last executing test programs: 5.397630761s ago: executing program 0 (id=5320): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x98, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x98}, 0x1, 0xba01}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) 5.025712517s ago: executing program 0 (id=5324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1fe}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 4.432578695s ago: executing program 4 (id=5336): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000440), &(0x7f0000000480)=@udp=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) unshare(0x20400) r3 = socket(0x10, 0x3, 0x0) vmsplice(r3, &(0x7f0000001e40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r2, &(0x7f0000000180), &(0x7f00000002c0)=""/88}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000000)=0x202000, 0x4) write$cgroup_type(r5, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x13, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd5d, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xedf3f0bbfb806fd7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdb1, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x3, 0x5, 0x6, 0x6}], 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000800)={r6, 0x0, 0x162, 0x0, &(0x7f0000000a40)="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", 0x0, 0x8081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7ffffffd}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) 4.26745586s ago: executing program 4 (id=5338): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) (async) sendmsg$tipc(r2, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44094}, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x9c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x7e, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @device_b, @random="e1309675edfa", {0x9, 0xdd}}, 0x1, 0x1, 0x40, @val={0x10, 0x1, 0x94}, [{0xdd, 0x6, "edc9fe70ce11"}, {0xdd, 0x47, "006dce1a407d676bef07c7228c71340c3f016a67f9150a967fef1e46c6f58692a861a2405de2c959565e53d94bb003e73f1b85a16eaec2658322890da1efc5cc793877ef318d1c"}, {0xdd, 0x6, "5312e79d1594"}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.148486655s ago: executing program 4 (id=5340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000069c0)=[{{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)=""/218, 0xda}, {&(0x7f0000000640)=""/145, 0x91}], 0x2, &(0x7f0000000740)=""/72, 0x48}, 0x3}, {{&(0x7f00000007c0)=@isdn, 0x80, &(0x7f0000003d40)=[{&(0x7f0000000840)}, {&(0x7f0000000880)=""/114, 0x72}, {&(0x7f0000000900)=""/59, 0x3b}, {&(0x7f0000000940)=""/114, 0x72}, {&(0x7f00000009c0)=""/100, 0x64}, {&(0x7f0000000a40)=""/206, 0xce}, {&(0x7f0000000b40)=""/96, 0x60}, {&(0x7f0000002d40)=""/4096, 0x1000}], 0x8, &(0x7f0000003dc0)=""/208, 0xd0}, 0xff}, {{&(0x7f0000003ec0)=@caif=@util, 0x80, &(0x7f0000005340)=[{&(0x7f0000003f40)=""/57, 0x39}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/166, 0xa6}, {&(0x7f0000005040)=""/182, 0xb6}, {&(0x7f0000005100)=""/147, 0x93}, {&(0x7f00000051c0)=""/192, 0xc0}, {&(0x7f0000005280)=""/146, 0x92}], 0x7, &(0x7f00000053c0)=""/151, 0x97}, 0x1}, {{&(0x7f0000005480)=@isdn, 0x80, &(0x7f0000006780)=[{&(0x7f0000005500)=""/236, 0xec}, {&(0x7f0000005600)=""/69, 0x45}, {&(0x7f0000005680)=""/62, 0x3e}, {&(0x7f00000056c0)=""/176, 0xb0}, {&(0x7f0000005780)=""/4096, 0x1000}], 0x5}, 0x2}, {{&(0x7f0000006800)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000006980)=[{&(0x7f0000006880)=""/200, 0xc8}], 0x1}, 0x9}], 0x5, 0x40000023, &(0x7f0000006b00)={0x77359400}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000000)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x2c, 0x0, &(0x7f0000000180)) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @multicast2}}}}, 0x0) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00'}) 4.08618435s ago: executing program 2 (id=5341): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000000)="282a7f8f1a2d0a362ee39fdc5bb92c1f9090b211d90970e233f3ff01db0e3c1c90ae7ee8b16096300f74133ed9ed87e16e61e0545b1e1803b204be", &(0x7f0000000040)=""/71, &(0x7f00000000c0)="dc7505e0f357578ad4858544d78fc46757ed16a09b", &(0x7f0000000100)="db6ef2111d80e9b088e1d9d9705709a71626da9d84e13f1aee0632e36e7c914cfa73ed0d5a6b6733a4e0f7039f828b98860d61be184232994a33095cd4231c3be166c4575c03bbfcf553a4560ccb73c207c857f931af2e75c50db544603ecc6d82e36bfab98b1983a04359966dbb8fa2ec1e72f87d0382ec3e0f0ebfd9bec0a14e584c02e64e83f45df1c2a86c8ae2409c739c0b65851d89813d8b", 0x3e6e, r0}, 0x38) r1 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000340)=0x80) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f0000000380)) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) recvfrom$inet(r1, &(0x7f00000003c0)=""/115, 0x73, 0x40, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$OCFS2_IOC_REFLINK(r2, 0x40186f04, &(0x7f0000000500)={&(0x7f0000000480)='batadv0\x00', &(0x7f00000004c0)='/\x00', 0x2e}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x1405, 0x20, 0x70bd25, 0x25dfdbfc, "", [{{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x14c, 0x28, 0x400, 0x70bd28, 0x25dfdbff, {0x11}, [@generic="6f9a99921d6990a1a8c0b88a0089f4730de08dcdbdeda022e86ab49d96aaa7daa7725b705c91be6bb43f", @nested={0xff, 0x2e, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @u32=0xfffff000}, @generic="7874c2f72e0f4c59ca5c420060073a7d4947916fe61dbd43de18a2b534563de3f5483977c559f93f7c1aa8f2603b970afd6e4ed8f247b6c1cdfb11dee794256d1f3ea1561ead5fe7cec5ea643ca4847418e70ea10659bb6abe91ccccf1737c705c716860bd1475a752b78b5c4e98c20cdb37a8fc63807bcdb141827600813c7de7b8529b1416a01dc674e8f500878b39d71dd9f585960486ee3a2d80846af60ae05bcbba079609727d3fc4ac9ded73feb204acdf9b104fa9f1bd6dda18bad0bbe701bf2a49612f47f91bd61d8b5d08b0bd8159c3edddf9a7b0dfbcc4f38bb7", @nested={0x4, 0x15b}, @nested={0x4, 0xc}, @nested={0x4, 0x13b}, @typed={0x8, 0x167, 0x0, 0x0, @uid=r5}]}, @typed={0xc, 0x7f, 0x0, 0x0, @u64=0x2}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80000}, 0x4080) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000a80)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @private=0x764978ae}, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)='veth1_to_bridge\x00', 0xb, 0x0, 0x2}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008091}, 0xc0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x3f9, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000d80), r2) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x94, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x81}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x87}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname(r2, &(0x7f0000000f00)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000f80)=0x80) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001000)=0x0) sendmsg$nl_route(r1, &(0x7f0000001300)={&(0x7f0000000fc0), 0xc, &(0x7f00000012c0)={&(0x7f0000001040)=@bridge_getlink={0x248, 0x12, 0x10, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x40010, 0x180}, [@IFLA_VFINFO_LIST={0x1e0, 0x16, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0xfffffffb, 0xff, 0xdb}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x8000}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4f380, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0xfffffffd, 0x2, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0xc}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xdd30, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x2}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfff, 0x40}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x3, 0x1}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x68b2677f, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0xff}}, @IFLA_VF_VLAN={0x10, 0x2, {0xa525, 0xf8d, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xee3, 0x10001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x710b}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x81, 0x4}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0xfffffffb}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x91}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x69, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x4}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffff, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x7fff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8001, 0x3}}]}]}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d0b817ade091bcf56da5bce558944981"}]}, @IFLA_PHYS_SWITCH_ID={0x14, 0x24, "e7fdf0d1c29f7c77e7f7abcf96be7bc1"}, @IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1eae8}]}, 0x248}, 0x1, 0x0, 0x0, 0x10}, 0x4000880) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000001340), &(0x7f0000001380)=0x6) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001500)={&(0x7f0000001400)=@upd={0xf0, 0x12, 0x300, 0x70bd25, 0x25dfdbff, {{'gcm(aes)\x00'}, '\x00', '\x00', 0x4000, 0x2000}, [{0x8, 0x1, 0xd}, {0x8, 0x1, 0x1a}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000016c0)={'tunl0\x00', &(0x7f0000001600)={'syztnl2\x00', r3, 0x700, 0x20, 0x5, 0x81, {{0x1b, 0x4, 0x2, 0x8, 0x6c, 0x67, 0x0, 0x9, 0x4, 0x0, @local, @multicast1, {[@rr={0x7, 0xb, 0xde, [@empty, @local]}, @cipso={0x86, 0x4c, 0x3, [{0x2, 0x12, "74c498c117d3bc8cdddd5c9c3f1fa258"}, {0x0, 0x10, "5dff4746d2b08252052a3f76feaf"}, {0x1, 0xd, "70cf021bef47195d86f727"}, {0x2, 0x5, "071235"}, {0x5, 0x6, "077926a2"}, {0x5, 0x2}, {0x1, 0xa, "6e572bed5d7bc6b9"}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f00000018c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000001880)={&(0x7f0000001700)={0x150, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20004054}, 0x44804) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000001940)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r12, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 4.077472527s ago: executing program 0 (id=5342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004200000000000000b0000000c000580040001"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 3.917908818s ago: executing program 2 (id=5343): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000010300200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000602006d0000000a00030045752f0756b80000"], 0x54}, 0x1, 0x0, 0x0, 0x20001000}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000060601030000000000000000007a3000000014e300010007000000050001e9070000000900030073797a32000000000900020073797a320000000005000100070000fe0800020073797a30000000000900020073796ba100"/104], 0x68}, 0x1, 0x0, 0x0, 0x20000884}, 0x40010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x9000}, 0x4004) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000a00)={r5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x18}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x21}}]}, 0x34}, 0x1, 0x0, 0x0, 0xacef438bd8ed579e}, 0x0) 3.892933004s ago: executing program 3 (id=5344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) 3.555512123s ago: executing program 1 (id=5345): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x10}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc1c1480b61318"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) (async) unshare(0x2c060000) (async) unshare(0x24020400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x8, 0x1, 0x3, 0x8000, 0x5}) (async) sendfile(r1, r1, 0x0, 0x4) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="e5aa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (rerun: 64) 1.101850382s ago: executing program 1 (id=5346): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) 1.092067463s ago: executing program 4 (id=5347): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a002, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x207) close(r3) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x5760, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000200)=""/183, &(0x7f00000002c0)=0xb7) socket(0x2, 0x5, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000140)={0x100000000, 0x3ff, 0x3, 0x0, 0x6, 0x3, 0x0, &(0x7f0000000080)=[{0x21, 0xfe, 0x2}, {0x18, 0x1ff, 0x2}, {0x11, 0x101, 0x6}]}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.037569794s ago: executing program 0 (id=5348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x3) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@getchain={0x2c, 0x66, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x8, 0x1}, {0x0, 0x1}, {0xfff1, 0xffe0}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@generic="c698c801"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) (async) setsockopt$WPAN_SECURITY_LEVEL(r12, 0x0, 0x2, &(0x7f0000000080), 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) 977.817124ms ago: executing program 3 (id=5349): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) shutdown(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={r2, "db913e62ad039d5b2eeb9fe62d03031d"}) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_void(r3, 0x1, 0x0, 0x0, 0x0) r4 = accept(r1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) 925.265449ms ago: executing program 1 (id=5350): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 907.757137ms ago: executing program 2 (id=5351): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @rand_addr=0x64010102}}, {{0x2, 0x0, @dev}}]}, 0x190) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000004c0)={0x2, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, &(0x7f0000000800)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf251e00000008000300", @ANYRES32=r6, @ANYBLOB="04002f80b8002f802c000380080004000a00000008000400070000000500020002000000050002000100000008000400800000003c00038008000100030000003000038006000300a2aa000006000100000000000c0004000200aaaaaaaaaaaa06000100030000000600010002000000400003800c000500060000000000000014000380060001000300000006000300a1aa00000c0005000f00000000000000080004000100000008000100000000000c000200", @ANYRES32=r6, @ANYBLOB="0c0006f702000000000000007f31ae8ac51320a0c899fd8a0ac86713cdc3e103764e06d892c6d66416819c229c32e5c5af1c3345aa1d"], 0xec}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r9) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r9) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r10, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r10], 0x44}}, 0x40848c0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000ffdbdf252800000008000300", @ANYRES32=r12, @ANYBLOB="0a0047203bfe4cd55caf0000"], 0x28}, 0x1, 0x0, 0x0, 0xc005}, 0x4000004) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r14}, &(0x7f0000000340), &(0x7f0000000140)=r13}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) 785.015234ms ago: executing program 1 (id=5352): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a107000003e700"/96, 0x60) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900020000000000afb412180d364e319841c800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="938000006882000014000b800c0001007d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 784.421877ms ago: executing program 3 (id=5353): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}}, 0x0) write(r0, &(0x7f0000000140)="24000000010006", 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}}, 0x0) (async) write(r0, &(0x7f0000000140)="24000000010006", 0x7) (async) 707.097259ms ago: executing program 4 (id=5354): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000104289f70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000820004001c0012800900010069706970000000000c0002800500090089000000"], 0x3c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r3, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000680)={@mcast1, r7}, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r8, 0x4, r8}, 0x5) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001c00", @ANYRES32=r0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r9, r9], 0x0, 0x10, 0x4}, 0x94) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r10, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000006af000429bd7000fddbdf250800010000000000"], 0x18}}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000780)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x4, 0x6, 0x7d3, 0x0, 0x0, 0x20012, r5}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x40, r11, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x40}}, 0x800) 641.196195ms ago: executing program 0 (id=5355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x14, 0x20, 0x0, 0x4, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0x1d, 0x0, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e22, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x6c}, @in=@rand_addr=0x64010101, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1c, 0xfffffffffffffffe}, {0x2, 0x59}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8888}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000ff020000000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x36}}]}, 0x104}}, 0x20000800) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in=@local, 0x0, 0x3c}, @in6=@private0, {0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x7, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x3, 0x34}, [@coaddr={0x14, 0xe, @in6=@private0}]}, 0x104}}, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x80e0) close(r8) socket$pppl2tp(0x18, 0x1, 0x1) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES16=r9, @ANYBLOB="010004200000fddbdf2502020200140002006e723000000000000000000000000000090001b52fd01a75e2fe24658a5300dceea81805c351edb6995cb2f91f9d0155b9f8e52c6ab02f90cfb6847356d1aa083e8a5eb0b75c75be3b5b16d26ee3c8b7c5fdb1ae31dd6d3e2216810b9b85ed2992cb36cc95c4e18291d57c0cae709960fc44a768a6a5a920956d1e6e725998c27516870b64045844e0788f7d15bb9e30910787f33f936035073d8423f2f78bcb4fa025ba"], 0x70}, 0x1, 0x40030000000000, 0x0, 0x4000005}, 0x0) socket(0x40000000015, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r11, 0x20194, 0x10014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 496.975508ms ago: executing program 3 (id=5356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040)=[{r0, 0x8040}], 0x1, 0x8) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffe0, 0xffff}, {0x300, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xe173}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044801}, 0x0) 365.171127ms ago: executing program 1 (id=5357): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x464, 0x400, 0x70bd2d, 0x25dfdbfd, "c66bf9ef4cb23f8bd121a745dc0e48c0683899e91f6af32054e7515720e617a80f361f0b703a0dfabb06dd8d9e51083eb3ac5cbbd4e80fc2b1807bf0dd76580fb1a79351b8e56bc2f565d71b9cf20c383c945be0e2a65fae5cc70a0978afdaee", ["", "", "", "", "", "", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='veth0_to_bridge\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0xb2}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@delchain={0x88, 0x65, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xd, 0xfff6}, {0xfffd, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x9a}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x3}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x13ded2874ef07398, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xd}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xf}}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffffee}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 347.19956ms ago: executing program 4 (id=5358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x8000}, 0x8) shutdown(r1, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x3}}}}]}]}, 0x48}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x60, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0xffffffffffffff36, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3367aa5b"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x60}, 0x1, 0x0, 0x0, 0x844}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x60, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0xffffffffffffff36, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3367aa5b"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x60}, 0x1, 0x0, 0x0, 0x844}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000020c0)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@tcp={0x4, 0x6, "71f390", 0x3d, 0x6, 0x1, @loopback, @mcast2, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x80, 0x37b, 0x0, 0x82, {[@timestamp={0x8, 0xa, 0x40, 0x3}]}}, {"f9ad7a703e0bf5c7a89a4b3bd799b809f5ae08be2a78aa2e09872634b8"}}}}}}, 0x77) (async) write$tun(r2, &(0x7f00000020c0)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@tcp={0x4, 0x6, "71f390", 0x3d, 0x6, 0x1, @loopback, @mcast2, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x80, 0x37b, 0x0, 0x82, {[@timestamp={0x8, 0xa, 0x40, 0x3}]}}, {"f9ad7a703e0bf5c7a89a4b3bd799b809f5ae08be2a78aa2e09872634b8"}}}}}}, 0x77) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c00000400fc800c00018005b41918"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x50, r7, 0x20, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f00000000c0)=0x80008, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f00000000c0)=0x80008, 0x4) 228.941317ms ago: executing program 2 (id=5359): syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0xfff}}, @func={0x10, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x3e, 0x61, 0x2e, 0x5f, 0x0, 0x61]}}, &(0x7f0000000300)=""/230, 0x44, 0xe6, 0x0, 0x1}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) pread64(r1, &(0x7f0000001b40)=""/4102, 0x1006, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0xffffbe10, 0x14}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7ff}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x7, &(0x7f00000000c0)=""/7, 0x41000, 0x21, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000440)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x7, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[r1, r3, r5, r6, r7, r8, r9], &(0x7f0000000800)=[{0x3, 0x5, 0x9, 0xb}], 0x10, 0x10000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000000)=0x7ff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 184.292771ms ago: executing program 3 (id=5360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x1cc, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x1b8, 0x1, [@m_sample={0x1b4, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x80000001, 0xeffeffff, 0x2, 0x1, 0xffffffff}}]}, {0x16f, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1cc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xec}}, 0x24000800) 170.888651ms ago: executing program 0 (id=5361): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff"], 0x50}}, 0x0) (async) connect$inet6(r1, &(0x7f0000000840)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1880000055003dc235c664774ed988d264000a9d", @ANYRES32=r5], 0x18}}, 0x4090) 48.678593ms ago: executing program 1 (id=5362): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_FLAGS={0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 48.114224ms ago: executing program 2 (id=5363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000019"], 0x60}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x14) 34.88502ms ago: executing program 3 (id=5364): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000080)=0x800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000040)=0xcbe, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010009112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c0004"]}, 0x58}}, 0x0) 0s ago: executing program 2 (id=5365): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000010000100fcfffbff0000000000000000", @ANYRES32=r1, @ANYBLOB="05030200157e00000c002b80080003001b00000000caaed33f7ae1"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x78}}, 0x8800) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020b0e080600000025c97000fedbdf25040003000400000005000000000000000f0000000000000001000000000010006ad7ae4c8af6b805ba6697f1c9"], 0x30}}, 0x4000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'bridge_slave_1\x00', 0x600}) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB="0a000100aa941da21805"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): 20891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3744'. [ 476.582597][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3744'. [ 476.666514][ T7835] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.666580][ T7835] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.666616][ T7835] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.666648][ T7835] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.111332][T20918] x_tables: duplicate underflow at hook 2 [ 477.266625][T20927] openvswitch: netlink: Missing key (keys=40, expected=100) [ 477.306277][T20928] syzkaller0: entered promiscuous mode [ 477.306302][T20928] syzkaller0: entered allmulticast mode [ 477.326484][T20928] tipc: Started in network mode [ 477.326519][T20928] tipc: Node identity 2622a8d5635, cluster identity 4711 [ 477.347651][T20928] tipc: Enabled bearer , priority 0 [ 477.367773][T20928] tipc: Resetting bearer [ 477.385012][T20926] tipc: Resetting bearer [ 477.451848][T20926] tipc: Disabling bearer [ 477.484453][T20938] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 477.489404][T20938] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 477.491189][T20938] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 477.497707][T20938] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 477.524162][T20938] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 477.524643][T20938] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 477.527179][T20938] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 477.534198][T20938] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 477.558562][T20938] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 477.563888][T20938] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 477.568723][T20938] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 477.631490][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 477.928612][T20956] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3764'. [ 478.168576][T20964] netlink: 'syz.2.3763': attribute type 4 has an invalid length. [ 478.398488][T20973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.398520][T20973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.430161][T20973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.430191][T20973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.671486][T20981] macvtap1: entered promiscuous mode [ 478.673418][T20981] macvtap1: entered allmulticast mode [ 478.673437][T20981] veth1_vlan: entered allmulticast mode [ 478.721853][T20986] sit0: entered promiscuous mode [ 478.736795][T20986] netlink: 'syz.3.3771': attribute type 1 has an invalid length. [ 478.749599][T20988] netlink: 'syz.3.3771': attribute type 1 has an invalid length. [ 478.857019][T20993] netlink: 'syz.1.3772': attribute type 16 has an invalid length. [ 478.857043][T20993] netlink: 'syz.1.3772': attribute type 3 has an invalid length. [ 479.121702][T21007] batman_adv: batadv0: Adding interface: dummy0 [ 479.121722][T21007] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.121755][T21007] batman_adv: batadv0: Interface activated: dummy0 [ 479.318993][T21009] batadv0: mtu less than device minimum [ 479.322262][T21009] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.323714][T21009] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.326839][T21009] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.328288][T21009] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.329719][T21009] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.331223][T21009] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.332651][T21009] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.536785][T21015] netlink: 'syz.4.3779': attribute type 1 has an invalid length. [ 479.866313][T21034] __nla_validate_parse: 8 callbacks suppressed [ 479.866337][T21034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3780'. [ 479.979720][T21040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3784'. [ 480.248207][T21051] netlink: 'syz.4.3786': attribute type 33 has an invalid length. [ 480.420241][T21051] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 480.465492][T21051] bond3 (unregistering): Released all slaves [ 480.637715][T21071] xt_CT: No such helper "snmp_trap" [ 480.661199][T21065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.918539][T21065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.977787][T21086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3790'. [ 481.077688][T21091] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3789'. [ 481.112733][T21065] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.174962][T21093] syzkaller1: entered promiscuous mode [ 481.174988][T21093] syzkaller1: entered allmulticast mode [ 481.203848][T21090] tipc: Enabling of bearer rejected, failed to enable media [ 481.272150][T21085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3789'. [ 481.322624][T21095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3792'. [ 481.324522][T21097] netlink: 'syz.2.3794': attribute type 10 has an invalid length. [ 481.394543][T21097] syz_tun: entered promiscuous mode [ 481.673070][T21110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3797'. [ 481.673104][T21110] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3797'. [ 481.673122][T21110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3797'. [ 481.815897][T21119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.815918][T21119] IPv6: NLM_F_CREATE should be set when creating new route [ 481.816177][T21119] IPv6: NLM_F_CREATE should be set when creating new route [ 481.911243][T21122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3802'. [ 482.317202][T21148] net_ratelimit: 14 callbacks suppressed [ 482.317225][T21148] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 482.552581][T21154] netlink: 'syz.4.3808': attribute type 1 has an invalid length. [ 482.583289][T21154] netlink: 'syz.4.3808': attribute type 1 has an invalid length. [ 482.585690][T21157] netlink: 'syz.2.3809': attribute type 21 has an invalid length. [ 482.922681][T21169] netlink: 'syz.2.3814': attribute type 10 has an invalid length. [ 484.038981][T21221] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 484.087675][T21219] netlink: 'syz.3.3825': attribute type 7 has an invalid length. [ 484.860823][T21252] openvswitch: netlink: Flow actions attr not present in new flow. [ 484.925585][T21258] __nla_validate_parse: 10 callbacks suppressed [ 484.925612][T21258] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3836'. [ 485.556078][T21278] netlink: 'syz.3.3842': attribute type 3 has an invalid length. [ 485.605901][ T31] audit: type=1804 audit(1789819593.713:6): pid=21282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3843" name="/newroot/87/cgroup.controllers" dev="tmpfs" ino=464 res=1 errno=0 [ 485.638140][ T31] audit: type=1800 audit(1789819593.753:7): pid=21282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3843" name="cgroup.controllers" dev="tmpfs" ino=464 res=0 errno=0 [ 485.790262][T21285] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3844'. [ 485.878349][T21292] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 485.925484][T21285] syzkaller1: entered promiscuous mode [ 485.925512][T21285] syzkaller1: entered allmulticast mode [ 486.310860][T21309] netlink: 524 bytes leftover after parsing attributes in process `syz.3.3850'. [ 486.946377][T21340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3857'. [ 487.066703][T21342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3859'. [ 487.066739][T21342] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 487.462853][T21375] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3864'. [ 487.536764][T21383] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 487.547320][T21383] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 487.581417][T21385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3865'. [ 487.615513][T21365] geneve2: entered promiscuous mode [ 490.282769][T21361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.283215][T21375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3864'. [ 490.283252][T21375] nbd: must specify at least one socket [ 490.285727][T21383] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3867'. [ 490.688723][T21416] nft_compat: unsupported protocol 0 [ 490.893555][T21427] netlink: 'syz.1.3877': attribute type 7 has an invalid length. [ 491.055241][T21432] netlink: 'syz.1.3880': attribute type 24 has an invalid length. [ 491.309513][T21444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3886'. [ 491.341091][T21444] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3886'. [ 491.449791][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3883'. [ 491.512067][T21452] tipc: Started in network mode [ 491.512109][T21452] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 491.534842][T21452] tipc: Enabled bearer , priority 10 [ 491.539051][T21454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.717491][T21459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3890'. [ 491.849017][T21462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3891'. [ 491.849081][T21462] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 491.907732][T21467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3892'. [ 492.002512][T21465] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3893'. [ 492.312266][T21482] syzkaller0: entered promiscuous mode [ 492.312292][T21482] syzkaller0: entered allmulticast mode [ 492.625014][T21494] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3899'. [ 492.651674][ T5745] tipc: Node number set to 4269801488 [ 492.837657][T21509] netlink: 'syz.4.3902': attribute type 1 has an invalid length. [ 492.849810][T21508] netlink: 'syz.4.3902': attribute type 1 has an invalid length. [ 493.273014][T21526] netlink: 'syz.4.3909': attribute type 10 has an invalid length. [ 493.278375][T21526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.285783][T21526] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 493.337536][T21526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.366924][T21526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.389322][T21526] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 493.434833][T21526] bond0 (unregistering): Released all slaves [ 493.463158][T21531] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 493.799592][ T5619] Bluetooth: hci5: command 0x0406 tx timeout [ 494.170584][ T31] audit: type=1107 audit(1789819602.283:8): pid=21556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 494.293838][T21563] netlink: 'syz.3.3920': attribute type 30 has an invalid length. [ 494.323094][T21571] x_tables: duplicate underflow at hook 1 [ 494.503729][T21577] netlink: 'syz.3.3923': attribute type 1 has an invalid length. [ 494.503758][T21577] netlink: 'syz.3.3923': attribute type 2 has an invalid length. [ 494.503772][T21577] netlink: 'syz.3.3923': attribute type 3 has an invalid length. [ 494.675478][T21580] lo: entered promiscuous mode [ 494.675617][T21580] netlink: 'syz.4.3924': attribute type 2 has an invalid length. [ 494.675629][T21580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.524124][T21615] __nla_validate_parse: 12 callbacks suppressed [ 495.524151][T21615] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3934'. [ 495.706808][T21626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.707920][T21625] lo speed is unknown, defaulting to 1000 [ 495.736865][T21625] wg0 speed is unknown, defaulting to 1000 [ 495.764874][T21628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.937933][T21640] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 497.155187][T21685] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3950'. [ 497.156213][T21683] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 497.182358][T21687] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 497.220184][T21685] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3950'. [ 497.316482][T21699] Cannot find add_set index 0 as target [ 498.485489][T21754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3969'. [ 498.487660][T21754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3969'. [ 498.488538][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3969'. [ 498.529093][T21754] TCP: TCP_TX_DELAY enabled [ 499.445683][T21794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.987928][T21817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3986'. [ 500.055339][T21824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3987'. [ 500.363046][T21846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3993'. [ 500.414269][T21846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3993'. [ 500.481935][T21849] xt_hashlimit: size too large, truncated to 1048576 [ 500.574908][T21852] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.635613][T21852] bridge_slave_0 (unregistering): left allmulticast mode [ 500.635643][T21852] bridge_slave_0 (unregistering): left promiscuous mode [ 500.635754][T21852] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.643321][T21855] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3996'. [ 500.643993][T21855] sctp: [Deprecated]: syz.3.3996 (pid 21855) Use of int in max_burst socket option deprecated. [ 500.643993][T21855] Use struct sctp_assoc_value instead [ 500.819102][T21857] netlink: 'syz.3.3997': attribute type 17 has an invalid length. [ 500.819129][T21857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3997'. [ 500.819158][T21857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3997'. [ 500.909731][T21860] ip_tables: iptables: counters copy to user failed while replacing table [ 501.286570][T21881] netlink: 'syz.0.4003': attribute type 1 has an invalid length. [ 501.349666][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4003'. [ 501.529874][T21890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4007'. [ 501.647149][T21897] netlink: 'syz.0.4011': attribute type 6 has an invalid length. [ 502.392907][T21933] netlink: 'syz.0.4017': attribute type 11 has an invalid length. [ 502.406310][T21933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4017'. [ 502.407016][T21933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4017'. [ 502.408361][T21933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4017'. [ 502.604940][T21941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4018'. [ 502.755738][T21946] tc_dump_action: action bad kind [ 502.755995][T21944] tc_dump_action: action bad kind [ 503.113585][T21967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4025'. [ 503.574248][T21986] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 503.606422][T21986] bond4 (unregistering): Released all slaves [ 503.922187][ T26] block nbd4: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 120 seconds [ 503.922240][ T26] block nbd4: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 120 seconds [ 503.922268][ T26] block nbd4: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 120 seconds [ 503.922293][ T26] block nbd4: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 120 seconds [ 504.342940][T22021] openvswitch: netlink: Missing key (keys=40, expected=100) [ 504.399445][T22023] netlink: 'syz.0.4039': attribute type 1 has an invalid length. [ 504.643112][ T8772] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 504.643177][ T8772] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 504.643212][ T8772] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 504.643244][ T8772] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 505.644048][ T7835] IPVS: starting estimator thread 0... [ 505.644144][T22029] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 505.732164][T22078] IPVS: using max 24 ests per chain, 57600 per kthread [ 506.288844][T22102] __nla_validate_parse: 9 callbacks suppressed [ 506.288868][T22102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4055'. [ 506.556773][T22112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4057'. [ 506.877184][T22132] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 506.878362][T22129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4060'. [ 506.878406][T22129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4060'. [ 506.896029][T22128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4060'. [ 507.042710][T22135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4062'. [ 507.296615][T22152] netlink: 'syz.2.4064': attribute type 1 has an invalid length. [ 507.532980][T22152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.060116][T22169] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4067'. [ 508.060145][T22169] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4067'. [ 508.099289][T22177] sctp: [Deprecated]: syz.1.4070 (pid 22177) Use of int in maxseg socket option. [ 508.099289][T22177] Use struct sctp_assoc_value instead [ 508.341171][T22183] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 508.341266][T22183] gretap1: entered promiscuous mode [ 508.341282][T22183] gretap1: entered allmulticast mode [ 508.593051][T22193] netlink: 'syz.3.4075': attribute type 39 has an invalid length. [ 508.604173][T22195] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 508.785803][T22199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4078'. [ 508.786018][T22200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4078'. [ 508.902479][T22204] openvswitch: netlink: Message has 8 unknown bytes. [ 508.902533][T22204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.060758][T22212] netlink: 'syz.3.4081': attribute type 11 has an invalid length. [ 509.150833][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 509.251733][T22218] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20002 [ 509.281635][T22218] netlink: 'syz.1.4084': attribute type 3 has an invalid length. [ 509.283729][T22217] syzkaller0: entered promiscuous mode [ 509.283752][T22217] syzkaller0: entered allmulticast mode [ 509.631232][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 509.844405][T22238] sit0: entered allmulticast mode [ 510.414302][T22268] netlink: 'syz.2.4097': attribute type 1 has an invalid length. [ 510.586030][T22286] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 510.589698][T22287] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 510.609324][T22278] bond1: (slave geneve3): making interface the new active one [ 510.609915][T22278] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 510.624694][T22268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.631235][ T8772] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 510.631277][ T8772] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 510.631307][ T8772] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 510.631337][ T8772] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 510.945867][T22296] netlink: 'syz.2.4104': attribute type 1 has an invalid length. [ 511.290899][T22313] __nla_validate_parse: 28 callbacks suppressed [ 511.290924][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4109'. [ 511.291136][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4109'. [ 511.291342][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4109'. [ 511.291578][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4109'. [ 511.291785][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4109'. [ 511.291991][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4109'. [ 511.292194][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4109'. [ 511.292398][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4109'. [ 511.292646][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4109'. [ 511.292845][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4109'. [ 511.777049][T22336] netlink: 'syz.1.4118': attribute type 4 has an invalid length. [ 512.152729][T22350] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 512.194651][T22355] xt_MASQUERADE: bad rangesize 2147483646 [ 512.200271][T22358] xt_MASQUERADE: bad rangesize 2147483646 [ 512.289729][T22353] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 512.425166][ T7415] vlan3: left allmulticast mode [ 512.425191][ T7415] geneve0: left allmulticast mode [ 512.425327][ T7415] bridge0: port 1(vlan3) entered disabled state [ 512.530979][ T7415] pim6reg: left allmulticast mode [ 512.544573][ T7415] dvmrp8: left allmulticast mode [ 513.069677][ T7415] bond11 (unregistering): (slave xfrm1): Releasing backup interface [ 513.069698][ T7415] xfrm1 (unregistering): left promiscuous mode [ 513.126920][ T7415] xfrm0 (unregistering): left promiscuous mode [ 513.127628][ T7415] team0: Port device xfrm0 removed [ 513.308547][ T7415] bond10 (unregistering): (slave bridge4): Releasing backup interface [ 513.308576][ T7415] bridge4 (unregistering): left promiscuous mode [ 513.333747][ T7415] bond12 (unregistering): (slave bridge5): Releasing backup interface [ 513.333778][ T7415] bridge5 (unregistering): left promiscuous mode [ 513.367092][ T7415] .` (unregistering): (slave bond4): Releasing backup interface [ 513.367774][ T7415] .` (unregistering): Released all slaves [ 513.379223][ T7415] bond1 (unregistering): Released all slaves [ 513.393909][ T7415] bond2 (unregistering): Released all slaves [ 513.404876][ T7415] bond3 (unregistering): Released all slaves [ 513.421962][ T7415] bond4 (unregistering): Released all slaves [ 513.430162][ T7415] bond0 (unregistering): Released all slaves [ 513.448977][ T7415] bond5 (unregistering): Released all slaves [ 513.462865][ T7415] bond6 (unregistering): Released all slaves [ 513.484145][ T7415] bond7 (unregistering): Released all slaves [ 513.501662][ T7415] bond8 (unregistering): Released all slaves [ 513.516889][ T7415] bond9 (unregistering): Released all slaves [ 513.532133][ T7415] bond10 (unregistering): Released all slaves [ 513.547007][ T7415] bond11 (unregistering): Released all slaves [ 513.570182][ T7415] bond12 (unregistering): Released all slaves [ 513.581645][ T7415] bond13 (unregistering): Released all slaves [ 513.589956][ T7415] bond14 (unregistering): Released all slaves [ 513.619584][T22370] syzkaller0: entered promiscuous mode [ 513.619612][T22370] syzkaller0: entered allmulticast mode [ 513.846064][ T5745] wg0 speed is unknown, defaulting to 1000 [ 513.846097][ T5745] syz0: Port: 1 Link DOWN [ 513.983380][T22387] netlink: 'syz.1.4130': attribute type 1 has an invalid length. [ 514.136335][T22400] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 514.312293][T22387] 8021q: adding VLAN 0 to HW filter on device bond3 [ 514.402540][T22397] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 514.848256][T22415] debugfs: '1ùà^!' already exists in 'ieee80211' [ 514.924105][T22417] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 515.588528][T22444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.137363][T22467] bond4: option downdelay: invalid value (18446744073709551615) [ 516.137391][T22467] bond4: option downdelay: allowed values 0 - 2147483647 [ 516.138931][T22467] bond4 (unregistering): Released all slaves [ 516.489097][T22488] __nla_validate_parse: 23 callbacks suppressed [ 516.489122][T22488] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4157'. [ 516.552307][T22488] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4157'. [ 516.649979][T22497] lo: left promiscuous mode [ 516.686303][T22497] IPVS: set_ctl: invalid protocol: 25 172.20.20.58:20002 [ 516.790195][T22505] ip6gre0: entered promiscuous mode [ 516.793224][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4159'. [ 517.092183][ T7415] hsr_slave_0: left promiscuous mode [ 517.094145][ T7415] hsr_slave_1: left promiscuous mode [ 517.099087][T22516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4164'. [ 517.132700][ T7415] veth1_macvtap: left promiscuous mode [ 517.132749][ T7415] veth0_macvtap: left promiscuous mode [ 517.134934][ T7415] veth1_vlan: left promiscuous mode [ 517.134974][ T7415] v: left promiscuous mode [ 517.442667][T22529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4162'. [ 518.087290][T22550] xt_l2tp: missing protocol rule (udp|l2tpip) [ 518.489064][ T8772] smbdirect: ib_dev[syz0] removed [ 518.642471][T22516] bond4: option xmit_hash_policy: invalid value (64) [ 518.646784][T22516] bond4 (unregistering): Released all slaves [ 518.786405][T22560] netlink: 'syz.2.4168': attribute type 2 has an invalid length. [ 518.789584][T22562] netlink: 'syz.2.4168': attribute type 2 has an invalid length. [ 518.883001][T22549] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4166'. [ 519.251928][T22586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4172'. [ 519.281248][T22585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4174'. [ 519.427242][ T7415] IPVS: stop unused estimator thread 0... [ 519.576608][T22602] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 519.794647][T22609] tipc: Started in network mode [ 519.794684][T22609] tipc: Node identity e0000001, cluster identity 4711 [ 519.794743][T22609] tipc: Enabling of bearer rejected, failed to enable media [ 520.200328][T22621] ip6gre2: entered allmulticast mode [ 520.441369][T22624] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.542214][T22624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.549444][T22637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4187'. [ 520.574199][T22642] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 520.597913][T22638] netlink: 'syz.1.4187': attribute type 9 has an invalid length. [ 520.768225][T22647] netlink: 'syz.1.4192': attribute type 1 has an invalid length. [ 520.850044][T22647] 8021q: adding VLAN 0 to HW filter on device bond4 [ 520.959878][T22647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4192'. [ 521.125108][T22662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.128012][T22647] bond4: (slave ip6erspan0): making interface the new active one [ 521.160232][T22647] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 521.201858][T22659] netlink: Failed to add ( helper -22 [ 521.201924][T22659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.521282][T22673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4197'. [ 521.592098][T22678] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4197'. [ 521.762695][T22687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4200'. [ 522.315538][T22707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4203'. [ 522.811061][T22728] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4210'. [ 523.022310][T22738] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 523.118701][T22738] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4211'. [ 523.229492][T22744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4211'. [ 523.242669][T22747] openvswitch: netlink: Invalid VLAN frame [ 523.355453][T22756] openvswitch: netlink: Invalid VLAN frame [ 523.387140][T22751] netlink: 'syz.1.4214': attribute type 1 has an invalid length. [ 523.523277][T22764] x_tables: duplicate underflow at hook 2 [ 523.658039][T22771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4218'. [ 523.809698][T22777] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4217'. [ 523.814963][T22777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4217'. [ 524.229350][T22803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.584066][ T7833] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.585038][ T7833] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.585096][ T7833] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.585128][ T7833] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.890104][T22817] syzkaller0: entered promiscuous mode [ 524.890130][T22817] syzkaller0: entered allmulticast mode [ 525.181271][T22837] IPv6: NLM_F_CREATE should be specified when creating new route [ 525.543635][T22834] netlink: 'syz.1.4229': attribute type 12 has an invalid length. [ 525.543661][T22834] netlink: 'syz.1.4229': attribute type 29 has an invalid length. [ 525.543680][T22834] netlink: 'syz.1.4229': attribute type 2 has an invalid length. [ 526.407235][ T8772] IPVS: starting estimator thread 0... [ 526.475951][T22908] netlink: 'syz.1.4244': attribute type 3 has an invalid length. [ 526.488950][T22903] xt_hashlimit: size too large, truncated to 1048576 [ 526.488968][T22903] xt_hashlimit: max too large, truncated to 1048576 [ 526.488979][T22903] xt_hashlimit: invalid rate [ 526.502617][T22900] IPVS: using max 27 ests per chain, 64800 per kthread [ 526.669209][T22903] syzkaller0: entered promiscuous mode [ 526.669235][T22903] syzkaller0: entered allmulticast mode [ 526.699652][T22903] __nla_validate_parse: 8 callbacks suppressed [ 526.699678][T22903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4242'. [ 527.235610][T22942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4249'. [ 527.491431][T22955] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4252'. [ 528.733029][T23015] netlink: 'syz.3.4260': attribute type 16 has an invalid length. [ 528.733057][T23015] netlink: 'syz.3.4260': attribute type 3 has an invalid length. [ 528.733071][T23015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4260'. [ 528.877545][T23024] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4260'. [ 528.897860][T23024] ip_tables: iptables: counters copy to user failed while replacing table [ 529.186417][T23031] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4266'. [ 529.344391][T23033] syzkaller0: entered promiscuous mode [ 529.344421][T23033] syzkaller0: entered allmulticast mode [ 529.558808][T23051] netlink: 'syz.0.4271': attribute type 1 has an invalid length. [ 529.669332][T23055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4272'. [ 529.723794][T23057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4272'. [ 529.834066][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4272'. [ 529.837536][T23067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4272'. [ 532.675707][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.833688][ T4982] udevd[4982]: worker [5628] /devices/virtual/block/nbd4 is taking a long time [ 533.155044][T23070] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 533.344163][T23092] netlink: 'syz.2.4278': attribute type 2 has an invalid length. [ 533.536252][T23096] __nla_validate_parse: 3 callbacks suppressed [ 533.536275][T23096] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4276'. [ 533.554124][T23102] Dead loop on virtual device ip6_vti0 (net 254), fix it urgently! [ 533.653397][T23104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4280'. [ 533.668850][T23107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.756302][T23112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4283'. [ 533.756947][T23113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4283'. [ 533.879508][T23119] bond7: option all_slaves_active: invalid value (179) [ 533.886046][T23119] bond7 (unregistering): Released all slaves [ 533.916507][T23123] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4286'. [ 533.962493][ T26] block nbd4: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 150 seconds [ 533.962538][ T26] block nbd4: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 150 seconds [ 533.962563][ T26] block nbd4: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 150 seconds [ 533.962585][ T26] block nbd4: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 150 seconds [ 534.047895][T23126] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4287'. [ 534.154707][T23126] bond4 (unregistering): Released all slaves [ 534.167202][T23132] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4288'. [ 534.188140][T23133] netlink: 'syz.0.4289': attribute type 32 has an invalid length. [ 534.188166][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4289'. [ 534.218806][T23130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4289'. [ 534.317793][T23133] bond7: option coupled_control: invalid value (192) [ 534.353221][T23133] bond7 (unregistering): Released all slaves [ 534.445474][T23141] tipc: Started in network mode [ 534.445501][T23141] tipc: Node identity 1001001, cluster identity 4711 [ 534.445515][T23141] tipc: Node number set to 16781313 [ 534.459734][T23139] tipc: Enabled bearer , priority 0 [ 534.635425][T23148] xt_hashlimit: size too large, truncated to 1048576 [ 534.746940][T23150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4295'. [ 534.746970][T23150] netlink: 'syz.0.4295': attribute type 3 has an invalid length. [ 534.747263][T23150] netlink: 'syz.0.4295': attribute type 3 has an invalid length. [ 534.902238][T23150] syzkaller1: entered promiscuous mode [ 534.902257][T23150] syzkaller1: entered allmulticast mode [ 535.177553][T23171] netlink: 'syz.3.4300': attribute type 21 has an invalid length. [ 535.246281][T23173] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.254672][T23173] bridge0: entered allmulticast mode [ 535.329561][T23173] bridge_slave_1: left allmulticast mode [ 535.329616][T23173] bridge_slave_1: left promiscuous mode [ 535.331766][T23173] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.454086][T23173] bridge_slave_0: left allmulticast mode [ 535.465283][T23173] bridge_slave_0: left promiscuous mode [ 535.467099][T23173] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.731990][T23240] xt_REDIRECT: bad MAP_IPS. [ 537.278738][T23266] netlink: 'syz.4.4331': attribute type 21 has an invalid length. [ 537.278815][T23266] netlink: 'syz.4.4331': attribute type 6 has an invalid length. [ 537.730056][T23281] netlink: 'syz.2.4334': attribute type 1 has an invalid length. [ 537.762453][T23281] bond2: entered promiscuous mode [ 537.762792][T23281] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.025229][T23287] ip_tables: iptables: counters copy to user failed while replacing table [ 538.261611][T23297] netlink: 'syz.2.4339': attribute type 4 has an invalid length. [ 539.228974][T23216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.476893][T23303] xt_hashlimit: size too large, truncated to 1048576 [ 539.517979][T23303] xt_hashlimit: size too large, truncated to 1048576 [ 539.524401][T23314] __nla_validate_parse: 9 callbacks suppressed [ 539.524424][T23314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4342'. [ 539.591935][T23314] bond5: entered promiscuous mode [ 539.592435][T23314] 8021q: adding VLAN 0 to HW filter on device bond5 [ 539.678490][T23326] Bluetooth: MGMT ver 1.23 [ 540.018065][T23337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4348'. [ 540.018104][T23337] netlink: 'syz.1.4348': attribute type 5 has an invalid length. [ 540.018120][T23337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4348'. [ 540.069155][T23337] geneve2: entered promiscuous mode [ 540.069180][T23337] geneve2: entered allmulticast mode [ 540.102259][ T8760] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 540.102321][ T8760] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 540.102356][ T8760] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 540.102388][ T8760] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 540.820111][T23365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4356'. [ 540.847549][T23365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4356'. [ 540.967781][T23374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4357'. [ 540.968279][T23374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4357'. [ 540.968307][T23374] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 541.007601][T23373] bridge0: port 3(ipvlan0) entered blocking state [ 541.007725][T23373] bridge0: port 3(ipvlan0) entered disabled state [ 541.007915][T23373] ipvlan0: entered allmulticast mode [ 541.007933][T23373] bridge0: entered allmulticast mode [ 541.015354][T23373] ipvlan0: left allmulticast mode [ 541.015375][T23373] bridge0: left allmulticast mode [ 541.710587][ T5621] Bluetooth: hci5: Opcode 0x0c3a failed: -110 [ 541.721537][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 543.903562][T23375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.084066][T23422] xt_MASQUERADE: bad MAP_IPS. [ 544.115213][T23422] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4367'. [ 544.283451][T23436] Bluetooth: hci0: unsupported parameter 5161 [ 544.283476][T23436] Bluetooth: hci0: unsupported parameter 8192 [ 544.283489][T23436] Bluetooth: hci0: unsupported parameter 5161 [ 544.283500][T23436] Bluetooth: hci0: unsupported parameter 8192 [ 544.349689][T23434] ip6gre1: entered promiscuous mode [ 544.422524][T23446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4373'. [ 544.631466][T23457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4376'. [ 544.633512][ T5621] Bluetooth: hci5: ISO packet too small [ 544.691981][T23465] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4379'. [ 544.734637][T23462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4375'. [ 544.995419][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 545.066149][T23481] xt_hashlimit: size too large, truncated to 1048576 [ 545.354730][T23485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4384'. [ 545.383320][T23485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4384'. [ 545.678978][T23514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4388'. [ 545.679017][T23514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4388'. [ 545.748249][T23519] netlink: 'syz.3.4389': attribute type 1 has an invalid length. [ 545.811126][T23519] 8021q: adding VLAN 0 to HW filter on device bond4 [ 545.885132][T23523] Bluetooth: MGMT ver 1.23 [ 545.915048][T23519] syzkaller0: entered promiscuous mode [ 545.915074][T23519] syzkaller0: entered allmulticast mode [ 546.518025][T23541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4396'. [ 546.521871][T23541] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4396'. [ 546.635735][T23546] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4396'. [ 547.117798][T23559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.412944][T23583] bond6: entered promiscuous mode [ 547.413016][T23583] bond6: entered allmulticast mode [ 547.413388][T23583] 8021q: adding VLAN 0 to HW filter on device bond6 [ 547.499282][T23587] 0: reclassify loop, rule prio 0, protocol 03 [ 548.560278][ T5621] block nbd5: Receive control failed (result -32) [ 548.565405][T23329] block nbd5: Receive control failed (result -32) [ 549.091561][T23656] netlink: 'syz.3.4432': attribute type 2 has an invalid length. [ 549.091586][T23656] netlink: 'syz.3.4432': attribute type 11 has an invalid length. [ 549.643883][T23687] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 549.646243][T23687] bond3 (unregistering): Released all slaves [ 549.788283][T23693] __nla_validate_parse: 14 callbacks suppressed [ 549.788301][T23693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4438'. [ 550.407882][T23696] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 550.629053][T23702] syzkaller1: entered allmulticast mode [ 552.087535][T23656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.309825][T23710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4441'. [ 552.309863][T23710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4441'. [ 552.337655][T23710] gretap2: entered promiscuous mode [ 552.337680][T23710] gretap2: entered allmulticast mode [ 552.839880][ T153] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xb [ 553.279589][T23757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4450'. [ 553.282526][T23757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4450'. [ 553.637986][T23767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4452'. [ 553.770620][T23776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4455'. [ 553.770664][T23776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4455'. [ 553.770935][T23776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4455'. [ 553.770968][T23776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4455'. [ 554.026254][T23785] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 554.028869][T23785] bond3 (unregistering): Released all slaves [ 554.173407][T23796] sctp: [Deprecated]: syz.2.4462 (pid 23796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.173407][T23796] Use struct sctp_sack_info instead [ 554.739543][T23832] lo speed is unknown, defaulting to 1000 [ 554.833111][T23842] __nla_validate_parse: 27 callbacks suppressed [ 554.833133][T23842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4470'. [ 557.307388][T23803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 557.663972][T23853] bond3: option lp_interval: invalid value (0) [ 557.663999][T23853] bond3: option lp_interval: allowed values 1 - 2147483647 [ 557.686778][T23853] bond3 (unregistering): Released all slaves [ 557.805742][T23874] netlink: 'syz.3.4474': attribute type 2 has an invalid length. [ 557.805769][T23874] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4474'. [ 557.913775][T23877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4480'. [ 558.045402][T23871] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 558.100423][T23877] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.272365][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 558.495372][T23900] netlink: 'syz.1.4486': attribute type 2 has an invalid length. [ 558.495406][T23900] netlink: 'syz.1.4486': attribute type 2 has an invalid length. [ 558.532552][T23900] netlink: 'syz.1.4486': attribute type 2 has an invalid length. [ 558.532580][T23900] netlink: 'syz.1.4486': attribute type 2 has an invalid length. [ 558.841928][T23912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4489'. [ 559.181114][T23924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.487569][T23947] netlink: 'syz.4.4500': attribute type 7 has an invalid length. [ 559.487596][T23947] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4500'. [ 559.494637][T23931] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 559.529161][T23949] IPVS: length: 239 != 24 [ 559.531756][T23931] bond5 (unregistering): Released all slaves [ 559.633103][T23954] netlink: 'syz.2.4502': attribute type 1 has an invalid length. [ 559.650060][T23954] tun0: tun_chr_ioctl cmd 1074025675 [ 559.650087][T23954] tun0: persist enabled [ 559.947605][T23965] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.4507'. [ 560.216163][T23980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4512'. [ 560.216516][T23983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4509'. [ 560.308062][T23988] netlink: 'syz.4.4511': attribute type 11 has an invalid length. [ 560.358652][T23329] Bluetooth: hci2: command 0x0405 tx timeout [ 560.587623][T23993] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4513'. [ 560.799013][T23997] xt_HMARK: proto mask must be zero with L3 mode [ 560.836123][T23997] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4516'. [ 561.414245][T24023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 561.414267][T24023] IPv6: NLM_F_CREATE should be set when creating new route [ 561.443509][T24023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4524'. [ 561.547803][T24027] netlink: 'syz.2.4527': attribute type 1 has an invalid length. [ 561.619104][T24033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4527'. [ 561.683251][T24027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4527'. [ 562.202705][T24064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4534'. [ 562.240895][T24064] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.322387][T24075] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4536'. [ 562.326480][T24080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.349927][T24064] bridge_slave_1 (unregistering): left promiscuous mode [ 562.350017][T24064] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.994029][T24111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 563.202851][T24122] siw: device registration error -23 [ 563.214195][T24117] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 563.214229][T24117] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 563.214261][T24117] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 563.314886][T24117] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 563.427026][T24130] netlink: 'syz.1.4546': attribute type 28 has an invalid length. [ 563.427051][T24130] netlink: 'syz.1.4546': attribute type 3 has an invalid length. [ 563.440909][T24132] x_tables: duplicate underflow at hook 1 [ 563.671618][T24145] netlink: 'syz.2.4550': attribute type 1 has an invalid length. [ 563.728984][T24145] 8021q: adding VLAN 0 to HW filter on device bond4 [ 563.848638][T24148] bond4: (slave bridge2): making interface the new active one [ 563.853863][T24153] sctp: [Deprecated]: syz.4.4553 (pid 24153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.853863][T24153] Use struct sctp_sack_info instead [ 563.885326][T24162] sctp: [Deprecated]: syz.4.4553 (pid 24162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.885326][T24162] Use struct sctp_sack_info instead [ 563.885555][T24148] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 563.985955][ T7835] smbdirect: ib_dev[syz2] removed [ 564.040165][ T26] block nbd4: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 180 seconds [ 564.040212][ T26] block nbd4: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 180 seconds [ 564.040239][ T26] block nbd4: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 180 seconds [ 564.040265][ T26] block nbd4: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 180 seconds [ 564.240242][T24172] netlink: NAT attribute has 4 unknown bytes [ 564.240282][T24172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.275673][T24159] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 564.737551][T24193] netlink: 'syz.0.4562': attribute type 21 has an invalid length. [ 564.864905][T24205] ip_tables: iptables: counters copy to user failed while replacing table [ 564.886032][T24193] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 564.895159][T24193] bond7 (unregistering): Released all slaves [ 564.919932][T24204] netlink: 'syz.4.4565': attribute type 10 has an invalid length. [ 565.687917][T24240] __nla_validate_parse: 12 callbacks suppressed [ 565.687939][T24240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4571'. [ 566.188733][T24265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4577'. [ 566.403461][T24284] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4581'. [ 566.407651][T24278] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4580'. [ 566.449408][T24278] gretap0: entered promiscuous mode [ 566.456831][T24279] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4580'. [ 566.484462][T24279] 0ªî{X¹¦: renamed from gretap0 [ 566.514213][T24279] 0ªî{X¹¦: left promiscuous mode [ 566.514238][T24279] 0ªî{X¹¦: entered allmulticast mode [ 566.545880][T24279] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 566.648222][T24288] netlink: 'syz.4.4582': attribute type 1 has an invalid length. [ 566.808476][T24303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4583'. [ 566.906971][T24289] macvlan0: entered promiscuous mode [ 566.906988][T24289] macvlan0: entered allmulticast mode [ 566.916479][T24289] bond3: entered promiscuous mode [ 566.917275][T24289] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 566.944815][T24289] bond3: left promiscuous mode [ 567.208827][T24320] netlink: 'syz.1.4586': attribute type 16 has an invalid length. [ 567.208852][T24320] netlink: 'syz.1.4586': attribute type 17 has an invalid length. [ 567.472565][ T5745] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 567.608235][T24320] bond2: left promiscuous mode [ 567.644500][T24320] ip6gre2: left allmulticast mode [ 567.660596][T24320] bond5: left promiscuous mode [ 567.663309][T24320] geneve2: left promiscuous mode [ 567.663331][T24320] geneve2: left allmulticast mode [ 567.664400][T24320] bond6: left promiscuous mode [ 567.664420][T24320] bond6: left allmulticast mode [ 567.928894][T24345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4594'. [ 568.078786][T24351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4593'. [ 568.356673][ T3106] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 568.399020][T24368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4600'. [ 568.399046][T24368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4600'. [ 568.578795][T24371] lo speed is unknown, defaulting to 1000 [ 572.069193][ T4982] udevd[4982]: worker [5628] /devices/virtual/block/nbd4 timeout; kill it [ 572.070244][ T4982] udevd[4982]: seq 20797 '/devices/virtual/block/nbd4' killed [ 578.753267][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 589.002833][ T8781] bridge0: port 3(dummy0) entered disabled state [ 589.004503][ T8781] bridge_slave_1: left allmulticast mode [ 589.006733][ T8781] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.028064][ T8781] bridge_slave_0: left allmulticast mode [ 589.028085][ T8781] bridge_slave_0: left promiscuous mode [ 589.028205][ T8781] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.053928][ T8781] pim6reg: left allmulticast mode [ 589.054410][ T8781] dvmrp0: left allmulticast mode [ 589.056917][ T8781] batman_adv: batadv0: Interface deactivated: gretap2 [ 589.218931][ T8781] bond3 (unregistering): (slave ip6gre2): Releasing backup interface [ 589.218952][ T8781] ip6gre2 (unregistering): left promiscuous mode [ 589.239409][ T8781] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 589.335941][ T8781] bond5 (unregistering): (slave erspan1): Releasing active interface [ 589.335967][ T8781] erspan1 (unregistering): left promiscuous mode [ 589.390066][ T8781] batman_adv: batadv0: Removing interface: gretap2 [ 589.460992][ T8781] bond10 (unregistering): (slave geneve3): Releasing active interface [ 589.465337][ T8781] bond4 (unregistering): (slave geneve2): Releasing active interface [ 589.517072][ T8781] bond6 (unregistering): (slave bridge1): Releasing active interface [ 589.535924][ T8781] bond13 (unregistering): (slave bridge3): Releasing backup interface [ 589.535952][ T8781] bridge3 (unregistering): left promiscuous mode [ 589.573189][ T8781]  (unregistering): (slave ªªªªª»): Releasing backup interface [ 589.575493][ T8781]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.577006][ T8781]  (unregistering): Released all slaves [ 589.585220][ T8781] bond1 (unregistering): Released all slaves [ 589.600178][ T8781] bond2 (unregistering): Released all slaves [ 589.615111][ T8781] bond3 (unregistering): Released all slaves [ 589.645971][ T8781] bond4 (unregistering): Released all slaves [ 589.667222][ T8781] bond5 (unregistering): Released all slaves [ 589.679129][ T8781] bond6 (unregistering): Released all slaves [ 589.698467][ T8781] bond7 (unregistering): Released all slaves [ 589.715154][ T8781] bond8 (unregistering): Released all slaves [ 589.726573][ T8781] bond9 (unregistering): Released all slaves [ 589.752302][ T8781] bond10 (unregistering): Released all slaves [ 589.767621][ T8781] bond11 (unregistering): (slave veth5): Releasing active interface [ 589.767650][ T8781] batadv2: entered promiscuous mode [ 589.770134][ T8781] bond11 (unregistering): (slave batadv2): Releasing active interface [ 589.770156][ T8781] batadv2: left promiscuous mode [ 589.787772][ T8781] bond11 (unregistering): Released all slaves [ 589.817730][ T8781] bond12 (unregistering): Released all slaves [ 589.829572][ T8781] bond13 (unregistering): Released all slaves [ 589.840960][ T8781] bond14 (unregistering): Released all slaves [ 589.849115][ T8781] bond15 (unregistering): Released all slaves [ 589.867395][ T8781] bond16 (unregistering): Released all slaves [ 589.888852][ T8781] bond0 (unregistering): Released all slaves [ 590.223581][ T8781] : left promiscuous mode [ 590.339242][ T8781] tipc: Disabling bearer [ 590.340232][ T8781] tipc: Left network mode [ 590.765697][ T8781] hsr_slave_0: left promiscuous mode [ 590.766186][ T8781] hsr_slave_1: left promiscuous mode [ 590.766734][ T8781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.766747][ T8781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.800277][ T8781] batadv0: left promiscuous mode [ 590.803178][ T8781] veth0_macvtap: left promiscuous mode [ 590.803281][ T8781] veth1_vlan: left promiscuous mode [ 591.369964][ T8772] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 591.592862][ T8781] IPVS: stop unused estimator thread 0... [ 593.607917][T24383] __nla_validate_parse: 1 callbacks suppressed [ 593.607939][T24383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4604'. [ 593.718343][T24383] ip_tables: iptables: counters copy to user failed while replacing table [ 593.887141][T24383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4604'. [ 594.146753][ T26] block nbd4: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 210 seconds [ 594.146802][ T26] block nbd4: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 210 seconds [ 594.146829][ T26] block nbd4: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 210 seconds [ 594.146855][ T26] block nbd4: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 210 seconds [ 594.214120][T24412] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4612'. [ 594.345615][T24416] dvmrp0: entered allmulticast mode [ 594.349682][T24416] netlink: 'syz.0.4614': attribute type 2 has an invalid length. [ 594.428836][T24416] : entered promiscuous mode [ 595.021470][T24444] syzkaller0: entered promiscuous mode [ 595.021497][T24444] syzkaller0: entered allmulticast mode [ 595.666603][T24468] bridge0: entered allmulticast mode [ 595.687043][T24468] bridge_slave_1: left allmulticast mode [ 595.687071][T24468] bridge_slave_1: left promiscuous mode [ 595.687327][T24468] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.710014][T24468] bridge_slave_0: left allmulticast mode [ 595.710042][T24468] bridge_slave_0: left promiscuous mode [ 595.710265][T24468] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.801548][T24477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4632'. [ 595.907205][T24475] Cannot find set identified by id 65534 to match [ 596.207761][T24500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4636'. [ 596.693363][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4642'. [ 596.696654][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4642'. [ 596.696948][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4642'. [ 596.697151][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4642'. [ 596.697347][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4642'. [ 597.449158][T24602] netlink: 'syz.2.4646': attribute type 10 has an invalid length. [ 597.506381][T24602] geneve4: entered promiscuous mode [ 597.506406][T24602] geneve4: entered allmulticast mode [ 598.690022][T24657] syzkaller0: entered promiscuous mode [ 598.690045][T24657] syzkaller0: entered allmulticast mode [ 598.695122][T24659] netlink: 'syz.1.4656': attribute type 1 has an invalid length. [ 598.888455][T24663] __nla_validate_parse: 53 callbacks suppressed [ 598.892456][T24663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4660'. [ 599.332773][T24678] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4664'. [ 599.531176][T24687] netlink: 'syz.2.4666': attribute type 1 has an invalid length. [ 599.531201][T24687] netlink: 'syz.2.4666': attribute type 268 has an invalid length. [ 599.531216][T24687] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4666'. [ 599.583338][T24684] bond0: entered allmulticast mode [ 599.583363][T24684] bond_slave_0: entered allmulticast mode [ 599.583382][T24684] bond_slave_1: entered allmulticast mode [ 599.583396][T24684] veth0_to_bond: entered allmulticast mode [ 599.782722][T24686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4665'. [ 599.782758][T24686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4665'. [ 599.837349][T24686] geneve3: entered promiscuous mode [ 599.837374][T24686] geneve3: entered allmulticast mode [ 599.960248][T24709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4668'. [ 599.972187][T24708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4668'. [ 599.996869][T24709] ip6gre1: entered promiscuous mode [ 599.996892][T24709] ip6gre1: entered allmulticast mode [ 600.086811][T24708] netlink: 'syz.2.4668': attribute type 6 has an invalid length. [ 600.086837][T24708] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4668'. [ 600.250816][T24686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4665'. [ 600.298783][T24723] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4671'. [ 600.336882][T24725] netlink: 'syz.4.4672': attribute type 83 has an invalid length. [ 600.518223][T24729] netlink: 'syz.4.4674': attribute type 4 has an invalid length. [ 600.813375][T24746] netlink: 'syz.0.4680': attribute type 3 has an invalid length. [ 601.319216][T24754] sctp: [Deprecated]: syz.3.4684 (pid 24754) Use of int in maxseg socket option. [ 601.319216][T24754] Use struct sctp_assoc_value instead [ 601.453047][T24763] syzkaller1: entered promiscuous mode [ 601.453073][T24763] syzkaller1: entered allmulticast mode [ 601.623766][T24775] SET target dimension over the limit! [ 601.704098][ T5621] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 602.117495][T24792] netlink: 'syz.0.4699': attribute type 4 has an invalid length. [ 602.296755][T24805] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 602.378471][ T8781] IPVS: starting estimator thread 0... [ 602.461262][T24820] IPVS: using max 32 ests per chain, 76800 per kthread [ 602.818133][ T31] audit: type=1804 audit(1789819710.933:9): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4711" name="/newroot/319/cgroup.controllers" dev="tmpfs" ino=1652 res=1 errno=0 [ 602.820069][ T31] audit: type=1800 audit(1789819710.933:10): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4711" name="cgroup.controllers" dev="tmpfs" ino=1652 res=0 errno=0 [ 602.868703][ T31] audit: type=1800 audit(1789819710.993:11): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4711" name="cgroup.controllers" dev="tmpfs" ino=1652 res=0 errno=0 [ 602.869146][ T31] audit: type=1800 audit(1789819710.993:12): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4711" name="cgroup.controllers" dev="tmpfs" ino=1652 res=0 errno=0 [ 602.875605][ T31] audit: type=1800 audit(1789819710.993:13): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4711" name="cgroup.controllers" dev="tmpfs" ino=1652 res=0 errno=0 [ 602.955356][ T31] audit: type=1800 audit(1789819711.073:14): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4711" name="cgroup.controllers" dev="tmpfs" ino=1652 res=0 errno=0 [ 602.985764][ T31] audit: type=1800 audit(1789819711.103:15): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4711" name="cgroup.controllers" dev="tmpfs" ino=1652 res=0 errno=0 [ 603.057969][ T31] audit: type=1800 audit(1789819711.173:16): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4711" name="cgroup.controllers" dev="tmpfs" ino=1652 res=0 errno=0 [ 603.058027][ T31] audit: type=1800 audit(1789819711.173:17): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4711" name="cgroup.controllers" dev="tmpfs" ino=1652 res=0 errno=0 [ 603.072010][ T31] audit: type=1800 audit(1789819711.183:18): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4711" name="cgroup.controllers" dev="tmpfs" ino=1652 res=0 errno=0 [ 603.353291][T24856] syzkaller1: entered promiscuous mode [ 603.353317][T24856] syzkaller1: entered allmulticast mode [ 603.834326][T24881] netlink: 'syz.1.4721': attribute type 32 has an invalid length. [ 604.443918][T24903] __nla_validate_parse: 16 callbacks suppressed [ 604.443935][T24903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4726'. [ 604.453730][T24903] macsec1: entered promiscuous mode [ 606.754979][T24876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.001324][T24918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4731'. [ 607.001354][T24918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4731'. [ 607.002111][T24918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4731'. [ 607.052511][T24925] netlink: 'syz.4.4735': attribute type 1 has an invalid length. [ 607.185431][T24925] 8021q: adding VLAN 0 to HW filter on device bond4 [ 607.240144][T24925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4735'. [ 607.462027][T24947] x_tables: duplicate underflow at hook 2 [ 607.824242][T24959] syzkaller0: entered promiscuous mode [ 607.824267][T24959] syzkaller0: entered allmulticast mode [ 607.856461][T24964] netlink: 'syz.4.4746': attribute type 21 has an invalid length. [ 607.942939][T24964] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 607.944901][T24964] bond5 (unregistering): Released all slaves [ 608.277092][T24990] syzkaller0: entered promiscuous mode [ 608.277117][T24990] syzkaller0: entered allmulticast mode [ 608.317888][T24990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4751'. [ 608.317927][T24990] netlink: 'syz.1.4751': attribute type 10 has an invalid length. [ 608.317943][T24990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4751'. [ 608.578660][T24992] netlink: 'syz.4.4754': attribute type 21 has an invalid length. [ 608.578688][T24992] IPv6: NLM_F_CREATE should be specified when creating new route [ 608.656489][T25009] syzkaller1: entered promiscuous mode [ 608.656514][T25009] syzkaller1: entered allmulticast mode [ 608.664133][T25009] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 608.738089][T25016] netlink: 'syz.3.4758': attribute type 21 has an invalid length. [ 608.768194][T25014] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4757'. [ 608.768223][T25014] openvswitch: netlink: Message has 4 unknown bytes. [ 608.961428][T25023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 609.053670][T25028] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4761'. [ 609.074289][T25033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.393937][T25047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4767'. [ 609.464735][T25045] netlink: 'syz.4.4766': attribute type 2 has an invalid length. [ 609.464763][T25045] netlink: 'syz.4.4766': attribute type 2 has an invalid length. [ 609.467811][T25045] __nla_validate_parse: 1 callbacks suppressed [ 609.467832][T25045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4766'. [ 609.517053][T25045] netlink: 'syz.4.4766': attribute type 8 has an invalid length. [ 609.525304][T25045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4766'. [ 609.567709][T25049] syzkaller0: entered promiscuous mode [ 609.567733][T25049] syzkaller0: entered allmulticast mode [ 609.702058][T25042] syzkaller1: entered promiscuous mode [ 609.702085][T25042] syzkaller1: entered allmulticast mode [ 610.139511][T25069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 610.327151][T25079] 8021q: VLANs not supported on vcan0 [ 610.542042][T25084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4775'. [ 610.846406][T25102] x_tables: duplicate underflow at hook 2 [ 610.964068][T25104] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4780'. [ 611.032066][T25106] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4780'. [ 611.221837][T25113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4784'. [ 611.257140][T25114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4783'. [ 611.298670][T25113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4784'. [ 611.388949][T25113] ip6gre0: left promiscuous mode [ 611.435569][T25120] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 611.739159][T25137] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20004 [ 612.025938][T25153] x_tables: duplicate underflow at hook 3 [ 612.130207][T25156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4795'. [ 612.146399][T25156] netlink: 'syz.3.4795': attribute type 9 has an invalid length. [ 612.146424][T25156] netlink: 23 bytes leftover after parsing attributes in process `syz.3.4795'. [ 612.355953][T25156] veth9: entered allmulticast mode [ 612.425717][T25165] ip6t_rpfilter: unknown options [ 613.825500][T25221] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20001 [ 613.827365][T25221] x_tables: duplicate underflow at hook 3 [ 614.512631][T23329] Bluetooth: hci2: command 0x0405 tx timeout [ 615.640449][T25194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 615.640669][T25202] __nla_validate_parse: 2 callbacks suppressed [ 615.640685][T25202] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4804'. [ 615.979307][T25237] tipc: Enabled bearer , priority 0 [ 616.026638][T25228] tipc: Disabling bearer [ 616.245392][T25253] ksmbd: Unknown IPC event: 1, ignore. [ 616.246155][T25254] ksmbd: Unknown IPC event: 1, ignore. [ 616.392797][T25265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4820'. [ 616.395453][T25260] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 617.036700][T25291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4829'. [ 617.116164][T25295] netlink: 'syz.0.4830': attribute type 5 has an invalid length. [ 617.116189][T25295] netlink: 'syz.0.4830': attribute type 9 has an invalid length. [ 617.116202][T25295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4830'. [ 617.130191][T25291] nbd: nbd1 already in use [ 617.143389][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4829'. [ 617.144126][T25291] block nbd1: NBD_DISCONNECT [ 617.144148][T25291] block nbd1: Send disconnect failed -32 [ 617.144164][T25291] block nbd1: shutting down sockets [ 617.188426][T25299] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4831'. [ 617.228366][T25299] bond5 (unregistering): Released all slaves [ 617.319137][T25306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4832'. [ 617.488531][T25312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4832'. [ 617.677390][T25306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4832'. [ 617.677424][T25306] nbd: device at index 64 is going down [ 617.997685][T25327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4835'. [ 618.120041][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 618.144947][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 618.154838][T25330] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 618.174051][T25339] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 618.205805][ T8780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.205839][ T8780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.099824][T25389] netlink: 'syz.0.4849': attribute type 1 has an invalid length. [ 619.223163][T25389] 8021q: adding VLAN 0 to HW filter on device bond7 [ 619.264210][T25391] netlink: 'syz.3.4852': attribute type 1 has an invalid length. [ 619.337146][T25391] bond5: entered promiscuous mode [ 619.337425][T25391] 8021q: adding VLAN 0 to HW filter on device bond5 [ 619.373484][T25381] bond7: (slave gretap0): making interface the new active one [ 619.376968][T25381] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 619.436135][T25391] 8021q: adding VLAN 0 to HW filter on device bond5 [ 619.436536][T25391] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 619.436559][T25391] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 619.500250][T25391] bond5: (slave wireguard0): making interface the new active one [ 619.500278][T25391] wireguard0: entered promiscuous mode [ 619.534091][T25391] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 620.096975][T25447] netlink: 'syz.2.4861': attribute type 2 has an invalid length. [ 620.099196][T25445] netlink: 'syz.2.4861': attribute type 2 has an invalid length. [ 620.639560][T25471] netlink: 'syz.0.4864': attribute type 10 has an invalid length. [ 620.837999][T25471] netlink: Unknown conntrack attr (type=8198, max=9) [ 620.838043][T25471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.003824][T25481] netlink: 'syz.1.4867': attribute type 1 has an invalid length. [ 621.009257][T25481] x_tables: unsorted entry at hook 1 [ 621.535221][T25502] __nla_validate_parse: 4 callbacks suppressed [ 621.535245][T25502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4872'. [ 621.577497][T25502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4872'. [ 621.730036][T25510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 622.027526][T25526] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4878'. [ 622.031114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.031374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.031618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.031842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.032064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.032285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.032583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.125767][T25528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4881'. [ 622.193166][T25528] netlink: 'syz.1.4881': attribute type 4 has an invalid length. [ 622.324542][T25540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4885'. [ 622.583480][T25547] syzkaller0: entered promiscuous mode [ 622.583505][T25547] syzkaller0: entered allmulticast mode [ 622.626265][T25547] syzkaller0: left promiscuous mode [ 622.626290][T25547] syzkaller0: left allmulticast mode [ 622.627126][T25554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4891'. [ 622.882690][T25567] netlink: 'syz.4.4895': attribute type 10 has an invalid length. [ 623.387605][T25594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4903'. [ 623.387630][T25594] tipc: Invalid UDP bearer configuration [ 623.387675][T25594] tipc: Enabling of bearer rejected, failed to enable media [ 623.534845][T25600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4904'. [ 623.786904][T25621] netlink: 'syz.4.4905': attribute type 1 has an invalid length. [ 623.861477][T25625] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4907'. [ 623.986771][T25619] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 624.112368][T25641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4909'. [ 624.114414][T25641] netlink: 'syz.0.4909': attribute type 1 has an invalid length. [ 624.163780][T25643] Cannot find add_set index 4 as target [ 624.190851][ T26] block nbd4: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 240 seconds [ 624.190894][ T26] block nbd4: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 240 seconds [ 624.190921][ T26] block nbd4: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 240 seconds [ 624.190945][ T26] block nbd4: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 240 seconds [ 624.305242][T25646] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.375944][T25646] bridge_slave_1 (unregistering): left allmulticast mode [ 624.375973][T25646] bridge_slave_1 (unregistering): left promiscuous mode [ 624.376083][T25646] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.304087][T25649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 627.406043][ T7415] net_ratelimit: 51 callbacks suppressed [ 627.406065][ T7415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.406311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.522065][T25706] netlink: 'syz.2.4926': attribute type 4 has an invalid length. [ 627.609021][T25709] netlink: 'syz.3.4927': attribute type 1 has an invalid length. [ 627.655873][T25713] __nla_validate_parse: 34 callbacks suppressed [ 627.655896][T25713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4928'. [ 627.743245][T25723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4927'. [ 627.867994][T25722] bridge10: entered allmulticast mode [ 627.886204][T25720] bridge2: entered promiscuous mode [ 627.896320][T25720] bond6: (slave bridge2): making interface the new active one [ 627.896700][T25720] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 627.907919][T25709] bridge3: entered promiscuous mode [ 627.931860][T25709] bond6: (slave bridge3): Enslaving as a backup interface with an up link [ 628.002928][T25732] bridge11: entered allmulticast mode [ 630.610247][T25716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 630.753119][T25759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.870471][T25762] tipc: Enabled bearer , priority 0 [ 631.045484][T25772] bond6: option downdelay: invalid value (18446744073709551615) [ 631.045512][T25772] bond6: option downdelay: allowed values 0 - 2147483647 [ 631.047547][T25772] bond6 (unregistering): Released all slaves [ 631.113816][T25783] netlink: 'syz.0.4944': attribute type 21 has an invalid length. [ 631.113863][T25783] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4944'. [ 631.175791][T25779] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 631.181426][T25779] bond8 (unregistering): Released all slaves [ 631.597501][T25800] 8021q: VLANs not supported on sit0 [ 631.621673][T25803] netlink: 'syz.3.4951': attribute type 10 has an invalid length. [ 631.685953][T25803] veth0_to_bond: entered allmulticast mode [ 631.688002][T25803] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 631.845071][T25812] netlink: 'syz.1.4953': attribute type 9 has an invalid length. [ 632.684113][T25823] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.684154][T25823] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.684180][T25823] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 632.775994][T25862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4964'. [ 632.919237][T25875] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4966'. [ 632.922556][ T8760] IPVS: starting estimator thread 0... [ 632.922793][T25875] IPVS: ip_vs_add_dest(): server weight less than zero [ 632.924508][T25823] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.924539][T25823] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.924560][T25823] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 632.929903][T25875] netlink: 'syz.2.4966': attribute type 4 has an invalid length. [ 632.929925][T25875] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.4966'. [ 632.996140][T25873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4965'. [ 633.010597][T25877] IPVS: using max 27 ests per chain, 64800 per kthread [ 633.122149][T25823] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.122190][T25823] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.122216][T25823] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 633.333181][T25823] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.333221][T25823] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.333247][T25823] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 633.536057][T25892] netlink: 'syz.1.4970': attribute type 2 has an invalid length. [ 633.536080][T25892] netlink: 'syz.1.4970': attribute type 8 has an invalid length. [ 633.536093][T25892] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4970'. [ 633.936435][T25907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4973'. [ 634.427661][T25915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4976'. [ 634.558605][T25915] bond5: (slave veth0_to_bond): Releasing active interface [ 634.757216][ T169] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.757254][ T169] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 634.757278][ T169] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 634.757384][ T169] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.757408][ T169] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 634.757432][ T169] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 634.757573][ T169] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.757598][ T169] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 634.757621][ T169] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 634.758093][T25917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4972'. [ 634.938840][T25935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4979'. [ 634.965719][T25936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4979'. [ 634.993692][ T8781] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.993728][ T8781] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 634.993761][ T8781] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 635.363410][T25945] syzkaller0: entered promiscuous mode [ 635.363435][T25945] syzkaller0: entered allmulticast mode [ 636.075042][T25988] netlink: 'syz.4.4992': attribute type 1 has an invalid length. [ 636.813611][T26025] openvswitch: netlink: Message has 4 unknown bytes. [ 636.814062][T26025] openvswitch: netlink: Message has 4 unknown bytes. [ 636.824518][T26025] openvswitch: netlink: Message has 4 unknown bytes. [ 636.825007][T26025] openvswitch: netlink: Message has 4 unknown bytes. [ 636.825411][T26025] openvswitch: netlink: Message has 4 unknown bytes. [ 636.833446][T26025] openvswitch: netlink: Message has 4 unknown bytes. [ 636.833957][T26025] openvswitch: netlink: Message has 4 unknown bytes. [ 636.834364][T26025] openvswitch: netlink: Message has 4 unknown bytes. [ 636.834793][T26025] openvswitch: netlink: Message has 4 unknown bytes. [ 636.841045][T26025] openvswitch: netlink: Message has 4 unknown bytes. [ 636.916276][T26032] netlink: 'syz.1.5005': attribute type 16 has an invalid length. [ 636.935868][T26029] netlink: 'syz.1.5005': attribute type 2 has an invalid length. [ 636.952480][T26036] netlink: 'syz.1.5005': attribute type 2 has an invalid length. [ 636.952763][T26032] netlink: 'syz.1.5005': attribute type 2 has an invalid length. [ 637.908083][T26086] bridge_slave_1: entered promiscuous mode [ 637.909492][T26086] __nla_validate_parse: 17 callbacks suppressed [ 637.909511][T26086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5020'. [ 638.014927][T26086] bridge_slave_1 (unregistering): left promiscuous mode [ 638.053000][T26092] veth0_to_bond: entered allmulticast mode [ 638.055907][T26095] xt_HMARK: spi-set and port-set can't be combined [ 638.296349][T26103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5025'. [ 638.297408][T26105] netlink: 'syz.3.5026': attribute type 4 has an invalid length. [ 638.297429][T26105] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5026'. [ 638.726194][T26120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5031'. [ 638.733399][T26120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5031'. [ 638.756273][T26123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5033'. [ 638.756310][T26123] netlink: 'syz.1.5033': attribute type 6 has an invalid length. [ 638.756323][T26123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5033'. [ 638.981048][T26137] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5037'. [ 638.981076][T26137] veth0_to_bond: default FDB implementation only supports local addresses [ 638.994351][T26123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5033'. [ 638.994383][T26123] netlink: 'syz.1.5033': attribute type 6 has an invalid length. [ 638.994395][T26123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5033'. [ 639.094819][T26143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.135695][T26143] xt_l2tp: missing protocol rule (udp|l2tpip) [ 639.176430][T26143] xt_l2tp: missing protocol rule (udp|l2tpip) [ 639.206067][T26146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.374484][T26160] netlink: 'syz.4.5045': attribute type 10 has an invalid length. [ 639.711381][T26175] block nbd0: reconnected socket [ 639.748580][ T5621] block nbd0: Receive control failed (result -32) [ 639.938410][T26184] netlink: 'syz.2.5051': attribute type 30 has an invalid length. [ 641.865746][T26237] net_ratelimit: 9 callbacks suppressed [ 641.865767][T26237] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 644.045793][T26229] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 644.046224][T26223] __nla_validate_parse: 9 callbacks suppressed [ 644.046241][T26223] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5062'. [ 644.046261][T26223] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5062'. [ 644.046829][T26227] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 644.293448][T26250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.442464][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 644.442488][ T31] audit: type=1800 audit(1789819752.563:43): pid=26259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5069" name="memory.events" dev="tmpfs" ino=2269 res=0 errno=0 [ 644.904426][T26279] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5075'. [ 644.946447][T26276] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.047628][T26283] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5079'. [ 645.402847][T26299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5083'. [ 645.589457][T26307] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5085'. [ 645.592956][T26307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5085'. [ 645.711557][T26315] openvswitch: netlink: nsh attr 16382 is out of range max 3 [ 645.874649][T26319] tipc: Disabling bearer [ 645.901631][T26323] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5090'. [ 645.959884][T26328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5092'. [ 646.237860][T26341] netlink: 'syz.0.5097': attribute type 4 has an invalid length. [ 646.237887][T26341] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5097'. [ 646.559919][T26341] .`ýÿ: renamed from bond0 (while UP) [ 646.933221][T26349] bond8: option mode: invalid value (10) [ 647.072774][ C0] vcan0: j1939_xtp_rx_dpo: no connection found [ 647.072937][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.073083][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.073234][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.073373][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.073512][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.073651][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.073788][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.073927][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.074067][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.074217][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.074349][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.074487][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.074627][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.074765][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.074899][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.075034][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.075168][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.075489][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.075647][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.075815][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.075955][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.076089][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.076222][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.076349][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.076480][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.076616][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.076761][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.076937][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.077072][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.077201][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.077360][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.077928][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.078072][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.078206][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.078336][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.078466][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.078591][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.078715][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.078826][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.078936][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.079048][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.079160][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.079272][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.079385][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.079496][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.079610][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.079732][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.079846][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.079964][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.080092][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.080205][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.081350][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.081500][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.081626][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.081762][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.081888][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.082010][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.082129][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.082249][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.082376][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.082496][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.082615][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.082740][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.083473][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.083623][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.083772][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.083948][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.084089][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.084229][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.084370][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.084510][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.084655][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.084804][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.084945][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.085086][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.085228][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.085368][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.085508][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.085648][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.085796][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.085936][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.086074][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.086215][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.086355][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.086530][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.086678][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.086818][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.086958][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.087096][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.087235][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.087375][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.087564][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.087713][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.087853][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.087991][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.088690][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.088842][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.088990][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.089131][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.089271][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.089409][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.089550][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.089716][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.089856][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.089995][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.090134][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.090274][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.092009][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.092155][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.092297][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.092438][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.092586][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.092736][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.092876][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.093017][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.093166][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.093306][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.093446][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.093585][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.093734][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.093874][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.094014][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.094154][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.094344][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.094485][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.094625][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.094773][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.095598][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.096788][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.096932][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.097062][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.097204][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.097339][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.097486][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.097626][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.097773][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.097913][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.098052][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.098187][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.098306][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.098425][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.098544][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.098696][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.098815][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.098933][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.099050][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.099169][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.099288][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.099406][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.099523][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.099640][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.099767][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.099885][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.100003][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.100121][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.100278][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.100445][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.100563][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.100689][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.101242][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.101361][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.101478][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.101595][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.101721][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.101838][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.101956][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.102073][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.102190][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.102308][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.102426][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.102545][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.102663][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.102789][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.102925][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.103043][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.103161][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.103279][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.103396][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.103514][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.103634][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.103759][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.103876][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.103993][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.104111][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.104229][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.104346][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.104463][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.104620][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.104786][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.104909][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.105028][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.106027][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.106172][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.106293][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.106411][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.106529][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.106646][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.106773][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.106891][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.107009][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.107126][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.107244][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.107373][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.107498][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.107617][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.107743][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.107862][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.107980][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.108097][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.108214][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.108358][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.108507][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.108634][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.108770][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.108889][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.109007][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.109125][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.109243][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.109362][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.109532][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.109650][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.109775][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.109893][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.110488][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.110610][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.110736][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.110854][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.110972][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.111089][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.111208][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.111326][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.111442][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.111560][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.111701][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.111829][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.111947][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.112073][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.112190][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.112309][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.112427][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.112544][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.112665][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.112797][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.112917][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.113045][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.113176][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.113301][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.113424][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.113555][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.113686][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.113805][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.113962][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.114082][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.114200][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.114318][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 647.202918][T26349] bond8 (unregistering): Released all slaves [ 647.235306][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.235571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.265537][T26370] ip_tables: iptables: counters copy to user failed while replacing table [ 648.299683][T26371] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 648.367572][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a983000: rx timeout, send abort [ 648.646954][T26378] Bluetooth: hci0: unsupported parameter 5161 [ 648.646978][T26378] Bluetooth: hci0: unsupported parameter 8192 [ 648.646989][T26378] Bluetooth: hci0: unsupported parameter 5161 [ 648.646999][T26378] Bluetooth: hci0: unsupported parameter 8192 [ 648.836798][ T5277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.869716][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a983000: abort rx timeout. Force session deactivation [ 648.898358][T26377] 0: reclassify loop, rule prio 0, protocol 800 [ 648.968595][T26391] Bluetooth: hci0: unsupported parameter 5161 [ 648.968622][T26391] Bluetooth: hci0: unsupported parameter 8192 [ 648.968646][T26391] Bluetooth: hci0: unsupported parameter 5161 [ 648.968658][T26391] Bluetooth: hci0: unsupported parameter 8192 [ 649.181883][T26392] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 649.336122][T26408] netlink: 'syz.0.5109': attribute type 25 has an invalid length. [ 649.342887][T26408] netlink: NAT attribute has 8 unknown bytes [ 649.342922][T26408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.400639][T26411] __nla_validate_parse: 1 callbacks suppressed [ 649.400663][T26411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5110'. [ 649.463298][T26414] netlink: 'syz.4.5111': attribute type 1 has an invalid length. [ 649.510738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.670878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.729089][T26414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5111'. [ 650.186441][T26446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5116'. [ 650.277322][T26448] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 650.292177][T26448] bond0: invalid NS target :: specified for addition [ 650.292207][T26448] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 650.293176][T26448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5120'. [ 650.342986][T26446] netlink: 'syz.4.5116': attribute type 2 has an invalid length. [ 650.464287][ T8781] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 650.565046][T26457] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5123'. [ 651.169237][T26496] x_tables: duplicate underflow at hook 2 [ 651.199889][T26497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5132'. [ 651.236711][T26497] vlan4: entered allmulticast mode [ 651.236736][T26497] bridge5: entered allmulticast mode [ 651.351878][T26503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5134'. [ 651.372538][T26503] macsec1: entered promiscuous mode [ 651.372563][T26503] bridge0: entered promiscuous mode [ 651.372777][T26503] macsec1: entered allmulticast mode [ 651.372792][T26503] bridge0: entered allmulticast mode [ 651.374979][T26503] bridge0: port 2(macsec1) entered blocking state [ 651.375276][T26503] bridge0: port 2(macsec1) entered disabled state [ 651.428702][T26503] bridge0: left allmulticast mode [ 651.480269][T10398] bridge0: left promiscuous mode [ 651.492692][T26505] 8021q: VLANs not supported on ip_vti0 [ 651.977334][T26524] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20002 [ 652.212711][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f075800: rx timeout, send abort [ 652.213014][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f075800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 652.515699][T26551] syz_tun: entered allmulticast mode [ 652.640726][T26549] syz_tun: left allmulticast mode [ 652.646397][T26555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5147'. [ 652.792194][T26560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5149'. [ 652.793069][T26560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5149'. [ 652.994098][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.994520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.284796][ T26] block nbd4: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 270 seconds [ 654.284834][ T26] block nbd4: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 270 seconds [ 654.284850][ T26] block nbd4: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 270 seconds [ 654.284865][ T26] block nbd4: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 270 seconds [ 656.294634][T26586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.622681][T26629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 656.706155][T26630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.922216][T26623] __nla_validate_parse: 5 callbacks suppressed [ 656.922240][T26623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5166'. [ 657.034504][T26642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5171'. [ 657.191518][T26645] netlink: 'syz.0.5172': attribute type 21 has an invalid length. [ 657.191546][T26645] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5172'. [ 657.504192][T26664] openvswitch: netlink: nsh attr 16382 is out of range max 3 [ 657.562789][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5179'. [ 657.563139][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5179'. [ 657.563309][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5179'. [ 657.563468][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5179'. [ 657.563633][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5179'. [ 657.563802][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5179'. [ 657.563961][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5179'. [ 657.602129][T26668] ipt_ah: unknown flags FF [ 657.776348][T26679] xt_cluster: node mask cannot exceed total number of nodes [ 658.043435][T26692] Cannot find add_set index 0 as target [ 658.326001][T26702] netlink: 'syz.2.5188': attribute type 1 has an invalid length. [ 658.435559][T26702] bond6: entered promiscuous mode [ 658.436059][T26702] 8021q: adding VLAN 0 to HW filter on device bond6 [ 658.680008][T26717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.705239][T26717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.763276][ T8784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.763532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.016625][T26729] bridge0: port 1(ipvlan0) entered blocking state [ 659.019180][T26729] bridge0: port 1(ipvlan0) entered disabled state [ 659.019365][T26729] ipvlan0: entered allmulticast mode [ 659.019383][T26729] bridge0: entered allmulticast mode [ 659.026910][T26729] ipvlan0: left allmulticast mode [ 659.026934][T26729] bridge0: left allmulticast mode [ 659.064037][T26734] xt_IDLETIMER: label is empty or not nul-terminated [ 659.106206][T26735] bond0: (slave gretap0): Opening slave failed [ 659.707128][T26768] batman_adv: batadv0: Adding interface: veth0 [ 659.707148][T26768] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.707178][T26768] batman_adv: batadv0: Interface activated: veth0 [ 659.707194][T26768] batadv0: mtu less than device minimum [ 659.711472][T26768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 659.713147][T26768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 659.715028][T26768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 659.716637][T26768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 659.718150][T26768] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 660.053332][T26784] netlink: 'syz.2.5210': attribute type 1 has an invalid length. [ 660.671782][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 660.694446][T26803] netlink: 'syz.1.5218': attribute type 4 has an invalid length. [ 661.056813][T26823] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 662.032381][T26885] __nla_validate_parse: 70 callbacks suppressed [ 662.032405][T26885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5237'. [ 662.352230][T26899] syzkaller1: entered promiscuous mode [ 662.352254][T26899] syzkaller1: entered allmulticast mode [ 662.355582][T26899] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5241'. [ 662.521605][T26904] xt_CT: You must specify a L4 protocol and not use inversions on it [ 662.767356][T26913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5245'. [ 662.933956][T26921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5248'. [ 663.045515][T26923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.227537][T26934] netlink: 'syz.3.5251': attribute type 1 has an invalid length. [ 663.283775][T26940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5251'. [ 663.319409][T26940] 8021q: adding VLAN 0 to HW filter on device bond9 [ 663.345511][T26934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5251'. [ 663.445792][T26934] bond9: (slave bridge4): making interface the new active one [ 663.446653][T26934] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 663.530883][T26952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5256'. [ 663.656013][T26952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5256'. [ 663.668007][T26956] netlink: 'syz.0.5258': attribute type 4 has an invalid length. [ 664.283515][T26986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5267'. [ 664.514315][ T8777] net_ratelimit: 18 callbacks suppressed [ 664.514337][ T8777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.514601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.699334][T27008] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5272'. [ 664.798986][T27007] netlink: Failed to add helper -22 [ 664.799045][T27007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.841679][T27015] netlink: 'syz.3.5275': attribute type 10 has an invalid length. [ 664.842014][T27015] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.842379][T27015] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.886538][T27015] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.886672][T27015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.886984][T27015] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.887104][T27015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.931501][T27015] bridge0: entered allmulticast mode [ 664.932133][T27015] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 665.691961][T27054] netlink: 'syz.3.5286': attribute type 1 has an invalid length. [ 666.049674][T27049] tipc: Started in network mode [ 666.049701][T27049] tipc: Node identity 7e5316c9acb6, cluster identity 4711 [ 666.049813][T27049] tipc: Enabled bearer , priority 0 [ 666.132416][T27054] syzkaller0: entered promiscuous mode [ 666.132443][T27054] syzkaller0: entered allmulticast mode [ 666.132980][T27054] tipc: Resetting bearer [ 666.177855][T27045] tipc: Resetting bearer [ 666.784126][T27094] xt_l2tp: unknown flags: 43 [ 667.006048][T27099] sctp: [Deprecated]: syz.2.5297 (pid 27099) Use of int in max_burst socket option deprecated. [ 667.006048][T27099] Use struct sctp_assoc_value instead [ 667.133472][T27103] __nla_validate_parse: 5 callbacks suppressed [ 667.133488][T27103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5298'. [ 669.939744][T27045] tipc: Disabling bearer [ 669.948014][T10399] tipc: Node number set to 3538228937 [ 669.954130][T27109] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 670.167301][T27112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5301'. [ 670.275122][ T7833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.275383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.385759][T27130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5302'. [ 670.471115][T27122] xt_TPROXY: Can be used only with -p tcp or -p udp [ 670.503932][T27134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5306'. [ 670.578708][T27145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5308'. [ 670.595162][T27143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.596340][T27143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.596957][T27143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.597880][T27143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.598212][T27143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.598820][T27143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.674407][T27142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.877274][T27155] netlink: 292 bytes leftover after parsing attributes in process `syz.2.5310'. [ 670.877305][T27155] netlink: 292 bytes leftover after parsing attributes in process `syz.2.5310'. [ 670.955711][T27156] xt_cgroup: invalid path, errno=-2 [ 670.993796][T27158] atomic_op ffff888072e131e0 conn xmit_atomic 0000000000000000 [ 670.997161][T27161] atomic_op ffff8880128df9e0 conn xmit_atomic 0000000000000000 [ 671.298956][T27173] netlink: 'syz.0.5316': attribute type 1 has an invalid length. [ 671.298997][T27173] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5316'. [ 671.299016][T27173] netlink: 'syz.0.5316': attribute type 1 has an invalid length. [ 671.428249][T27177] ip_tables: iptables: counters copy to user failed while replacing table [ 671.539953][T27181] netlink: 'syz.4.5318': attribute type 1 has an invalid length. [ 671.582160][T27181] bond8: entered promiscuous mode [ 671.582657][T27181] 8021q: adding VLAN 0 to HW filter on device bond8 [ 671.720888][T27181] 8021q: adding VLAN 0 to HW filter on device bond8 [ 671.721287][T27181] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 671.721308][T27181] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 671.808019][T27181] bond8: (slave wireguard0): making interface the new active one [ 671.808058][T27181] wireguard0: entered promiscuous mode [ 671.825038][T27181] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 671.918520][T27195] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 671.925847][T27191] ip6gre2: entered allmulticast mode [ 672.029626][T27198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5323'. [ 672.324757][T27214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5328'. [ 672.556452][T27233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5332'. [ 672.686798][T27238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5335'. [ 672.707528][T27236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5334'. [ 672.936893][T27249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5340'. [ 673.001398][T27252] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5340'. [ 673.007548][T27249] xfrm1: entered promiscuous mode [ 673.007570][T27249] xfrm1: entered allmulticast mode [ 676.038183][ T7833] net_ratelimit: 6 callbacks suppressed [ 676.038204][ T7833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.038436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.409563][T27286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5351'. [ 676.633775][T27306] openvswitch: netlink: Unknown nsh attribute 0 [ 676.905155][T27318] netlink: 'syz.4.5358': attribute type 3 has an invalid length. [ 676.936977][T27318] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5358'. [ 676.941637][T27319] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5358'. [ 676.964557][T27318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5358'. [ 677.137346][T27330] macvtap0: entered allmulticast mode [ 677.156958][T27333] tipc: New replicast peer: 172.20.20.187 [ 677.167243][T27333] tipc: Enabled bearer , priority 10 [ 677.186619][T27336] macvtap2: entered promiscuous mode [ 677.189873][T27336] macvtap2: entered allmulticast mode [ 677.204207][T27338] netlink: Unknown conntrack attr (0) [ 677.207234][T27336] [ 677.214985][T27336] ====================================================== [ 677.222022][T27336] WARNING: possible circular locking dependency detected [ 677.229058][T27336] syzkaller #0 Not tainted [ 677.233476][T27336] ------------------------------------------------------ [ 677.240500][T27336] syz.2.5365/27336 is trying to acquire lock: [ 677.246571][T27336] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 677.256982][T27336] [ 677.256982][T27336] but task is already holding lock: [ 677.264433][T27336] ffffffff8f802040 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 677.273322][T27336] [ 677.273322][T27336] which lock already depends on the new lock. [ 677.273322][T27336] [ 677.283726][T27336] [ 677.283726][T27336] the existing dependency chain (in reverse order) is: [ 677.292945][T27336] [ 677.292945][T27336] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 677.300441][T27336] __mutex_lock+0x19d/0x1550 [ 677.305626][T27336] get_device_parent+0x16f/0x3a0 [ 677.311133][T27336] device_add+0x2d4/0xb80 [ 677.316007][T27336] device_create+0x269/0x300 [ 677.321156][T27336] msr_device_create+0x33/0x50 [ 677.326826][T27336] cpuhp_invoke_callback+0x434/0x810 [ 677.332882][T27336] cpuhp_thread_fun+0x362/0x780 [ 677.338262][T27336] smpboot_thread_fn+0x565/0xa70 [ 677.343726][T27336] kthread+0x38b/0x480 [ 677.348430][T27336] ret_from_fork+0x514/0xb70 [ 677.353548][T27336] ret_from_fork_asm+0x1a/0x30 [ 677.358851][T27336] [ 677.358851][T27336] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 677.366415][T27336] cpuhp_thread_fun+0x127/0x780 [ 677.371794][T27336] smpboot_thread_fn+0x565/0xa70 [ 677.377351][T27336] kthread+0x38b/0x480 [ 677.381943][T27336] ret_from_fork+0x514/0xb70 [ 677.387138][T27336] ret_from_fork_asm+0x1a/0x30 [ 677.392443][T27336] [ 677.392443][T27336] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 677.400196][T27336] cpus_read_lock+0x42/0x160 [ 677.405397][T27336] static_key_slow_inc+0x12/0x30 [ 677.411055][T27336] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 677.417371][T27336] nbd_genl_foreach_sock+0x265/0x450 [ 677.423180][T27336] nbd_genl_reconfigure+0xbbb/0x1040 [ 677.429424][T27336] genl_family_rcv_msg_doit+0x233/0x340 [ 677.435501][T27336] genl_rcv_msg+0x614/0x7a0 [ 677.440530][T27336] netlink_rcv_skb+0x226/0x4a0 [ 677.445838][T27336] genl_rcv+0x28/0x40 [ 677.450343][T27336] netlink_unicast+0x7bd/0x940 [ 677.455650][T27336] netlink_sendmsg+0x813/0xb40 [ 677.460941][T27336] sock_sendmsg_nosec+0x13a/0x180 [ 677.466662][T27336] ____sys_sendmsg+0x54e/0x850 [ 677.471955][T27336] ___sys_sendmsg+0x2a5/0x360 [ 677.477159][T27336] __x64_sys_sendmsg+0x1b1/0x290 [ 677.482636][T27336] do_syscall_64+0x166/0x520 [ 677.487772][T27336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.494359][T27336] [ 677.494359][T27336] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 677.502098][T27336] __mutex_lock+0x19d/0x1550 [ 677.507224][T27336] nbd_queue_rq+0x373/0xff0 [ 677.512251][T27336] blk_mq_dispatch_rq_list+0x499/0x1990 [ 677.518386][T27336] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 677.525262][T27336] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 677.531772][T27336] blk_mq_run_work_fn+0x16c/0x300 [ 677.537322][T27336] process_scheduled_works+0xc3d/0x1630 [ 677.543389][T27336] worker_thread+0xa47/0xfb0 [ 677.548588][T27336] kthread+0x38b/0x480 [ 677.553222][T27336] ret_from_fork+0x514/0xb70 [ 677.558444][T27336] ret_from_fork_asm+0x1a/0x30 [ 677.563735][T27336] [ 677.563735][T27336] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 677.570946][T27336] __mutex_lock+0x19d/0x1550 [ 677.576063][T27336] nbd_queue_rq+0xc1/0xff0 [ 677.581095][T27336] blk_mq_dispatch_rq_list+0x499/0x1990 [ 677.587176][T27336] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 677.594023][T27336] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 677.600698][T27336] blk_mq_run_work_fn+0x16c/0x300 [ 677.606442][T27336] process_scheduled_works+0xc3d/0x1630 [ 677.612948][T27336] worker_thread+0xa47/0xfb0 [ 677.618075][T27336] kthread+0x38b/0x480 [ 677.622928][T27336] ret_from_fork+0x514/0xb70 [ 677.628054][T27336] ret_from_fork_asm+0x1a/0x30 [ 677.633361][T27336] [ 677.633361][T27336] -> #5 (set->srcu){.+.+}-{0:0}: [ 677.640837][T27336] __synchronize_srcu+0xc9/0x2f0 [ 677.646317][T27336] elevator_switch+0x1e8/0x7b0 [ 677.651824][T27336] elevator_change+0x2fa/0x480 [ 677.657295][T27336] elevator_set_default+0x375/0x440 [ 677.663016][T27336] blk_register_queue+0x3f3/0x4e0 [ 677.668741][T27336] __add_disk+0x6b8/0xdb0 [ 677.673693][T27336] add_disk_fwnode+0x100/0x3a0 [ 677.679000][T27336] nbd_dev_add+0x733/0xb60 [ 677.683949][T27336] nbd_init+0x168/0x1f0 [ 677.688723][T27336] do_one_initcall+0x250/0x870 [ 677.694112][T27336] do_initcall_level+0x10a/0x1a0 [ 677.699606][T27336] do_initcalls+0x59/0xa0 [ 677.704482][T27336] kernel_init_freeable+0x29d/0x3e0 [ 677.710211][T27336] kernel_init+0x22/0x1d0 [ 677.715078][T27336] ret_from_fork+0x514/0xb70 [ 677.720293][T27336] ret_from_fork_asm+0x1a/0x30 [ 677.726029][T27336] [ 677.726029][T27336] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 677.733948][T27336] __mutex_lock+0x19d/0x1550 [ 677.739095][T27336] elevator_change+0x1af/0x480 [ 677.744386][T27336] elevator_set_none+0xb5/0x140 [ 677.749760][T27336] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 677.756095][T27336] nbd_start_device+0x189/0xb30 [ 677.761567][T27336] nbd_genl_connect+0x167d/0x1cd0 [ 677.767117][T27336] genl_family_rcv_msg_doit+0x233/0x340 [ 677.773371][T27336] genl_rcv_msg+0x614/0x7a0 [ 677.778408][T27336] netlink_rcv_skb+0x226/0x4a0 [ 677.783696][T27336] genl_rcv+0x28/0x40 [ 677.788208][T27336] netlink_unicast+0x7bd/0x940 [ 677.793493][T27336] netlink_sendmsg+0x813/0xb40 [ 677.798822][T27336] sock_sendmsg_nosec+0x13a/0x180 [ 677.804370][T27336] ____sys_sendmsg+0x54e/0x850 [ 677.809656][T27336] ___sys_sendmsg+0x2a5/0x360 [ 677.814963][T27336] __x64_sys_sendmsg+0x1b1/0x290 [ 677.820426][T27336] do_syscall_64+0x166/0x520 [ 677.826001][T27336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.832420][T27336] [ 677.832420][T27336] -> #3 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 677.841030][T27336] blk_alloc_queue+0x544/0x690 [ 677.846400][T27336] __blk_mq_alloc_disk+0x194/0x390 [ 677.853000][T27336] nbd_dev_add+0x494/0xb60 [ 677.857940][T27336] nbd_init+0x168/0x1f0 [ 677.862622][T27336] do_one_initcall+0x250/0x870 [ 677.867914][T27336] do_initcall_level+0x10a/0x1a0 [ 677.873384][T27336] do_initcalls+0x59/0xa0 [ 677.878243][T27336] kernel_init_freeable+0x29d/0x3e0 [ 677.884067][T27336] kernel_init+0x22/0x1d0 [ 677.889115][T27336] ret_from_fork+0x514/0xb70 [ 677.894228][T27336] ret_from_fork_asm+0x1a/0x30 [ 677.899526][T27336] [ 677.899526][T27336] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 677.906744][T27336] fs_reclaim_acquire+0x71/0x100 [ 677.912211][T27336] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 677.918465][T27336] alloc_inode+0xb8/0x1b0 [ 677.923418][T27336] iget_locked+0x131/0x6a0 [ 677.928580][T27336] kernfs_get_inode+0x4f/0x770 [ 677.934917][T27336] kernfs_get_tree+0x5cd/0x980 [ 677.940242][T27336] vfs_get_tree+0x92/0x2a0 [ 677.945331][T27336] do_new_mount+0x319/0xdc0 [ 677.950367][T27336] __se_sys_mount+0x31d/0x420 [ 677.955590][T27336] do_syscall_64+0x166/0x520 [ 677.960740][T27336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.967167][T27336] [ 677.967167][T27336] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 677.975181][T27336] down_write+0x96/0x200 [ 677.979954][T27336] kernfs_remove_by_name_ns+0x4e/0x140 [ 677.985939][T27336] device_links_driver_bound+0x4ab/0x1440 [ 677.992244][T27336] driver_bound+0xd8/0x2e0 [ 677.997399][T27336] really_probe+0x774/0xae0 [ 678.002454][T27336] __driver_probe_device+0x1e8/0x360 [ 678.008289][T27336] driver_probe_device+0x4f/0x240 [ 678.013851][T27336] __device_attach_driver+0x270/0x410 [ 678.019920][T27336] bus_for_each_drv+0x258/0x2f0 [ 678.025570][T27336] __device_attach+0x2c4/0x450 [ 678.030857][T27336] device_initial_probe+0xa1/0xd0 [ 678.036409][T27336] bus_probe_device+0x12a/0x220 [ 678.041782][T27336] device_add+0x7d7/0xb80 [ 678.046632][T27336] faux_device_create_with_groups+0x1a5/0x2b0 [ 678.053658][T27336] regulator_dummy_init+0x19/0x40 [ 678.059294][T27336] regulator_init+0xca/0x110 [ 678.064418][T27336] do_one_initcall+0x250/0x870 [ 678.069725][T27336] do_initcall_level+0x10a/0x1a0 [ 678.075629][T27336] do_initcalls+0x59/0xa0 [ 678.080685][T27336] kernel_init_freeable+0x29d/0x3e0 [ 678.086500][T27336] kernel_init+0x22/0x1d0 [ 678.091530][T27336] ret_from_fork+0x514/0xb70 [ 678.096740][T27336] ret_from_fork_asm+0x1a/0x30 [ 678.102304][T27336] [ 678.102304][T27336] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 678.110909][T27336] __lock_acquire+0x164c/0x2de0 [ 678.116471][T27336] lock_acquire+0x115/0x350 [ 678.121504][T27336] down_read+0x4a/0x330 [ 678.126366][T27336] kernfs_remove+0x35/0x80 [ 678.131394][T27336] __kobject_del+0xe0/0x310 [ 678.136488][T27336] kobject_del+0x45/0x60 [ 678.141429][T27336] cleanup_glue_dir+0x1a3/0x220 [ 678.146824][T27336] device_del+0x77d/0x8f0 [ 678.151850][T27336] device_destroy+0xb2/0x1a0 [ 678.157222][T27336] macvtap_device_event+0x226/0x400 [ 678.163188][T27336] notifier_call_chain+0x1a5/0x3d0 [ 678.168842][T27336] unregister_netdevice_many_notify+0x17f9/0x2140 [ 678.175869][T27336] rtnl_newlink_create+0x664/0x7b0 [ 678.181640][T27336] rtnl_newlink+0x166d/0x1c30 [ 678.186848][T27336] rtnetlink_rcv_msg+0x802/0xc00 [ 678.192399][T27336] netlink_rcv_skb+0x226/0x4a0 [ 678.197695][T27336] netlink_unicast+0x7bd/0x940 [ 678.202987][T27336] netlink_sendmsg+0x813/0xb40 [ 678.208467][T27336] sock_sendmsg_nosec+0x13a/0x180 [ 678.214016][T27336] ____sys_sendmsg+0x54e/0x850 [ 678.219570][T27336] ___sys_sendmsg+0x2a5/0x360 [ 678.224785][T27336] __x64_sys_sendmsg+0x1b1/0x290 [ 678.230272][T27336] do_syscall_64+0x166/0x520 [ 678.235506][T27336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.241938][T27336] [ 678.241938][T27336] other info that might help us debug this: [ 678.241938][T27336] [ 678.252344][T27336] Chain exists of: [ 678.252344][T27336] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 678.252344][T27336] [ 678.265736][T27336] Possible unsafe locking scenario: [ 678.265736][T27336] [ 678.273200][T27336] CPU0 CPU1 [ 678.278565][T27336] ---- ---- [ 678.284020][T27336] lock(gdp_mutex); [ 678.287933][T27336] lock(cpuhp_state-up); [ 678.294790][T27336] lock(gdp_mutex); [ 678.301384][T27336] rlock(&root->kernfs_supers_rwsem); [ 678.306938][T27336] [ 678.306938][T27336] *** DEADLOCK *** [ 678.306938][T27336] [ 678.315338][T27336] locks held by syz.2.5365/27336: 3, last CPU#1: [ 678.321882][T27336] #0: ffffffff907a80d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 678.331391][T27336] #1: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 678.340449][T27336] #2: ffffffff8f802040 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 678.349693][T27336] [ 678.349693][T27336] stack backtrace: [ 678.355768][T27336] CPU: 1 UID: 0 PID: 27336 Comm: syz.2.5365 Not tainted syzkaller #0 PREEMPT(full) [ 678.365405][T27336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.375815][T27336] Call Trace: [ 678.379097][T27336] [ 678.382037][T27336] dump_stack_lvl+0xe8/0x150 [ 678.386646][T27336] print_circular_bug+0x2e2/0x300 [ 678.391676][T27336] check_noncircular+0x12f/0x150 [ 678.396707][T27336] __lock_acquire+0x164c/0x2de0 [ 678.401654][T27336] lock_acquire+0x115/0x350 [ 678.406334][T27336] ? kernfs_remove+0x35/0x80 [ 678.411016][T27336] down_read+0x4a/0x330 [ 678.415362][T27336] ? kernfs_remove+0x35/0x80 [ 678.420156][T27336] kernfs_remove+0x35/0x80 [ 678.424591][T27336] __kobject_del+0xe0/0x310 [ 678.429192][T27336] kobject_del+0x45/0x60 [ 678.433573][T27336] cleanup_glue_dir+0x1a3/0x220 [ 678.438432][T27336] device_del+0x77d/0x8f0 [ 678.442793][T27336] ? __pfx_device_del+0x10/0x10 [ 678.447658][T27336] ? kobject_put+0x50f/0x550 [ 678.452257][T27336] device_destroy+0xb2/0x1a0 [ 678.456872][T27336] ? __pfx_device_destroy+0x10/0x10 [ 678.462212][T27336] ? kernfs_remove_by_name_ns+0x101/0x140 [ 678.468208][T27336] macvtap_device_event+0x226/0x400 [ 678.473409][T27336] ? __pfx_ipvlan_device_event+0x10/0x10 [ 678.479185][T27336] ? __pfx_macvtap_device_event+0x10/0x10 [ 678.484998][T27336] notifier_call_chain+0x1a5/0x3d0 [ 678.490217][T27336] unregister_netdevice_many_notify+0x17f9/0x2140 [ 678.496658][T27336] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 678.503440][T27336] ? netdev_upper_dev_unlink+0x99/0xe0 [ 678.508899][T27336] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 678.514895][T27336] ? macvlan_dellink+0x3e4/0x470 [ 678.519906][T27336] rtnl_newlink_create+0x664/0x7b0 [ 678.525030][T27336] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 678.530763][T27336] ? __pfx___mutex_lock+0x10/0x10 [ 678.535798][T27336] ? ns_capable+0x89/0xe0 [ 678.540219][T27336] rtnl_newlink+0x166d/0x1c30 [ 678.544992][T27336] ? __pfx_rtnl_newlink+0x10/0x10 [ 678.550036][T27336] ? do_syscall_64+0x166/0x520 [ 678.554804][T27336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.560915][T27336] ? kasan_quarantine_put+0xbb/0x1f0 [ 678.566287][T27336] ? lockdep_hardirqs_on+0x7b/0x110 [ 678.571597][T27336] ? nlmon_xmit+0xb0/0x100 [ 678.576301][T27336] ? kmem_cache_free+0x182/0x650 [ 678.581288][T27336] ? __lock_acquire+0x747/0x2de0 [ 678.586332][T27336] ? __local_bh_enable_ip+0xd6/0x140 [ 678.591718][T27336] ? lockdep_hardirqs_on+0x7b/0x110 [ 678.596992][T27336] ? __dev_queue_xmit+0x29b/0x3820 [ 678.602243][T27336] ? __local_bh_enable_ip+0xd6/0x140 [ 678.607541][T27336] ? __dev_queue_xmit+0x29b/0x3820 [ 678.612764][T27336] ? lock_acquire+0x115/0x350 [ 678.617569][T27336] ? __pfx_rtnl_newlink+0x10/0x10 [ 678.622610][T27336] rtnetlink_rcv_msg+0x802/0xc00 [ 678.627559][T27336] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 678.632853][T27336] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 678.638407][T27336] ? ref_tracker_free+0x689/0x830 [ 678.643520][T27336] ? __pfx_ref_tracker_free+0x10/0x10 [ 678.648901][T27336] netlink_rcv_skb+0x226/0x4a0 [ 678.653761][T27336] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 678.659224][T27336] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 678.664611][T27336] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.669822][T27336] ? netlink_deliver_tap+0x2e/0x1b0 [ 678.675122][T27336] netlink_unicast+0x7bd/0x940 [ 678.679912][T27336] netlink_sendmsg+0x813/0xb40 [ 678.684691][T27336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.690078][T27336] ? apparmor_socket_sendmsg+0x98/0x360 [ 678.695742][T27336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.701063][T27336] sock_sendmsg_nosec+0x13a/0x180 [ 678.706124][T27336] ____sys_sendmsg+0x54e/0x850 [ 678.710941][T27336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.716435][T27336] ? import_iovec+0x73/0xa0 [ 678.721055][T27336] ___sys_sendmsg+0x2a5/0x360 [ 678.725909][T27336] ? __lock_acquire+0x747/0x2de0 [ 678.731083][T27336] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.736306][T27336] ? futex_wait+0x2a2/0x390 [ 678.740946][T27336] ? __fget_files+0x2a/0x420 [ 678.745547][T27336] ? __fget_files+0x3a2/0x420 [ 678.750236][T27336] __x64_sys_sendmsg+0x1b1/0x290 [ 678.755186][T27336] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 678.761011][T27336] do_syscall_64+0x166/0x520 [ 678.765694][T27336] ? trace_irq_disable+0x3b/0x140 [ 678.770723][T27336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.776797][T27336] ? clear_bhb_loop+0x70/0xc0 [ 678.781478][T27336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.787377][T27336] RIP: 0033:0x7fd72439e159 [ 678.791796][T27336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.811407][T27336] RSP: 002b:00007fd7252d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.819836][T27336] RAX: ffffffffffffffda RBX: 00007fd724626270 RCX: 00007fd72439e159 [ 678.828094][T27336] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000045 [ 678.836080][T27336] RBP: 00007fd72443506b R08: 0000000000000000 R09: 0000000000000000 [ 678.844335][T27336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.852664][T27336] R13: 00007fd724626308 R14: 00007fd724626270 R15: 00007ffc1663e348 [ 678.860653][T27336] [ 678.905912][ T3106] tipc: Node number set to 1165142229 [ 678.947762][T27340] bond8: option downdelay: invalid value (18446744073709551615) [ 678.947781][T27340] bond8: option downdelay: allowed values 0 - 2147483647 [ 678.948532][T27340] bond8 (unregistering): Released all slaves [ 681.800931][ T8777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.801129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.353196][ T26] block nbd4: Possible stuck request ffff888027680000: control (read@0,1024B). Runtime 300 seconds [ 684.353238][ T26] block nbd4: Possible stuck request ffff8880276801c0: control (read@1024,1024B). Runtime 300 seconds [ 684.353258][ T26] block nbd4: Possible stuck request ffff888027680380: control (read@2048,1024B). Runtime 300 seconds [ 684.353273][ T26] block nbd4: Possible stuck request ffff888027680540: control (read@3072,1024B). Runtime 300 seconds [ 686.272905][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 686.910805][ T8777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.910942][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog