last executing test programs: 3.306474413s ago: executing program 2 (id=7018): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), &(0x7f00000003c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.985851926s ago: executing program 2 (id=7021): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) (async) r3 = socket$inet(0x2, 0x3, 0x6) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x48}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r3}, 0x20) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002980)={{r0, &(0x7f0000000a00)='\xaav\x000$\xfb*\xe0-\x90\x80\x8c\xae\x80Y\xcan<\xd1\xb5\xe8\\\xaa\xfa\x9c1\xa6\xf94\xab\x8e\xe3\\\x16\x93\xd2\a.3\x12[\xc8\x9c\xcd\xe8\f\xfa\x19\xde\xa0?Kv\xb7:q\xab\x17\xf4\x8f\x9a\xad\x8c\x89\x1eL%O\xab\xb3\xd1\aC.\x17\xfa\xb6h#\x94P\xf18L\xa1\xcc\xd6h\xbd\xa8\x88n\xdf!)\xc7\x1d3P\x9d\x8aM\xd3\xf8\xf3U\xda$1\xf6\xd5\xe6e\x8e\xb7+3\xb8\x0e \"\xffu\xca\x85\xa4', 0x600400, &(0x7f0000000240)={@align=0x1, {0x5, 0x9, 0x40, 0x100000001}}, 0x3a, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)}, 0x9, &(0x7f0000002840)=[{0x1, 0x40, &(0x7f0000000300)='])]\x00', &(0x7f0000000340)="d48dc6b1bf78f4f9fd9dee65888c8849e7a765ca61fa8da1a0ed1305a949eb77eff63eac7fd6aae5867d993bc9a2269f82daa463e4f7a61dd01c1dc3e751a21f2189e307e9d0c7b879b209081686c80ad1eaee25be225f478e1e3e39f39ffb208d538aa1004aab9536090ade025244ac5b4689082b4a50b4328e3e816156dbbcaba7e97df4accf3aacb0069c44c30133c91ee312069953bcdcc3120858fb9cab32fbf960b2340aace5798171b20ee6757e1606c7b9e8188ff0a65185d5ed882598ce310c15e25070eaa798a9939f552c5b64f81b25023d720ed70571ae6ff19a77cd9a1ab8c740d8bc0a3426b3182c50", 0xf0, 0x1a}, {0x1, 0xfffffffb, &(0x7f0000000440)='*\x00', &(0x7f0000000480)="7fcb4631e7b2fe27d84de6020748076fe261d689fb543040de7b264e52ebf900ac6ed41d294e53687136dd36b1ed91fca0b5c171d0212d01bbdd7fddf6a09d672c236ed17b6c559161e832fdb499975414edb3401a8a30a7c79baefce063cc186f984d6cdde65748425508d88ac2a1fb54811db684a371a2d7bbfe9fefc59c655ba1c04e3fcebcf31f31dae458a9e13b364ce7d4262ce25e4791121975b1631f7befd9fb785a3d727d05f58335323704ead72a42f8a726c8263cb30924481c04c6570a9ce9808d2f95cca2effaab7540f33820d9678345cb47ee2df374a165d5c2b00f85c55ea613297a", 0xea, 0x30}, {0x1, 0x8000, &(0x7f0000000580)='/dev/ppp\x00', &(0x7f00000005c0)="453692f6a28997c784736f8b4f5d59d27ad70df425a4f16f98af23f7542218d055d5a9579c", 0x25, 0x1a}, {0x2, 0x800, &(0x7f0000000600)='/dev/\xf0pp\x00', &(0x7f0000000640)="bbc76c9cf7d2f09d3b5691abfa59c553fcf72b492d8b563984671997fd2b917927e5741a85a7c6e949b1aa61f0927d6832eda539007fa792bd1817696f59a4c4fb85dea5ce67a83f4f6f64b747164aa0a7e245effc43a037ff7a6f4087d047b935e9e9925dc40be76d2a59f12c3f24b583fc86313fd4e964c6426b38811db453ceb2a4315fd95ef4cd0a629bce9d1d49ac12a7d33c42b7883853fc911b7513b641c5a8a062fe2187df5733631d6c3adcbd1af133c75dc3dbb828820f5fab2953f90c10cbfff16be287840830fa57a4e5d61d605b953415976fccf622de7de9d4276c9590d534fe60fba3bf623b24a57c2c6c0c5e4c", 0xf5, 0x22}, {0x1, 0x4e, &(0x7f0000000740)='\xf3.$\x00', &(0x7f0000000780)="d3da1d069cc393ad58ed2b4add2e507692c61ce63ea392515bd258a20cc26d70a1c696b886c88b3ee6e6da69cadbebee11a33273d989399087a680d804bc9b6f05106b72de3633b36bdc018f1442a496daf44bed2daf5a1200ee81d197e673c09124560677c5cf12976df7", 0x6b, 0x20}, {0x1, 0x4, &(0x7f0000000800)='P\x00', &(0x7f0000000840)="9c5a1069ddec8c2ce524f3bf853ad0b8485872fdd2d8c11613614002cf302edb78a9ac5ac30f7468fa95c7c59052c40707d2f27936bf19ef470e6fa8de8fa51a7be4d47aa2c04f5640aa558ba7ecd08a62c3b51c159a8804769ad323acb245289acbb9a6a64b519237b17da579a7fe27fa21481bb1a586afdad1525768b4d76bded62aa66ed84d02d9039b5f91762712f0072a670257d153f568025ecc0936f8b56a2b272e4c635eccae72f431e12dd222abe18b9c14d22b7ef800ab5900f08afb85426eec75fc8e8c0d4066fd1ed890f90668d32dd942cdfad05f", 0xdb, 0x10}, {0x1, 0x80000001, &(0x7f0000000940)='/dev/ppp\x00', &(0x7f0000000980)="fdd0b0d07b62ea8adc092e7fabc965c533b52711c7253c01f2aecce9d0cc1d236d2ec5c2a0ff018e5be765358622fbcf6a5cc0", 0x33, 0x18}, {0x2, 0x4, &(0x7f00000009c0)='/dev/ppp\x00', &(0x7f0000001780)="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", 0x1000, 0x28}, {0x3, 0xff, &(0x7f0000002780)='}&]\x00', &(0x7f00000027c0)="f04a6379c5c7da9d1dda0d4d35aa73dc251d00de3b7b2b70c5a970fe7395e5b91fd5c1dc44cdb9b8778159a2c116604f15904115d9c9c707ca30b2a39f0bbaa26c6184b8a927c5f46c00a9883d5afb403b620e6341b3c81c339c30b6d637179fbe529c2fbc6e7270f8dbc782be30a594951a8336a60d1a8e526d", 0x7a, 0x18}]}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002bc0)={{r0, &(0x7f0000002a80)='/dev/ppp\x00', 0x101000, &(0x7f0000002ac0)={@_ha_fsid={[0x8, 0x88]}, {0x4, 0x1, 0x4ab31e0f, 0xfffffffffffffff3}}, 0x7, &(0x7f0000002b00)={@_ha_fsid}, &(0x7f0000002b40)}, {[0x5, 0x8, 0x2, 0x81]}, 0x8, 0x16, &(0x7f0000002b80)=""/22}) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002c40)={0xffffffffffffffff, 0x0, 0x10}, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000a4b000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x1000) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r9, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1d000000ffffffff0e0000000500000040000100", @ANYRES32=0x1, @ANYBLOB='sP\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000300"/24, @ANYRES32, @ANYBLOB="f371b4df06a329260357285c28af8145d74a154377db2f5a864a35c1bdd6905f625fc986a60b515ddd81b2091a662065b5998ea1775d4beaece604d625607379585119b40fd14a7ca274288f74f0aa25ec9fe111b8ec0f5573c1d41c195030b565182741da892898b6438b43d0963c30404b5b72161ae57df659b5e5461591acad298e65cd63323b8a805f051a1ad9a2d24d662954eab2038c2e358da10ecc78b1fbddcf4c95f540462b127e8f9d4e1b103e0369ec4bee2279b416e8711d650babdf891c"], 0x50) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r11}, &(0x7f0000000340), &(0x7f0000000380)=r12}, 0x20) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002e00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002d80), &(0x7f0000002dc0)='%+9llu \x00'}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000002f40)={r0, &(0x7f0000002e40)='/dev/ppp\x00', 0x10200, &(0x7f0000002e80)={@align=0x100, {0xfffd, 0x4, 0xf, 0xc4}}, 0x9, &(0x7f0000002ec0), &(0x7f0000002f00)=0x3}) (async) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r16, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r16, 0x0) write$tun(r16, &(0x7f0000001b40)={@val={0x0, 0x8914}, @void, @llc={@llc={0x4, 0x2, "dd", "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"}}}, 0x4c1) close(r11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003000)={0x11, 0x1a, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0xccf5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0x31, &(0x7f00000001c0)=""/49, 0x40f00, 0x20, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000002a00)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000002a40)={0x4, 0x4, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002f80)=[r0, r7, r8, r9, r10, r11, r13, r14, r15, r16], &(0x7f0000002fc0)=[{0x1, 0x3, 0x6, 0x4}], 0x10, 0x5}, 0x94) 2.759777644s ago: executing program 1 (id=7024): syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, @dstopts={0x62}], @echo_reply}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 2.641317631s ago: executing program 2 (id=7026): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a840"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d18d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8d46822e0c9f51600000015184f4a6058f4b27a6b00e9990000000000000000ff010000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="010000000000000000000000000000000c0000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000b66b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'sit0\x00', @broadcast}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x1a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'dvmrp0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="8c100000010000003315cd56a47dd64dfef0e201af5b8941ba3d8232da4f1a2018b9b261e0a97db9ab3b4901a01036cb4f9ea6979537e09d980255bd3f1023b5"], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000240)="69d585ecc3615fd6b98b6a61abb892159a35dd1a7c024e44674e36717aee66cc5595a9b7a7e7242111b0d7c6c0de4caa3460716d26bd8e2b54ae5c1cdacd4ab72b39", 0x42}], 0x1) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_getnexthop={0x2c, 0x6a, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) 2.537494523s ago: executing program 3 (id=7028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0xffffffffffffc000) (async) r1 = socket$isdn(0x22, 0x2, 0x3) close(r1) 2.38301969s ago: executing program 3 (id=7030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x800, @private0, 0xcb17}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x3, @loopback, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x5, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x24, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x3, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x49}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x4, 0x3, [0x1, 0x2, 0x9]}, &(0x7f0000000240)=0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000280)={0x41e, 0x8000, 0x9, 0x6, r7}, 0x10) 2.143671541s ago: executing program 1 (id=7032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0xa, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r3, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x103}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x230, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x58eb}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x807}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe53b}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x76}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x37}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}]}, 0x230}}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 2.063972927s ago: executing program 0 (id=7033): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000600), &(0x7f0000001380)=@udp=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r1, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ffdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="014dc09e03"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.889488283s ago: executing program 1 (id=7035): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x6d007ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x800, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x8) 1.818820213s ago: executing program 0 (id=7036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000400), 0xe) listen(r2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001300)={r6, 0x6e2}, &(0x7f0000001340)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001300)={r6, 0x6e2}, &(0x7f0000001340)=0x8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@dev}, 0x0, @in=@private}}, 0xe8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206030001000000000000000000000005000100070000000900020073797a32000000000c000780050015000000000200000500c7ae7d1fed4e655e0000000014000300686173683a69702c706f72740f697000"], 0x58}}, 0x800) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x24, r8, 0x100, 0x8070bd29, 0x25dfdbff, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x44) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x24, r8, 0x100, 0x8070bd29, 0x25dfdbff, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x44) 1.704262801s ago: executing program 4 (id=7037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000001c0)) 1.651250458s ago: executing program 4 (id=7038): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$inet(r2, 0x0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) ioctl$sock_ifreq(r1, 0x891f, &(0x7f0000000080)={'veth0_to_hsr\x00', @ifru_flags=0x1}) 1.609468787s ago: executing program 0 (id=7039): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010a00000000000000000000000308000000", @ANYRES32=0x0, @ANYBLOB="2137d388c8847fcdbdfdd054399d538c6f"], 0x1c}}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) 1.536396716s ago: executing program 2 (id=7040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000180)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000300)={{{@in=@private=0xa010100, @in=@multicast1, 0x4e22, 0x5, 0x4e24, 0x9, 0x2, 0x0, 0x80, 0x4, 0x0, r9}, {0x6, 0x5, 0x6, 0x2, 0xc4, 0xfffffffffffffffa, 0x25, 0x3}, {0x4, 0x9, 0x5, 0x73cbf34b}, 0x6, 0x6e6bbb, 0x0, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d3, 0x2b}, 0x2, @in=@broadcast, 0x0, 0x4, 0x3, 0x1, 0x1, 0x8, 0x9}}, 0xe8) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x10001) write(r5, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0xd9, 0xfb}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'team0\x00'}) 1.426447547s ago: executing program 3 (id=7041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x22051, r3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 1.318000628s ago: executing program 4 (id=7042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x7, 0x6a, 0x0, 0x1}, 0x50) syz_init_net_socket$ax25(0x3, 0x2, 0xda6118dfbc15f4d) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000480)={0x4bc, 0x1, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0x7000}, 0x3, 0xd, 0xc1, 0x3, 0x10, 'syz0\x00', "4fb93333ceeaf5e601f647df92dd04920866dd1213ac6b9895b8d9c49e80936d", "c6fe8f32c151ba7a70f53ecd81c3af88ed3670b8af3e4b7d5fb5da89267a3c2c", [{0x5, 0x3, {0x3, 0x80000001}}, {0x8, 0x5, {0x3}}, {0x4, 0x3, {0x2, 0x3}}, {0x9, 0x3, {0x3, 0x9}}, {0x81, 0x70, {0x3, 0x6}}, {0xe, 0x0, {0x2, 0x1}}, {0x9, 0x5, {0x3, 0x4}}, {0x57c9, 0x5a5, {0x3, 0x9}}, {0x8000, 0x6, {0x3, 0x7}}, {0x0, 0xfffc, {0x3, 0x8}}, {0x3, 0x0, {0x1, 0xfffff2b2}}, {0x69e0, 0x0, {0x0, 0x3}}, {0x3, 0x2, {0x0, 0x7}}, {0x1, 0xbe4e, {0x0, 0x80000001}}, {0x7f, 0x8, {0x3, 0x4bdd}}, {0x8, 0x8, {0x0, 0xe}}, {0x8, 0xa, {0x3, 0x8}}, {0x7, 0xb, {0x0, 0xbcb}}, {0x8, 0x8, {0x3, 0x7fffffff}}, {0x9e, 0x3, {0x0, 0x4}}, {0x0, 0x3, {0x1, 0x924a}}, {0x8, 0x7ff, {0x3, 0x6}}, {0x8, 0x0, {0x0, 0x2}}, {0x1, 0x8, {0x3, 0x3}}, {0x10, 0x43c, {0x2, 0x73a1}}, {0x7, 0x7, {0x1, 0xa98}}, {0x14, 0xf372, {0x1, 0x200}}, {0x5, 0x3, {0x0, 0x4}}, {0x1, 0x0, {0x1}}, {0x5, 0x3, {0x1, 0x5}}, {0x1, 0x1, {0x3, 0x7}}, {0x8, 0x3ff, {0x0, 0x4}}, {0x2, 0x8, {0x1, 0x7}}, {0x2, 0xc, {0x0, 0x3}}, {0x46e3, 0xf, {0x0, 0x80000001}}, {0x3, 0x0, {0x1, 0xa}}, {0x0, 0x2, {0x2, 0x4}}, {0x4, 0x8, {0x1, 0x7ab1}}, {0x7, 0x8, {0x2, 0x9}}, {0x2, 0x6, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0xb14}, 0x0, 0x8, 0x3, 0x6, 0xa, 'syz0\x00', "a17a99b5f1d3da8a239836ef0f5debe73dada05d98b4b744c7290c93477093e9", "22f950af289441bafba031f9d4b3bbd337b06af12b210366d1080eef18aadc7f", [{0x3, 0x8a37, {0x0, 0x8}}, {0x1, 0x12, {0x2, 0xfffffff4}}, {0x4, 0x6, {0x1, 0x10001}}, {0x7, 0x0, {0x2, 0x7}}, {0x4, 0xa, {0x1, 0xd61f}}, {0x50, 0x6, {0x2, 0x1}}, {0x2, 0x6, {0x1, 0xb}}, {0x83, 0xd, {0x0, 0x7fffffff}}, {0x8000, 0x2, {0x1, 0x6}}, {0x16, 0x8, {0x3, 0x2}}, {0x5a, 0x0, {0x0, 0x9}}, {0x8, 0x7, {0x2, 0x9}}, {0x5, 0x81, {0x3, 0x1}}, {0x2, 0x19b, {0x1, 0x6}}, {0xffbd, 0x4, {0x2, 0x7f}}, {0x1ff, 0x2, {0x3, 0x9}}, {0x0, 0x200, {0x3, 0x80}}, {0x7, 0x1ff, {0x3, 0x7}}, {0x0, 0x10, {0x0, 0x8}}, {0x401, 0x7, {0x1, 0x9}}, {0x6b, 0x0, {0x2, 0x9}}, {0x66cb, 0xc7, {0x2, 0x63b00}}, {0x5, 0x3a0, {0x0, 0x2}}, {0x7, 0x120, {0x3, 0xe5eada48}}, {0x4, 0xff69, {0x1, 0x800}}, {0x2, 0x2, {0x2, 0x9c66}}, {0x4, 0x8, {0x2, 0xfff}}, {0x3, 0x9, {0x3, 0x7ff}}, {0x9a, 0x1, {0x3, 0x200}}, {0x400, 0x5, {0x1, 0x6}}, {0x52, 0x0, {0x0, 0x8}}, {0x8, 0x72, {0x0, 0x3}}, {0x2, 0x80, {0x3, 0x8}}, {0x6, 0x6, {0x0, 0x7}}, {0x8, 0x8000, {0x3, 0xc79}}, {0x52d, 0xe000, {0x0, 0x401}}, {0x3, 0xc9ba, {0x2}}, {0x1, 0x7}, {0x7ff, 0x9, {0x2, 0x9}}, {0xff, 0x7f, {0x0, 0x8}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff804}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x7, 0x2, 0x0, 0x8, 0x7fffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xd}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x97, &(0x7f00000002c0)=""/151, 0x41000, 0x10, '\x00', r3, 0x19, r1, 0x8, &(0x7f00000003c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x4, 0x0, 0x200}, 0x10, 0x23fba, r1, 0x0, &(0x7f0000000a00)=[r0, r2], 0x0, 0x10, 0x5}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000b00)={r0, &(0x7f0000000180), &(0x7f00000001c0)=""/33}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0xb44, 0x6, 0x88a8}}, {0x14, 0x1, {0x101, 0x766, 0xb1a, 0x88a8}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r0, 0x0, &(0x7f0000000400)=""/55}, 0x20) 1.206322931s ago: executing program 0 (id=7043): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="a90d0100000000000000ef11f3c90ed7000005000000bdb26ec500001247c807662b5203fd5b7eae7a0b9e47a35e1b0cb39d6dcf134f21139356778f"], 0x14}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311690000000000851000000200000085"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f", 0x15}], 0x1}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, &(0x7f0000001040)) r4 = socket$igmp6(0xa, 0x3, 0x2) pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000040)}, {&(0x7f0000000040)="54978539975d8243306f1041c70c008b09c1239a3145c880e78e84380a07d0b5555a21fd6312e34a", 0x28}, {&(0x7f0000000500)="f1e2be4e0d07280ce2f260a53eb6971e78162cfe5e5eed4866d8a0ed29ff95a6d5bfe585176f5a89c8d8e59ad127508aebe98af7e9607965b08d95d42dfc3a49a33ca0f7ad5c28c7807862d75bce75d02d18654f3c86e73ad7f64720b3a3a7da1505d3120a0d14f507d14d72d2c62f62035626672fd9dce75283aad3f26ed94ae8f17153476a11fe304bb6c0aa16616a4e2b148d7ca7305bd49b61b90036d70aea6162f7040dd2cc8270d8c4b6d15062c350d6da3453235993e1c65fff7a77cd498405d8b57a332955979502b74e7a235ab2", 0xd2}, {&(0x7f0000000280)="c63d865842b8a3f7604cdb64c972103378be8ba2c317305545b23a535b6934e6adf2052c2689c38e4667b5601f7b6c9844076249e885276ef7bf4b7f1d26359d0c9ca42686bbf23a1197ae372360c63c6997326daa6341d05cdc1e337485ea35d2e0e975e7b5d92440be2ec30d296b171bbc17fea36375addb1bc0f8cab75d0aebde04998f6989f764bb1a35f97a7935a2efb47a77db95c282f42bd478e40939bdf06f72b8aaa7f4", 0xa8}], 0x4, 0x2240, 0x1) getsockopt$bt_hci(r0, 0x84, 0x15, 0x0, &(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) 1.205077524s ago: executing program 3 (id=7044): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x95, 0x4) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x3, @mcast2, 0x7}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}, 0x11) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.140658685s ago: executing program 4 (id=7045): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7f, 0xfff}) socketpair(0x9, 0x3, 0x6, &(0x7f0000000080)) (async) socketpair(0x9, 0x3, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r3, 0x2, &(0x7f00000000c0)="16f42a0650f7d31ab267b7fe8d8c326bb144d27d259aa5f13e0fadc96e100e5b859f2895b233f2b721aa6ceb9e3306ef81bc68b1df3ea690833c756fa3ee3f1e17f85d75a907e1f4e2dbd9d4da89612f2589a2b73f39fd33db06554dc13693f991008461f9092eb21520c98d9165bbc37e65431892b25df6e3652a84a5d30a4531d2850052c5f62697d24a6c") r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000300)) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r6) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x98, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x79}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x67}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x40880}, 0x4000) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x98, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x79}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x67}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x40880}, 0x4000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x1410, 0x100, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x1410, 0x100, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000840}, 0x48000) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000840}, 0x48000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x8) sendmsg$inet(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)="8d8dcb5d8a449b907573666651301086f5941833f86685fc8ae70a76cfc29ee4d9f32f05df3cfe32d1772df2e678620197927176e48fe7842565e7feb6e068ab8a9eab1a2a94861113798f4811c821ca57ffbe26f51f53c77c5f3b58c02ac5180ecf4817542b7490399331218ab85edd800d11c96f2c4a531295d29f40444cbbf9da0403452d3c037e1266ae4c0145b91e4f84", 0x93}, {&(0x7f0000000980)="8ef9f5fbe269d6630600389a0eaa5e853a77c26ae5bcdc8d0bc840de6cee4ac6ed99ac06d9b7c71af1ceea5de78e435cd3c7a41e8cbb66f79e34c813e6fb00142f98ed6548f41622db892b72467750aa38e54157695387b7f2e432ed45f1262e530c012c2d28fd39696406490f6a66627397bc8c29e37637de01603782cef30033e768c78e5dcfa70c571d58325fae9547c9d768454912bd383b0629255f6bb5", 0xa0}], 0x2, &(0x7f0000000a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}, 0x20048010) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b40), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, r11, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20008080) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, r11, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20008080) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000c80)={'vcan0\x00'}) close(r3) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r7, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000001) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000f40)={0xffffffffffffffff}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r6) sendmsg$NL80211_CMD_GET_REG(r12, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, r13, 0x308, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x82}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4c}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000095}, 0x4008050) 1.119869969s ago: executing program 2 (id=7046): ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4040080) 931.397385ms ago: executing program 1 (id=7047): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b}, 0x14}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e000100000000000000000007"], 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 930.90463ms ago: executing program 4 (id=7048): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0xdc, &(0x7f0000000380)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4, 0x5, @private1, 0x1}, @in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x200, @private2, 0x3}, @in6={0xa, 0x4e21, 0x8, @local, 0xfff}, @in6={0xa, 0x4e23, 0x5bee, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0xf2, 0x0}}]}, &(0x7f00000004c0)=0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x300000, 0x1000, 0x9, 0x2}, 0x20) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100003049293e81c5e79c46242f5e660cc7ee2be7c7d8e04c21a00000000", @ANYRES32=r4, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c00028005000d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x10, 0x4) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000280)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) bind$xdp(r8, &(0x7f0000000240)={0x2c, 0x1, r10, 0x0, r9}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r11}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 851.562779ms ago: executing program 2 (id=7049): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/4117, 0x1015}], 0x1}, 0xfffffff9}], 0x1, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="1c0600002c000100fefffffffcdbdf250a06f280150409"], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x44, 0x4, 0x4f8, 0xffffffff, 0x330, 0x0, 0x330, 0xffffffff, 0xffffffff, 0x428, 0x428, 0x428, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2, [0xffffffff, 0xffffff00, 0x0, 0xd0f5bcfa7c76e88e], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'bond0\x00', 'wg0\x00', {}, {}, 0x87, 0x6, 0x5, 0x61}, 0x203, 0x210, 0x238, 0x8502, {}, [@common=@rt={{0x138}, {0x7, [0x77], 0x4, 0x1, 0x5, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00', @local, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @remote, @mcast1, @private1], 0x3}}, @common=@unspec=@cluster={{0x30}, {0x800, 0x7, 0x7, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x8, 0x3}, {0x0, 0x24, 0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0x0, 0xff, 0xffffffff], [0x0, 0xff, 0xffffffff, 0xffffffff], 'bond0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x29, 0xb6, 0x5}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5b2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x40, 0x2, 0xfd, 0xa, 0x9, 0x2768}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, 0xd, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000040)) 676.279519ms ago: executing program 1 (id=7050): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 539.911082ms ago: executing program 3 (id=7051): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c46f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0}, 0x90) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000000c0)={{0xd39, 0x2dca}, 0x100, './file0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) 347.581481ms ago: executing program 0 (id=7052): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001040)={'nat\x00', 0x0, 0x4, 0x1000, [0x2, 0x3, 0x7, 0xb7c, 0x9, 0xac], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=""/4096}, &(0x7f00000010c0)=0x78) pipe(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0xea098000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0xeaf11000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000011c0)={'ip6_vti0\x00', &(0x7f0000001140)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x11, 0x10001, 0x20, @mcast2, @local, 0x10, 0x20, 0x3, 0x800}}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000001200)={0xffffffffffffffff, 0x0, 0xf, r4, 0x1}, 0xc) r5 = openat$cgroup(r1, &(0x7f0000001240)='syz1\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f0000001280)='syz1\x00', 0x200002, 0x0) setsockopt(r2, 0x2, 0xfffffff1, &(0x7f00000012c0)="4911d77ee532cf7f09fc1ddc31a118a20c9aaf6609dd73f07cb87951b3fe8c04c7dbc4281827c2529c9b3fa78dfcb8ea4e0aa7f6ff5973f6281e5c287f314e960225fd6c9d294b772f3889507735f44c6d2bb6ca2503b7eaf08f86ae3ad246", 0x5f) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001340)={'ip6tnl0\x00', 0x0}) r7 = accept4$inet(r0, &(0x7f0000001380)={0x2, 0x0, @empty}, &(0x7f00000013c0)=0x10, 0x80800) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000001400), &(0x7f0000001440)=0x4) r8 = socket$unix(0x1, 0x5, 0x0) openat$cgroup_pressure(r5, &(0x7f0000001480)='io.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000014c0), r2) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000001500)=0x80000001, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r1) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, r9, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x7f}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$OCFS2_IOC_RESVSP(r5, 0x40305828, &(0x7f0000001680)={0x0, 0x1, 0x1, 0x100, 0xff, 0x583}) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000001800)={r8, &(0x7f0000001700)='syztnl0\x00', 0x800, &(0x7f0000001740)={@_ha_fsid={[0x0, 0x8]}, {0x2, 0x8, 0x40, 0x9}}, 0x5, &(0x7f0000001780), &(0x7f00000017c0)=0x3}) syz_genetlink_get_family_id$mptcp(&(0x7f00000016c0), r10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001840)={0x1b, 0x0, 0x0, 0x7, 0x0, r5, 0xfffffffc, '\x00', r6, r1, 0x2, 0x1, 0x5}, 0x50) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001900), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x74, r11, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1000}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8cb}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x404f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x74}}, 0x20000000) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000001a40)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x5, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000001ac0), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001b00)={'wlan1\x00'}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10082}, 0x1c8) 215.260786ms ago: executing program 4 (id=7053): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) close(0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r4, 0x29, 0x1e, &(0x7f0000000040), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000580)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000800)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x20, r8, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe, 0x41}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="b58979"], 0x14c}}, 0x4810) 13.728097ms ago: executing program 0 (id=7054): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x20305}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) 13.150673ms ago: executing program 3 (id=7055): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x20000, 0x0, &(0x7f0000000080)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f00000000c0)=0x2, 0x4) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x88}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000400)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=7056): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060001000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000010800003f7fcf29210300000000000000d042d1000000000000000000038ab6d85e2b3ebeca2513f70520e2b248b10d70a7eccf28fcfed1256bc414ddc818a6cdfbba1de6ec79bfc644df5858b69b3b9ebe47bd051cda3c255c365cf807b233941ed6dbc0450adb51ee0952444cbeefbc7df82b92913c52fcf19f3bc6dae4218da1259f2e481166594d29e6f688dd2f19da01234eff1679f9df4badaab8cf8a9207fb0d4f4f39e5434f8e15098a3f3b07ed6fa5554e2e36db707a5d203d6ab326bf520f6b821fb7f9cd0a4976d4077cd420b9403d74e57153a2165a984a7b638ee84a4e73fafa5195e0558ebacf12022bb9c6d1a9f4e6b1f4e633a122a6046f6091260a76c85b99994d81d21d660a0b7d09d638f0fd9caa9314da6cd1218f13e524cb16172584c01e806636b498", @ANYRES32=0x0, @ANYBLOB="50010000000000000c0016800800018004000c8008001b0000000000"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): etlink: 658 bytes leftover after parsing attributes in process `syz.1.5527'. [ 645.467278][T26621] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5527'. [ 645.668730][T26637] netlink: 'syz.4.5532': attribute type 10 has an invalid length. [ 645.909476][T26650] netlink: 'syz.4.5535': attribute type 1 has an invalid length. [ 645.917734][T26650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5535'. [ 645.927352][T26650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5535'. [ 646.430415][T26688] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5545'. [ 646.472792][T26689] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5545'. [ 646.475024][T26691] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.5547'. [ 646.537104][T26691] xt_hashlimit: size too large, truncated to 1048576 [ 646.618883][T26699] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5549'. [ 646.684919][T26703] sctp: [Deprecated]: syz.1.5550 (pid 26703) Use of int in maxseg socket option. [ 646.684919][T26703] Use struct sctp_assoc_value instead [ 646.894569][T26712] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 647.001011][T26721] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5555'. [ 647.033217][T26721] net_ratelimit: 136 callbacks suppressed [ 647.033240][T26721] sock: sock_set_timeout: `syz.3.5555' (pid 26721) tries to set negative timeout [ 647.086869][T26721] tipc: Enabling of bearer rejected, failed to enable media [ 647.386493][T26719] veth0: entered promiscuous mode [ 647.401381][T26719] veth0: left promiscuous mode [ 647.858900][T26758] xt_TPROXY: Can be used only with -p tcp or -p udp [ 648.657729][T26795] validate_nla: 3 callbacks suppressed [ 648.657777][T26795] netlink: 'syz.4.5577': attribute type 1 has an invalid length. [ 648.734333][T26798] netlink: 'syz.4.5577': attribute type 3 has an invalid length. [ 648.750508][T26795] netlink: Unknown conntrack attr (0) [ 648.916124][T26808] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 649.879155][T26837] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.911717][T26837] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.010621][T26837] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 650.262135][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 650.271490][ C0] lec:lec_tx_timeout: lec0 [ 650.279600][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 650.810667][T26869] netlink: 'syz.3.5597': attribute type 10 has an invalid length. [ 650.851033][T26869] team0: Device vxcan1 is of different type [ 651.365883][T26890] __nla_validate_parse: 10 callbacks suppressed [ 651.365903][T26890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5602'. [ 651.485835][ T10] block nbd2: Connection timed out, retrying (0/2 alive) [ 651.496646][ T10] block nbd2: Connection timed out, retrying (0/2 alive) [ 651.506086][ T10] block nbd2: Connection timed out, retrying (0/2 alive) [ 651.517979][ T10] block nbd2: Connection timed out, retrying (0/2 alive) [ 651.527038][ T1165] block nbd2: Dead connection, failed to find a fallback [ 651.539477][ T1165] block nbd2: shutting down sockets [ 651.551273][ T1165] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.563314][ T1165] Buffer I/O error on dev nbd2, logical block 2, async page read [ 651.573139][ T1165] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.583678][ T1165] Buffer I/O error on dev nbd2, logical block 1, async page read [ 651.592844][ T1165] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.603228][ T1165] Buffer I/O error on dev nbd2, logical block 0, async page read [ 651.615493][ T1165] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.625930][ T1165] Buffer I/O error on dev nbd2, logical block 3, async page read [ 651.639808][T21807] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.652949][T21807] Buffer I/O error on dev nbd2, logical block 0, async page read [ 651.656253][ T5488] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 651.663471][T21807] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.679696][T21807] Buffer I/O error on dev nbd2, logical block 1, async page read [ 651.689178][T21807] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.700074][T21807] Buffer I/O error on dev nbd2, logical block 2, async page read [ 651.709451][T21807] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.737526][T21807] Buffer I/O error on dev nbd2, logical block 3, async page read [ 651.746846][T21807] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.758504][T21807] Buffer I/O error on dev nbd2, logical block 0, async page read [ 651.767614][T21807] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 651.778025][T21807] Buffer I/O error on dev nbd2, logical block 1, async page read [ 651.796943][T21807] ldm_validate_partition_table(): Disk read failed. [ 651.828394][T21807] Dev nbd2: unable to read RDB block 0 [ 651.858807][T21807] nbd2: unable to read partition table [ 651.921850][T21807] ldm_validate_partition_table(): Disk read failed. [ 651.935075][T26906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.939021][T21807] Dev nbd2: unable to read RDB block 0 [ 652.003709][T21807] nbd2: unable to read partition table [ 652.014487][T26910] veth0: entered promiscuous mode [ 652.061318][T26910] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5608'. [ 652.118475][T26910] syzkaller1: entered promiscuous mode [ 652.134786][T26910] syzkaller1: entered allmulticast mode [ 652.273332][T26914] ip6gre2: entered allmulticast mode [ 652.280573][T26908] veth0: left promiscuous mode [ 652.646144][T26923] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5612'. [ 652.871629][T26927] netlink: 51 bytes leftover after parsing attributes in process `syz.0.5615'. [ 655.072920][T27010] netlink: 'syz.4.5642': attribute type 9 has an invalid length. [ 655.292050][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 655.301356][ C0] lec:lec_tx_timeout: lec0 [ 655.306926][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 655.676160][T27036] sctp: [Deprecated]: syz.2.5651 (pid 27036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.676160][T27036] Use struct sctp_sack_info instead [ 656.235484][T27066] netlink: 'syz.4.5660': attribute type 32 has an invalid length. [ 656.279541][T27066] openvswitch: netlink: Message has 592 unknown bytes. [ 656.317549][T27066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.356376][T27074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5660'. [ 656.641500][T27068] bond9: Unable to set up delay as MII monitoring is disabled [ 656.707338][T27068] bond9 (unregistering): Released all slaves [ 657.300533][T27098] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5665'. [ 657.326015][T27098] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 657.831181][T27126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5672'. [ 657.962910][T27138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.194634][T27148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.378540][T27156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5684'. [ 658.395247][T27157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5683'. [ 658.426036][T27156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5684'. [ 658.457231][T27156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5684'. [ 658.498182][T27156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5684'. [ 658.954242][T27171] xt_CT: No such helper "syz1" [ 659.071719][T27181] netlink: 'syz.2.5688': attribute type 1 has an invalid length. [ 659.439989][T27193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5691'. [ 659.460254][T27193] tc_dump_action: action bad kind [ 659.634265][T27200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5696'. [ 660.322253][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 660.331262][ C0] lec:lec_tx_timeout: lec0 [ 660.338698][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 661.492795][T27252] wireguard0: entered promiscuous mode [ 661.519363][T27252] wireguard0: entered allmulticast mode [ 662.208569][T27261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5710'. [ 662.419336][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5710'. [ 662.483923][T27261] macvlan0: left promiscuous mode [ 662.538496][T27269] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5714'. [ 662.729786][T27274] netlink: 'syz.3.5715': attribute type 12 has an invalid length. [ 662.855817][T27279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5718'. [ 662.963419][T27279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5718'. [ 663.097163][T27295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.108653][T27295] batadv_slave_0: entered promiscuous mode [ 663.225132][T27300] veth1_to_bond: entered allmulticast mode [ 663.240486][T27299] veth1_to_bond: left allmulticast mode [ 663.351770][T27303] netlink: 'syz.3.5725': attribute type 10 has an invalid length. [ 663.386681][T27303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.393888][ T5144] Bluetooth: hci4: command 0x0406 tx timeout [ 663.413477][T27310] netlink: 'syz.3.5725': attribute type 10 has an invalid length. [ 663.422225][T27303] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 663.440974][T27308] tipc: Enabling of bearer rejected, failed to enable media [ 663.456047][T27310] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5725'. [ 663.468260][T27310] batadv0: entered promiscuous mode [ 663.474534][T27310] batadv0: entered allmulticast mode [ 663.530729][T27313] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 663.599242][T27310] bond0: (slave batadv0): Releasing backup interface [ 663.612305][T27310] bridge0: port 4(batadv0) entered blocking state [ 663.619636][T27310] bridge0: port 4(batadv0) entered disabled state [ 663.773309][ T6125] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 663.783863][ T6125] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 663.864867][T27317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5728'. [ 663.975237][T27322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5733'. [ 664.355588][ T30] audit: type=1800 audit(1777023451.641:3): pid=27328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5735" name="memory.events" dev="tmpfs" ino=2969 res=0 errno=0 [ 664.784772][T27349] tipc: Enabled bearer , priority 0 [ 665.048919][T27349] syzkaller0: entered promiscuous mode [ 665.070856][T27349] syzkaller0: entered allmulticast mode [ 665.080212][T27349] tipc: Resetting bearer [ 665.240547][T27359] syzkaller1: entered promiscuous mode [ 665.260241][T27359] syzkaller1: entered allmulticast mode [ 665.401140][T27373] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5747'. [ 665.473869][ T5144] Bluetooth: hci4: command 0x0406 tx timeout [ 665.547859][T27346] tipc: Resetting bearer [ 665.555831][T27379] netlink: 'syz.1.5751': attribute type 1 has an invalid length. [ 665.768411][T27388] netlink: 'syz.2.5752': attribute type 10 has an invalid length. [ 666.168473][T27397] openvswitch: netlink: IP tunnel dst address not specified [ 666.196608][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5850 ms [ 666.205916][ C0] lec:lec_tx_timeout: lec0 [ 666.211986][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 669.959095][T27346] tipc: Disabling bearer [ 669.975740][T27388] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.989041][T27388] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.096316][T27390] netlink: 'syz.3.5753': attribute type 29 has an invalid length. [ 671.222035][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 671.231301][ C0] lec:lec_tx_timeout: lec0 [ 671.237340][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 671.250445][T27452] netlink: 'syz.3.5764': attribute type 11 has an invalid length. [ 672.692751][T27499] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5779'. [ 672.769456][T27500] netlink: 'syz.3.5780': attribute type 1 has an invalid length. [ 672.840700][T27504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5781'. [ 672.850432][T27506] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5782'. [ 672.983426][T27508] bridge_slave_0: invalid flags given to default FDB implementation [ 673.054805][T27508] bridge_slave_0: invalid flags given to default FDB implementation [ 673.404459][T27523] openvswitch: netlink: IPv4 tun info is not correct [ 673.629579][T27525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5790'. [ 673.653445][T27525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5790'. [ 673.662285][T27527] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5789'. [ 673.692478][T27525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5790'. [ 674.595966][T27556] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 674.653688][T27561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5800'. [ 674.682257][T27561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5800'. [ 674.713467][T27564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5800'. [ 675.332570][T27577] tipc: Enabling of bearer rejected, failed to enable media [ 675.423282][T27580] tipc: Enabled bearer , priority 0 [ 675.663832][T27582] syzkaller0: entered promiscuous mode [ 675.670934][T27582] syzkaller0: entered allmulticast mode [ 675.683434][T27582] tipc: Resetting bearer [ 676.252099][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 676.261413][ C0] lec:lec_tx_timeout: lec0 [ 676.270947][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 676.501694][ T6125] tipc: Resetting bearer [ 676.564358][T27579] tipc: Resetting bearer [ 679.032626][T27611] netlink: 'syz.4.5811': attribute type 62 has an invalid length. [ 679.040666][T27611] __nla_validate_parse: 1 callbacks suppressed [ 679.040685][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5811'. [ 679.088919][T27612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5811'. [ 681.293719][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 681.302999][ C0] lec:lec_tx_timeout: lec0 [ 681.309216][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 682.087675][T27579] tipc: Disabling bearer [ 682.186178][T27605] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5810'. [ 682.254661][T27605] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5810'. [ 682.292513][T27605] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5810'. [ 682.335247][T27610] netem: change failed [ 682.845552][T27624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5816'. [ 683.306681][T27636] xt_hashlimit: size too large, truncated to 1048576 [ 683.626585][T27646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5820'. [ 683.646259][T27644] sctp: [Deprecated]: syz.4.5819 (pid 27644) Use of int in maxseg socket option. [ 683.646259][T27644] Use struct sctp_assoc_value instead [ 683.719901][T27646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5820'. [ 684.304952][T21185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 684.318162][T21185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 684.336705][T21185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 684.350632][T21185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 684.369506][T21185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 684.674766][T27657] lo speed is unknown, defaulting to 1000 [ 686.056731][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 686.271619][T10851] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 686.285156][T10851] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.323000][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 686.332353][ C0] lec:lec_tx_timeout: lec0 [ 686.337528][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 686.433351][ T5144] Bluetooth: hci1: command tx timeout [ 686.618240][T27699] Unsupported ieee802154 address type: 0 [ 687.060937][T27708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5836'. [ 687.088846][T10851] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.111819][T27711] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5838'. [ 687.161444][T10851] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.228720][T27714] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5837'. [ 687.353190][T27708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5836'. [ 687.705815][T10851] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.734103][T10851] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.846613][T27714] ip6erspan1: entered allmulticast mode [ 688.020459][T10851] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.031915][T10851] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.123705][T27735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.387933][T27756] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 688.513123][ T5144] Bluetooth: hci1: command tx timeout [ 688.719143][T27657] chnl_net:caif_netlink_parms(): no params data found [ 688.728344][T27769] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 689.117814][T27789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5857'. [ 689.145891][T27791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5857'. [ 689.148134][T27792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5856'. [ 689.319310][T27795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.352909][T27799] netlink: 'syz.0.5859': attribute type 1 has an invalid length. [ 689.414714][T27802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5860'. [ 689.424291][T27802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5860'. [ 690.252405][T10851] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 690.262218][T10851] bridge_slave_1: left allmulticast mode [ 690.269240][T10851] bond0 (unregistering): Released all slaves [ 690.281402][T10851] bond1 (unregistering): Released all slaves [ 690.302387][T10851] bond2 (unregistering): Released all slaves [ 690.317987][T10851] bond3 (unregistering): Released all slaves [ 690.337930][T10851] bond4 (unregistering): Released all slaves [ 690.357388][T10851] bond5 (unregistering): (slave vxcan3): Releasing backup interface [ 690.367606][T10851] bond5 (unregistering): (slave vxcan5): Releasing backup interface [ 690.377830][T10851] bond5 (unregistering): Released all slaves [ 690.396727][T10851] bond6 (unregistering): Released all slaves [ 690.411614][T10851] bond7 (unregistering): Released all slaves [ 690.433948][T10851] bond8 (unregistering): Released all slaves [ 690.592247][ T5144] Bluetooth: hci1: command tx timeout [ 690.678881][T27657] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.696871][T27657] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.733833][T27657] bridge_slave_0: entered allmulticast mode [ 690.770231][T27657] bridge_slave_0: entered promiscuous mode [ 690.810877][T27839] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5868'. [ 690.846542][T27657] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.866684][T27657] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.898875][T27657] bridge_slave_1: entered allmulticast mode [ 690.915858][T27657] bridge_slave_1: entered promiscuous mode [ 690.935605][T10851] tipc: Left network mode [ 690.997791][T27835] syzkaller1: entered promiscuous mode [ 691.003820][T27835] syzkaller1: entered allmulticast mode [ 691.171343][T27840] hsr_slave_0 (unregistering): left promiscuous mode [ 691.389650][T27657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.490065][T27657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.810644][T27657] team0: Port device team_slave_0 added [ 691.997618][T27657] team0: Port device team_slave_1 added [ 692.410922][T27657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.422483][T27657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.431942][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6090 ms [ 692.457151][ C0] lec:lec_tx_timeout: lec0 [ 692.462817][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 692.481829][T27657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.530228][T10851] hsr_slave_0: left promiscuous mode [ 692.556414][T10851] hsr_slave_1: left promiscuous mode [ 692.655928][T10851] veth1_macvtap: left promiscuous mode [ 692.665505][T10851] veth1_vlan: left promiscuous mode [ 692.672398][ T5144] Bluetooth: hci1: command tx timeout [ 692.675490][T10851] veth0_vlan: left promiscuous mode [ 693.150281][T27914] netlink: 'syz.4.5883': attribute type 1 has an invalid length. [ 693.167338][T27914] __nla_validate_parse: 1 callbacks suppressed [ 693.167385][T27914] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5883'. [ 693.731669][T27657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.740912][T27657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.821195][T27657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.879607][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 693.977082][T27924] netlink: 288 bytes leftover after parsing attributes in process `syz.3.5888'. [ 694.160547][T27939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5891'. [ 694.182829][T27933] tipc: Enabling of bearer rejected, failed to enable media [ 694.229532][T27657] hsr_slave_0: entered promiscuous mode [ 694.258072][T27657] hsr_slave_1: entered promiscuous mode [ 694.278364][T27939] veth1_vlan: left promiscuous mode [ 694.314243][T27939] netlink: 'syz.3.5891': attribute type 1 has an invalid length. [ 694.324142][T27939] netlink: 'syz.3.5891': attribute type 2 has an invalid length. [ 694.338097][T27943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5892'. [ 694.350604][T27945] xt_ecn: cannot match TCP bits for non-tcp packets [ 694.350661][T27943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5892'. [ 694.555428][T27949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5893'. [ 694.712159][T27958] netlink: 'syz.2.5896': attribute type 1 has an invalid length. [ 694.728279][T27949] x_tables: duplicate entry at hook 3 [ 694.733913][T10851] IPVS: stop unused estimator thread 0... [ 694.752686][T27958] netlink: 'syz.2.5896': attribute type 2 has an invalid length. [ 694.804068][T27958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5896'. [ 695.090673][T27965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5897'. [ 695.092853][T27967] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 695.198411][T27964] netlink: 'syz.4.5898': attribute type 1 has an invalid length. [ 695.968111][T28001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5904'. [ 696.047712][T28003] openvswitch: netlink: Missing valid actions attribute. [ 696.072694][T28003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.913046][T28016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5908'. [ 698.191963][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 698.200123][ C0] lec:lec_tx_timeout: lec0 [ 698.205692][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 698.359171][T28053] bridge4: entered promiscuous mode [ 698.371755][T28053] bridge4: entered allmulticast mode [ 698.580258][T28063] veth1_vlan: entered promiscuous mode [ 698.586260][T28063] macvtap1: entered promiscuous mode [ 698.597162][T28063] macvtap1: entered allmulticast mode [ 698.612084][T28063] veth1_vlan: entered allmulticast mode [ 698.703920][T28067] macvtap2: entered promiscuous mode [ 698.710843][T28067] macvtap2: entered allmulticast mode [ 698.795377][T28071] netlink: 'syz.0.5921': attribute type 25 has an invalid length. [ 699.034684][T28079] veth0: entered promiscuous mode [ 699.056105][T28079] veth0: entered allmulticast mode [ 699.077102][T27657] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 699.140592][T27657] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 699.184317][T27657] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 699.198109][T27657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 699.209442][T27657] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 699.221627][T27657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 699.315257][T27657] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 699.365684][T27657] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 699.388973][T28089] tipc: Started in network mode [ 699.397633][T28089] tipc: Node identity c6d4b000445d, cluster identity 4711 [ 699.419278][T28089] tipc: Enabled bearer , priority 0 [ 699.474592][T28089] +: renamed from syzkaller0 [ 699.503944][T28089] tipc: Disabling bearer [ 699.619766][T28104] __nla_validate_parse: 4 callbacks suppressed [ 699.619786][T28104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5929'. [ 699.798150][T28109] netlink: 'syz.0.5930': attribute type 9 has an invalid length. [ 699.830568][T28109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5930'. [ 699.880969][T28109] IPv6: NLM_F_CREATE should be specified when creating new route [ 699.895710][T28113] IPv6: NLM_F_CREATE should be specified when creating new route [ 700.438219][T27657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.547072][T28131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5937'. [ 700.574111][T27657] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.692217][T19393] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.700446][T19393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.853909][T19393] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.864176][T19393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.211120][T27657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.325407][T28196] x_tables: duplicate underflow at hook 1 [ 702.366639][T28184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5947'. [ 702.404186][T28184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5947'. [ 702.510748][T28186] lo speed is unknown, defaulting to 1000 [ 702.800048][T27657] veth0_vlan: entered promiscuous mode [ 702.995089][T27657] veth1_vlan: entered promiscuous mode [ 703.055113][T28211] netlink: 'syz.4.5953': attribute type 1 has an invalid length. [ 703.160750][T28211] bond9: entered promiscuous mode [ 703.167574][T28211] 8021q: adding VLAN 0 to HW filter on device bond9 [ 703.211939][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 703.220074][ C0] lec:lec_tx_timeout: lec0 [ 703.224916][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 703.393266][T27657] veth0_macvtap: entered promiscuous mode [ 703.438649][T27657] veth1_macvtap: entered promiscuous mode [ 703.786109][T27657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.841611][T27657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.889915][ T6125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.930282][ T6125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.010597][ T91] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.073836][ T91] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.585150][T10851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.626005][T10851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.830141][T10850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.872604][T10850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.121699][T28268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5968'. [ 706.101604][T28304] netlink: 'syz.4.5976': attribute type 1 has an invalid length. [ 706.152591][T28304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5976'. [ 706.411633][T21185] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 706.425667][T21185] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 706.440242][T21185] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 706.456903][T21185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 706.481403][T21185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 706.589818][T28307] tipc: Resetting bearer [ 706.624445][T28307] lo speed is unknown, defaulting to 1000 [ 707.161794][T28325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.394410][T28332] netlink: 'syz.3.5984': attribute type 25 has an invalid length. [ 707.435706][T28332] netlink: 'syz.3.5984': attribute type 28 has an invalid length. [ 707.541306][T28307] chnl_net:caif_netlink_parms(): no params data found [ 707.850290][T28307] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.861314][T28307] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.881559][T28307] bridge_slave_0: entered allmulticast mode [ 707.890885][T28307] bridge_slave_0: entered promiscuous mode [ 707.914937][T28351] geneve4: entered promiscuous mode [ 707.920560][T28351] geneve4: entered allmulticast mode [ 707.934558][T28307] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.943783][T28307] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.951735][T28307] bridge_slave_1: entered allmulticast mode [ 707.961358][T28307] bridge_slave_1: entered promiscuous mode [ 707.973891][T10851] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 707.984024][T10851] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 707.995683][T10851] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 708.007223][T10851] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 708.208899][T28355] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.232006][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 708.240129][ C0] lec:lec_tx_timeout: lec0 [ 708.245196][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 708.417615][T28307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.433779][T28307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.484594][T28356] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 708.497774][T28356] bond6 (unregistering): Released all slaves [ 708.513285][ T5144] Bluetooth: hci5: command tx timeout [ 708.536262][T28367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5994'. [ 708.552598][T28361] netlink: 404 bytes leftover after parsing attributes in process `syz.4.5992'. [ 708.562885][T28361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5992'. [ 708.572644][T28361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5992'. [ 708.588783][T28361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5992'. [ 709.030141][T28380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.037248][T28307] team0: Port device team_slave_0 added [ 709.079322][T28307] team0: Port device team_slave_1 added [ 709.167072][T28383] netlink: 'syz.2.6000': attribute type 1 has an invalid length. [ 709.175222][T28383] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6000'. [ 709.333020][T28307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.351535][T28307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.384127][T28307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.399109][T28388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6001'. [ 709.420128][T28307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.434157][T28307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.470633][T28307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.517354][T28394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.718382][T28399] lo: entered promiscuous mode [ 709.736906][T28399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.791002][T28307] hsr_slave_0: entered promiscuous mode [ 709.808919][T28307] hsr_slave_1: entered promiscuous mode [ 709.830010][T28307] debugfs: 'hsr0' already exists in 'hsr' [ 709.842039][T28307] Cannot create hsr debugfs directory [ 709.858749][T28402] netlink: 'syz.3.6007': attribute type 4 has an invalid length. [ 709.980406][T28412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6009'. [ 710.283980][T28424] __nla_validate_parse: 2 callbacks suppressed [ 710.284020][T28424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6012'. [ 710.541220][T28307] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.594204][ T5144] Bluetooth: hci5: command tx timeout [ 710.701119][T28307] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.845115][T28307] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.873671][T28442] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6015'. [ 710.936771][T28307] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.958105][T28446] netlink: 'syz.4.6016': attribute type 1 has an invalid length. [ 710.989239][T28446] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6016'. [ 711.146725][T28446] vcan0: entered allmulticast mode [ 711.155038][T28448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6017'. [ 711.206532][T28448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6017'. [ 711.306580][T28454] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 711.677353][T28307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 711.705205][T28307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 711.732984][T28307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 711.749554][T28307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 711.782825][T28307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 711.800774][T28307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 711.816091][T28307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 711.866294][T28307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 712.037969][T28482] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 712.167192][T28307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.228554][T28307] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.261563][T19393] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.269064][T19393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.325762][T28485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6027'. [ 712.335774][T19393] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.342993][T19393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.672381][ T5144] Bluetooth: hci5: command tx timeout [ 712.958572][T28307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.007106][T28502] netlink: 408 bytes leftover after parsing attributes in process `syz.2.6033'. [ 713.075275][T28506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6034'. [ 713.096652][T28510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6036'. [ 713.251955][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 713.260093][ C0] lec:lec_tx_timeout: lec0 [ 713.265525][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 713.300559][T28506] pim6reg1: entered promiscuous mode [ 713.318290][T28506] pim6reg1: entered allmulticast mode [ 713.355816][T28506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6034'. [ 713.407097][T28522] netlink: 'syz.2.6038': attribute type 10 has an invalid length. [ 713.491177][T28518] bond10 (unregistering): Released all slaves [ 713.519821][T28307] veth0_vlan: entered promiscuous mode [ 713.540033][T28307] veth1_vlan: entered promiscuous mode [ 713.560646][T28506] ip6gre0: entered promiscuous mode [ 713.574903][T28506] ip6gre0: entered allmulticast mode [ 713.840518][T28307] veth0_macvtap: entered promiscuous mode [ 713.883621][T28307] veth1_macvtap: entered promiscuous mode [ 713.916593][T28538] tipc: Enabled bearer , priority 10 [ 714.080805][T28307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.185216][T28307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.266770][T10851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.288179][T10851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.388913][T10851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.401286][T10851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.752846][ T5144] Bluetooth: hci5: command tx timeout [ 714.768520][T10851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.789188][T10851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.963830][ T6113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.986544][ T6113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.176969][T28565] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 715.207015][T28577] syzkaller1: entered promiscuous mode [ 715.266524][T28577] syzkaller1: entered allmulticast mode [ 715.518929][T28592] netlink: 'syz.3.6054': attribute type 9 has an invalid length. [ 716.184914][T28609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6059'. [ 716.685418][T28622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6066'. [ 717.047882][T21185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 717.067402][T21185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 717.079822][T21185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 717.092921][T21185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 717.113599][T21185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 717.176002][T28640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6069'. [ 717.219068][T28638] bond1: entered promiscuous mode [ 717.225438][T28638] bond1: entered allmulticast mode [ 717.231248][T28638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 717.244465][T28643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6070'. [ 717.304777][T28633] lo speed is unknown, defaulting to 1000 [ 717.516163][T28649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6072'. [ 717.820142][T28663] netlink: 'syz.3.6075': attribute type 3 has an invalid length. [ 718.061085][T28633] chnl_net:caif_netlink_parms(): no params data found [ 718.197377][T28633] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.205076][T28633] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.214661][T28633] bridge_slave_0: entered allmulticast mode [ 718.223408][T28633] bridge_slave_0: entered promiscuous mode [ 718.245332][T28633] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.254827][T28633] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.266836][T28633] bridge_slave_1: entered allmulticast mode [ 718.273501][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 718.273533][ C0] lec:lec_tx_timeout: lec0 [ 718.281728][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 718.400812][T28633] bridge_slave_1: entered promiscuous mode [ 718.569321][T28633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.608145][T28677] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6079'. [ 718.631034][T28633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.644758][T28677] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6079'. [ 718.948790][T28633] team0: Port device team_slave_0 added [ 718.981725][T28688] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6082'. [ 718.999965][T28633] team0: Port device team_slave_1 added [ 719.037736][T28687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.065867][T28633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.085537][T28633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.139824][T28633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.154991][T28633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.165948][T28633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.194957][T28633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.233484][ T5144] Bluetooth: hci2: command tx timeout [ 719.243149][T28694] bridge0: port 1(ipvlan2) entered blocking state [ 719.251567][T28694] bridge0: port 1(ipvlan2) entered disabled state [ 719.259507][T28694] ipvlan2: entered allmulticast mode [ 719.265387][T28694] bridge0: entered allmulticast mode [ 719.276298][T28694] ipvlan2: left allmulticast mode [ 719.279549][T28696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6085'. [ 719.281717][T28694] bridge0: left allmulticast mode [ 719.310413][T28695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6084'. [ 719.327216][T28696] macvlan2: entered allmulticast mode [ 719.337985][T28696] dummy0: entered allmulticast mode [ 719.355903][T28696] dummy0: entered promiscuous mode [ 719.365492][T28698] sctp: [Deprecated]: syz.0.6084 (pid 28698) Use of int in max_burst socket option. [ 719.365492][T28698] Use struct sctp_assoc_value instead [ 719.585528][T28633] hsr_slave_0: entered promiscuous mode [ 719.606192][T28633] hsr_slave_1: entered promiscuous mode [ 719.614988][T28633] debugfs: 'hsr0' already exists in 'hsr' [ 719.632379][T28633] Cannot create hsr debugfs directory [ 720.586296][T28633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.630180][T28633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.660069][T28633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52768 - 0 [ 720.687965][T28633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 720.799285][T28727] erspan0: entered promiscuous mode [ 720.819952][T28727] erspan0: left promiscuous mode [ 721.080847][T28633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.107954][T28633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.130545][T28633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52768 - 0 [ 721.151582][T28633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 721.265130][T28743] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 721.312506][ T5144] Bluetooth: hci2: command tx timeout [ 721.509053][T28633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.557304][T28633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.581053][T28633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52768 - 0 [ 721.614131][T28633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 721.905355][T28633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.946721][T28633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.986512][T28633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 52768 - 0 [ 722.025220][T28633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 722.057929][T28770] __nla_validate_parse: 6 callbacks suppressed [ 722.057951][T28770] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6109'. [ 722.651184][T28788] netlink: 'syz.4.6112': attribute type 1 has an invalid length. [ 722.846824][T28788] 8021q: adding VLAN 0 to HW filter on device bond10 [ 723.149081][T28812] netlink: 'syz.0.6121': attribute type 5 has an invalid length. [ 723.174974][ T6125] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.187098][T28812] netlink: 'syz.0.6121': attribute type 39 has an invalid length. [ 723.210586][T28633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 723.268852][T28633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 723.279349][T28633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 723.291978][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 723.300226][ C0] lec:lec_tx_timeout: lec0 [ 723.315481][T28633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 723.324397][T28817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6122'. [ 723.353569][T28633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 723.379620][T28633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 723.392459][ T5144] Bluetooth: hci2: command tx timeout [ 723.411477][T28818] netlink: 'syz.4.6120': attribute type 39 has an invalid length. [ 723.428642][T28633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 723.510092][T28633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 723.907948][T28831] IPVS: lc: FWM 3 0x00000003 - no destination available [ 723.912167][T28826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.925249][T28826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.937943][ T5562] IPVS: starting estimator thread 0... [ 723.952811][T28826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.962116][T28826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.052014][T28832] IPVS: using max 28 ests per chain, 67200 per kthread [ 724.344220][T28842] veth0: entered promiscuous mode [ 724.385850][T28838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6127'. [ 724.394685][T28633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.427736][T28838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6127'. [ 724.523550][T28839] syzkaller0: entered promiscuous mode [ 724.529290][T28839] syzkaller0: entered allmulticast mode [ 724.570688][T28842] veth0: left promiscuous mode [ 724.785596][T28855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6129'. [ 725.472271][ T5144] Bluetooth: hci2: command tx timeout [ 729.456558][T28633] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.540105][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.548437][T10856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.692748][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.701164][T10856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.931107][ T30] audit: type=1800 audit(1777023517.211:4): pid=28887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6136" name="memory.events" dev="tmpfs" ino=242 res=0 errno=0 [ 730.024406][ T30] audit: type=1804 audit(1777023517.261:5): pid=28887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6136" name="/newroot/44/memory.events" dev="tmpfs" ino=242 res=1 errno=0 [ 730.384842][T28911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.408365][T28911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6144'. [ 730.726316][T28918] syzkaller0: entered promiscuous mode [ 730.749913][T28918] syzkaller0: entered allmulticast mode [ 730.808415][T28633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.913637][T28929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6149'. [ 730.990852][T28932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6148'. [ 731.589911][T28633] veth0_vlan: entered promiscuous mode [ 731.810781][T28938] syzkaller0: entered promiscuous mode [ 731.817614][T28938] syzkaller0: entered allmulticast mode [ 731.849282][T28633] veth1_vlan: entered promiscuous mode [ 731.971280][T28957] xt_hashlimit: size too large, truncated to 1048576 [ 732.198809][T28963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6152'. [ 736.304614][T28975] netlink: 'syz.0.6157': attribute type 1 has an invalid length. [ 736.324273][T28975] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6157'. [ 736.337102][T28975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6157'. [ 736.494937][T28633] veth0_macvtap: entered promiscuous mode [ 736.553547][T28633] veth1_macvtap: entered promiscuous mode [ 736.639301][T28633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.706541][T28633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.768757][ T6113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.803382][ T6113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.840783][ T6113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.880728][ T6113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.298870][T10850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.334910][ T8126] lec:lec_start_xmit: lec0:No lecd attached [ 737.346076][T10850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.473806][T29008] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 737.503299][T29002] xt_socket: unknown flags 0xe4 [ 737.557936][ T6113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.573369][ T6113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.588666][T29008] syzkaller0: entered promiscuous mode [ 737.596865][T29008] syzkaller0: entered allmulticast mode [ 737.659812][T29008] SET target dimension over the limit! [ 738.001734][T29025] netlink: 'syz.0.6171': attribute type 16 has an invalid length. [ 738.059717][T29022] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.086750][T29025] netlink: 'syz.0.6171': attribute type 17 has an invalid length. [ 738.128196][T29022] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.390164][T29032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6172'. [ 738.456323][T29025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 738.479681][T29035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6172'. [ 738.616176][T29032] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6172'. [ 739.839305][T29090] netlink: 'syz.0.6186': attribute type 1 has an invalid length. [ 739.854087][T29090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6186'. [ 739.884987][T29090] netlink: 658 bytes leftover after parsing attributes in process `syz.0.6186'. [ 739.914088][T29090] netlink: 'syz.0.6186': attribute type 1 has an invalid length. [ 739.925407][T29094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6186'. [ 740.264949][T29110] netlink: 'syz.1.6192': attribute type 1 has an invalid length. [ 740.384849][T29118] IPVS: length: 239 != 24 [ 740.525697][T29123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6194'. [ 740.539053][T29110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 740.738189][T29119] bond2: (slave geneve2): making interface the new active one [ 740.755008][T29119] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 740.901149][T29133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6195'. [ 743.161444][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 743.169647][ C0] lec:lec_tx_timeout: lec0 [ 745.029591][T29133] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 745.111252][T29142] netlink: 'syz.0.6197': attribute type 21 has an invalid length. [ 745.151100][T29142] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6197'. [ 745.471110][T29151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6200'. [ 745.571765][T29151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6200'. [ 745.626668][T29158] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6202'. [ 746.338313][T29199] delete_channel: no stack [ 746.389308][T29198] openvswitch: netlink: IPv4 tun info is not correct [ 746.705106][T29216] syzkaller0: entered promiscuous mode [ 746.724173][T29216] syzkaller0: entered allmulticast mode [ 747.017834][T29232] netlink: 'syz.4.6220': attribute type 10 has an invalid length. [ 747.057481][T29232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6220'. [ 747.120169][T29232] dummy0: entered promiscuous mode [ 747.128801][T29232] bridge0: port 1(dummy0) entered blocking state [ 747.158453][T29232] bridge0: port 1(dummy0) entered disabled state [ 747.179786][T29232] dummy0: entered allmulticast mode [ 747.215593][T29232] bridge0: port 1(dummy0) entered blocking state [ 747.222181][T29232] bridge0: port 1(dummy0) entered forwarding state [ 747.492735][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 747.502981][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 747.645421][T29260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6227'. [ 747.676508][T29260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6227'. [ 747.734687][T29267] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.6229'. [ 747.954701][T29274] xt_l2tp: v2 sid > 0xffff: 1114112 [ 748.169790][T29287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6232'. [ 748.231646][T29286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6234'. [ 748.354946][T29286] team0: No ports can be present during mode change [ 753.152154][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 753.160223][ C0] lec:lec_tx_timeout: lec0 [ 802.211362][ T8126] lec:lec_start_xmit: lec0:No lecd attached [ 807.221970][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 807.230114][ C0] lec:lec_tx_timeout: lec0 [ 808.931632][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 808.955067][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 809.045347][T29333] __nla_validate_parse: 2 callbacks suppressed [ 809.045368][T29333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6243'. [ 809.270043][T29340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6242'. [ 809.608281][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 809.628003][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 809.639487][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 809.657466][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 809.668998][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 809.950504][T29358] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6251'. [ 809.976676][T29346] lo speed is unknown, defaulting to 1000 [ 810.194285][T29366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6255'. [ 810.691384][T29346] chnl_net:caif_netlink_parms(): no params data found [ 810.778697][T29383] xt_TCPMSS: Only works on TCP SYN packets [ 810.993049][T21185] Bluetooth: hci1: command 0x0406 tx timeout [ 811.171325][T29396] netlink: 'syz.0.6264': attribute type 16 has an invalid length. [ 811.179270][T29402] netlink: 'syz.0.6264': attribute type 16 has an invalid length. [ 811.187496][T29402] netlink: 'syz.0.6264': attribute type 3 has an invalid length. [ 811.196894][T29402] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6264'. [ 811.209256][T29396] netlink: 'syz.0.6264': attribute type 3 has an invalid length. [ 811.217787][T29396] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6264'. [ 811.242395][T29346] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.249883][T29346] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.257621][T29346] bridge_slave_0: entered allmulticast mode [ 811.266247][T29346] bridge_slave_0: entered promiscuous mode [ 811.278624][T29346] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.286434][T29346] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.294994][T29346] bridge_slave_1: entered allmulticast mode [ 811.331499][T29346] bridge_slave_1: entered promiscuous mode [ 811.439626][T29407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6263'. [ 811.518912][T29406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6263'. [ 811.590630][T29346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.639577][T29346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.656131][T29412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6266'. [ 811.712680][ T5144] Bluetooth: hci4: command tx timeout [ 811.750894][T29346] team0: Port device team_slave_0 added [ 811.762300][T29346] team0: Port device team_slave_1 added [ 811.805944][T29346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.813240][T29346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.854020][T29346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.887591][T29346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.918817][T29346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.024199][T29346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.370420][T29346] hsr_slave_0: entered promiscuous mode [ 812.378187][T29346] hsr_slave_1: entered promiscuous mode [ 812.385059][T29346] debugfs: 'hsr0' already exists in 'hsr' [ 812.390872][T29346] Cannot create hsr debugfs directory [ 812.725549][T29435] ip6gre3: entered promiscuous mode [ 812.732517][T29435] ip6gre3: entered allmulticast mode [ 812.745225][T19393] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 812.760454][T19393] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 812.777537][T24716] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 813.130129][T29346] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.144609][T29346] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.276058][T29346] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.286983][T29346] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.353089][T24712] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 813.386539][T29346] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.403286][T29346] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.632708][T24712] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 813.793810][ T5144] Bluetooth: hci4: command tx timeout [ 814.080952][T29395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 814.096897][T29422] netlink: 'syz.0.6269': attribute type 1 has an invalid length. [ 814.126602][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 814.134726][ C0] lec:lec_tx_timeout: lec0 [ 814.181549][T29346] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 814.270833][T29346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 814.281513][T29346] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 814.397780][T29346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 814.437039][T29346] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 814.516398][T29346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 814.570842][T29346] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 814.650025][T29346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 814.866182][T29485] syzkaller0: entered promiscuous mode [ 814.886502][T29485] syzkaller0: entered allmulticast mode [ 814.912099][T29484] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6281'. [ 814.946742][T29484] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6281'. [ 814.969864][T29484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6281'. [ 815.038444][T29491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 815.280444][T29497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6287'. [ 815.338847][T29497] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 815.410847][T29502] netlink: 'syz.2.6288': attribute type 1 has an invalid length. [ 815.465765][ T1209] IPVS: starting estimator thread 0... [ 815.478290][T29499] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 815.574077][T29497] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6287'. [ 815.592849][T29506] IPVS: using max 29 ests per chain, 69600 per kthread [ 815.739837][T29502] bond1: entered promiscuous mode [ 815.764105][T29502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 815.873177][ T5144] Bluetooth: hci4: command tx timeout [ 815.903718][T29346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.908310][T29518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6290'. [ 815.949569][T29346] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.962707][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6290'. [ 816.050925][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.059382][T10856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.163665][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.170949][T10856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.512574][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 816.650568][T29539] netlink: 'syz.1.6296': attribute type 21 has an invalid length. [ 816.661139][T29541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6297'. [ 816.662496][T29539] netlink: 'syz.1.6296': attribute type 22 has an invalid length. [ 816.681907][T29539] netlink: 'syz.1.6296': attribute type 23 has an invalid length. [ 816.725179][T29539] netlink: 'syz.1.6296': attribute type 25 has an invalid length. [ 816.764997][T29539] netlink: 'syz.1.6296': attribute type 26 has an invalid length. [ 816.812053][T29539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6296'. [ 817.067646][T29346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.224748][T29556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6300'. [ 817.597403][T29564] syzkaller1: entered promiscuous mode [ 817.608053][T29564] syzkaller1: entered allmulticast mode [ 817.638911][T29564] netlink: 'syz.2.6303': attribute type 1 has an invalid length. [ 817.667648][T29564] netlink: 'syz.2.6303': attribute type 1 has an invalid length. [ 817.894804][T29564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 817.952700][ T5144] Bluetooth: hci4: command tx timeout [ 818.104725][T29571] bond2: (slave geneve2): making interface the new active one [ 818.176685][T29571] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 818.290828][T29582] can: request_module (can-proto-3) failed. [ 818.297174][T29572] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 818.319161][T29572] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 818.344814][T29572] gretap1: entered promiscuous mode [ 818.374669][T29572] gretap1: entered allmulticast mode [ 818.410295][T19393] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 818.555054][T19393] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 818.579039][T19393] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 818.608528][T19393] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 819.299250][T29346] veth0_vlan: entered promiscuous mode [ 819.417350][T29630] netlink: 'syz.1.6319': attribute type 1 has an invalid length. [ 819.443784][T29346] veth1_vlan: entered promiscuous mode [ 819.787265][T29346] veth0_macvtap: entered promiscuous mode [ 819.828220][T29346] veth1_macvtap: entered promiscuous mode [ 819.891430][T29346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.950810][T29346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.018280][T10050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.045004][T10851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.084687][T10851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.124612][T29644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 820.131956][T29644] IPv6: NLM_F_CREATE should be set when creating new route [ 820.147156][T10851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.177077][T29644] lo: entered allmulticast mode [ 820.187308][T29641] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 820.228574][T29644] tunl0: entered allmulticast mode [ 820.295431][T29644] gre0: entered allmulticast mode [ 820.327521][T29644] gretap0: entered allmulticast mode [ 820.374521][T29644] erspan0: entered allmulticast mode [ 820.397900][T29644] ip_vti0: entered allmulticast mode [ 820.421104][T29644] ip6_vti0: entered allmulticast mode [ 820.490956][T29644] sit0: entered allmulticast mode [ 820.577695][T29644] ip6tnl0: entered allmulticast mode [ 820.608217][T29644] ip6gre0: entered allmulticast mode [ 820.621136][T29644] ip6gretap0: entered allmulticast mode [ 820.632894][T29644] bridge0: entered allmulticast mode [ 820.641506][T29644] vcan0: entered allmulticast mode [ 820.648985][T29644] bond0: entered allmulticast mode [ 820.663999][T29644] bond_slave_0: entered allmulticast mode [ 820.679020][T29644] bond_slave_1: entered allmulticast mode [ 820.708200][T29644] team0: entered allmulticast mode [ 820.724202][T29644] team_slave_0: entered allmulticast mode [ 820.737290][T29644] team_slave_1: entered allmulticast mode [ 820.763068][T29644] dummy0: entered allmulticast mode [ 820.784940][T29644] nlmon0: entered allmulticast mode [ 820.799796][T29644] caif0: entered allmulticast mode [ 820.810818][T29644] batadv0: entered allmulticast mode [ 820.823947][T29644] vxcan0: entered allmulticast mode [ 820.831034][T29644] vxcan1: entered allmulticast mode [ 820.840998][T29644] veth0: entered allmulticast mode [ 820.858269][T29644] veth1: entered allmulticast mode [ 820.877085][T29644] wg1: entered allmulticast mode [ 820.885768][T29644] wg2: entered allmulticast mode [ 820.896183][T29644] veth0_to_bridge: entered allmulticast mode [ 820.965229][T29644] veth1_to_bridge: entered allmulticast mode [ 820.979552][T29644] veth0_to_bond: entered allmulticast mode [ 820.990491][T29644] veth1_to_bond: entered allmulticast mode [ 821.006902][T29644] veth0_to_team: entered allmulticast mode [ 821.140028][T29644] veth1_to_team: entered allmulticast mode [ 821.203467][T29644] veth0_to_batadv: entered allmulticast mode [ 821.230133][T29644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.252135][T29644] batadv_slave_0: entered allmulticast mode [ 821.268506][T29644] veth1_to_batadv: entered allmulticast mode [ 821.303039][T29644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.322264][T29644] batadv_slave_1: entered allmulticast mode [ 821.346161][T29644] xfrm0: entered allmulticast mode [ 821.363786][T29644] veth0_to_hsr: entered allmulticast mode [ 821.394368][T29644] hsr_slave_0: entered allmulticast mode [ 821.465381][T29644] veth1_to_hsr: entered allmulticast mode [ 821.477982][T29644] hsr_slave_1: entered allmulticast mode [ 821.509852][T29644] hsr0: entered allmulticast mode [ 821.519882][T29644] veth1_virt_wifi: entered allmulticast mode [ 821.577112][T29644] veth0_virt_wifi: entered allmulticast mode [ 821.617023][T29644] virt_wifi0: entered allmulticast mode [ 821.629197][T29644] veth1_vlan: entered allmulticast mode [ 821.647770][T29644] veth0_vlan: entered allmulticast mode [ 821.691359][T29644] vlan0: entered allmulticast mode [ 821.697115][T29644] vlan1: entered allmulticast mode [ 821.711316][T29644] macvlan0: entered allmulticast mode [ 821.746041][T29644] macvlan1: entered allmulticast mode [ 821.757003][T29644] ipvlan0: entered allmulticast mode [ 821.763212][T29644] ipvlan1: entered allmulticast mode [ 821.770711][T29644] veth1_macvtap: entered allmulticast mode [ 821.800417][T29644] veth0_macvtap: entered allmulticast mode [ 821.815831][T29644] macvtap0: entered allmulticast mode [ 821.826673][T29644] macsec0: entered allmulticast mode [ 821.839161][T29644] geneve0: entered allmulticast mode [ 821.861466][T29644] geneve1: entered allmulticast mode [ 821.877395][T29644] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 821.885464][T29644] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 821.898354][T29644] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 821.910549][T29644] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 821.921632][T29644] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 821.945303][T29644] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode [ 821.998467][T29644] mac80211_hwsim hwsim59 wlan1: entered allmulticast mode [ 822.013836][T29644] ipip0: entered allmulticast mode [ 822.074483][T29648] bridge2: entered allmulticast mode [ 822.109294][T29648] team0: Port device bridge2 added [ 822.129691][T29650] bridge0: port 3(team0) entered blocking state [ 822.138391][T29650] bridge0: port 3(team0) entered disabled state [ 822.146709][T29650] team0: entered allmulticast mode [ 822.155690][T29650] team_slave_0: entered allmulticast mode [ 822.165286][T29650] team_slave_1: entered allmulticast mode [ 822.175224][T29650] team0: entered promiscuous mode [ 822.184062][T29650] team_slave_0: entered promiscuous mode [ 822.190094][T29650] team_slave_1: entered promiscuous mode [ 822.197139][T29650] bridge2: entered promiscuous mode [ 822.203974][T29650] bridge0: port 3(team0) entered blocking state [ 822.210396][T29650] bridge0: port 3(team0) entered forwarding state [ 822.244636][T29673] __nla_validate_parse: 4 callbacks suppressed [ 822.244657][T29673] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6326'. [ 822.275378][T29678] ip6erspan0: entered promiscuous mode [ 822.294729][ T6125] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.328115][ T6125] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.369314][ T6125] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.721088][T29692] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6330'. [ 822.744379][T10851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.754473][T10851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.785996][T29690] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6330'. [ 822.802689][T29699] syzkaller0: entered promiscuous mode [ 822.808898][T29699] syzkaller0: entered allmulticast mode [ 822.902855][T10854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.911604][T10854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.258326][T29709] macvlan0: entered promiscuous mode [ 823.458123][T29713] netlink: 'syz.2.6336': attribute type 1 has an invalid length. [ 823.666058][T29722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6336'. [ 823.732877][T21185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 823.755806][T21185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 823.767190][T21185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 823.780959][T21185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 823.805388][T21185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 824.045233][T29716] bond3: (slave geneve3): making interface the new active one [ 824.072595][T29716] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 824.157706][T29731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6337'. [ 824.237831][T29722] bond3: entered promiscuous mode [ 824.261582][T29722] geneve3: entered promiscuous mode [ 824.274201][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 824.300576][T29722] bond3: entered allmulticast mode [ 824.312017][T29722] geneve3: entered allmulticast mode [ 824.336642][T29722] 8021q: adding VLAN 0 to HW filter on device bond3 [ 824.369640][T10050] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 824.410399][T10050] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 824.454846][T10050] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 824.493065][T10050] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 824.570975][T29737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6338'. [ 824.713665][T29719] lo speed is unknown, defaulting to 1000 [ 825.072382][T29748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6339'. [ 825.511528][T29764] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6344'. [ 825.830508][T29775] tipc: Invalid UDP bearer configuration [ 825.830576][T29775] tipc: Enabling of bearer rejected, failed to enable media [ 825.874294][T21185] Bluetooth: hci3: command tx timeout [ 826.181321][T29788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6348'. [ 826.208956][T29719] chnl_net:caif_netlink_parms(): no params data found [ 826.828687][T29814] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6352'. [ 827.030574][T29824] IPv6: addrconf: prefix option has invalid lifetime [ 827.055614][T29719] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.082613][T29719] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.099720][T29719] bridge_slave_0: entered allmulticast mode [ 827.118266][T29719] bridge_slave_0: entered promiscuous mode [ 827.135981][T29719] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.157306][T29719] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.179526][T29719] bridge_slave_1: entered allmulticast mode [ 827.205764][T29719] bridge_slave_1: entered promiscuous mode [ 827.340792][T29829] Bluetooth: MGMT ver 1.23 [ 827.369962][T29719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.387420][T29831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6357'. [ 827.427004][T29719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.600571][T29840] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6357'. [ 827.644217][T29719] team0: Port device team_slave_0 added [ 827.708148][T29719] team0: Port device team_slave_1 added [ 827.893806][T29719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.910084][T29719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.937823][T29719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.952729][T21185] Bluetooth: hci3: command tx timeout [ 827.967034][T29856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6365'. [ 828.003612][T29846] syzkaller0: entered promiscuous mode [ 828.009784][T29846] syzkaller0: entered allmulticast mode [ 828.018137][T29719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.025854][T29719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.053524][T29719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.717243][T29875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.043645][T21185] Bluetooth: hci3: command tx timeout [ 832.119653][T21185] Bluetooth: hci3: command tx timeout [ 832.625137][T29719] hsr_slave_0: entered promiscuous mode [ 832.658084][T29719] hsr_slave_1: entered promiscuous mode [ 832.683940][T29719] debugfs: 'hsr0' already exists in 'hsr' [ 832.713584][T29719] Cannot create hsr debugfs directory [ 833.294223][T29903] netlink: 'syz.1.6376': attribute type 21 has an invalid length. [ 833.304057][T29903] IPv6: NLM_F_CREATE should be specified when creating new route [ 833.416688][T29906] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6377'. [ 833.494236][T29910] xt_hashlimit: size too large, truncated to 1048576 [ 833.501286][T29911] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6378'. [ 833.642355][T29719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.656086][T29719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.726291][T29907] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6377'. [ 833.749883][T29915] Bluetooth: MGMT ver 1.23 [ 834.039464][T29719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.054581][T29719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.285161][T29719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.300028][T29719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.398375][T29719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.410953][T29719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.685833][T29941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6387'. [ 834.794193][T29941] tipc: Enabling of bearer rejected, failed to enable media [ 834.883216][T29719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 834.898365][T29719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 834.917607][T29719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 834.948893][T29719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 834.968854][T29719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 835.004134][T29719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 835.035828][T29719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 835.060324][T29719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 835.172673][T29962] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 835.396421][T29719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.468025][T29719] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.517631][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.525949][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.569742][T29971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6393'. [ 835.594824][T10050] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.602109][T10050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.616827][T29971] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6393'. [ 835.629425][T29971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6393'. [ 836.148651][T29719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.257813][T29719] veth0_vlan: entered promiscuous mode [ 836.297897][T29719] veth1_vlan: entered promiscuous mode [ 836.415072][T29719] veth0_macvtap: entered promiscuous mode [ 836.451566][T29719] veth1_macvtap: entered promiscuous mode [ 836.490390][T29719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.548727][T29719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.592721][ T5144] Bluetooth: hci5: command 0x0406 tx timeout [ 836.675494][ T91] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.705491][ T91] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.768170][ T91] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.804037][ T91] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.977930][T30020] siw: device registration error -23 [ 837.128713][T10851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.157422][T10851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.216571][ T6113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.229768][ T6113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.303189][T30065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6418'. [ 838.352284][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 838.736745][T30072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6419'. [ 838.743089][T30081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6422'. [ 838.813091][T30085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6422'. [ 839.560361][T30114] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6432'. [ 839.590104][T30097] lo speed is unknown, defaulting to 1000 [ 840.407674][T30127] netlink: 'syz.3.6437': attribute type 16 has an invalid length. [ 840.430329][T30127] netlink: 'syz.3.6437': attribute type 17 has an invalid length. [ 840.438779][T30137] sctp: [Deprecated]: syz.4.6438 (pid 30137) Use of int in maxseg socket option. [ 840.438779][T30137] Use struct sctp_assoc_value instead [ 840.643210][T30127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 840.884080][T30148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 841.261580][T30163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 841.269872][T30163] IPv6: NLM_F_CREATE should be set when creating new route [ 841.345863][T30163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6446'. [ 841.723556][T21185] Bluetooth: hci2: command 0x0406 tx timeout [ 841.938185][T30180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6451'. [ 842.054982][T30189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6453'. [ 842.092263][T30182] netlink: 'syz.2.6453': attribute type 12 has an invalid length. [ 842.218138][T30196] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 842.249072][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034035c00: rx timeout, send abort [ 842.661714][T30201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6457'. [ 842.703697][T30201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6457'. [ 842.823344][T30209] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6460'. [ 842.882829][T30209] netlink: 'syz.1.6460': attribute type 1 has an invalid length. [ 842.958362][T30209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 843.627946][T30238] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 843.659880][T30243] netlink: 'syz.1.6469': attribute type 1 has an invalid length. [ 843.687843][T30238] team0 (unregistering): Port device team_slave_0 removed [ 843.714822][T30238] team0 (unregistering): Failed to send options change via netlink (err -105) [ 843.740780][T30238] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 843.770884][T30238] team0 (unregistering): Port device team_slave_1 removed [ 843.855213][T30245] tipc: Enabling of bearer rejected, media not registered [ 843.943373][T30254] __nla_validate_parse: 3 callbacks suppressed [ 843.943397][T30254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6471'. [ 844.074407][T30254] gtp0: entered promiscuous mode [ 844.099288][T30254] gtp0: entered allmulticast mode [ 844.278392][T30255] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 844.427829][T30268] netlink: 'syz.3.6474': attribute type 11 has an invalid length. [ 844.471436][T30268] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.6474'. [ 844.589166][T30274] openvswitch: netlink: Tunnel attr 85 out of range max 16 [ 844.615930][T30276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6475'. [ 844.910099][T30285] netlink: 'syz.1.6480': attribute type 1 has an invalid length. [ 844.946837][T30285] 8021q: adding VLAN 0 to HW filter on device bond3 [ 844.990554][T30285] 8021q: adding VLAN 0 to HW filter on device bond3 [ 844.998586][T30285] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 845.013106][T30285] bond3: (slave vcan1): Error -95 calling set_mac_address [ 845.322461][T30295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6482'. [ 845.331604][T30301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6483'. [ 845.335352][T30296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6482'. [ 845.554270][T30309] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6486'. [ 846.032583][T30331] netlink: 388 bytes leftover after parsing attributes in process `syz.4.6492'. [ 846.116299][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6493'. [ 846.156630][T30332] sock: sock_set_timeout: `syz.2.6493' (pid 30332) tries to set negative timeout [ 846.894864][T30352] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6499'. [ 847.322306][ T5144] Bluetooth: hci3: command tx timeout [ 848.073152][T30400] syzkaller1: entered promiscuous mode [ 848.110082][T30400] syzkaller1: entered allmulticast mode [ 848.217053][T30404] openvswitch: netlink: Message has 6 unknown bytes. [ 848.386838][T30406] netlink: 'syz.0.6512': attribute type 21 has an invalid length. [ 848.427240][T30406] netlink: 'syz.0.6512': attribute type 3 has an invalid length. [ 848.796787][T30419] syzkaller0: entered promiscuous mode [ 848.817484][T30419] syzkaller0: entered allmulticast mode [ 848.961694][T30417] netlink: 'syz.0.6515': attribute type 21 has an invalid length. [ 848.988527][T30417] netlink: 'syz.0.6515': attribute type 6 has an invalid length. [ 849.027951][T30417] __nla_validate_parse: 2 callbacks suppressed [ 849.027969][T30417] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6515'. [ 849.277041][T30434] netlink: 'syz.4.6521': attribute type 2 has an invalid length. [ 849.306694][T30434] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6521'. [ 849.742459][T30461] netlink: 'syz.0.6527': attribute type 1 has an invalid length. [ 849.751735][T30460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6526'. [ 849.772472][T10050] nci: nci_rx_work: unknown MT 0x7 [ 849.804627][T30460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6526'. [ 849.829662][T30461] netlink: 'syz.0.6527': attribute type 3 has an invalid length. [ 849.852287][T30461] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6527'. [ 850.286050][T30481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6534'. [ 850.456989][T30451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.903228][T30508] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6540'. [ 851.116958][T30513] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6545'. [ 851.218927][T30519] x_tables: unsorted underflow at hook 3 [ 851.324867][T30527] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6551'. [ 851.419026][T30531] netlink: 'syz.2.6551': attribute type 62 has an invalid length. [ 851.458276][T30531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6551'. [ 851.494956][T30535] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 851.810656][T30545] netlink: 'syz.3.6555': attribute type 2 has an invalid length. [ 852.469847][T30574] netlink: 'syz.0.6566': attribute type 1 has an invalid length. [ 852.550251][T30574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 852.632969][T30568] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 852.998076][T30597] netlink: zone id is out of range [ 853.026199][T30597] netlink: del zone limit has 4 unknown bytes [ 853.069411][T30567] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 853.085835][T30599] syzkaller1: entered promiscuous mode [ 853.101305][T30599] syzkaller1: entered allmulticast mode [ 853.561040][T30615] validate_nla: 1 callbacks suppressed [ 853.561084][T30615] netlink: 'syz.2.6576': attribute type 1 has an invalid length. [ 854.011657][T30648] netlink: 'syz.3.6586': attribute type 2 has an invalid length. [ 854.036104][T30648] __nla_validate_parse: 38 callbacks suppressed [ 854.036127][T30648] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6586'. [ 854.156174][T30650] syzkaller0: entered promiscuous mode [ 854.184348][T30650] syzkaller0: entered allmulticast mode [ 854.266675][T30655] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6592'. [ 854.318923][T30658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6591'. [ 854.379953][ T5144] Bluetooth: hci4: command 0x0c1a tx timeout [ 854.387480][T30659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6591'. [ 854.404405][T30658] netlink: 'syz.0.6591': attribute type 29 has an invalid length. [ 854.429544][T30659] netlink: 'syz.0.6591': attribute type 29 has an invalid length. [ 854.440494][T30659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6591'. [ 854.449985][T30658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6591'. [ 854.986560][T30683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6601'. [ 855.079191][T30692] ip6t_srh: unknown srh match flags 5F28 [ 855.308289][T30695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6603'. [ 855.324241][T30702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6605'. [ 855.339852][T30695] netlink: 'syz.4.6603': attribute type 5 has an invalid length. [ 855.363445][T30695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6603'. [ 855.382310][T30702] veth0_macvtap: left promiscuous mode [ 855.471226][T30707] netlink: 'syz.0.6604': attribute type 1 has an invalid length. [ 855.532038][T30707] netlink: 'syz.0.6604': attribute type 1 has an invalid length. [ 855.560168][T30707] netlink: 'syz.0.6604': attribute type 8 has an invalid length. [ 855.589609][T30695] geneve2: entered promiscuous mode [ 855.598806][T30695] geneve2: entered allmulticast mode [ 855.618394][ T91] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 855.629473][T30698] syzkaller0: entered promiscuous mode [ 855.662500][T30698] syzkaller0: entered allmulticast mode [ 855.859762][ T91] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 855.870550][ T91] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 855.894200][ T91] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 856.468653][T30734] netlink: 'syz.3.6614': attribute type 1 has an invalid length. [ 856.579327][T30734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 856.885337][T30734] bond1: (slave batadv1): Opening slave failed [ 857.621690][T30782] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode [ 857.702175][T30782] mac80211_hwsim hwsim58 wlan0: left allmulticast mode [ 858.160235][T30801] gtp0: entered promiscuous mode [ 858.183911][T30801] gtp0: entered allmulticast mode [ 858.700033][T30826] netlink: 'syz.3.6638': attribute type 1 has an invalid length. [ 858.889069][T30834] netlink: 'syz.2.6641': attribute type 8 has an invalid length. [ 858.921479][T30832] syzkaller1: entered promiscuous mode [ 858.942964][T30832] syzkaller1: entered allmulticast mode [ 859.009094][T30834] bond0: entered promiscuous mode [ 859.024321][T30834] bond_slave_0: entered promiscuous mode [ 859.039447][T30834] bond_slave_1: entered promiscuous mode [ 859.047932][T30839] __nla_validate_parse: 19 callbacks suppressed [ 859.047988][T30839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6642'. [ 859.053858][T30834] gretap0: entered promiscuous mode [ 859.110351][T30834] bond0: left promiscuous mode [ 859.117121][T30834] bond_slave_0: left promiscuous mode [ 859.131454][T30834] bond_slave_1: left promiscuous mode [ 859.155520][T30834] gretap0: left promiscuous mode [ 859.476054][T30852] netlink: 236 bytes leftover after parsing attributes in process `syz.2.6647'. [ 859.491726][T30852] netlink: 236 bytes leftover after parsing attributes in process `syz.2.6647'. [ 859.517802][T30852] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6647'. [ 860.091420][T30873] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6654'. [ 860.135891][T30873] netlink: 'syz.0.6654': attribute type 2 has an invalid length. [ 860.184360][T30878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6656'. [ 860.309847][T30885] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 860.385082][T30885] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 860.407975][T30885] gretap1: entered promiscuous mode [ 860.434908][T30885] gretap1: entered allmulticast mode [ 860.656431][T30904] netlink: 'syz.0.6663': attribute type 39 has an invalid length. [ 860.702373][T30904] hsr_slave_1 (unregistering): left promiscuous mode [ 860.779754][T30899] netlink: 'syz.3.6660': attribute type 5 has an invalid length. [ 860.805454][T30899] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6660'. [ 861.740953][T30933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6671'. [ 861.818548][T30941] netlink: 'syz.2.6670': attribute type 3 has an invalid length. [ 861.846562][T30941] netlink: 'syz.2.6670': attribute type 1 has an invalid length. [ 861.905548][T30941] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6670'. [ 862.216786][T30948] netlink: 'syz.3.6674': attribute type 3 has an invalid length. [ 862.244085][T30948] netlink: 'syz.3.6674': attribute type 3 has an invalid length. [ 862.281733][T30950] syzkaller0: entered promiscuous mode [ 862.300398][T30950] syzkaller0: entered allmulticast mode [ 862.478990][T30956] netlink: 'syz.1.6677': attribute type 10 has an invalid length. [ 862.590483][T30956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6677'. [ 863.810593][T31026] validate_nla: 1 callbacks suppressed [ 863.810615][T31026] netlink: 'syz.3.6694': attribute type 8 has an invalid length. [ 863.913576][T31026] bond0: entered promiscuous mode [ 863.937058][T31026] bond_slave_0: entered promiscuous mode [ 863.950867][T31026] bond_slave_1: entered promiscuous mode [ 863.962743][T31026] gretap0: entered promiscuous mode [ 863.971283][T31026] ip6gretap0: entered promiscuous mode [ 863.981724][T31026] hsr1: entered promiscuous mode [ 864.477685][T31052] 8021q: VLANs not supported on ip6_vti0 [ 864.537658][T31054] syzkaller0: entered promiscuous mode [ 864.539227][T31056] __nla_validate_parse: 4 callbacks suppressed [ 864.539268][T31056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6703'. [ 864.564185][T31054] syzkaller0: entered allmulticast mode [ 864.617375][T31057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6703'. [ 864.697862][T31056] netlink: 'syz.0.6703': attribute type 58 has an invalid length. [ 864.712682][T31056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6703'. [ 864.725472][T31064] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 864.745584][T31057] netlink: 'syz.0.6703': attribute type 58 has an invalid length. [ 864.758182][T31057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6703'. [ 864.992586][T31064] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 865.164820][T31074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6708'. [ 865.206795][T31074] bridge_slave_0: default FDB implementation only supports local addresses [ 865.420138][T31091] netlink: 'syz.0.6713': attribute type 44 has an invalid length. [ 865.431324][T31091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6713'. [ 865.530864][T31091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6713'. [ 865.594633][T31091] bond3: option xmit_hash_policy: invalid value (64) [ 865.605805][T31099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6715'. [ 865.621452][T31091] bond3 (unregistering): Released all slaves [ 865.804519][T31108] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 865.849653][T31110] netlink: zone id is out of range [ 865.866203][T31110] netlink: zone id is out of range [ 865.871514][T31110] netlink: zone id is out of range [ 865.883684][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 865.885801][T31110] netlink: zone id is out of range [ 865.900298][T31110] netlink: zone id is out of range [ 865.905734][T31110] netlink: zone id is out of range [ 865.911472][T31110] netlink: zone id is out of range [ 865.921844][ T8126] lec:lec_start_xmit: lec0:No lecd attached [ 865.936345][T31110] netlink: zone id is out of range [ 865.945876][T31104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6716'. [ 866.196278][T31116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6719'. [ 866.470607][T31127] netlink: 'syz.4.6723': attribute type 11 has an invalid length. [ 866.604189][T10050] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.637695][T10050] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.673963][T10050] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.693844][T10050] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 867.308792][T31167] vlan3: entered allmulticast mode [ 867.316189][T31167] bond0: entered allmulticast mode [ 867.321554][T31167] bond_slave_0: entered allmulticast mode [ 867.328460][T31167] bond_slave_1: entered allmulticast mode [ 867.461465][T31168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.481390][T31168] bond_slave_0: left allmulticast mode [ 867.526905][T31168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.549781][T31168] bond_slave_1: left allmulticast mode [ 867.585362][T31168] bond0 (unregistering): Released all slaves [ 867.951456][T31181] netlink: 'syz.1.6738': attribute type 10 has an invalid length. [ 868.086195][T31181] veth0_vlan: left promiscuous mode [ 868.104581][T31181] veth0_vlan: entered promiscuous mode [ 868.134242][T31181] team0: Device veth0_vlan failed to register rx_handler [ 868.754495][T31220] netlink: 'syz.0.6746': attribute type 83 has an invalid length. [ 868.960254][T31222] netlink: 'syz.1.6747': attribute type 8 has an invalid length. [ 869.247002][T31236] lo: left promiscuous mode [ 869.414667][T31240] bond0: entered promiscuous mode [ 869.424609][T31240] bond_slave_0: entered promiscuous mode [ 869.445099][T31240] bond_slave_1: entered promiscuous mode [ 869.454734][T31240] batadv0: entered promiscuous mode [ 869.469057][T31240] debugfs: 'hsr1' already exists in 'hsr' [ 869.482120][T31240] Cannot create hsr debugfs directory [ 869.496465][T31240] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 869.887557][T31240] bond0: left promiscuous mode [ 869.895659][T31240] bond_slave_0: left promiscuous mode [ 869.905384][T31240] bond_slave_1: left promiscuous mode [ 869.925239][T31240] batadv0: left promiscuous mode [ 870.142882][T10856] net_ratelimit: 143 callbacks suppressed [ 870.142904][T10856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.170557][T31258] netlink: 'syz.1.6757': attribute type 10 has an invalid length. [ 870.194693][T31263] netlink: 'syz.2.6760': attribute type 1 has an invalid length. [ 870.202857][T31258] __nla_validate_parse: 5 callbacks suppressed [ 870.202887][T31258] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6757'. [ 870.278549][T31265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6761'. [ 870.290476][T31265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6761'. [ 870.361590][T29658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.384652][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.390608][T31261] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 870.403555][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 870.417656][T10854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.427862][T10854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.448498][T29658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.462235][ T6113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.472914][T29659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.483685][T29653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.501358][T31261] bond5 (unregistering): Released all slaves [ 870.511107][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.573236][T31273] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6759'. [ 870.727029][T31263] 8021q: adding VLAN 0 to HW filter on device bond5 [ 870.729241][T31283] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6764'. [ 870.758116][T31273] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.765627][T31273] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.151910][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5230 ms [ 871.160056][ C0] lec:lec_tx_timeout: lec0 [ 871.167750][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 871.353663][T31296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6767'. [ 871.417729][T31302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6768'. [ 871.956029][T31322] netlink: 'syz.0.6775': attribute type 1 has an invalid length. [ 872.040430][T31326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6776'. [ 872.089295][T31322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 872.107911][T31329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6775'. [ 872.130978][T31327] veth0_to_bond: left allmulticast mode [ 872.145176][T31327] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 872.233600][T31329] macvlan2: entered promiscuous mode [ 872.239000][T31329] macvlan2: entered allmulticast mode [ 872.487865][T31339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6781'. [ 873.219449][T31364] netlink: 'syz.2.6782': attribute type 13 has an invalid length. [ 873.517923][T31374] netlink: 'syz.1.6788': attribute type 32 has an invalid length. [ 873.690721][T31374] bond0: Setting coupled_control to off (0) [ 873.825189][T31381] syzkaller0: entered promiscuous mode [ 873.859194][T31381] syzkaller0: entered allmulticast mode [ 874.320985][T31396] netem: change failed [ 874.518728][T31408] netlink: 'syz.4.6800': attribute type 1 has an invalid length. [ 874.818100][T31408] bond2: entered promiscuous mode [ 874.839405][T31408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 874.961665][T31409] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 874.994240][T31409] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 875.022058][T31409] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 875.231149][T31415] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 875.268719][T31415] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 875.495348][T31409] delete_channel: no stack [ 875.497695][T31436] syzkaller1: entered promiscuous mode [ 875.527031][T31436] syzkaller1: entered allmulticast mode [ 875.554740][T10050] net_ratelimit: 65 callbacks suppressed [ 875.554763][T10050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.586966][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.602258][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.706861][T10854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.718519][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.721388][T31446] gretap0: entered promiscuous mode [ 875.765048][T31446] vlan2: entered promiscuous mode [ 875.853867][T31451] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 875.867633][T31451] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 875.876886][T31451] gretap2: entered promiscuous mode [ 875.883223][T31451] gretap2: entered allmulticast mode [ 876.016795][T31457] __nla_validate_parse: 8 callbacks suppressed [ 876.016818][T31457] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.6814'. [ 876.134623][T10854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.181918][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 876.186899][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.190026][ C0] lec:lec_tx_timeout: lec0 [ 876.226638][T31460] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6816'. [ 876.238000][T29658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.452189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.753572][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.950486][T31491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6822'. [ 877.412486][T31505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6828'. [ 877.457414][T31505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6828'. [ 878.246588][T31539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6836'. [ 878.406596][T31536] bond4: entered promiscuous mode [ 878.491043][T31539] macvlan3: entered promiscuous mode [ 878.510225][T31539] macvlan3: entered allmulticast mode [ 878.568005][T31550] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6841'. [ 878.624715][T31545] IPv6: sit2: Disabled Multicast RS [ 878.884072][T31555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6842'. [ 878.925040][T31555] tc_dump_action: action bad kind [ 879.172278][T31577] SET target dimension over the limit! [ 879.674585][T31586] netlink: 'syz.3.6851': attribute type 1 has an invalid length. [ 879.809157][T31586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 879.831418][T31600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6854'. [ 879.927101][T31586] macvlan2: entered promiscuous mode [ 879.943326][T31586] macvlan2: entered allmulticast mode [ 879.981613][T31586] bond3: entered promiscuous mode [ 880.007643][T31586] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 880.054589][T31586] bond3: left promiscuous mode [ 880.204978][T31625] netlink: 'syz.0.6856': attribute type 1 has an invalid length. [ 880.440627][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6858'. [ 880.599025][T29658] net_ratelimit: 11 callbacks suppressed [ 880.599049][T29658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.677557][T31625] 8021q: adding VLAN 0 to HW filter on device bond4 [ 880.924473][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.242810][T10050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.252792][T29653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.261730][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.315825][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.492911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.953739][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.427058][ T6113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.513936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.801870][T31666] netlink: 'syz.3.6867': attribute type 15 has an invalid length. [ 882.811313][T31666] __nla_validate_parse: 1 callbacks suppressed [ 882.811372][T31666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6867'. [ 882.905655][T31607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 883.179114][T31668] netlink: 'syz.2.6868': attribute type 1 has an invalid length. [ 883.209600][T31668] netlink: 'syz.2.6868': attribute type 2 has an invalid length. [ 883.273215][T31671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6869'. [ 883.536057][T31676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6870'. [ 883.559339][T31679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6873'. [ 883.626075][T31671] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 883.660258][T31671] bond3 (unregistering): Released all slaves [ 883.983576][T31685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6874'. [ 884.027020][T31686] netlink: 'syz.3.6874': attribute type 1 has an invalid length. [ 884.073762][T31686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 884.081090][T31686] IPv6: NLM_F_CREATE should be set when creating new route [ 884.279160][T31700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6878'. [ 884.423458][T31707] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6881'. [ 884.494612][T31707] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6881'. [ 884.580243][T31710] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 884.987396][T31726] netlink: 'syz.3.6885': attribute type 28 has an invalid length. [ 885.030406][T31726] netlink: 'syz.3.6885': attribute type 3 has an invalid length. [ 885.062641][T31726] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6885'. [ 885.401920][T31737] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6889'. [ 885.784247][ T6125] net_ratelimit: 10 callbacks suppressed [ 885.784267][ T6125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.972297][T31755] syzkaller0: entered promiscuous mode [ 886.008221][T31755] syzkaller0: entered allmulticast mode [ 886.109855][T31752] netlink: 'syz.3.6895': attribute type 13 has an invalid length. [ 886.148213][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.304678][T31752] veth0_macvtap: left promiscuous mode [ 886.311613][T31752] macvtap0: entered allmulticast mode [ 886.381723][T31765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.399110][T31752] macvtap0: refused to change device tx_queue_len [ 886.532420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.972359][T10851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.005510][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.018395][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.069410][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.156277][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.345725][T31793] macvlan0: left allmulticast mode [ 887.371043][T31793] netlink: 'syz.0.6903': attribute type 1 has an invalid length. [ 887.409540][T31793] netlink: 'syz.0.6903': attribute type 2 has an invalid length. [ 887.552162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.829883][T31809] tipc: Enabling not permitted [ 887.864057][T31809] tipc: Enabling of bearer rejected, failed to enable media [ 888.016075][T31813] vcan1: entered promiscuous mode [ 888.022631][T31813] vcan1: entered allmulticast mode [ 888.684210][T31830] netlink: 'syz.0.6911': attribute type 5 has an invalid length. [ 888.756570][T31830] syzkaller0: entered promiscuous mode [ 888.793333][T31830] syzkaller0: entered allmulticast mode [ 888.970572][T31831] delete_channel: no stack [ 889.114656][T31850] __nla_validate_parse: 7 callbacks suppressed [ 889.114717][T31850] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6918'. [ 889.438080][T31860] netlink: 'syz.4.6920': attribute type 1 has an invalid length. [ 889.500920][T31863] netlink: 'syz.2.6921': attribute type 1 has an invalid length. [ 889.529061][T31869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6922'. [ 889.716223][T31876] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6920'. [ 890.256610][T31872] bond0: Error: Cannot enslave bond to itself. [ 890.545983][T31891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6928'. [ 890.573055][T31891] macvlan0: left promiscuous mode [ 890.590410][T31891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6928'. [ 890.643102][T31898] netlink: 'syz.1.6927': attribute type 2 has an invalid length. [ 890.664995][T31896] x_tables: unsorted underflow at hook 3 [ 890.671871][T31898] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6927'. [ 890.709057][T31891] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.055730][T31911] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6933'. [ 891.083357][T31914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6930'. [ 891.092389][T31881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6923'. [ 891.144933][T31915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6930'. [ 891.315530][ T5922] net_ratelimit: 10 callbacks suppressed [ 891.315576][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.446674][T10050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.582361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.748888][T31932] sctp: [Deprecated]: syz.0.6937 (pid 31932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 891.748888][T31932] Use struct sctp_sack_info instead [ 892.196015][ T6113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.205347][T29653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.227611][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.257855][T31957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.267659][T31959] openvswitch: netlink: Missing valid actions attribute. [ 892.267698][T31959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.362717][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.486507][T29653] IPVS: starting estimator thread 0... [ 892.488777][T31958] bond6: Unable to set up delay as MII monitoring is disabled [ 892.547004][T31958] bond6 (unregistering): Released all slaves [ 892.578092][T31971] netlink: 'syz.1.6948': attribute type 10 has an invalid length. [ 892.587798][T31967] IPVS: using max 30 ests per chain, 72000 per kthread [ 892.675369][T31971] veth0_vlan: left promiscuous mode [ 892.698522][T31971] veth0_vlan: entered promiscuous mode [ 892.738766][T31971] team0: Device veth0_vlan failed to register rx_handler [ 893.057510][T31984] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 893.956799][T32022] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 894.035949][T32026] xt_hashlimit: size too large, truncated to 1048576 [ 894.548210][T32043] __nla_validate_parse: 10 callbacks suppressed [ 894.548233][T32043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6968'. [ 894.957339][T32057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6972'. [ 894.979651][T32057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6972'. [ 895.132820][T32060] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6974'. [ 895.361407][T32071] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 895.832595][T32099] netlink: 'syz.4.6985': attribute type 7 has an invalid length. [ 895.909113][T32105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6987'. [ 896.328953][T32120] netlink: 'syz.4.6991': attribute type 1 has an invalid length. [ 896.362174][T32120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6991'. [ 896.408869][T32120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6991'. [ 896.513305][T24712] net_ratelimit: 11 callbacks suppressed [ 896.513364][T24712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.622451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.752155][T21185] Bluetooth: hci3: command 0x0405 tx timeout [ 896.836772][T32138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6997'. [ 896.886650][T32143] netlink: 'syz.2.6997': attribute type 21 has an invalid length. [ 896.936163][T32143] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6997'. [ 897.046484][ T6125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.159235][T32152] netlink: 'syz.1.6998': attribute type 1 has an invalid length. [ 897.165447][T32154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6999'. [ 897.508653][T32152] 8021q: adding VLAN 0 to HW filter on device bond5 [ 897.553390][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.632131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.882644][ T6113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.910634][T24712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.941274][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.087060][T32185] netlink: 'syz.4.7005': attribute type 21 has an invalid length. [ 898.125874][T32185] IPv6: NLM_F_CREATE should be specified when creating new route [ 898.173677][T32185] netlink: 'syz.4.7005': attribute type 1 has an invalid length. [ 898.193019][T10856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.214337][T32192] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 898.654983][ T5562] IPVS: starting estimator thread 0... [ 898.739401][T32217] netlink: 'syz.0.7011': attribute type 11 has an invalid length. [ 898.782423][T32216] IPVS: using max 28 ests per chain, 67200 per kthread [ 898.798717][T32217] netlink: 'syz.0.7011': attribute type 4 has an invalid length. [ 899.015372][T32224] syzkaller1: entered promiscuous mode [ 899.032157][T32224] syzkaller1: entered allmulticast mode [ 899.361044][T32233] IPv6: Can't replace route, no match found [ 899.849777][T32252] batadv0: entered allmulticast mode [ 899.991375][T32258] pim6reg: entered allmulticast mode [ 900.018501][T32258] pim6reg: left allmulticast mode [ 901.450270][T32319] __nla_validate_parse: 7 callbacks suppressed [ 901.450294][T32319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7047'. [ 901.488124][T32320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7048'. [ 901.503328][T32319] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7047'. [ 901.588249][T10851] net_ratelimit: 9 callbacks suppressed [ 901.588295][T10851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.653110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.724786][T24712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.748438][T32326] netlink: 'syz.1.7050': attribute type 1 has an invalid length. [ 901.775801][T32320] veth3: entered allmulticast mode [ 901.996901][T32326] 8021q: adding VLAN 0 to HW filter on device bond6 [ 902.046575][T32329] bond6: (slave geneve3): making interface the new active one [ 902.058619][T32329] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 902.093119][ T6118] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 902.153911][ T6118] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 902.191095][ T6118] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 902.214480][ T6118] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 902.320508][T32337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7053'. [ 902.415747][ T5144] block nbd7: Receive control failed (result -107) [ 902.430521][ T5144] [ 902.432919][ T5144] ====================================================== [ 902.440015][ T5144] WARNING: possible circular locking dependency detected [ 902.447061][ T5144] syzkaller #0 Not tainted [ 902.451503][ T5144] ------------------------------------------------------ [ 902.458562][ T5144] kworker/u9:1/5144 is trying to acquire lock: [ 902.464747][ T5144] ffff8880227baae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 902.474084][ T5144] [ 902.474084][ T5144] but task is already holding lock: [ 902.481458][ T5144] ffff88805b76c268 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c19/0x1d40 [ 902.490346][ T5144] [ 902.490346][ T5144] which lock already depends on the new lock. [ 902.490346][ T5144] [ 902.500749][ T5144] [ 902.500749][ T5144] the existing dependency chain (in reverse order) is: [ 902.509761][ T5144] [ 902.509761][ T5144] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 902.517414][ T5144] __mutex_lock+0x1a3/0x1550 [ 902.522547][ T5144] nbd_queue_rq+0x37b/0x1100 [ 902.527667][ T5144] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 902.533737][ T5144] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 902.540608][ T5144] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 902.547112][ T5144] blk_mq_run_hw_queue+0x348/0x4f0 [ 902.552842][ T5144] blk_mq_dispatch_list+0xd16/0xe10 [ 902.558563][ T5144] blk_mq_flush_plug_list+0x48d/0x570 [ 902.564460][ T5144] __blk_flush_plug+0x3ed/0x4d0 [ 902.569834][ T5144] __submit_bio+0x28d/0x580 [ 902.574867][ T5144] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 902.581021][ T5144] block_read_full_folio+0x599/0x830 [ 902.586831][ T5144] filemap_read_folio+0x137/0x3b0 [ 902.592399][ T5144] do_read_cache_folio+0x358/0x590 [ 902.598048][ T5144] read_part_sector+0xb6/0x2b0 [ 902.603336][ T5144] adfspart_check_ICS+0xb1/0x960 [ 902.608829][ T5144] bdev_disk_changed+0x817/0x1770 [ 902.614382][ T5144] blkdev_get_whole+0x380/0x510 [ 902.619757][ T5144] bdev_open+0x31e/0xd30 [ 902.624524][ T5144] blkdev_open+0x470/0x610 [ 902.629465][ T5144] do_dentry_open+0x785/0x14e0 [ 902.634757][ T5144] vfs_open+0x3b/0x340 [ 902.639352][ T5144] path_openat+0x2e08/0x3860 [ 902.644564][ T5144] do_file_open+0x23e/0x4a0 [ 902.649600][ T5144] do_sys_openat2+0x113/0x200 [ 902.654803][ T5144] __x64_sys_openat+0x138/0x170 [ 902.660184][ T5144] do_syscall_64+0x15f/0xf80 [ 902.665308][ T5144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.671743][ T5144] [ 902.671743][ T5144] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 902.679039][ T5144] __mutex_lock+0x1a3/0x1550 [ 902.684165][ T5144] nbd_queue_rq+0xc6/0x1100 [ 902.689317][ T5144] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 902.695386][ T5144] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 902.702254][ T5144] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 902.708767][ T5144] blk_mq_run_hw_queue+0x348/0x4f0 [ 902.714610][ T5144] blk_mq_dispatch_list+0xd16/0xe10 [ 902.720346][ T5144] blk_mq_flush_plug_list+0x48d/0x570 [ 902.726252][ T5144] __blk_flush_plug+0x3ed/0x4d0 [ 902.731637][ T5144] __submit_bio+0x28d/0x580 [ 902.736665][ T5144] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 902.742825][ T5144] block_read_full_folio+0x599/0x830 [ 902.748641][ T5144] filemap_read_folio+0x137/0x3b0 [ 902.754190][ T5144] do_read_cache_folio+0x358/0x590 [ 902.759844][ T5144] read_part_sector+0xb6/0x2b0 [ 902.765160][ T5144] adfspart_check_ICS+0xb1/0x960 [ 902.770733][ T5144] bdev_disk_changed+0x817/0x1770 [ 902.776297][ T5144] blkdev_get_whole+0x380/0x510 [ 902.781672][ T5144] bdev_open+0x31e/0xd30 [ 902.786441][ T5144] blkdev_open+0x470/0x610 [ 902.791386][ T5144] do_dentry_open+0x785/0x14e0 [ 902.796683][ T5144] vfs_open+0x3b/0x340 [ 902.801279][ T5144] path_openat+0x2e08/0x3860 [ 902.806398][ T5144] do_file_open+0x23e/0x4a0 [ 902.811433][ T5144] do_sys_openat2+0x113/0x200 [ 902.816635][ T5144] __x64_sys_openat+0x138/0x170 [ 902.822012][ T5144] do_syscall_64+0x15f/0xf80 [ 902.827163][ T5144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.833581][ T5144] [ 902.833581][ T5144] -> #4 (set->srcu){.+.+}-{0:0}: [ 902.840714][ T5144] __synchronize_srcu+0xca/0x300 [ 902.846196][ T5144] elevator_switch+0x1e8/0x7a0 [ 902.851483][ T5144] elevator_change+0x2cc/0x450 [ 902.856778][ T5144] elevator_set_default+0x36c/0x430 [ 902.862497][ T5144] blk_register_queue+0x3e9/0x4e0 [ 902.868051][ T5144] __add_disk+0x677/0xd50 [ 902.872904][ T5144] add_disk_fwnode+0xfb/0x480 [ 902.878110][ T5144] nbd_dev_add+0x72c/0xb50 [ 902.883049][ T5144] nbd_init+0x168/0x1f0 [ 902.887730][ T5144] do_one_initcall+0x250/0x870 [ 902.893033][ T5144] do_initcall_level+0x104/0x190 [ 902.898506][ T5144] do_initcalls+0x59/0xa0 [ 902.903366][ T5144] kernel_init_freeable+0x2a6/0x3e0 [ 902.909098][ T5144] kernel_init+0x1d/0x1d0 [ 902.913948][ T5144] ret_from_fork+0x514/0xb70 [ 902.919065][ T5144] ret_from_fork_asm+0x1a/0x30 [ 902.924361][ T5144] [ 902.924361][ T5144] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 902.932190][ T5144] __mutex_lock+0x1a3/0x1550 [ 902.937309][ T5144] elevator_change+0x1b3/0x450 [ 902.942598][ T5144] elevator_set_none+0xb5/0x140 [ 902.947970][ T5144] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 902.954319][ T5144] nbd_start_device+0x17f/0xb10 [ 902.959697][ T5144] nbd_genl_connect+0x165b/0x1cf0 [ 902.965256][ T5144] genl_family_rcv_msg_doit+0x22a/0x330 [ 902.971329][ T5144] genl_rcv_msg+0x61c/0x7a0 [ 902.976358][ T5144] netlink_rcv_skb+0x232/0x4b0 [ 902.981653][ T5144] genl_rcv+0x28/0x40 [ 902.986168][ T5144] netlink_unicast+0x75c/0x8e0 [ 902.991460][ T5144] netlink_sendmsg+0x813/0xb40 [ 902.996760][ T5144] ____sys_sendmsg+0x972/0x9f0 [ 903.002061][ T5144] ___sys_sendmsg+0x2a5/0x360 [ 903.007269][ T5144] __x64_sys_sendmsg+0x1bd/0x2a0 [ 903.012738][ T5144] do_syscall_64+0x15f/0xf80 [ 903.017868][ T5144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.024286][ T5144] [ 903.024286][ T5144] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 903.032904][ T5144] blk_alloc_queue+0x546/0x680 [ 903.038200][ T5144] __blk_mq_alloc_disk+0x197/0x390 [ 903.043836][ T5144] nbd_dev_add+0x499/0xb50 [ 903.048781][ T5144] nbd_init+0x168/0x1f0 [ 903.053458][ T5144] do_one_initcall+0x250/0x870 [ 903.058800][ T5144] do_initcall_level+0x104/0x190 [ 903.064269][ T5144] do_initcalls+0x59/0xa0 [ 903.069129][ T5144] kernel_init_freeable+0x2a6/0x3e0 [ 903.074946][ T5144] kernel_init+0x1d/0x1d0 [ 903.079800][ T5144] ret_from_fork+0x514/0xb70 [ 903.084942][ T5144] ret_from_fork_asm+0x1a/0x30 [ 903.090241][ T5144] [ 903.090241][ T5144] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 903.097478][ T5144] fs_reclaim_acquire+0x71/0x100 [ 903.102940][ T5144] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 903.109284][ T5144] __alloc_skb+0x1d0/0x7d0 [ 903.114233][ T5144] tcp_stream_alloc_skb+0x3f/0x580 [ 903.119867][ T5144] tcp_connect+0x1567/0x5440 [ 903.124979][ T5144] tcp_v6_connect+0x128d/0x1b10 [ 903.130356][ T5144] mptcp_connect+0x56b/0x830 [ 903.135477][ T5144] __inet_stream_connect+0x25a/0xdd0 [ 903.141299][ T5144] inet_stream_connect+0x66/0xa0 [ 903.146781][ T5144] __sys_connect+0x312/0x450 [ 903.151907][ T5144] __x64_sys_connect+0x7a/0x90 [ 903.157230][ T5144] do_syscall_64+0x15f/0xf80 [ 903.162368][ T5144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.168784][ T5144] [ 903.168784][ T5144] -> #0 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 903.176696][ T5144] __lock_acquire+0x15a5/0x2cf0 [ 903.182083][ T5144] lock_acquire+0x106/0x350 [ 903.187111][ T5144] lock_sock_nested+0x41/0x100 [ 903.192402][ T5144] inet_shutdown+0x6a/0x390 [ 903.197438][ T5144] nbd_mark_nsock_dead+0x2e9/0x560 [ 903.203077][ T5144] recv_work+0x1c2e/0x1d40 [ 903.208019][ T5144] process_scheduled_works+0xb5d/0x1860 [ 903.214093][ T5144] worker_thread+0xa53/0xfc0 [ 903.219213][ T5144] kthread+0x388/0x470 [ 903.223809][ T5144] ret_from_fork+0x514/0xb70 [ 903.228927][ T5144] ret_from_fork_asm+0x1a/0x30 [ 903.234221][ T5144] [ 903.234221][ T5144] other info that might help us debug this: [ 903.234221][ T5144] [ 903.244448][ T5144] Chain exists of: [ 903.244448][ T5144] k-sk_lock-AF_INET6 --> &cmd->lock --> &nsock->tx_lock [ 903.244448][ T5144] [ 903.257330][ T5144] Possible unsafe locking scenario: [ 903.257330][ T5144] [ 903.264795][ T5144] CPU0 CPU1 [ 903.270165][ T5144] ---- ---- [ 903.275562][ T5144] lock(&nsock->tx_lock); [ 903.280022][ T5144] lock(&cmd->lock); [ 903.286556][ T5144] lock(&nsock->tx_lock); [ 903.293541][ T5144] lock(k-sk_lock-AF_INET6); [ 903.298232][ T5144] [ 903.298232][ T5144] *** DEADLOCK *** [ 903.298232][ T5144] [ 903.306374][ T5144] 3 locks held by kworker/u9:1/5144: [ 903.311660][ T5144] #0: ffff8880271d1140 ((wq_completion)nbd7-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 903.322904][ T5144] #1: ffffc90010017c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 903.334667][ T5144] #2: ffff88805b76c268 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c19/0x1d40 [ 903.344001][ T5144] [ 903.344001][ T5144] stack backtrace: [ 903.349909][ T5144] CPU: 1 UID: 0 PID: 5144 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 903.349931][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 903.349944][ T5144] Workqueue: nbd7-recv recv_work [ 903.349970][ T5144] Call Trace: [ 903.349979][ T5144] [ 903.349988][ T5144] dump_stack_lvl+0xe8/0x150 [ 903.350013][ T5144] print_circular_bug+0x2e1/0x300 [ 903.350041][ T5144] check_noncircular+0x12e/0x150 [ 903.350067][ T5144] __lock_acquire+0x15a5/0x2cf0 [ 903.350094][ T5144] ? irqentry_exit+0x218/0x730 [ 903.350115][ T5144] ? lockdep_hardirqs_on+0x7a/0x110 [ 903.350135][ T5144] ? inet_shutdown+0x6a/0x390 [ 903.350150][ T5144] lock_acquire+0x106/0x350 [ 903.350170][ T5144] ? inet_shutdown+0x6a/0x390 [ 903.350198][ T5144] lock_sock_nested+0x41/0x100 [ 903.350216][ T5144] ? inet_shutdown+0x6a/0x390 [ 903.350232][ T5144] inet_shutdown+0x6a/0x390 [ 903.350249][ T5144] nbd_mark_nsock_dead+0x2e9/0x560 [ 903.350269][ T5144] recv_work+0x1c2e/0x1d40 [ 903.350307][ T5144] ? lockdep_unlock+0x5d/0xd0 [ 903.350330][ T5144] ? __pfx_recv_work+0x10/0x10 [ 903.350347][ T5144] ? lockdep_hardirqs_on+0x7a/0x110 [ 903.350366][ T5144] ? irqentry_exit+0x218/0x730 [ 903.350385][ T5144] ? trace_irq_disable+0x3b/0x140 [ 903.350410][ T5144] ? lock_acquire+0x221/0x350 [ 903.350430][ T5144] ? process_scheduled_works+0xa70/0x1860 [ 903.350451][ T5144] ? process_scheduled_works+0xa70/0x1860 [ 903.350472][ T5144] process_scheduled_works+0xb5d/0x1860 [ 903.350511][ T5144] ? __pfx_process_scheduled_works+0x10/0x10 [ 903.350535][ T5144] ? assign_work+0x3d5/0x5e0 [ 903.350556][ T5144] worker_thread+0xa53/0xfc0 [ 903.350588][ T5144] kthread+0x388/0x470 [ 903.350603][ T5144] ? __pfx_worker_thread+0x10/0x10 [ 903.350623][ T5144] ? __pfx_kthread+0x10/0x10 [ 903.350638][ T5144] ret_from_fork+0x514/0xb70 [ 903.350661][ T5144] ? __pfx_ret_from_fork+0x10/0x10 [ 903.350682][ T5144] ? __switch_to+0xc79/0x1410 [ 903.350700][ T5144] ? __pfx_kthread+0x10/0x10 [ 903.350715][ T5144] ret_from_fork_asm+0x1a/0x30 [ 903.350746][ T5144] [ 903.605331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.615950][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.630732][T32348] netlink: 'syz.1.7056': attribute type 1 has an invalid length. [ 903.638587][T32348] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.650200][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.659218][T29659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.668133][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.669273][T32346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7055'. [ 903.676987][T32348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7056'. [ 903.722202][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.112401][T29653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.702004][ C1] net_ratelimit: 5 callbacks suppressed [ 906.702052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.843448][T24712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.062657][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.152624][T29653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.722024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.882230][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.182705][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.762014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.922261][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.292091][ T6118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.742043][ C1] net_ratelimit: 9 callbacks suppressed [ 911.742087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog