscuous mode [ 538.023330][T18701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.045589][T18701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.089489][ T3327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.250221][T19682] netlink: 'syz.1.3556': attribute type 6 has an invalid length. [ 538.427023][T19686] netlink: 'syz.0.3558': attribute type 28 has an invalid length. [ 538.449701][T19686] netlink: 'syz.0.3558': attribute type 3 has an invalid length. [ 538.484539][ T3327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.489701][T19686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3558'. [ 538.494704][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.522895][ T3327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.538061][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.670256][T19698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3562'. [ 538.702108][ T3327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.718650][ T3327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.752430][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.896285][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3564'. [ 539.102705][T19719] netlink: 'syz.4.3568': attribute type 1 has an invalid length. [ 539.155065][T19719] bond1: entered promiscuous mode [ 539.161229][T19719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.171429][T19713] syzkaller1: entered promiscuous mode [ 539.180936][T19713] syzkaller1: entered allmulticast mode [ 539.215689][T19719] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3568'. [ 539.330214][T19722] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3568'. [ 539.854740][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 539.873152][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 539.882394][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 539.898362][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 539.908765][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 540.065289][T19746] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3574'. [ 540.555502][T19770] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 540.590598][T19768] syzkaller1: entered promiscuous mode [ 540.606394][T19768] syzkaller1: entered allmulticast mode [ 540.661317][ T5842] IPVS: starting estimator thread 0... [ 540.677979][T19770] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 540.749960][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3580'. [ 540.760837][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3580'. [ 540.781384][T19773] IPVS: using max 35 ests per chain, 84000 per kthread [ 540.874409][T19740] xfrm0 speed is unknown, defaulting to 1000 [ 541.046337][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3583'. [ 541.176280][T19793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.256680][T19797] netlink: 'syz.2.3586': attribute type 1 has an invalid length. [ 541.265739][T19797] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3586'. [ 541.387377][T19807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.968143][T19833] tipc: Started in network mode [ 541.974863][T19833] tipc: Node identity ac141441, cluster identity 4711 [ 541.983029][T19833] tipc: Enabled bearer , priority 10 [ 541.990202][ T5644] Bluetooth: hci1: command tx timeout [ 542.012536][T19839] sctp: [Deprecated]: syz.2.3595 (pid 19839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.012536][T19839] Use struct sctp_sack_info instead [ 542.151679][T19740] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.167632][T19740] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.185000][T19851] netlink: 'syz.1.3598': attribute type 1 has an invalid length. [ 542.195865][T19740] bridge_slave_0: entered allmulticast mode [ 542.221948][T19740] bridge_slave_0: entered promiscuous mode [ 542.273293][T19851] bond2: entered promiscuous mode [ 542.279525][T19851] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.290987][T19740] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.311113][T19740] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.325486][T19740] bridge_slave_1: entered allmulticast mode [ 542.335552][T19740] bridge_slave_1: entered promiscuous mode [ 542.352678][T19858] xt_TPROXY: Can be used only with -p tcp or -p udp [ 542.368037][T19852] vlan2: entered allmulticast mode [ 542.386360][T19852] bond2: entered allmulticast mode [ 542.480775][T19740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.506715][T19740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.594672][T19740] team0: Port device team_slave_0 added [ 542.606769][T19740] team0: Port device team_slave_1 added [ 542.628954][T19868] netlink: 'syz.1.3602': attribute type 1 has an invalid length. [ 542.671368][T19740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.678594][T19740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.718344][T19740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.741394][T19740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.756019][T19740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.782485][T19740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.924651][T19740] hsr_slave_0: entered promiscuous mode [ 542.944644][T19740] hsr_slave_1: entered promiscuous mode [ 542.954455][T19740] debugfs: 'hsr0' already exists in 'hsr' [ 542.962013][T19740] Cannot create hsr debugfs directory [ 543.016240][ T7129] tipc: Node number set to 2886997057 [ 543.727671][T19904] __nla_validate_parse: 3 callbacks suppressed [ 543.727692][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3616'. [ 543.768042][T19904] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3616'. [ 543.797696][T19915] geneve2: entered promiscuous mode [ 543.813171][T19904] gretap1: entered promiscuous mode [ 543.820457][T19904] gretap1: entered allmulticast mode [ 543.914670][T19922] netlink: 'syz.1.3619': attribute type 39 has an invalid length. [ 543.943555][T19918] syzkaller0: entered promiscuous mode [ 543.959412][T19918] syzkaller0: entered allmulticast mode [ 544.076856][ T5644] Bluetooth: hci1: command tx timeout [ 544.354472][T19936] openvswitch: netlink: Flow actions attr not present in new flow. [ 544.616547][T19954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3629'. [ 544.645355][T19954] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3629'. [ 544.661151][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'. [ 544.840957][T19740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 544.867775][T19972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3634'. [ 544.891450][T19740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.914137][T19740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 544.937852][T19740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.985427][T19981] netlink: 'syz.0.3636': attribute type 11 has an invalid length. [ 545.034676][T19983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3638'. [ 545.116997][T19972] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.124806][T19972] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.139902][T19988] IPVS: nq: FWM 3 0x00000003 - no destination available [ 545.264234][T19972] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 545.282421][T19740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 545.296139][T19740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 545.306980][T19740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 545.336386][T19740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.453485][T20006] pim6reg: entered allmulticast mode [ 545.472568][T20006] pim6reg: left allmulticast mode [ 545.544875][T20010] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3642'. [ 545.612739][T20011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3643'. [ 545.614861][T20016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3642'. [ 545.637197][T20013] bridge_slave_0: left allmulticast mode [ 545.653736][T20013] bridge_slave_0: left promiscuous mode [ 545.661227][T20013] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.149659][ T5644] Bluetooth: hci1: command tx timeout [ 546.284842][T20013] bridge_slave_1: left allmulticast mode [ 546.298204][T20013] bridge_slave_1: left promiscuous mode [ 546.312069][T20013] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.329778][T20013] bond0: (slave bond_slave_0): Releasing backup interface [ 546.337989][T20013] bond_slave_0: left promiscuous mode [ 546.347746][T20013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.357364][T20013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.368082][T20013] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 546.467760][T20054] tipc: Enabling of bearer rejected, media not registered [ 546.568344][T20065] netlink: 'syz.4.3647': attribute type 2 has an invalid length. [ 546.616791][T19740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.687493][T19740] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.734579][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.742928][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.827297][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.834587][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.894302][T20081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.157937][T20092] netlink: 'syz.1.3658': attribute type 21 has an invalid length. [ 547.970220][T19740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.233235][ T5644] Bluetooth: hci1: command tx timeout [ 548.302697][T19740] veth0_vlan: entered promiscuous mode [ 548.376776][T19740] veth1_vlan: entered promiscuous mode [ 548.472860][T20147] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 548.491337][T20147] bond2 (unregistering): Released all slaves [ 548.778726][T20154] syzkaller0: entered promiscuous mode [ 548.794423][T20154] syzkaller0: entered allmulticast mode [ 548.821435][T20163] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 548.862156][T19740] veth0_macvtap: entered promiscuous mode [ 548.871666][T20156] x_tables: duplicate underflow at hook 3 [ 548.906016][T19740] veth1_macvtap: entered promiscuous mode [ 548.964946][T19740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.037188][T20172] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004 [ 549.136417][T19740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.201379][ T8008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.281779][T20178] __nla_validate_parse: 6 callbacks suppressed [ 549.281820][T20178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3677'. [ 549.312865][ T8008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.379892][ T8013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.425781][T20178] bond0: entered allmulticast mode [ 549.470984][T20178] bond_slave_0: entered allmulticast mode [ 549.482441][T20178] bond_slave_1: entered allmulticast mode [ 549.574779][T20180] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3678'. [ 549.594482][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.605922][ T3327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.644256][ T3327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.722980][T20182] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 549.736977][T20182] bond3 (unregistering): Released all slaves [ 549.764611][T20192] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3681'. [ 550.037137][ T8008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.065312][ T8008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.358827][T20216] gretap0: entered promiscuous mode [ 550.386570][T20216] vlan3: entered promiscuous mode [ 550.448710][T20222] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3687'. [ 550.594978][T20235] netlink: 'syz.3.3692': attribute type 1 has an invalid length. [ 550.763057][T20247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 550.780674][T20247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 550.792541][T20247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 550.802247][T20247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 550.826101][T20247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 550.855893][T20247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 551.226434][T20271] netlink: 'syz.1.3704': attribute type 39 has an invalid length. [ 551.242418][T20273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.326745][ T50] block nbd2: Receive control failed (result -32) [ 551.327224][ T5644] block nbd2: Receive control failed (result -32) [ 551.364304][T20273] netlink: 'syz.4.3705': attribute type 1 has an invalid length. [ 551.474532][T20281] netlink: 'syz.3.3709': attribute type 1 has an invalid length. [ 552.081913][T20324] netlink: 'syz.1.3720': attribute type 1 has an invalid length. [ 552.139329][T20328] netlink: 'syz.2.3717': attribute type 3 has an invalid length. [ 552.147304][T20328] netlink: 'syz.2.3717': attribute type 1 has an invalid length. [ 552.180297][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055743400: rx timeout, send abort [ 552.544035][T20334] xt_recent: Unsupported userspace flags (000000b1) [ 552.688631][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055743400: abort rx timeout. Force session deactivation [ 554.945388][T20311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.292168][T20357] team0 (unregistering): Port device team_slave_0 removed [ 555.314600][T20357] team0 (unregistering): Port device team_slave_1 removed [ 555.356540][T20370] __nla_validate_parse: 32 callbacks suppressed [ 555.356560][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3734'. [ 555.384091][T20364] geneve2: entered promiscuous mode [ 555.435820][ T65] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 59446 - 0 [ 555.472117][ T65] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 59446 - 0 [ 555.485849][ T65] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 59446 - 0 [ 555.505030][ T65] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 59446 - 0 [ 555.544143][T20375] xt_hashlimit: size too large, truncated to 1048576 [ 555.614273][T20380] xt_hashlimit: size too large, truncated to 1048576 [ 555.651484][T20379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3736'. [ 555.661999][T20374] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 555.786401][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3735'. [ 556.028864][T20393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3742'. [ 556.227449][T20405] sctp: [Deprecated]: syz.1.3743 (pid 20405) Use of int in maxseg socket option. [ 556.227449][T20405] Use struct sctp_assoc_value instead [ 556.617589][T20419] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 556.640221][T20419] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 556.705775][T20426] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3751'. [ 556.730738][T20424] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3751'. [ 556.801894][T20432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3754'. [ 556.851523][T20433] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3753'. [ 556.930150][T20439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 557.292306][T20462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.314803][T20456] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 557.336607][T20462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.346923][T20461] netlink: 'syz.4.3762': attribute type 1 has an invalid length. [ 557.374548][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3764'. [ 557.407485][T20456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.415565][T20461] bond2: entered promiscuous mode [ 557.424373][T20461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.810633][T20453] vlan2: entered allmulticast mode [ 557.816023][T20453] bond2: entered allmulticast mode [ 558.107677][T20502] batadv_slave_1: entered promiscuous mode [ 558.131878][T20504] syzkaller1: entered promiscuous mode [ 558.137457][T20504] syzkaller1: entered allmulticast mode [ 558.545468][T20475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.572479][T20507] netlink: 'syz.4.3774': attribute type 11 has an invalid length. [ 558.587143][T20507] netlink: 4312 bytes leftover after parsing attributes in process `syz.4.3774'. [ 558.620929][T20501] batadv_slave_1: left promiscuous mode [ 559.453264][T20560] bond2: option all_slaves_active: invalid value (222) [ 559.484277][T20560] bond2 (unregistering): Released all slaves [ 560.624490][T20630] __nla_validate_parse: 12 callbacks suppressed [ 560.624511][T20630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3805'. [ 560.675558][T20632] netlink: 'syz.3.3806': attribute type 1 has an invalid length. [ 560.700331][T20636] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3807'. [ 560.716600][T20632] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.3806'. [ 560.748873][T20636] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3807'. [ 560.766674][T20639] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3808'. [ 561.009328][T20650] IPv6: NLM_F_CREATE should be specified when creating new route [ 561.414393][T20675] netlink: 'syz.3.3818': attribute type 1 has an invalid length. [ 561.492933][T20675] bond1: option mode: invalid value (7) [ 561.516683][T20675] bond1 (unregistering): Released all slaves [ 561.530225][T20689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3821'. [ 561.543483][T20690] netlink: 'syz.3.3818': attribute type 10 has an invalid length. [ 561.552035][T20690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3818'. [ 561.638235][T20690] dummy0: entered promiscuous mode [ 561.948416][T20700] bridge1: entered promiscuous mode [ 561.966527][T20700] bridge1: entered allmulticast mode [ 562.823650][T20739] syzkaller0: entered promiscuous mode [ 562.829409][T20739] syzkaller0: entered allmulticast mode [ 562.884786][T20755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3838'. [ 562.980486][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3838'. [ 563.001161][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3838'. [ 563.411148][T20747] Cannot find add_set index 2 as target [ 566.471989][T20757] bridge_slave_0: left allmulticast mode [ 566.477803][T20757] bridge_slave_0: left promiscuous mode [ 566.484302][T20757] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.517640][T20757] bridge_slave_1: left allmulticast mode [ 566.543177][T20757] bridge_slave_1: left promiscuous mode [ 566.558674][T20757] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.589287][T20757] bond0: (slave bond_slave_0): Releasing backup interface [ 566.605954][T20757] bond0: (slave bond_slave_1): Releasing backup interface [ 566.628454][T20757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.641049][T20757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.657951][T20757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.671615][T20757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.697040][T20757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 566.894717][T20768] __nla_validate_parse: 1 callbacks suppressed [ 566.894741][T20768] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3842'. [ 567.082871][T20786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 567.090274][T20786] IPv6: NLM_F_CREATE should be set when creating new route [ 567.097571][T20786] IPv6: NLM_F_CREATE should be set when creating new route [ 567.111162][T20782] openvswitch: netlink: Flow key attr not present in new flow. [ 567.146146][T20786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 567.312334][T20797] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3851'. [ 567.802626][T20830] ip6gre1: entered promiscuous mode [ 567.810789][T20830] ip6gre1: entered allmulticast mode [ 568.485851][T20872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3874'. [ 568.530865][T20879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3874'. [ 569.124196][T20908] syzkaller0: entered promiscuous mode [ 569.136785][T20908] syzkaller0: entered allmulticast mode [ 569.146952][T20908] netlink: 'syz.2.3883': attribute type 1 has an invalid length. [ 569.197744][T20920] netlink: 'syz.0.3886': attribute type 1 has an invalid length. [ 569.234523][T20920] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 569.402228][T20936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.562387][T20942] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 569.648576][T20940] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3891'. [ 569.682302][T20940] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3891'. [ 569.722812][T20940] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3891'. [ 569.797200][T20953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3895'. [ 569.816203][T20953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3895'. [ 570.067606][T20964] syzkaller0: entered promiscuous mode [ 570.079499][T20964] syzkaller0: entered allmulticast mode [ 570.164024][T20977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3900'. [ 570.206259][T20974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 570.218324][T20974] bond3: entered allmulticast mode [ 570.227371][T20974] bond0: (slave bond3): Enslaving as an active interface with an up link [ 570.321030][T20978] "syz.4.3903" (20978) uses obsolete ecb(arc4) skcipher [ 570.658315][T20997] netlink: 'syz.1.3908': attribute type 2 has an invalid length. [ 570.985946][T21006] netlink: 'syz.1.3909': attribute type 4 has an invalid length. [ 571.698403][T21047] netlink: 'syz.2.3921': attribute type 3 has an invalid length. [ 571.865788][T21053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.896233][T21052] netlink: 'syz.4.3923': attribute type 1 has an invalid length. [ 572.085262][T21062] pim6reg: entered allmulticast mode [ 573.967364][T21008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.173618][T21082] __nla_validate_parse: 2 callbacks suppressed [ 574.173638][T21082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3931'. [ 574.209782][T21082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3931'. [ 574.232177][T21085] netlink: 'syz.1.3930': attribute type 1 has an invalid length. [ 574.247551][T21085] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3930'. [ 574.282865][T21089] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 574.337997][T21096] netlink: 'syz.0.3932': attribute type 11 has an invalid length. [ 574.373589][T20045] IPVS: starting estimator thread 0... [ 574.411714][T21099] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3935'. [ 574.435477][T21101] IPVS: set_ctl: invalid protocol: 52 38.0.1.0:0 [ 574.444907][T21100] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3935'. [ 574.465072][T21089] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 574.529328][T21097] IPVS: using max 27 ests per chain, 64800 per kthread [ 574.550788][T21107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3936'. [ 574.601935][T21107] netlink: 'syz.2.3936': attribute type 10 has an invalid length. [ 574.631096][T21111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3938'. [ 574.631940][T21107] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3936'. [ 574.656645][T21111] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3938'. [ 574.685802][T21107] geneve3: entered promiscuous mode [ 574.705274][T21107] geneve3: entered allmulticast mode [ 574.722661][T21119] sctp: [Deprecated]: syz.0.3940 (pid 21119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 574.722661][T21119] Use struct sctp_sack_info instead [ 574.768951][T21119] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3940'. [ 574.819321][T21107] veth1_to_batadv: mtu less than device minimum [ 574.828547][T21123] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 574.946985][T21129] IPv6: NLM_F_CREATE should be specified when creating new route [ 575.002855][T21131] Bluetooth: MGMT ver 1.23 [ 575.018587][T21132] netlink: 'syz.4.3943': attribute type 13 has an invalid length. [ 575.487707][T21153] netlink: zone id is out of range [ 575.490550][T21152] netlink: zone id is out of range [ 575.515064][T21153] netlink: zone id is out of range [ 575.535774][T21152] netlink: zone id is out of range [ 575.556510][T21153] netlink: zone id is out of range [ 575.573564][T21152] netlink: zone id is out of range [ 575.598730][T21153] netlink: zone id is out of range [ 575.608764][T21152] netlink: zone id is out of range [ 575.634392][T21153] netlink: set zone limit has 4 unknown bytes [ 576.035491][T21182] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 576.744016][T21196] netlink: 'syz.2.3963': attribute type 5 has an invalid length. [ 576.760374][T21196] netlink: 'syz.2.3963': attribute type 5 has an invalid length. [ 576.769337][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.781629][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.792222][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.801443][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.690030][T21161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.884076][T21201] netlink: 'syz.1.3966': attribute type 1 has an invalid length. [ 578.893224][T21199] netlink: 'syz.1.3966': attribute type 1 has an invalid length. [ 579.207982][T21221] netlink: 'syz.4.3972': attribute type 3 has an invalid length. [ 579.234141][T21227] netlink: 'syz.3.3971': attribute type 49 has an invalid length. [ 579.249518][T21221] netlink: 'syz.4.3972': attribute type 1 has an invalid length. [ 579.271124][T21221] __nla_validate_parse: 8 callbacks suppressed [ 579.271145][T21221] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3972'. [ 579.453118][T21239] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 579.466100][T21238] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3977'. [ 605.102094][T21256] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3981'. [ 605.290190][T21264] netlink: 'syz.3.3984': attribute type 4 has an invalid length. [ 605.348421][T21269] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.367409][T21268] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3985'. [ 605.526793][T21279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3988'. [ 605.534747][T21281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3988'. [ 605.781914][T21294] syz.0.3993: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 605.834729][T21294] CPU: 0 UID: 0 PID: 21294 Comm: syz.0.3993 Not tainted syzkaller #0 PREEMPT(full) [ 605.834762][T21294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.834791][T21294] Call Trace: [ 605.834865][T21294] [ 605.834928][T21294] dump_stack_lvl+0xe8/0x150 [ 605.835060][T21294] warn_alloc+0x24c/0x270 [ 605.835114][T21294] ? stack_depot_save_flags+0x33/0x800 [ 605.835228][T21294] ? __pfx_warn_alloc+0x10/0x10 [ 605.835257][T21294] ? kasan_save_track+0x3e/0x80 [ 605.835289][T21294] ? __kasan_kmalloc+0x93/0xb0 [ 605.835319][T21294] ? xsk_setsockopt+0x52a/0x960 [ 605.835409][T21294] ? do_sock_setsockopt+0x17c/0x1b0 [ 605.835485][T21294] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 605.835506][T21294] ? do_syscall_64+0x174/0x580 [ 605.835601][T21294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.835647][T21294] __vmalloc_node_range_noprof+0x12c/0x1730 [ 605.835701][T21294] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 605.835731][T21294] ? __kasan_kmalloc+0x93/0xb0 [ 605.835762][T21294] ? __kmalloc_cache_noprof+0x32d/0x660 [ 605.835799][T21294] ? __kmalloc_cache_noprof+0x150/0x660 [ 605.835829][T21294] vmalloc_user_noprof+0xad/0xe0 [ 605.835857][T21294] ? xskq_create+0xbf/0x170 [ 605.835882][T21294] xskq_create+0xbf/0x170 [ 605.835910][T21294] xsk_init_queue+0x8a/0xe0 [ 605.835936][T21294] xsk_setsockopt+0x52a/0x960 [ 605.835957][T21294] ? __fget_files+0x2a/0x420 [ 605.836010][T21294] ? __pfx_xsk_setsockopt+0x10/0x10 [ 605.836033][T21294] ? __pfx_aa_sk_perm+0x10/0x10 [ 605.836120][T21294] ? aa_sock_opt_perm+0xff/0x1a0 [ 605.836171][T21294] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 605.836221][T21294] ? __pfx_xsk_setsockopt+0x10/0x10 [ 605.836247][T21294] do_sock_setsockopt+0x17c/0x1b0 [ 605.836279][T21294] __x64_sys_setsockopt+0x13d/0x1b0 [ 605.836313][T21294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.836345][T21294] do_syscall_64+0x174/0x580 [ 605.836372][T21294] ? trace_irq_disable+0x3b/0x140 [ 605.836421][T21294] ? clear_bhb_loop+0x40/0x90 [ 605.836449][T21294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.836471][T21294] RIP: 0033:0x7f0bf579e019 [ 605.836522][T21294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.836552][T21294] RSP: 002b:00007f0bf6624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 605.836609][T21294] RAX: ffffffffffffffda RBX: 00007f0bf5a25fa0 RCX: 00007f0bf579e019 [ 605.836643][T21294] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 605.836656][T21294] RBP: 00007f0bf583500c R08: 0000000000000004 R09: 0000000000000000 [ 605.836671][T21294] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.836685][T21294] R13: 00007f0bf5a26038 R14: 00007f0bf5a25fa0 R15: 00007fffb76f19b8 [ 605.836723][T21294] [ 606.117015][T21294] Mem-Info: [ 606.121450][T21294] active_anon:7299 inactive_anon:0 isolated_anon:0 [ 606.121450][T21294] active_file:0 inactive_file:43162 isolated_file:0 [ 606.121450][T21294] unevictable:768 dirty:31 writeback:0 [ 606.121450][T21294] slab_reclaimable:11503 slab_unreclaimable:118648 [ 606.121450][T21294] mapped:29232 shmem:2861 pagetables:1310 [ 606.121450][T21294] sec_pagetables:0 bounce:0 [ 606.121450][T21294] kernel_misc_reclaimable:0 [ 606.121450][T21294] free:1301043 free_pcp:8507 free_cma:0 [ 606.168197][T21294] Node 0 active_anon:28296kB inactive_anon:0kB active_file:0kB inactive_file:172452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116928kB dirty:124kB writeback:0kB shmem:9308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14724kB pagetables:5096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 606.203380][T21294] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 606.239847][T21294] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.271923][T21294] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 606.277879][T21294] Node 0 DMA32 free:1243884kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28096kB inactive_anon:0kB active_file:0kB inactive_file:172452kB unevictable:1536kB writepending:124kB zspages:0kB present:3129332kB managed:2548536kB mlocked:0kB bounce:0kB free_pcp:36128kB local_pcp:15124kB free_cma:0kB [ 606.318523][T21294] lowmem_reserve[]: 0 0 0 0 0 [ 606.328226][T21294] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.358305][T21294] lowmem_reserve[]: 0 0 0 0 0 [ 606.363525][T21294] Node 1 Normal free:3944928kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.395939][T21294] lowmem_reserve[]: 0 0 0 0 0 [ 606.400972][T21294] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 606.413893][T21294] Node 0 DMA32: 3333*4kB (UE) 1315*8kB (UM) 628*16kB (UM) 144*32kB (ME) 40*64kB (UME) 5*128kB (UME) 10*256kB (ME) 3*512kB (M) 2*1024kB (UM) 6*2048kB (UM) 289*4096kB (UM) = 1243884kB [ 606.433746][T21294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 606.445539][T21294] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 5*16kB (UM) 2*32kB (UM) 9*64kB (UM) 6*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3944928kB [ 606.462630][T21294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.500699][T21294] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 606.556298][T21294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.588272][T21294] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 606.638605][T21294] 44469 total pagecache pages [ 606.645566][T21294] 0 pages in swap cache [ 606.651365][T21294] Free swap = 124996kB [ 606.655725][T21294] Total swap = 124996kB [ 606.660311][T21294] 2097051 pages RAM [ 606.664327][T21294] 0 pages HighMem/MovableOnly [ 606.669614][T21294] 428238 pages reserved [ 606.673936][T21294] 0 pages cma reserved [ 606.710637][T21309] syz_tun: entered allmulticast mode [ 606.721640][T21308] syz_tun: left allmulticast mode [ 606.965593][T21327] net_ratelimit: 1 callbacks suppressed [ 606.965689][T21327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.009648][T21333] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 607.019587][T21327] sctp: [Deprecated]: syz.3.4002 (pid 21327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.019587][T21327] Use struct sctp_sack_info instead [ 607.098180][T21322] syzkaller0: entered promiscuous mode [ 607.106052][T21322] syzkaller0: entered allmulticast mode [ 607.116771][T21327] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4002'. [ 607.129914][T21342] netlink: 'syz.3.4002': attribute type 10 has an invalid length. [ 607.146420][T21342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4002'. [ 607.240849][T21347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4002'. [ 607.257594][T20046] IPVS: starting estimator thread 0... [ 607.264615][T21349] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 607.277175][T21349] netlink: 'syz.2.4007': attribute type 5 has an invalid length. [ 607.294637][T21349] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4007'. [ 607.333666][T21354] netlink: 504 bytes leftover after parsing attributes in process `syz.0.4006'. [ 607.359837][T21350] IPVS: using max 26 ests per chain, 62400 per kthread [ 607.408600][T21359] netlink: 'syz.2.4008': attribute type 21 has an invalid length. [ 610.114187][T21342] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 610.140768][T21344] batadv_slave_1: entered promiscuous mode [ 610.150832][T21359] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4008'. [ 610.171352][T21361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4002'. [ 610.210298][T21361] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4002'. [ 610.252302][T21353] batadv_slave_1: left promiscuous mode [ 610.477674][T21371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4011'. [ 610.498767][T21379] Cannot find del_set index 4 as target [ 610.538057][T21379] Cannot find del_set index 4 as target [ 610.546032][T21382] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 610.547511][T21378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4014'. [ 610.567147][T21383] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 610.592847][T21379] Cannot find del_set index 4 as target [ 610.601742][T21378] netlink: 'syz.0.4014': attribute type 2 has an invalid length. [ 610.619709][T21379] Cannot find del_set index 4 as target [ 610.630556][T21378] netlink: 'syz.0.4014': attribute type 1 has an invalid length. [ 610.642432][T21379] Cannot find del_set index 4 as target [ 610.655378][T21383] lo speed is unknown, defaulting to 1000 [ 610.664183][T21383] lo speed is unknown, defaulting to 1000 [ 610.671408][T21379] Cannot find del_set index 4 as target [ 610.680849][T21383] lo speed is unknown, defaulting to 1000 [ 610.682779][T21378] netlink: 'syz.0.4014': attribute type 10 has an invalid length. [ 610.695146][T21383] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 610.696759][T21379] Cannot find del_set index 4 as target [ 610.722452][T21383] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 610.725077][T21378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4014'. [ 610.751380][T21379] Cannot find del_set index 4 as target [ 610.757126][T21390] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 610.776340][T21379] Cannot find del_set index 4 as target [ 610.784994][T21383] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 610.795413][T21379] Cannot find del_set index 4 as target [ 610.803247][T21378] dummy0: entered promiscuous mode [ 610.848070][T21383] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 610.957349][T21383] lo speed is unknown, defaulting to 1000 [ 610.996602][T21383] lo speed is unknown, defaulting to 1000 [ 611.029901][T21383] lo speed is unknown, defaulting to 1000 [ 611.052473][T21402] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4019'. [ 611.057722][T21383] lo speed is unknown, defaulting to 1000 [ 611.070102][T21383] lo speed is unknown, defaulting to 1000 [ 611.077974][T21383] lo speed is unknown, defaulting to 1000 [ 611.090593][T21383] lo speed is unknown, defaulting to 1000 [ 611.257306][T21412] netlink: 'syz.0.4024': attribute type 1 has an invalid length. [ 611.288312][T21412] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4024'. [ 611.314672][T21412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4024'. [ 611.362463][T21423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4025'. [ 611.673066][T21445] netlink: 'syz.2.4030': attribute type 1 has an invalid length. [ 611.838344][T21445] bond2: entered promiscuous mode [ 611.845008][T21445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 611.877092][T21451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 611.885280][T21451] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 611.896284][T21451] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 611.909611][T21451] bond2: (slave ip6gre1): making interface the new active one [ 611.917261][T21451] ip6gre1: entered promiscuous mode [ 611.925033][T21451] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 611.974331][T21458] syz_tun: entered promiscuous mode [ 612.363175][T21478] syzkaller0: entered promiscuous mode [ 612.381349][T21478] syzkaller0: entered allmulticast mode [ 612.587391][T21490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.664237][T21489] xt_hashlimit: overflow, try lower: 3/0 [ 612.826912][T21500] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.834916][T21500] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.921800][T21500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.935040][T21500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.026366][T21500] bond1: left promiscuous mode [ 613.034742][T21500] bond2: left promiscuous mode [ 613.041244][T21500] vlan2: left allmulticast mode [ 613.046167][T21500] bond2: left allmulticast mode [ 613.069286][ T8013] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.100895][ T8013] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.131084][ T8013] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.154607][ T8013] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.624724][T21540] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 613.667055][T21538] : renamed from bond0 (while UP) [ 613.695802][T21547] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 613.707085][T21547] bond2 (unregistering): Released all slaves [ 613.865255][T21549] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 613.878312][T21549] bond2 (unregistering): Released all slaves [ 614.000329][T21554] syzkaller0: entered promiscuous mode [ 614.012494][T21554] syzkaller0: entered allmulticast mode [ 614.038146][T21556] syzkaller0: entered promiscuous mode [ 614.057974][T21556] syzkaller0: entered allmulticast mode [ 614.093140][T21567] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 615.065977][T21611] syzkaller0: entered promiscuous mode [ 615.081413][T21611] syzkaller0: entered allmulticast mode [ 615.096702][T21616] block nbd0: reconnected socket [ 615.109475][T21621] netlink: 'syz.4.4079': attribute type 29 has an invalid length. [ 615.152437][T21620] netlink: 'syz.4.4079': attribute type 29 has an invalid length. [ 615.223469][ T5644] block nbd0: Receive control failed (result -32) [ 615.896957][T21619] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 615.903581][T21619] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 618.413216][T21645] ip6gre1: entered allmulticast mode [ 618.442522][ T8005] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 618.469708][T21619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 618.484366][T21619] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 618.499754][T21648] tipc: Started in network mode [ 618.504910][T21648] tipc: Node identity , cluster identity 4711 [ 618.512012][T21648] tipc: Failed to obtain node identity [ 618.518831][T21648] tipc: Enabling of bearer rejected, failed to enable media [ 618.605009][T21650] __nla_validate_parse: 11 callbacks suppressed [ 618.605029][T21650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4085'. [ 618.719906][T21657] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4089'. [ 618.745999][T21650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 618.813397][T21665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4090'. [ 618.956191][T21665] 8021q: adding VLAN 0 to HW filter on device bond2 [ 619.001822][T21675] gretap1: entered promiscuous mode [ 619.022891][T21675] batman_adv: batadv0: Adding interface: gretap1 [ 619.041384][T21675] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 619.084632][T21680] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 619.101526][T21681] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.4092'. [ 619.311769][T21687] 8021q: adding VLAN 0 to HW filter on device bond3 [ 619.421224][ T8005] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.461721][ T8005] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.530319][ T8013] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.558314][ T8013] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.805306][T21718] syzkaller0: entered promiscuous mode [ 619.822844][T21718] syzkaller0: entered allmulticast mode [ 619.924627][T21726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4103'. [ 619.952151][T21726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4103'. [ 620.272969][T21745] gretap1: entered promiscuous mode [ 620.312629][T21745] batman_adv: batadv0: Adding interface: gretap1 [ 620.330347][T21745] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.380693][T21745] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 620.905563][T21789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4120'. [ 621.045409][T21795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4120'. [ 621.172468][T21800] syzkaller0: entered promiscuous mode [ 621.194417][T21800] syzkaller0: entered allmulticast mode [ 621.218051][T21800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4123'. [ 621.236077][T21800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4123'. [ 621.248889][T21800] netlink: 'syz.3.4123': attribute type 19 has an invalid length. [ 621.435932][T21818] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 621.435932][T21818] Please contact the netfilter-devel mailing list or update your nftables rules. [ 621.576624][T21819] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 622.099762][T21861] xt_TPROXY: Can be used only with -p tcp or -p udp [ 622.149288][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 622.924306][T21907] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 623.099935][T21914] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 623.435988][T21927] netlink: 'syz.1.4161': attribute type 83 has an invalid length. [ 623.775321][T21951] __nla_validate_parse: 5 callbacks suppressed [ 623.775344][T21951] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.4169'. [ 623.821584][T21951] openvswitch: netlink: Flow actions attr not present in new flow. [ 623.881524][T21962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4172'. [ 623.928936][T21957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4172'. [ 624.008457][T21964] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4173'. [ 624.083510][T21970] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 624.217825][T21976] gre0: entered allmulticast mode [ 624.293332][T21981] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 624.521781][T21993] netlink: 'syz.0.4182': attribute type 11 has an invalid length. [ 624.534264][T21996] netlink: 'syz.1.4184': attribute type 1 has an invalid length. [ 624.658531][T22001] can: request_module (can-proto-0) failed. [ 624.664764][T21996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.751939][T21996] bond0: (slave veth0_to_bond): making interface the new active one [ 624.766152][T21996] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 624.810687][T22000] bond0: entered promiscuous mode [ 624.820203][T22000] veth0_to_bond: entered promiscuous mode [ 624.846642][T22000] bond0: entered allmulticast mode [ 624.876954][T22000] veth0_to_bond: entered allmulticast mode [ 625.015103][T22028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4191'. [ 625.467534][T22047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4197'. [ 625.514300][T22027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.529858][T22027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.743743][T22064] netlink: 'syz.1.4200': attribute type 83 has an invalid length. [ 625.760219][T22068] netlink: 'syz.1.4200': attribute type 83 has an invalid length. [ 625.792340][T22027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.811214][T22070] xt_l2tp: v2 sid > 0xffff: 1114112 [ 625.845490][T22027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.993794][T22081] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4204'. [ 626.012860][T22081] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4204'. [ 626.062664][T22084] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 626.173793][T22027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.219661][T22027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.240151][T22089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4207'. [ 626.333073][T22093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4209'. [ 626.369870][T22099] netlink: 'syz.4.4210': attribute type 1 has an invalid length. [ 626.421879][T22027] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.440005][T22027] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.787087][T22099] bridge4: entered promiscuous mode [ 626.824076][T22099] bond5: (slave bridge4): making interface the new active one [ 626.848654][T22099] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 626.901881][T22124] netlink: 'syz.3.4214': attribute type 11 has an invalid length. [ 626.913103][T22104] bridge5: entered promiscuous mode [ 626.933869][T22104] bond5: (slave bridge5): Enslaving as a backup interface with an up link [ 627.086209][T22129] netlink: 'syz.1.4215': attribute type 3 has an invalid length. [ 627.148899][T22131] bond5: Removing last ns target with arp_interval on [ 627.189254][T22134] x_tables: duplicate underflow at hook 1 [ 627.309270][ T8005] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.327837][ T8005] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.343297][ T8005] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.373509][ T8005] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.406584][ T8005] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.435555][ T8005] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.467073][ T8005] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.487914][ T8005] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.705721][T22154] netlink: 'syz.4.4227': attribute type 33 has an invalid length. [ 627.746866][T22154] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 627.765222][T22154] bond7 (unregistering): Released all slaves [ 628.535916][T22204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.152601][T22238] Cannot find add_set index 4 as target [ 629.328595][T22251] __nla_validate_parse: 5 callbacks suppressed [ 629.328615][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4245'. [ 629.405708][T22226] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4245'. [ 629.666662][T22265] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 629.679365][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.700044][T22265] netlink: 'syz.4.4255': attribute type 12 has an invalid length. [ 629.720581][T22265] netlink: 'syz.4.4255': attribute type 29 has an invalid length. [ 629.740935][T22265] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4255'. [ 629.773542][T22265] netlink: 'syz.4.4255': attribute type 3 has an invalid length. [ 629.809189][T22265] netlink: 'syz.4.4255': attribute type 2 has an invalid length. [ 629.832174][T22280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4255'. [ 629.846123][T22265] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4255'. [ 629.874984][T22280] hsr_slave_0: left promiscuous mode [ 629.895235][T22280] hsr_slave_1: left promiscuous mode [ 630.047879][T22291] netlink: 'syz.0.4262': attribute type 1 has an invalid length. [ 630.479841][T22307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4264'. [ 630.662057][T22321] netlink: 576 bytes leftover after parsing attributes in process `syz.1.4264'. [ 630.887882][T22330] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4271'. [ 631.106215][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4272'. [ 631.404340][T22347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4274'. [ 632.272964][T22369] netlink: 'syz.1.4277': attribute type 12 has an invalid length. [ 632.315009][T22360] syzkaller0: entered promiscuous mode [ 632.326445][T22360] syzkaller0: entered allmulticast mode [ 632.546451][T22378] netlink: 'syz.3.4279': attribute type 21 has an invalid length. [ 632.590623][T22378] netlink: 'syz.3.4279': attribute type 5 has an invalid length. [ 632.635839][T22378] x_tables: duplicate underflow at hook 2 [ 632.672338][T22382] netlink: 'syz.1.4281': attribute type 1 has an invalid length. [ 632.783324][T22393] x_tables: unsorted entry at hook 3 [ 632.841532][T22382] 8021q: adding VLAN 0 to HW filter on device bond6 [ 633.015155][T22389] bond6: (slave geneve3): making interface the new active one [ 633.050066][T22405] sctp: [Deprecated]: syz.3.4286 (pid 22405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.050066][T22405] Use struct sctp_sack_info instead [ 633.069680][T22405] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 633.091200][T22389] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 633.160811][T22410] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 633.246683][T22405] bond4: entered promiscuous mode [ 633.275129][T22405] 8021q: adding VLAN 0 to HW filter on device bond4 [ 633.329884][ T8013] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 633.480698][T22425] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 633.559930][ T8005] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 633.597502][ T8005] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 633.622261][ T8005] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 633.844291][T22443] 8021q: adding VLAN 0 to HW filter on device bond4 [ 633.854840][T22443] bond0: (slave bond4): Enslaving as an active interface with an up link [ 633.872987][T22448] x_tables: duplicate underflow at hook 3 [ 633.995593][T22452] ip6tnl0: Caught tx_queue_len zero misconfig [ 634.034899][T22452] openvswitch: netlink: Missing key (keys=40, expected=100) [ 634.346516][T22474] netlink: 'syz.2.4305': attribute type 1 has an invalid length. [ 634.372966][T22474] netlink: 'syz.2.4305': attribute type 2 has an invalid length. [ 634.906174][T22505] __nla_validate_parse: 5 callbacks suppressed [ 634.906195][T22505] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4317'. [ 635.105600][T22518] Cannot find add_set index 2 as target [ 635.277020][T22525] netlink: 'syz.0.4323': attribute type 2 has an invalid length. [ 635.285659][T22528] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 635.382758][T22529] netlink: 'syz.1.4321': attribute type 12 has an invalid length. [ 635.399445][T22529] netlink: 'syz.1.4321': attribute type 29 has an invalid length. [ 635.416171][T22529] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4321'. [ 635.436237][T22529] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4321'. [ 635.756379][T22547] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4329'. [ 635.795311][T22547] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4329'. [ 635.852657][T22551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.014059][T22558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4332'. [ 636.025205][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 636.067930][T22559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4333'. [ 636.101665][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 636.144047][T22559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4333'. [ 636.274517][T22565] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 636.323160][T22565] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 636.434468][T22583] xt_HMARK: spi-set and port-set can't be combined [ 636.898112][T22609] lo: Caught tx_queue_len zero misconfig [ 637.035225][T22616] lo: left promiscuous mode [ 637.065814][ T30] audit: type=1804 audit(1785591371.526:8): pid=22619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4351" name="/newroot/214/cgroup.controllers" dev="tmpfs" ino=1119 res=1 errno=0 [ 637.092360][T22616] tunl0: left promiscuous mode [ 637.108045][T22616] gre0: left promiscuous mode [ 637.121571][T22616] gre0: left allmulticast mode [ 637.133702][ T30] audit: type=1800 audit(1785591371.556:9): pid=22619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4351" name="cgroup.controllers" dev="tmpfs" ino=1119 res=0 errno=0 [ 637.228446][T22616] gretap0: left promiscuous mode [ 637.241992][T22616] erspan0: left promiscuous mode [ 637.255597][T22616] ip_vti0: left promiscuous mode [ 637.327807][T22616] bond0: left promiscuous mode [ 637.333609][T22616] dummy0: left promiscuous mode [ 637.489717][T22616] bond1: left promiscuous mode [ 637.495010][T22616] bond1: left allmulticast mode [ 637.518561][T22616] vlan2: left promiscuous mode [ 637.530352][T22616] bridge0: left promiscuous mode [ 637.552841][T22616] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 637.623646][T22643] validate_nla: 1 callbacks suppressed [ 637.623667][T22643] netlink: 'syz.3.4350': attribute type 10 has an invalid length. [ 637.652250][ T8008] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.672321][ T8008] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.809192][ T8013] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.828061][ T8013] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.848671][ T8013] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.886358][ T8013] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.970820][ T8013] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.009419][ T8013] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.121029][T22656] syzkaller0: entered promiscuous mode [ 638.145732][T22656] syzkaller0: entered allmulticast mode [ 638.455445][T22679] xt_NFQUEUE: number of total queues is 0 [ 638.682339][T22688] netlink: 'syz.4.4368': attribute type 10 has an invalid length. [ 638.689858][ T8008] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.714348][ T8008] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.790889][ T6870] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.818947][ T6870] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.542165][T22721] bridge4: entered promiscuous mode [ 639.552976][T22721] bridge4: entered allmulticast mode [ 639.603297][T22731] netlink: 'syz.3.4379': attribute type 8 has an invalid length. [ 640.242669][T22770] netlink: 'syz.1.4389': attribute type 1 has an invalid length. [ 640.318433][T22770] bond7: entered promiscuous mode [ 640.328024][T22770] 8021q: adding VLAN 0 to HW filter on device bond7 [ 640.368872][T22783] openvswitch: netlink: Key 6 has unexpected len 177 expected 2 [ 640.436495][T22781] 8021q: adding VLAN 0 to HW filter on device bond7 [ 640.458773][T22781] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 640.499376][T22781] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 640.522144][T22781] bond7: (slave ip6gre2): making interface the new active one [ 640.536045][T22781] ip6gre2: entered promiscuous mode [ 640.544938][T22781] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 641.078593][T22806] __nla_validate_parse: 10 callbacks suppressed [ 641.078616][T22806] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4396'. [ 641.164824][T22810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4399'. [ 641.401748][T22817] bond0: invalid NS target :: specified for addition [ 641.421579][T22817] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 641.743511][T22829] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4404'. [ 641.765645][T22829] bridge2: entered promiscuous mode [ 641.776175][T22829] bridge2: entered allmulticast mode [ 641.820118][T22835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4406'. [ 642.003595][T22841] netlink: 'syz.3.4409': attribute type 4 has an invalid length. [ 642.132148][T22846] mac80211_hwsim hwsim34 wlan0: left allmulticast mode [ 642.178438][T22843] xfrm0 speed is unknown, defaulting to 1000 [ 642.201140][T22843] lo speed is unknown, defaulting to 1000 [ 642.222951][T22849] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.428592][T22857] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4416'. [ 642.458946][T22838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4408'. [ 642.656132][T22867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4419'. [ 642.666202][T22867] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4419'. [ 643.312068][T22894] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4425'. [ 643.338976][T22903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4428'. [ 643.749245][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 643.852714][T22926] syzkaller0: entered promiscuous mode [ 643.862106][T22926] syzkaller0: entered allmulticast mode [ 644.043667][T22932] 8021q: adding VLAN 0 to HW filter on device bond7 [ 644.070460][T22940] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 644.423080][T22967] netlink: 'syz.2.4447': attribute type 1 has an invalid length. [ 645.009411][T22985] netlink: 'syz.0.4454': attribute type 3 has an invalid length. [ 645.220175][T22997] bridge6: entered promiscuous mode [ 645.233341][T22997] bridge6: entered allmulticast mode [ 645.284861][T22997] team0: Port device bridge6 added [ 645.321035][T22999] bridge0: port 3(team0) entered blocking state [ 645.327933][T22999] bridge0: port 3(team0) entered disabled state [ 645.339910][T22999] team0: entered allmulticast mode [ 645.348237][T22999] team_slave_0: entered allmulticast mode [ 645.357749][T22999] team_slave_1: entered allmulticast mode [ 645.387587][T22999] team0: entered promiscuous mode [ 645.403908][T22999] team_slave_0: entered promiscuous mode [ 645.421062][T22999] team_slave_1: entered promiscuous mode [ 645.614918][T23008] 8021q: adding VLAN 0 to HW filter on device bond4 [ 645.884623][T23032] netlink: 'syz.4.4468': attribute type 4 has an invalid length. [ 646.883384][T23067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.912576][T23067] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.968964][T23067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.096678][T23067] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 647.235072][ T8005] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.242856][ T8005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.292292][ T8005] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.299667][ T8005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.415288][T23104] netlink: 'syz.3.4481': attribute type 4 has an invalid length. [ 647.466249][T23101] netlink: 'syz.3.4481': attribute type 4 has an invalid length. [ 647.603955][T23114] __nla_validate_parse: 15 callbacks suppressed [ 647.603976][T23114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4484'. [ 647.621056][T23105] 8021q: adding VLAN 0 to HW filter on device bond8 [ 647.652130][T23114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4484'. [ 651.243884][T23104] lo: entered promiscuous mode [ 651.248880][ T7128] lo speed is unknown, defaulting to 1000 [ 651.256895][T23104] tunl0: entered promiscuous mode [ 651.257796][ T7128] syú2: Port: 1 Link DOWN [ 651.272823][T23104] gre0: entered promiscuous mode [ 651.313192][T23104] gretap0: entered promiscuous mode [ 651.325301][T23104] erspan0: entered promiscuous mode [ 651.453218][T23104] ip_vti0: entered promiscuous mode [ 651.493232][T20045] lo speed is unknown, defaulting to 1000 [ 651.499873][T20043] lo speed is unknown, defaulting to 1000 [ 651.499971][ T7138] lo speed is unknown, defaulting to 1000 [ 651.670021][T23141] netlink: 'syz.0.4488': attribute type 21 has an invalid length. [ 651.690582][T23141] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4488'. [ 651.711679][T23141] netlink: 'syz.0.4488': attribute type 5 has an invalid length. [ 651.737557][T23141] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4488'. [ 651.865750][T23153] syzkaller0: entered promiscuous mode [ 651.879771][T23153] syzkaller0: entered allmulticast mode [ 651.892359][T23155] netlink: 'syz.4.4491': attribute type 32 has an invalid length. [ 651.919790][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4491'. [ 652.070045][T23173] IPVS: set_ctl: invalid protocol: 8 172.20.20.81:21 [ 652.217604][T23157] bond5 (unregistering): Released all slaves [ 652.303335][T23155] bond9: Setting coupled_control to off (0) [ 652.345702][T23180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4499'. [ 652.595775][T23193] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4502'. [ 652.651731][T23196] netlink: 'syz.3.4504': attribute type 12 has an invalid length. [ 652.662906][T23194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4503'. [ 652.686590][T23194] netlink: 'syz.1.4503': attribute type 30 has an invalid length. [ 652.812922][T23199] netlink: 'syz.4.4505': attribute type 1 has an invalid length. [ 652.976739][T23199] 8021q: adding VLAN 0 to HW filter on device bond10 [ 653.010019][T23205] bond10: (slave gretap1): making interface the new active one [ 653.026453][T23205] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 653.089196][T23211] nbd: couldn't find device at index 134217728 [ 653.302812][T23226] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 653.403964][T23227] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 653.816294][T23262] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4519'. [ 654.227147][T23271] syzkaller0: entered promiscuous mode [ 654.242596][T23271] syzkaller0: entered allmulticast mode [ 654.258647][T23280] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4524'. [ 654.278283][T23265] syzkaller0: entered promiscuous mode [ 654.290730][T23265] syzkaller0: entered allmulticast mode [ 654.378721][T23285] netlink: 'syz.3.4527': attribute type 8 has an invalid length. [ 654.394539][T23285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'. [ 657.674116][T23299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4529'. [ 657.687613][T23302] netlink: 212936 bytes leftover after parsing attributes in process `syz.2.4529'. [ 657.720765][T23302] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 657.805551][T23311] netlink: 'syz.3.4532': attribute type 1 has an invalid length. [ 657.846304][T23313] netlink: 'syz.3.4532': attribute type 1 has an invalid length. [ 657.863780][T23314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4531'. [ 657.910119][T23314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4531'. [ 657.937889][T23318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4533'. [ 658.089913][T23322] bond5: Unable to set down delay as MII monitoring is disabled [ 658.149978][T23322] bond5 (unregistering): Released all slaves [ 658.246416][T23329] veth1_to_bond: entered allmulticast mode [ 658.265512][T23329] veth1_to_bond: entered promiscuous mode [ 658.273898][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4536'. [ 658.326309][T23329] veth1_to_bond (unregistering): left allmulticast mode [ 658.340707][T23329] veth1_to_bond (unregistering): left promiscuous mode [ 658.390639][T23329] bond0: (slave bond_slave_1): Releasing backup interface [ 658.454264][T23338] netlink: 'syz.4.4539': attribute type 1 has an invalid length. [ 658.511004][T23338] 8021q: adding VLAN 0 to HW filter on device bond11 [ 658.563422][T23338] bond11: (slave gretap2): making interface the new active one [ 658.574566][T23338] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 658.874116][T23341] syzkaller0: entered promiscuous mode [ 658.880697][T23341] syzkaller0: entered allmulticast mode [ 658.897185][T23361] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4544'. [ 659.083600][T23375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4547'. [ 659.118241][T23375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4547'. [ 659.150913][T23375] netlink: 'syz.3.4547': attribute type 14 has an invalid length. [ 659.172181][T23375] netlink: 'syz.3.4547': attribute type 13 has an invalid length. [ 659.223702][T23378] netlink: 'syz.1.4548': attribute type 1 has an invalid length. [ 659.937741][T23385] "syz.4.4550" (23385) uses obsolete ecb(arc4) skcipher [ 662.813081][T23378] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 663.168765][T23401] netlink: zone id is out of range [ 663.234747][T23401] netlink: zone id is out of range [ 663.246843][T23401] netlink: zone id is out of range [ 663.252754][T23401] netlink: zone id is out of range [ 663.276513][T23409] pim6reg: entered allmulticast mode [ 663.285169][T23401] netlink: zone id is out of range [ 663.295113][T23401] netlink: zone id is out of range [ 663.324559][T23401] netlink: zone id is out of range [ 663.339542][T23401] netlink: zone id is out of range [ 663.373037][T23412] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 663.377519][T23401] netlink: zone id is out of range [ 663.406302][T23401] netlink: zone id is out of range [ 663.507540][T23419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4561'. [ 663.533181][T23419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4561'. [ 663.586985][T23425] set match dimension is over the limit! [ 663.624082][T23424] syzkaller0: entered promiscuous mode [ 663.645978][T23424] syzkaller0: entered allmulticast mode [ 664.045488][T23442] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4568'. [ 664.192887][T23446] netlink: 'syz.3.4569': attribute type 1 has an invalid length. [ 664.262685][T23446] 8021q: adding VLAN 0 to HW filter on device bond5 [ 664.289568][T23448] bond5: entered promiscuous mode [ 664.301999][T23448] bond5: entered allmulticast mode [ 664.333677][T23452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4573'. [ 664.377227][T23449] 8021q: adding VLAN 0 to HW filter on device bond6 [ 664.395201][T23457] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4574'. [ 664.406021][T23454] netlink: 'syz.0.4572': attribute type 1 has an invalid length. [ 664.502338][T23463] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4575'. [ 664.511845][T23463] netlink: 'syz.3.4575': attribute type 9 has an invalid length. [ 664.770101][T23474] syzkaller0: entered promiscuous mode [ 664.788596][T23474] syzkaller0: entered allmulticast mode [ 665.170571][T23498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4581'. [ 665.187368][T23491] netlink: 'syz.2.4580': attribute type 1 has an invalid length. [ 665.387658][T23507] netlink: 'syz.3.4585': attribute type 17 has an invalid length. [ 665.409643][T23507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4585'. [ 665.422744][T23507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4585'. [ 665.428782][T23491] 8021q: adding VLAN 0 to HW filter on device bond7 [ 665.481302][T23507] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 665.493438][T23507] : Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 665.524811][T23511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4584'. [ 665.961417][T23533] syzkaller0: entered promiscuous mode [ 665.978565][T23533] syzkaller0: entered allmulticast mode [ 666.070361][T23537] netlink: 'syz.4.4594': attribute type 13 has an invalid length. [ 666.102750][T23537] macsec0: entered allmulticast mode [ 666.768980][T23572] netlink: 'syz.2.4603': attribute type 4 has an invalid length. [ 666.797551][T23572] netlink: 'syz.2.4603': attribute type 4 has an invalid length. [ 666.918559][T23579] lo: entered promiscuous mode [ 666.930976][T23579] netlink: 'syz.4.4605': attribute type 2 has an invalid length. [ 667.297701][T23593] macvtap0: entered promiscuous mode [ 667.314536][T23593] macvtap0: entered allmulticast mode [ 667.333939][T23593] veth1_vlan: entered allmulticast mode [ 667.360618][T23595] veth1_vlan: left promiscuous mode [ 667.366208][T23595] veth1_vlan: entered promiscuous mode [ 667.374866][T23595] veth1_vlan: entered allmulticast mode [ 667.439320][T23587] syzkaller0: entered promiscuous mode [ 667.451615][T23587] syzkaller0: entered allmulticast mode [ 667.583343][T23607] sctp: [Deprecated]: syz.1.4611 (pid 23607) Use of int in max_burst socket option. [ 667.583343][T23607] Use struct sctp_assoc_value instead [ 667.989546][T23627] netlink: 'syz.4.4614': attribute type 1 has an invalid length. [ 668.606093][T23656] xt_ipcomp: unknown flags 1D [ 668.668577][T23658] __nla_validate_parse: 12 callbacks suppressed [ 668.668600][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4623'. [ 668.716301][T23658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4623'. [ 668.763156][T23664] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4626'. [ 668.785127][T23658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4623'. [ 669.070276][T23677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4629'. [ 669.358078][T23695] x_tables: unsorted entry at hook 1 [ 669.387696][T23698] IPv6: NLM_F_CREATE should be specified when creating new route [ 669.404226][T23699] validate_nla: 1 callbacks suppressed [ 669.404245][T23699] netlink: 'syz.0.4636': attribute type 30 has an invalid length. [ 669.418757][T23699] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4636'. [ 669.615689][ T5644] block nbd3: Receive control failed (result -32) [ 669.615724][ T50] block nbd3: Receive control failed (result -32) [ 669.816568][T23684] 8021q: adding VLAN 0 to HW filter on device bond8 [ 669.839194][T23708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4632'. [ 669.849852][T23717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4642'. [ 669.861752][T23684] bridge0: port 3(bond8) entered blocking state [ 669.877081][T23708] net_ratelimit: 6 callbacks suppressed [ 669.877101][T23708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.888200][T23684] bridge0: port 3(bond8) entered disabled state [ 669.893693][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4641'. [ 669.914294][T23684] bond8: entered allmulticast mode [ 669.926083][T23684] bond8: entered promiscuous mode [ 669.933501][T23684] bridge0: port 3(bond8) entered blocking state [ 669.940011][T23684] bridge0: port 3(bond8) entered forwarding state [ 670.007727][T23724] netlink: 'syz.2.4644': attribute type 21 has an invalid length. [ 670.391595][T23739] netlink: 'syz.2.4648': attribute type 2 has an invalid length. [ 670.439146][T23739] : entered promiscuous mode [ 670.573841][ T36] bridge0: port 3(bond8) entered disabled state [ 670.629304][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.683233][T23752] netlink: 'syz.4.4652': attribute type 2 has an invalid length. [ 670.725602][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4653'. [ 670.738355][T23754] netlink: 'syz.3.4653': attribute type 14 has an invalid length. [ 670.754611][T23754] netlink: 'syz.3.4653': attribute type 13 has an invalid length. [ 670.822237][T23752] : entered promiscuous mode [ 670.863578][T23761] 0„ž{X¹¦: renamed from gretap0 [ 670.969977][T23761] 0„ž{X¹¦: entered allmulticast mode [ 670.978402][T23761] A link change request failed with some changes committed already. Interface 30„ž{X¹¦ may have been left with an inconsistent configuration, please check. [ 671.323368][T23789] netlink: 'syz.0.4665': attribute type 4 has an invalid length. [ 671.984201][T23824] netlink: 'syz.4.4673': attribute type 11 has an invalid length. [ 672.058270][T23833] netlink: 'syz.2.4676': attribute type 1 has an invalid length. [ 672.088465][T23825] netlink: 'syz.4.4673': attribute type 11 has an invalid length. [ 672.152551][T23833] 8021q: adding VLAN 0 to HW filter on device bond8 [ 672.952347][T23880] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.960220][T23880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.077038][T23886] syzkaller0: entered promiscuous mode [ 673.084976][T23886] syzkaller0: entered allmulticast mode [ 673.283036][T23897] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 673.332501][T23897] netlink: 'syz.0.4692': attribute type 2 has an invalid length. [ 673.473642][T23908] batadv_slave_0: mtu less than device minimum [ 673.615926][T23915] ip6t_rpfilter: unknown options [ 673.807609][T23925] netlink: 'syz.0.4699': attribute type 8 has an invalid length. [ 673.849508][T23925] __nla_validate_parse: 6 callbacks suppressed [ 673.849531][T23925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4699'. [ 673.999983][T23931] syzkaller0: entered promiscuous mode [ 674.014389][T23931] syzkaller0: entered allmulticast mode [ 674.448757][T23949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4710'. [ 674.515820][T23953] validate_nla: 2 callbacks suppressed [ 674.515843][T23953] netlink: 'syz.3.4711': attribute type 23 has an invalid length. [ 674.690311][T23961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.702223][T23960] openvswitch: netlink: IP tunnel dst address not specified [ 674.745585][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4715'. [ 675.222417][T23999] netlink: 'syz.2.4725': attribute type 1 has an invalid length. [ 675.396440][T24009] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 675.413516][T24012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4729'. [ 675.425375][T24012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4729'. [ 675.442461][T24012] netlink: 'syz.2.4729': attribute type 12 has an invalid length. [ 675.452104][T24012] netlink: 'syz.2.4729': attribute type 11 has an invalid length. [ 675.501232][T24015] ipvlan2: entered promiscuous mode [ 675.721209][T24029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4733'. [ 676.025751][T24042] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 676.084169][T24062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4741'. [ 676.723517][T24092] vlan3: entered allmulticast mode [ 676.735618][T24093] netlink: 'syz.1.4744': attribute type 5 has an invalid length. [ 676.751838][T24092] bond0: entered allmulticast mode [ 677.328102][T24126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4756'. [ 677.387922][T24128] netlink: 'syz.0.4757': attribute type 26 has an invalid length. [ 677.403095][T24130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4758'. [ 677.466286][T24136] x_tables: duplicate underflow at hook 1 [ 677.710517][ T30] audit: type=1800 audit(1785591412.176:10): pid=24150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4764" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1931 res=0 errno=0 [ 678.266861][T24176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4770'. [ 678.282330][ T50] block nbd4: Receive control failed (result -32) [ 678.461479][T24190] vlan3: entered allmulticast mode [ 678.483410][T24190] bridge6: entered allmulticast mode [ 678.528818][T24198] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 678.556684][T24198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 678.621669][T24204] lo speed is unknown, defaulting to 1000 [ 678.635501][T24204] lo speed is unknown, defaulting to 1000 [ 678.644844][T24204] lo speed is unknown, defaulting to 1000 [ 678.743665][T24209] netlink: 'syz.2.4782': attribute type 5 has an invalid length. [ 678.860572][T24216] __nla_validate_parse: 5 callbacks suppressed [ 678.860596][T24216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4784'. [ 679.011054][T24220] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 679.170115][T24222] syzkaller0: entered allmulticast mode [ 679.314192][T24235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4788'. [ 679.339320][T24204] infiniband syz1: set down [ 679.344989][T24204] infiniband syz1: added lo [ 679.374087][T24237] ip6gre0: Master is either lo or non-ether device [ 679.384193][ T7138] lo speed is unknown, defaulting to 1000 [ 679.470167][T24204] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 679.500919][T24204] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 679.573581][T24204] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 679.653210][T24249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4792'. [ 679.673013][T24204] RDS/IB: syz1: added [ 679.686527][T24250] bond0: Caught tx_queue_len zero misconfig [ 679.693423][T24204] smc: adding ib device syz1 with port count 1 [ 679.706322][T24204] smc: ib device syz1 port 1 has no pnetid [ 679.730070][T20045] lo speed is unknown, defaulting to 1000 [ 679.748351][T24204] lo speed is unknown, defaulting to 1000 [ 680.174211][T24275] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4799'. [ 680.194372][T24276] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4799'. [ 680.267260][T24204] lo speed is unknown, defaulting to 1000 [ 680.306421][T24280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 680.584765][T24204] lo speed is unknown, defaulting to 1000 [ 681.078791][T24303] netlink: 'syz.1.4806': attribute type 1 has an invalid length. [ 681.176601][T24204] lo speed is unknown, defaulting to 1000 [ 681.238469][T24303] 8021q: adding VLAN 0 to HW filter on device bond9 [ 681.351870][T24308] bond9: (slave ip6erspan0): making interface the new active one [ 681.395881][T24308] bond9: (slave ip6erspan0): Enslaving as an active interface with an up link [ 681.451249][T24313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4808'. [ 681.512517][T24313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4808'. [ 681.604058][ T30] audit: type=1804 audit(1785591416.066:11): pid=24318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4811" name="/newroot/314/cgroup.controllers" dev="tmpfs" ino=1621 res=1 errno=0 [ 681.637950][T24318] openvswitch: netlink: Missing valid actions attribute. [ 681.657732][T24318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.714477][ T30] audit: type=1800 audit(1785591416.066:12): pid=24318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4811" name="cgroup.controllers" dev="tmpfs" ino=1621 res=0 errno=0 [ 681.761397][T24320] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4811'. [ 681.802469][T24320] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4811'. [ 681.833752][T24204] lo speed is unknown, defaulting to 1000 [ 681.930596][T24329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 681.938016][T24329] IPv6: NLM_F_CREATE should be set when creating new route [ 681.945792][T24329] IPv6: NLM_F_CREATE should be set when creating new route [ 682.200555][T24340] nbd: must specify a size in bytes for the device [ 682.327481][T24204] lo speed is unknown, defaulting to 1000 [ 682.362922][T24347] xfrm0 speed is unknown, defaulting to 1000 [ 682.395112][T24347] lo speed is unknown, defaulting to 1000 [ 682.553849][T24353] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4821'. [ 682.579705][T24353] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 683.069831][T24347] lo speed is unknown, defaulting to 1000 [ 683.639738][T24400] xt_bpf: check failed: parse error [ 683.649448][T24397] netlink: 'syz.1.4831': attribute type 49 has an invalid length. [ 683.671419][T24401] netlink: 'syz.1.4831': attribute type 49 has an invalid length. [ 683.737618][T24204] lo speed is unknown, defaulting to 1000 [ 683.894046][T24404] __nla_validate_parse: 2 callbacks suppressed [ 683.894067][T24404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4832'. [ 685.324155][T24463] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 685.344242][T24461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.673390][T24492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4856'. [ 685.690814][T24492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4856'. [ 685.899413][T24501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4861'. [ 685.926883][T24502] syzkaller1: entered promiscuous mode [ 685.960256][T24502] syzkaller1: entered allmulticast mode [ 686.143607][T24510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4864'. [ 686.241903][T24510] team_slave_0 (unregistering): left promiscuous mode [ 686.265759][T24510] team_slave_0 (unregistering): left allmulticast mode [ 686.287022][T24510] team0: Port device team_slave_0 removed [ 686.324142][T24495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4858'. [ 686.500671][T24524] openvswitch: netlink: Flow actions attr not present in new flow. [ 686.531987][ T7135] IPVS: starting estimator thread 0... [ 686.630289][T24528] IPVS: using max 25 ests per chain, 60000 per kthread [ 686.666117][T24532] syzkaller0: entered promiscuous mode [ 686.672405][T24532] syzkaller0: entered allmulticast mode [ 686.805648][T24540] netlink: 'syz.2.4871': attribute type 11 has an invalid length. [ 686.818267][T24536] 0„ž{X¹¦: left allmulticast mode [ 686.942707][T24548] netlink: 'syz.0.4876': attribute type 1 has an invalid length. [ 687.066432][T24553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4880'. [ 687.243055][T24563] bond13: Removing last ns target with arp_interval on [ 687.263744][T24567] netlink: 'syz.0.4883': attribute type 4 has an invalid length. [ 687.291829][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4883'. [ 687.316710][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4883'. [ 687.342218][T24567] vlan0: entered promiscuous mode [ 687.658564][T24590] netlink: 'syz.4.4888': attribute type 1 has an invalid length. [ 687.711358][T24590] 8021q: adding VLAN 0 to HW filter on device bond14 [ 687.766994][T24594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4889'. [ 687.848817][T24590] bond14: (slave geneve2): making interface the new active one [ 687.867823][T24590] bond14: (slave geneve2): Enslaving as an active interface with an up link [ 687.899822][ T8008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.069941][ T8016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.087221][T24603] netlink: 'syz.1.4891': attribute type 1 has an invalid length. [ 688.112007][ T8016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.286270][T24603] bond10: entered promiscuous mode [ 688.304765][T24603] 8021q: adding VLAN 0 to HW filter on device bond10 [ 688.373372][T24612] 8021q: adding VLAN 0 to HW filter on device bond10 [ 688.381645][T24612] bond10: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 688.393813][T24612] bond10: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 688.408470][T24612] bond10: (slave ip6gre3): making interface the new active one [ 688.417837][T24612] ip6gre3: entered promiscuous mode [ 688.427562][T24612] bond10: (slave ip6gre3): Enslaving as an active interface with an up link [ 688.539598][ T8018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.026568][T24648] __nla_validate_parse: 3 callbacks suppressed [ 689.026599][T24648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4901'. [ 689.053981][T24648] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4901'. [ 689.321598][T24670] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4907'. [ 689.321598][T24669] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4907'. [ 689.823756][T24693] netlink: 'syz.0.4915': attribute type 1 has an invalid length. [ 689.897000][T24699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.184202][T24714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4920'. [ 690.202069][T24714] team0: Caught tx_queue_len zero misconfig [ 690.248648][T24714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4920'. [ 690.291551][T24714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4920'. [ 690.437984][T24731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4923'. [ 690.799740][T24752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4927'. [ 690.831378][T24752] netlink: 'syz.2.4927': attribute type 4 has an invalid length. [ 690.991015][T24760] Unsupported xt match [ 690.991037][T24760] unable to load match [ 691.135191][T24770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4931'. [ 691.173821][T24774] netlink: 'syz.3.4934': attribute type 4 has an invalid length. [ 691.287916][T24774] .`: renamed from bond0 (while UP) [ 691.634906][T24795] gretap0: entered promiscuous mode [ 691.685329][T24795] batman_adv: batadv0: Adding interface: gretap0 [ 691.705323][T24795] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 691.753145][T24795] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 692.064701][T24820] netlink: 'syz.4.4948': attribute type 5 has an invalid length. [ 692.801566][T24849] syzkaller0: entered promiscuous mode [ 692.813140][T24849] syzkaller0: entered allmulticast mode [ 692.844191][T24858] netlink: 'syz.3.4955': attribute type 1 has an invalid length. [ 693.001184][T24865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.313028][T24879] Cannot find set identified by id 0 to match [ 694.115364][T24915] __nla_validate_parse: 6 callbacks suppressed [ 694.115383][T24915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4970'. [ 697.399309][T24915] lo: left promiscuous mode [ 697.404662][T24915] lo: entered allmulticast mode [ 697.411466][T24915] tunl0: left promiscuous mode [ 697.416569][T24915] tunl0: entered allmulticast mode [ 697.423765][T24915] gre0: left promiscuous mode [ 697.428619][T24915] gre0: entered allmulticast mode [ 697.436454][T24915] gretap0: entered allmulticast mode [ 697.444627][T24915] erspan0: entered allmulticast mode [ 697.451704][T24915] ip_vti0: left promiscuous mode [ 697.457198][T24915] ip_vti0: entered allmulticast mode [ 697.465108][T24915] ip6_vti0: entered allmulticast mode [ 697.486963][T24915] sit0: entered allmulticast mode [ 697.571247][T24915] ip6tnl0: entered allmulticast mode [ 697.607639][T24915] ip6gre0: entered allmulticast mode [ 697.668218][T24915] syz_tun: entered allmulticast mode [ 697.997277][T24929] syzkaller0: entered promiscuous mode [ 698.010084][T24929] syzkaller0: entered allmulticast mode [ 702.024926][T24955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4981'. [ 702.151058][T24962] syzkaller0: entered promiscuous mode [ 702.158094][T24962] syzkaller0: entered allmulticast mode [ 702.271235][T24977] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4984'. [ 702.291763][T24984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4987'. [ 702.787593][T25004] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20002 [ 706.176337][T25017] syzkaller0: entered promiscuous mode [ 706.184598][T25017] syzkaller0: entered allmulticast mode [ 706.450211][T25033] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 706.644616][T25044] netlink: 'syz.3.5003': attribute type 21 has an invalid length. [ 706.676997][T25044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5003'. [ 706.825384][T25061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5007'. [ 708.169370][T25097] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5019'. [ 708.314338][T25111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5024'. [ 708.448868][T25117] Cannot find add_set index 2 as target [ 708.518483][T25119] Bluetooth: MGMT ver 1.23 [ 708.539549][T25119] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 708.547178][T25119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5026'. [ 708.665816][T25134] netlink: 'syz.2.5029': attribute type 1 has an invalid length. [ 708.837940][T25139] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 708.952945][T25139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5029'. [ 708.996837][T25134] veth3: entered promiscuous mode [ 709.031279][T25134] bond9: (slave veth3): Enslaving as a backup interface with a down link [ 709.080752][T25139] 8021q: adding VLAN 0 to HW filter on device bond9 [ 709.100894][ T8013] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 709.259130][T25167] macvtap1: entered promiscuous mode [ 709.265630][T25167] macvtap1: entered allmulticast mode [ 709.289448][ T8008] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 709.436633][T25171] bridge7: entered promiscuous mode [ 709.452415][T25171] bridge7: entered allmulticast mode [ 710.139847][T25199] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 710.264457][T25205] x_tables: duplicate underflow at hook 2 [ 710.333111][T25210] syzkaller0: entered promiscuous mode [ 710.351430][T25210] syzkaller0: entered allmulticast mode [ 710.378397][T25210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5052'. [ 710.811867][T25241] netlink: 'syz.0.5062': attribute type 2 has an invalid length. [ 710.830576][T25249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5061'. [ 710.854823][T25249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5061'. [ 710.938686][T25253] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 711.062493][T25240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5059'. [ 711.365200][T25265] netlink: 'syz.2.5066': attribute type 2 has an invalid length. [ 711.690524][T25293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5074'. [ 711.715930][T25293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5074'. [ 712.475972][ T7135] IPVS: starting estimator thread 0... [ 712.562578][T25338] syzkaller0: entered promiscuous mode [ 712.584966][T25338] syzkaller0: entered allmulticast mode [ 712.591330][T25344] IPVS: using max 33 ests per chain, 79200 per kthread [ 712.635089][T25338] netlink: 'syz.1.5085': attribute type 2 has an invalid length. [ 712.829194][T25357] syzkaller1: entered promiscuous mode [ 712.845299][T25357] syzkaller1: entered allmulticast mode [ 713.372311][T25373] sock: sock_set_timeout: `syz.3.5093' (pid 25373) tries to set negative timeout [ 713.400031][T25373] __nla_validate_parse: 4 callbacks suppressed [ 713.400054][T25373] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5093'. [ 713.740034][T25386] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 713.760404][T25386] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5097'. [ 713.782542][T25386] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 713.795582][T25387] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5097'. [ 713.917208][T25395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5100'. [ 713.999533][T25404] netlink: 'syz.0.5102': attribute type 1 has an invalid length. [ 714.015794][T25394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5099'. [ 714.150082][T25407] netlink: 'syz.2.5099': attribute type 9 has an invalid length. [ 714.252553][T25423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.293277][T25426] netlink: 'syz.4.5106': attribute type 1 has an invalid length. [ 714.311815][T25409] 8021q: adding VLAN 0 to HW filter on device bond7 [ 714.326478][T25409] bond6: (slave bond7): making interface the new active one [ 714.335347][T25409] bond6: (slave bond7): Enslaving as an active interface with an up link [ 714.356140][T25431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5107'. [ 714.377207][T25413] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 714.494991][T25426] 8021q: adding VLAN 0 to HW filter on device bond15 [ 714.743088][T25449] netlink: 'syz.3.5113': attribute type 1 has an invalid length. [ 714.763639][ T30] audit: type=1804 audit(1785591449.226:13): pid=25451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5114" name="/newroot/375/cgroup.controllers" dev="tmpfs" ino=1947 res=1 errno=0 [ 714.832340][ T30] audit: type=1800 audit(1785591449.226:14): pid=25451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5114" name="cgroup.controllers" dev="tmpfs" ino=1947 res=0 errno=0 [ 714.907282][T25458] bond0: Error: CAN devices cannot be enslaved [ 715.015919][T25470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5119'. [ 715.168514][T25482] veth1_to_bond: entered allmulticast mode [ 715.273664][T25482] veth1_to_bond: left allmulticast mode [ 715.756585][T25523] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5131'. [ 715.780149][T25522] SET target dimension over the limit! [ 715.792721][T25528] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes. [ 715.864346][T25523] bond10: Unable to set down delay as MII monitoring is disabled [ 715.908190][T25523] bond10 (unregistering): Released all slaves [ 716.133531][T25547] netlink: 'syz.4.5140': attribute type 10 has an invalid length. [ 716.150292][T25541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5138'. [ 716.159527][T25547] openvswitch: netlink: Flow key attr not present in new flow. [ 716.656182][T25545] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 716.850255][T25583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5149'. [ 717.086803][T25596] vlan4: entered promiscuous mode [ 717.363292][T25614] x_tables: unsorted underflow at hook 3 [ 717.571408][T25629] netlink: 'syz.1.5163': attribute type 11 has an invalid length. [ 717.647379][T25635] netlink: 'syz.3.5165': attribute type 1 has an invalid length. [ 717.721628][T25638] netlink: 'syz.1.5163': attribute type 10 has an invalid length. [ 717.787653][T25638] dummy0: entered promiscuous mode [ 718.445759][T25678] __nla_validate_parse: 11 callbacks suppressed [ 718.445783][T25678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5177'. [ 718.538687][T25682] veth0_to_bond: entered allmulticast mode [ 718.563442][T25682] tunl0: entered promiscuous mode [ 718.568875][T25682] netlink: 'syz.4.5178': attribute type 4 has an invalid length. [ 718.577874][T25682] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5178'. [ 718.594169][T25681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5179'. [ 718.892710][T25704] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5186'. [ 718.976615][T25708] IPv6: NLM_F_CREATE should be specified when creating new route [ 719.118377][T25716] netlink: 'syz.0.5191': attribute type 32 has an invalid length. [ 719.343010][T25731] netlink: zone id is out of range [ 719.387346][T25731] netlink: zone id is out of range [ 719.407304][T25731] netlink: zone id is out of range [ 719.426037][T25737] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5195'. [ 719.454145][T25731] netlink: zone id is out of range [ 719.471125][T25731] netlink: zone id is out of range [ 719.492988][T25739] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5195'. [ 719.514090][T25731] netlink: zone id is out of range [ 719.521429][T25737] gretap0: entered promiscuous mode [ 719.528099][T25731] netlink: zone id is out of range [ 719.564716][T25739] 0ªî{X¹¦: renamed from gretap0 [ 719.570279][T25731] netlink: zone id is out of range [ 719.586620][T25731] netlink: zone id is out of range [ 719.608581][T25731] netlink: zone id is out of range [ 719.628759][T25739] 0ªî{X¹¦: left promiscuous mode [ 719.649731][T25739] 0ªî{X¹¦: entered allmulticast mode [ 720.157129][T25767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5204'. [ 720.690118][T25795] netlink: 'syz.0.5210': attribute type 23 has an invalid length. [ 721.091041][T25816] netlink: 'syz.1.5215': attribute type 1 has an invalid length. [ 721.119968][T25813] bond8: entered allmulticast mode [ 721.141865][T25813] 8021q: adding VLAN 0 to HW filter on device bond8 [ 721.259487][T25816] 8021q: adding VLAN 0 to HW filter on device bond11 [ 721.355213][T25818] bond11: (slave batadv_slave_0): Enslaving as a backup interface with an up link [ 721.457304][T25836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5219'. [ 721.487337][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5219'. [ 721.577829][T25839] netlink: 'syz.2.5220': attribute type 1 has an invalid length. [ 721.618400][T25845] netlink: 'syz.1.5222': attribute type 6 has an invalid length. [ 722.136180][T25868] netlink: 'syz.2.5227': attribute type 4 has an invalid length. [ 722.201110][T25875] Cannot find add_set index 34 as target [ 722.236858][T25868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5227'. [ 722.340920][T25868] bond10: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 722.356153][T25868] bond10 (unregistering): Released all slaves [ 722.717996][T25904] vcan0: entered promiscuous mode [ 722.741816][T25904] vcan0: entered allmulticast mode [ 722.846949][T25906] tc_dump_action: action bad kind [ 723.018947][T25916] nbd5: detected capacity change from 0 to 63 [ 723.039644][ T30] audit: type=1800 audit(1785591457.506:15): pid=25917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5240" name="memory.events" dev="tmpfs" ino=2077 res=0 errno=0 [ 723.089713][ T50] block nbd5: Receive control failed (result -104) [ 723.100199][ T30] audit: type=1804 audit(1785591457.506:16): pid=25917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5240" name="/newroot/403/memory.events" dev="tmpfs" ino=2077 res=1 errno=0 [ 723.864389][ T8018] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.900059][ T8018] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.918562][ T8018] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 723.928696][T25963] IPVS: persistence engine module ip_vs_pe_À not found [ 723.993039][T25970] Cannot find set identified by id 65534 to match [ 723.994178][T25971] Cannot find set identified by id 65534 to match [ 724.411912][T25988] syzkaller1: entered promiscuous mode [ 724.417697][T25988] syzkaller1: entered allmulticast mode [ 724.428182][T25991] tipc: Started in network mode [ 724.433713][T25991] tipc: Node identity ac14142f, cluster identity 4711 [ 724.442961][T25991] tipc: New replicast peer: 0.0.0.0 [ 724.448843][T25991] tipc: Enabled bearer , priority 10 [ 724.461865][T25988] syzkaller0: entered promiscuous mode [ 724.468107][T25988] syzkaller0: entered allmulticast mode [ 724.570066][T25995] __nla_validate_parse: 3 callbacks suppressed [ 724.570084][T25995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5269'. [ 724.604226][T25995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5269'. [ 724.614762][T26000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.896713][T26022] sit0: entered promiscuous mode [ 724.920072][T26022] netlink: 'syz.1.5277': attribute type 1 has an invalid length. [ 724.928902][T26014] can: request_module (can-proto-0) failed. [ 724.951371][T26022] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5277'. [ 724.975270][T26026] netlink: 'syz.1.5277': attribute type 10 has an invalid length. [ 725.007043][T26027] netlink: 'syz.1.5277': attribute type 10 has an invalid length. [ 725.196908][T26040] netlink: 'syz.2.5282': attribute type 1 has an invalid length. [ 725.205358][T26041] netlink: 'syz.2.5282': attribute type 1 has an invalid length. [ 725.262509][T26040] bond10: entered promiscuous mode [ 725.268469][T26040] 8021q: adding VLAN 0 to HW filter on device bond10 [ 725.311213][T26040] macvtap1: entered allmulticast mode [ 725.342693][T26052] net_ratelimit: 83 callbacks suppressed [ 725.342713][T26052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.368741][T26040] macvtap2: entered allmulticast mode [ 725.462310][T26041] bond10: (slave bridge4): making interface the new active one [ 725.485071][T26041] bridge4: entered promiscuous mode [ 725.494392][T26041] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 725.533424][T26040] bond10: (slave bridge5): Enslaving as a backup interface with an up link [ 725.559284][ T7138] tipc: Node number set to 2886997039 [ 725.724654][T26065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5288'. [ 725.764484][T26065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5288'. [ 725.887800][T26072] lo: left promiscuous mode [ 725.923983][T26072] tunl0: left promiscuous mode [ 726.004142][T26072] veth0_to_bond: left allmulticast mode [ 726.038605][T26072] macsec0: left allmulticast mode [ 726.057494][T26072] mac80211_hwsim hwsim34 wlan0: left promiscuous mode [ 726.078804][T26072] bridge4: left promiscuous mode [ 726.086359][T26072] bridge5: left promiscuous mode [ 726.125118][T26088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5294'. [ 726.135252][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5294'. [ 726.155948][T26072] gretap0: left promiscuous mode [ 726.162552][T26072] veth1_vlan: left allmulticast mode [ 726.176090][T26072] macvtap1: left promiscuous mode [ 726.186537][T26072] macvtap1: left allmulticast mode [ 726.192786][T26090] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5294'. [ 726.207867][T26072] bridge7: left promiscuous mode [ 726.215115][T26072] bridge7: left allmulticast mode [ 726.249930][ T6870] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.292590][ T6870] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.346155][ T6870] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.368483][ T6870] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.456510][T26101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 726.638216][T26111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5299'. [ 726.682388][ T30] audit: type=1800 audit(1785591461.136:17): pid=26113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5301" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2466 res=0 errno=0 [ 726.805332][T26121] bridge0: port 4(dummy0) entered blocking state [ 726.831980][T26121] bridge0: port 4(dummy0) entered disabled state [ 726.845591][T26121] dummy0: entered allmulticast mode [ 726.900134][T26121] dummy0: entered promiscuous mode [ 726.959699][T26128] netlink: 'syz.1.5305': attribute type 7 has an invalid length. [ 727.018589][T26135] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5306'. [ 727.475108][T26164] netlink: 'syz.3.5314': attribute type 20 has an invalid length. [ 727.487608][T26164] IPv6: NLM_F_CREATE should be specified when creating new route [ 727.516260][T26164] netlink: 'syz.3.5314': attribute type 10 has an invalid length. [ 727.589314][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 727.724850][T26176] netlink: 'syz.3.5320': attribute type 29 has an invalid length. [ 727.754339][T26176] netlink: 'syz.3.5320': attribute type 29 has an invalid length. [ 728.076529][T26198] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 728.083070][T26198] syzkaller1: linktype set to 517 [ 728.557309][T26235] veth0: Caught tx_queue_len zero misconfig [ 732.002802][T26272] __nla_validate_parse: 12 callbacks suppressed [ 732.002826][T26272] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5347'. [ 732.157081][T26281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5350'. [ 732.305001][T26288] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 732.611983][T26307] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5358'. [ 732.955517][T26324] gtp1: entered promiscuous mode [ 732.981113][T26324] gtp1: entered allmulticast mode [ 733.006549][T26324] team0: Device gtp1 is of different type [ 733.074005][T26334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5365'. [ 733.095113][T26330] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5363'. [ 733.136408][T26324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5363'. [ 733.211760][T26334] team1: entered promiscuous mode [ 733.225781][T26334] team1: entered allmulticast mode [ 733.572738][T26361] IPVS: dh: FWM 3 0x00000003 - no destination available [ 733.821381][T26361] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5370'. [ 733.870050][T26361] hsr0: entered promiscuous mode [ 733.886414][T26378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5372'. [ 733.918047][T26361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5370'. [ 733.939876][T26361] hsr_slave_0: left promiscuous mode [ 733.954691][T26361] hsr_slave_1: left promiscuous mode [ 733.995246][T26361] hsr0 (unregistering): left promiscuous mode [ 734.024974][T26380] veth0: entered promiscuous mode [ 734.031765][T26380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5373'. [ 734.046611][T26379] veth0: left promiscuous mode [ 734.130240][T26384] netlink: 'syz.0.5375': attribute type 20 has an invalid length. [ 734.149132][T26384] IPv6: NLM_F_CREATE should be specified when creating new route [ 734.512141][T26397] netlink: 'syz.1.5380': attribute type 21 has an invalid length. [ 734.716668][T26414] netlink: 'syz.1.5387': attribute type 1 has an invalid length. [ 734.725936][T26413] netlink: 'syz.1.5387': attribute type 1 has an invalid length. [ 734.949787][T26442] sch_fq: defrate 0 ignored. [ 735.154681][T26458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.176061][T26460] netlink: 'syz.0.5399': attribute type 12 has an invalid length. [ 735.600431][T26486] sock: sock_timestamping_bind_phc: sock not bind to device [ 735.641298][T26485] syzkaller1: entered promiscuous mode [ 735.669751][T26485] syzkaller1: entered allmulticast mode [ 735.806700][T26495] tipc: Started in network mode [ 735.813021][T26495] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 735.824316][T26495] tipc: Enabling of bearer rejected, failed to enable media [ 736.065762][T26511] netlink: 'syz.3.5417': attribute type 1 has an invalid length. [ 736.115355][T26517] netlink: 'syz.3.5417': attribute type 1 has an invalid length. [ 736.326113][T26528] 0·: renamed from hsr0 (while UP) [ 736.349888][T26528] 0·: entered allmulticast mode [ 736.361723][T26528] hsr_slave_0: entered allmulticast mode [ 736.382423][T26528] hsr_slave_1: entered allmulticast mode [ 736.398456][T26528] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 736.762792][T26557] syzkaller0: entered promiscuous mode [ 736.770889][T26557] syzkaller0: entered allmulticast mode [ 736.884818][T26564] netlink: 'syz.2.5431': attribute type 11 has an invalid length. [ 736.920146][T26566] [ 736.922537][T26566] ====================================================== [ 736.929617][T26566] WARNING: possible circular locking dependency detected [ 736.936746][T26566] syzkaller #0 Not tainted [ 736.941246][T26566] ------------------------------------------------------ [ 736.948406][T26566] cryptomgr_probe/26566 is trying to acquire lock: [ 736.954946][T26566] ffffffff8ec5ed80 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 736.964727][T26566] [ 736.964727][T26566] but task is already holding lock: [ 736.972128][T26566] ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: padata_alloc_shell+0x7d/0x1d0 [ 736.981690][T26566] [ 736.981690][T26566] which lock already depends on the new lock. [ 736.981690][T26566] [ 736.992123][T26566] [ 736.992123][T26566] the existing dependency chain (in reverse order) is: [ 737.001179][T26566] [ 737.001179][T26566] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 737.009218][T26566] cpus_read_lock+0x42/0x160 [ 737.014419][T26566] static_key_slow_inc+0x12/0x30 [ 737.020048][T26566] nbd_genl_reconfigure+0x1301/0x1e80 [ 737.026098][T26566] genl_family_rcv_msg_doit+0x233/0x340 [ 737.032643][T26566] genl_rcv_msg+0x614/0x7a0 [ 737.037759][T26566] netlink_rcv_skb+0x226/0x4a0 [ 737.039448][T26568] __nla_validate_parse: 7 callbacks suppressed [ 737.039513][T26568] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5434'. [ 737.045015][T26566] genl_rcv+0x28/0x40 [ 737.045055][T26566] netlink_unicast+0x7bb/0x940 [ 737.045075][T26566] netlink_sendmsg+0x813/0xb40 [ 737.075043][T26569] ip6tnl2: entered allmulticast mode [ 737.075357][T26566] sock_sendmsg_nosec+0x13a/0x180 [ 737.086289][T26566] ____sys_sendmsg+0x54e/0x850 [ 737.092001][T26566] ___sys_sendmsg+0x2a5/0x360 [ 737.097281][T26566] __x64_sys_sendmsg+0x1b1/0x290 [ 737.102939][T26566] do_syscall_64+0x174/0x580 [ 737.108107][T26566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.114605][T26566] [ 737.114605][T26566] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 737.122422][T26566] __mutex_lock+0x19d/0x1550 [ 737.127691][T26566] nbd_queue_rq+0x373/0x1150 [ 737.132853][T26566] blk_mq_dispatch_rq_list+0x499/0x1990 [ 737.139610][T26566] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 737.146617][T26566] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 737.153182][T26566] blk_mq_run_work_fn+0x16c/0x300 [ 737.158957][T26566] process_scheduled_works+0xa8e/0x14e0 [ 737.165398][T26566] worker_thread+0xa47/0xfb0 [ 737.170573][T26566] kthread+0x388/0x470 [ 737.175221][T26566] ret_from_fork+0x514/0xb70 [ 737.180574][T26566] ret_from_fork_asm+0x1a/0x30 [ 737.185917][T26566] [ 737.185917][T26566] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 737.193314][T26566] __mutex_lock+0x19d/0x1550 [ 737.198532][T26566] nbd_queue_rq+0xc1/0x1150 [ 737.203609][T26566] blk_mq_dispatch_rq_list+0x499/0x1990 [ 737.209749][T26566] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 737.216674][T26566] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 737.223238][T26566] blk_mq_run_work_fn+0x16c/0x300 [ 737.228855][T26566] process_scheduled_works+0xa8e/0x14e0 [ 737.234996][T26566] worker_thread+0xa47/0xfb0 [ 737.240166][T26566] kthread+0x388/0x470 [ 737.245154][T26566] ret_from_fork+0x514/0xb70 [ 737.250334][T26566] ret_from_fork_asm+0x1a/0x30 [ 737.255664][T26566] [ 737.255664][T26566] -> #4 (set->srcu){.+.+}-{0:0}: [ 737.262843][T26566] __synchronize_srcu+0xc9/0x2f0 [ 737.268372][T26566] elevator_switch+0x1e8/0x7b0 [ 737.273769][T26566] elevator_change+0x2fa/0x480 [ 737.279181][T26566] elevator_set_default+0x375/0x440 [ 737.285223][T26566] blk_register_queue+0x3f3/0x4e0 [ 737.290883][T26566] __add_disk+0x6cb/0xe30 [ 737.295855][T26566] add_disk_fwnode+0x100/0x3a0 [ 737.301184][T26566] nbd_dev_add+0x733/0xb60 [ 737.306154][T26566] nbd_init+0x15f/0x1e0 [ 737.310963][T26566] do_one_initcall+0x250/0x870 [ 737.316318][T26566] do_initcall_level+0x10a/0x1a0 [ 737.321903][T26566] do_initcalls+0x59/0xa0 [ 737.326771][T26566] kernel_init_freeable+0x29d/0x3e0 [ 737.332542][T26566] kernel_init+0x1d/0x1d0 [ 737.337528][T26566] ret_from_fork+0x514/0xb70 [ 737.342666][T26566] ret_from_fork_asm+0x1a/0x30 [ 737.347969][T26566] [ 737.347969][T26566] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 737.355833][T26566] __mutex_lock+0x19d/0x1550 [ 737.360969][T26566] elevator_change+0x1af/0x480 [ 737.366279][T26566] elevator_set_none+0xb5/0x140 [ 737.371679][T26566] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 737.378122][T26566] nbd_start_device+0x189/0xb30 [ 737.383530][T26566] nbd_genl_connect+0x1597/0x1c10 [ 737.389202][T26566] genl_family_rcv_msg_doit+0x233/0x340 [ 737.395314][T26566] genl_rcv_msg+0x614/0x7a0 [ 737.400386][T26566] netlink_rcv_skb+0x226/0x4a0 [ 737.405690][T26566] genl_rcv+0x28/0x40 [ 737.410222][T26566] netlink_unicast+0x7bb/0x940 [ 737.415521][T26566] netlink_sendmsg+0x813/0xb40 [ 737.420827][T26566] sock_sendmsg_nosec+0x13a/0x180 [ 737.426587][T26566] ____sys_sendmsg+0x54e/0x850 [ 737.431912][T26566] ___sys_sendmsg+0x2a5/0x360 [ 737.437160][T26566] __x64_sys_sendmsg+0x1b1/0x290 [ 737.442636][T26566] do_syscall_64+0x174/0x580 [ 737.447768][T26566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.454301][T26566] [ 737.454301][T26566] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 737.462960][T26566] blk_alloc_queue+0x544/0x690 [ 737.468272][T26566] __blk_mq_alloc_disk+0x194/0x390 [ 737.474028][T26566] nbd_dev_add+0x494/0xb60 [ 737.479100][T26566] nbd_init+0x15f/0x1e0 [ 737.483852][T26566] do_one_initcall+0x250/0x870 [ 737.489169][T26566] do_initcall_level+0x10a/0x1a0 [ 737.494643][T26566] do_initcalls+0x59/0xa0 [ 737.499507][T26566] kernel_init_freeable+0x29d/0x3e0 [ 737.505260][T26566] kernel_init+0x1d/0x1d0 [ 737.510146][T26566] ret_from_fork+0x514/0xb70 [ 737.515294][T26566] ret_from_fork_asm+0x1a/0x30 [ 737.520600][T26566] [ 737.520600][T26566] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 737.527845][T26566] fs_reclaim_acquire+0x71/0x100 [ 737.533381][T26566] prepare_alloc_pages+0x15b/0x650 [ 737.539147][T26566] __alloc_frozen_pages_noprof+0x12f/0x380 [ 737.545518][T26566] __alloc_pages_noprof+0x10/0x100 [ 737.551201][T26566] pcpu_populate_chunk+0x181/0xb30 [ 737.556890][T26566] pcpu_alloc_noprof+0xbca/0x1900 [ 737.562596][T26566] bpf_map_alloc_percpu+0x65/0x180 [ 737.568560][T26566] prealloc_init+0x214/0x650 [ 737.573756][T26566] htab_map_alloc+0x6a0/0xc90 [ 737.578987][T26566] map_create+0xf2a/0x1b90 [ 737.583998][T26566] __sys_bpf+0xaea/0xd90 [ 737.588872][T26566] __x64_sys_bpf+0xba/0xd0 [ 737.593851][T26566] do_syscall_64+0x174/0x580 [ 737.599031][T26566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.605484][T26566] [ 737.605484][T26566] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 737.613393][T26566] __lock_acquire+0x1520/0x2cf0 [ 737.618939][T26566] lock_acquire+0x106/0x350 [ 737.624015][T26566] __mutex_lock+0x19d/0x1550 [ 737.629176][T26566] pcpu_alloc_noprof+0x231/0x1900 [ 737.634857][T26566] padata_alloc_pd+0x93/0x720 [ 737.640108][T26566] padata_alloc_shell+0x8a/0x1d0 [ 737.645610][T26566] pcrypt_create+0xea/0x750 [ 737.650769][T26566] cryptomgr_probe+0x80/0x210 [ 737.656103][T26566] kthread+0x388/0x470 [ 737.660768][T26566] ret_from_fork+0x514/0xb70 [ 737.665932][T26566] ret_from_fork_asm+0x1a/0x30 [ 737.671269][T26566] [ 737.671269][T26566] other info that might help us debug this: [ 737.671269][T26566] [ 737.681526][T26566] Chain exists of: [ 737.681526][T26566] pcpu_alloc_mutex --> &nsock->tx_lock --> cpu_hotplug_lock [ 737.681526][T26566] [ 737.694877][T26566] Possible unsafe locking scenario: [ 737.694877][T26566] [ 737.702422][T26566] CPU0 CPU1 [ 737.707888][T26566] ---- ---- [ 737.713327][T26566] rlock(cpu_hotplug_lock); [ 737.717993][T26566] lock(&nsock->tx_lock); [ 737.724989][T26566] lock(cpu_hotplug_lock); [ 737.732038][T26566] lock(pcpu_alloc_mutex); [ 737.736581][T26566] [ 737.736581][T26566] *** DEADLOCK *** [ 737.736581][T26566] [ 737.745097][T26566] 1 lock held by cryptomgr_probe/26566: [ 737.750763][T26566] #0: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: padata_alloc_shell+0x7d/0x1d0 [ 737.760815][T26566] [ 737.760815][T26566] stack backtrace: [ 737.766777][T26566] CPU: 0 UID: 0 PID: 26566 Comm: cryptomgr_probe Not tainted syzkaller #0 PREEMPT(full) [ 737.766802][T26566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 737.766814][T26566] Call Trace: [ 737.766824][T26566] [ 737.766834][T26566] dump_stack_lvl+0xe8/0x150 [ 737.766864][T26566] print_circular_bug+0x2e1/0x300 [ 737.766885][T26566] check_noncircular+0x12e/0x150 [ 737.766905][T26566] __lock_acquire+0x1520/0x2cf0 [ 737.766936][T26566] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 737.766956][T26566] ? lockdep_hardirqs_on+0x7a/0x110 [ 737.766978][T26566] ? pcpu_alloc_noprof+0x231/0x1900 [ 737.766999][T26566] lock_acquire+0x106/0x350 [ 737.767021][T26566] ? pcpu_alloc_noprof+0x231/0x1900 [ 737.767049][T26566] __mutex_lock+0x19d/0x1550 [ 737.767069][T26566] ? pcpu_alloc_noprof+0x231/0x1900 [ 737.767095][T26566] ? pcpu_alloc_noprof+0x231/0x1900 [ 737.767117][T26566] ? __pfx___mutex_lock+0x10/0x10 [ 737.767145][T26566] ? rcu_is_watching+0x15/0xb0 [ 737.767162][T26566] pcpu_alloc_noprof+0x231/0x1900 [ 737.767185][T26566] ? __kmalloc_cache_noprof+0x150/0x660 [ 737.767209][T26566] ? padata_alloc_pd+0x6d/0x720 [ 737.767236][T26566] padata_alloc_pd+0x93/0x720 [ 737.767270][T26566] padata_alloc_shell+0x8a/0x1d0 [ 737.767296][T26566] pcrypt_create+0xea/0x750 [ 737.767326][T26566] cryptomgr_probe+0x80/0x210 [ 737.767348][T26566] kthread+0x388/0x470 [ 737.767373][T26566] ? __pfx_cryptomgr_probe+0x10/0x10 [ 737.767392][T26566] ? __pfx_kthread+0x10/0x10 [ 737.767417][T26566] ret_from_fork+0x514/0xb70 [ 737.767444][T26566] ? __pfx_ret_from_fork+0x10/0x10 [ 737.767469][T26566] ? __switch_to+0xc89/0x1420 [ 737.767492][T26566] ? __pfx_kthread+0x10/0x10 [ 737.767517][T26566] ret_from_fork_asm+0x1a/0x30 [ 737.767540][T26566]