last executing test programs: 3.73214919s ago: executing program 1 (id=13768): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.720678529s ago: executing program 1 (id=13770): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.540385842s ago: executing program 1 (id=13772): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0x8, 0x800, 0x0) ioctl$IMGETCOUNT(r1, 0x61e0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) socket(0x8, 0x800, 0x0) (async) ioctl$IMGETCOUNT(r1, 0x61e0, 0x0) (async) 2.484194276s ago: executing program 0 (id=13786): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0009000000696467650000240002800800080088a8ffff0c004e2603000008000001000a001400a77b911800798744d44016eabdc04156caf734308771743a591e21b0acb086773067803a7997baa1bd68090e48a91af59f27a9289539"], 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 2.226589909s ago: executing program 0 (id=13790): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000540)={'erspan0\x00', r2, 0x40, 0x20, 0x6, 0x57, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x67, 0x0, 0x40, 0x29, 0x0, @multicast1, @remote}}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0x7, 0x1ff, "fac16a590b17"}}) r4 = socket(0x2d, 0x2, 0x0) recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x41, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000002340)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381409", 0x48, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x3ff, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000001, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x20}}}}}}}}}, 0x0) 2.072403321s ago: executing program 2 (id=13792): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00010000d50b225f41775217ac82d62b2e3e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9100000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37bc21cfdc8180c7d09c35d130d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6e19946b18a45333df51d78f735999aadfcda64488160c4ae6ba9dcef0c144e3de7be7fdc1ead6a425ff6128fab1517630c1d9507e0685488a57f85298b4e4382842c0730"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/'], 0x20) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$inet6(0xa, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8000000010901040000000000530000000000000900010073797a31000000000900010073797a310000000008000340000000000c0004800800014000000000100002000c00028007000100000000000800054000000000840002001400018008000100ffffffff08000200ac1e000114000180080001000a01010008000200ffffffff06000340000300000c0002"], 0xe8}}, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000004c0), 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x10) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x6, 'devices'}, {0x2b, 'io'}, {0x2d, 'io'}]}, 0x11) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f0000000140)=0xc4ea, 0x4) 1.940070507s ago: executing program 4 (id=13793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x50) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000180), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000010000000000010000000000000001410000001c001700000000000000006574683a7379a4bee846fe4814f3348345"], 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x14, r5, 0x4, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x41) 1.786929431s ago: executing program 2 (id=13794): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x3f, "f523e9cfd048f3c0a578bdeacdc80ec836d62a0d188e33ad008b46db537c1ff307321f3a27e72daf49e145587c0f4fc1e418428167f74ebc797b8e68a636c4"}, &(0x7f0000000140)=0x47) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000180)={r8, 0xd5, "3bdc2f0a10c4a301f5e9462a843ed17333fda44891f09e554cfe1595828c82aa3e9bc85da00f0f69d24d33bdc41e0b237c1425af7dbc2feef63ad6f382b41b98dbdc5cf5ccdf345bf276a117e68d2843475e9a781e28a1c114cf440f3f943b59a84a8d41992527b03cb1a8646493ba824b68e7cd1346e73590150d0aa7d4c885bd095f7768b20807c8d6a74a67fb0838cd99a912f70aad9c77ba95bbac3c7382f5e7799a79fb6798d7325ab02567091ba98cf27322a9481a3afdf123fe8d2fe1b7576dea7df19f15c7d9e444efd03feea8dec111e2"}, &(0x7f0000000280)=0xdd) socket$inet6(0xa, 0x1, 0x100) 1.703880413s ago: executing program 4 (id=13795): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x8917, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.512658603s ago: executing program 0 (id=13797): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @multicast1}}) 1.264374371s ago: executing program 0 (id=13799): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) (async) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r3, 0x1, 0x4c, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c00000800018004"], 0x1c}}, 0xc000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendto(r2, &(0x7f0000000040)="3d1aaf6b1d3bfd22880818354a04b2243bedf8df1e02c8569c", 0x19, 0x41, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x80) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="012100000000000000000700000008000300", @ANYRESHEX=r0, @ANYBLOB="140004007069093672656730000000000000000008000500060000001c00e70031329eae551326051c0ecba1df0ef9cc9415b343831f26fe0c0017800400030004000400"], 0x60}}, 0x4004800) 1.234359928s ago: executing program 3 (id=13800): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x800, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x2580, 0x73700}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.084272213s ago: executing program 4 (id=13801): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) close(r3) (async) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$unix(0x1, 0x2, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffe1}]}}}]}, 0x3c}}, 0x0) 1.082876317s ago: executing program 0 (id=13802): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x2}, 0x1c) (async, rerun: 64) r1 = accept4(r0, &(0x7f0000000640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x80, 0x800) (rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001300e9992dbd700000000000fc000000000000000000000000000000ac1e00010000000000000000000000004e220000000000000a00302011000000", @ANYRES32=r0, @ANYRESDEC, @ANYRESHEX], 0xb8}}, 0x4000) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000091108c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) close(r2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000400040000ccbe78a4202921a7980000f9010000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f1ffffffff0000000000007a20000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r7, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xffd, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0x401, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x10000000, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f0000000100)={0x2}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f0000000140)={0x20000004}) (async, rerun: 32) epoll_pwait(r9, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xb, 0xa, 0x0, 0x0) 1.079807533s ago: executing program 3 (id=13803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf258100000008000300", @ANYRES32=r3, @ANYBLOB="19013300d0940300ffffffffffff080211000001d685f3fe6495620000088c8100000626f40209aa87ef77ed7be675bf83fe9a9406031ac3f22bceeee181eaa89754b4f557a58e"], 0x154}, 0x1, 0x0, 0x0, 0x20048804}, 0x800) 1.03833521s ago: executing program 1 (id=13804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x44840) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febb40018"], 0x0, 0x4a}, 0x20) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r7, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80000000}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x20040000) (async) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) 892.482881ms ago: executing program 3 (id=13805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a40)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_SEND(r9, 0x40489426, &(0x7f0000000080)={{r0}, 0x2, &(0x7f0000000040)=[0x4, 0x10], 0x80}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) 790.935972ms ago: executing program 2 (id=13806): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2, 0x0, 0x0, 0x12}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40}, 0x20) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x9, 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000800000000000000ffff0800040000000000000000", 0x39}], 0x1) 695.481498ms ago: executing program 4 (id=13807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x8d, &(0x7f0000000900)={@random="e10931d8640a", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x57, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x57, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}, "d2fad28f4e8783b636022538c67884f4fdc88e31c0e310e0fb2c39766ac58392a0f9653fdf9ec7e6972c9ece3042198c7a24f3ec2185138fe030170dda008bd7d42867c177d4e3"}}}}}}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000001640), 0x20200, 0x0) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$nl_route(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x9}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) socket$unix(0x1, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r10}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r9}, 0x20) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="800100001000010000000000000000ac141400000000000000000000000000ac14140000000000000000000000000000000000000000000a0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722873657270656e74290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003"], 0x180}}, 0x0) sendmmsg$inet6(r9, &(0x7f00000015c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x3bc7}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000280)="0f321a745a5cf28454449e3dbbbc1b06be2f9508e4aae8d3083dcc1a35224a26d3e66f3d4c5edc0518c7cc10e3e1dad92506bf3d798b17d21a812537a88073e4fafd75c834f768a6f3749feaed73688289f10a0b18b6d1b14b945fb1e004d4a70e7a44f313fb6da4c76569a795ed1f7909d6daebc6ad87f399381495d71f1a66aa5d0ad6601d767786fc1ad3d22d66d8ed51b712556e0264391816dc9c8fd1349ad5c11cb85e9ba2697abdcc47a783606a70779cf9ab03c530d31c2d", 0xbc}, {&(0x7f0000000040)="f13da5743ab864a8ac4cab21d7243d381f55fbf0dd1b3f7ae924c26c9eed2fd73eee9253df274601a5c8162f4f1ede1a07566d2131f8a0e15062d3f17e9ebb4bacdc1b1e86a513b819da904f85af1daf8c528a66b464fac4248ed8caa3518c5ef693e01bd4e59de176ba5c1cacfdeeb6a5b70327", 0x74}, {&(0x7f0000000440)="657738257a29e7ea7ab8f6bb93d064ef2b834384acdeaf6debc1305b3635ced13eef9c5634efc1d72e842e938cd998b2e078a63eafd1bf80017ed74fe918358e488fc154b3f0ea5efeff95056646198bb64ea36cf09a0c19383590488e2166cf1fd3d214b65d2815e4a7543b9ec7dc855aac74d1aeb5d14d33f7e83418c723d4477850a7e2847620b9855cbe75727904e32365da7ff89b6ff00934f6f92482a42b19a4989afbbf5fc3f06411105a6471fcfad22eace321d5388fc939fad6227ddc5407a18f3e021ae8e9bed1bb787aa1776db3b32d214dc5bce4b27ba91cbde315ea9c559e3979e5b6d9b4a42bb5926bfa32025504", 0xf5}, {&(0x7f0000000100)="ed9ebf9c1e2157104e1003fd936b2a21daebb9b79c3cfe8af5bd7100d59422ebf373edb92f9759768ac4aab9a0", 0x2d}], 0x4, &(0x7f0000000540)=[@rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x0, 0x0, 0x0, [@mcast1, @mcast1]}}}, @hopopts={{0x1040, 0x29, 0x36, {0x32, 0x204, '\x00', [@generic={0x7, 0xa, "a7d565468d3577129460"}, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @generic={0x7, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x100}, @enc_lim={0x4, 0x1, 0x2}]}}}], 0x1078}}], 0x1, 0x4) 574.802447ms ago: executing program 2 (id=13808): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080)=0x6, 0x4) (async) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r4, &(0x7f00000000c0)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x1, 0x2, 0x6, 0x1}, 0xfffffd4e) (async) close(r3) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 32) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x2, 0x0) (async, rerun: 32) shutdown(r5, 0x1) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xfffe}, 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x0, 0x40, 0x1, @empty, @remote, 0x8000, 0x10, 0xc, 0x9}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r6, 0x25, 0x3, @void}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async, rerun: 64) r9 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 484.627027ms ago: executing program 1 (id=13809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000000180)={0x11a8, r4, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x16}}}}, [@NL80211_ATTR_VENDOR_DATA={0xe2, 0xc5, "80b4a87a06692d2bb7769eb66164966b30f51ca000018db659e668c4194c98f5974612094665f8eaa3efc398af780066fe88ca61dba46e6fbb98246f8069226334b9f1124f656b1d11a501a3d192d3c042f6103aed6064ab56a46416c09d51e3ddcb89c60776c5de945e3bcc3d663ab66f901ff294ff4143775ed7e19b4b7cfca0a697e86794be70e1a6b07c5cdb252cbe2e4cb898d37550e375cb73e124bb0e1db5a5c5d7b84184e99e96ec6d6be7bc5fe7797e8e1271e43cd3b32c647b542be89e2225ccb65501a5a279c972472ceadbb28afa5962370a5c9c55e1bb00"}, @NL80211_ATTR_VENDOR_DATA={0x7e, 0xc5, "9c374c8473a8d5ac4ba133ef29970343ff364edbc46c2642a3b22639b7aed753ad444a2f23f179afed6e95b7a7d737b66de758f90c36a8d6883ef5154b04b854fd3b437dc54f97f3037433541d83e3ac2d3dfeef60942107cd436f2c26d184a61483fb1c5f4d34ee4b7d75805fb555e327cd89669e70649a2785"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x72}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x11a8}, 0x1, 0x0, 0x0, 0x20000010}, 0x24044840) 447.809136ms ago: executing program 3 (id=13810): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000980), 0xe) listen(r2, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c}}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) 447.139152ms ago: executing program 4 (id=13811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = socket(0x1, 0x3, 0x0) unshare(0x20000400) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x1b47, @loopback}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmmsg$inet(r1, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x4000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac0000000206050000000000000000000000000060000780080009402000000208000940fffffff7080009400000000708000640000000091800028014000240fe80000000000000000000000000001905000300fa0000000500140001000000060005404e2000000c00028008000140e00000010900020073797a31000000000c000780080006000000000010000300686173683a69702c6d61636405000500020000000500040000000000"], 0xac}}, 0x0) 312.550721ms ago: executing program 3 (id=13812): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@newtclass={0x4c, 0x28, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0x4}, {0x4, 0x7}, {0xa, 0xffff}}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xcc5}}}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@newtclass={0x4c, 0x28, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0x4}, {0x4, 0x7}, {0xa, 0xffff}}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xcc5}}}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x40, 0x20, 0xb, 0x4, {{0x4c, 0x4, 0x1, 0xa, 0x130, 0x67, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0x34, 0x90, 0x3, 0x1, [{@empty, 0x5}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0xf56c}, {@broadcast, 0xff}, {@remote, 0xc21}]}, @rr={0x7, 0x7, 0x24, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x44, 0x82, 0x1, 0x9, [{@multicast1, 0x80000001}, {@broadcast, 0xd}, {@multicast1, 0x8}, {@multicast1, 0x8}, {@broadcast, 0x10000}, {@loopback, 0x8}, {@local, 0x2}, {@rand_addr=0x64010102, 0xfffff8ff}]}, @timestamp_prespec={0x44, 0x1c, 0xc7, 0x3, 0x0, [{@multicast1, 0xff}, {@local, 0x8}, {@remote, 0x8000}]}, @timestamp_prespec={0x44, 0x24, 0xde, 0x3, 0x8, [{@empty, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0x3}, {@broadcast, 0x1}]}, @generic={0x89, 0x11, "b58f5f48aacf97c4c2272ad3a65225"}, @timestamp_prespec={0x44, 0x34, 0xcc, 0x3, 0x7, [{@multicast2, 0xffff59c7}, {@local, 0x2}, {@multicast2, 0x2}, {@remote, 0xff}, {@empty, 0x7}, {@local, 0x5}]}, @timestamp_prespec={0x44, 0x14, 0x60, 0x3, 0x1, [{@private=0xa010101, 0x2}, {@multicast2, 0x3}]}, @end]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@newneigh={0x60, 0x1c, 0x20, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x1, 0x49, 0x5}, [@NDA_MASTER={0x8, 0x9, 0x1}, @NDA_CACHEINFO={0x14, 0x3, {0x5, 0x3, 0x2, 0x101}}, @NDA_LLADDR={0xa}, @NDA_PROTOCOL={0x5, 0xc, 0x1}, @NDA_VLAN={0x6, 0x5, 0x4}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c74a800060a0b04000000000000000002000000300004802c00018009000100786e72c0fda306af070511800800024000000005050003000200000008000140000000110900010073797a30000000000900020073797a320000000010000000110001067a000000000000000300000a"], 0x84}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c74a800060a0b04000000000000000002000000300004802c00018009000100786e72c0fda306af070511800800024000000005050003000200000008000140000000110900010073797a30000000000900020073797a320000000010000000110001067a000000000000000300000a"], 0x84}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x100}}]}, 0x24}}, 0x0) r8 = accept4(r7, &(0x7f0000000880)=@qipcrtr, &(0x7f0000000700)=0x80, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000b80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x4004004) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="bd7000ffdbf12507000000dfca5f047d19186d8aa18a751ea13f613e57c79126d19cab05933b4a61e9c0b2563ccf0241881d4de5e01bae9f75c6d023ee2a68abe8d76216a0729eb8f32df8f3c9889f816a3be89c6410b6582655b4b8b5b6cc92c581aa42e7baedac5c47d84f819404ca9dfd11761732282ffd880c03c40e328cc0e57672329163c7b2dd38f91ba2d88a82a4d2c8cd1d33a2", @ANYRES32=r10], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) listen(r9, 0x7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000240)={'gretap0\x00', r10, 0x8, 0x8, 0x5, 0xd3, {{0x15, 0x4, 0x1, 0x7, 0x54, 0x64, 0x0, 0x5, 0x2f, 0x0, @remote, @multicast1, {[@lsrr={0x83, 0x27, 0xae, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @empty, @broadcast, @multicast1, @multicast1]}, @lsrr={0x83, 0x17, 0x31, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 247.663363ms ago: executing program 2 (id=13813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xfffffffffffffd38}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) 240.176224ms ago: executing program 4 (id=13814): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000003c0)={r1, &(0x7f0000000080)=')#/*\x00', 0x200000, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0x3]}, {0x5, 0xfff, 0x0, 0x7}}, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x892b}) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, 0x2}}, 0x2e) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r6], 0x7c}}, 0x20000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 223.771652ms ago: executing program 1 (id=13815): r0 = socket(0x28, 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x8000000}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c8"], 0x150}, 0x1, 0x0, 0x0, 0x2400c014}, 0x404a854) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r1], 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002c00ed002bbd7000ffdbdf25077c0000100001800c00dd800800f400", @ANYRES32=r3, @ANYBLOB="080003"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc090) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002140)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000002100)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e40)={0x12c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}#\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x586}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '$'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')*\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x2d, 0x5, "966ef2c8e1d43ac8514fb0227f60069e8cdd09f697eafb19c8dce05eeba5f4a0b02f59a0ba2fd121b9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20afef21}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x40090) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="b80000fab48cef22c4ddea806600190001000000000000000000e0002002000000000000000000000000000000000000000000000000000080000000000000017a178a26dd5e2073201c4742adde740a4ca388cd95e58b75", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000f83e00000000000000000000000000000e000000000000000000000000000000fcffffffffffffff0000000000000000fbffffffffffffff000000000000000000000000000000000000000000000000030000000000000002000000bb6b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x24004045}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) r9 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000080)={'team0\x00', @random="0100061f8145"}) (async) writev(r8, &(0x7f0000001980)=[{&(0x7f0000000200)="4976396bc35820f8f016e12b8c2cd2161ae5bca64d66e340ac7385e682204462ff12f86ff18831e7e50a80fdddee293d6d0c78572454dbd21ea1ef785d6f9d4798b989e8362f93774fed3afc1dfec779311cf51bc32ac67d8c646f85a02405c8f6bb89aab328ef355cc3b07441852c6357035ebd003f00265377b9753ae4dff2422a539032c534e07e9d390744fc7d418e3ef948ab6caeafc9697dcc67c270764a7facd0db79c9ba8bad65781c", 0xad}, {&(0x7f0000000300)="b0f7994730977860fee75ca9e15e7d4319bebf4c394167dada9bcdd32116712065969b92a8345de1274870b3bdbcd84f9ee854f77dec0a27cb018edc6b8ee8c1e41aeabec09554f9be8803e3a5fbe5ee4b1c8c58f2360ee1e604ab33c5a4a162e345442ef9277076fa3d77a06b1fa1e9987cfbe7e3b1dc1b5b2b5ef16856f5e16595790b46540d99b07e7828961530c1c2935630141256ec68fcd15618d4421dbe777e7b3ff846895e404e0c6464eff735bc9a4f4748c78050042e863f71cd620f33e9b688415f50c0dabd38ac095f76b0e400d08f02b133c92ab6b825150f536028dcf4e66f1a7fd1", 0xe9}, {&(0x7f0000000680)="dc0c624e6156b91dfbfc4519880aab93e7c71592608e8d1e9f0fff69b05d002a9370d31a07030a600f856fd11520b5d2260778cbbed878f14f15a1c176bde54e762d1ebe92ce679cf0766768ea2cd0c927b657dc614d7192e1b06cd981d45ddc43853764a4928799eb6167a03e02c80012ca60c2e1dd8deb2e254b5679db1e80a4ff04da9163ee906bdb5b2c3623eff07f730d1f10dc9b9e7bda6aa1f185f8df35ac558faa4839514d9f2c90fcf03ecb13d3bf374cf75b7374f0f5fe4c7da1e3fb09828b94f7e341d35ff136a03f6bdb38367b09ddf163e7b52a8974", 0xdc}, {&(0x7f0000000780)="b1a684d3cd7507a2da3fb929445b40d89b27d647cd82293b25256ad4d0d4b9a21328c35da80cea10122379e7696c0c18ccdba385946b57717c47c27ad27df8904cb8ed8f0b4eea3840468f455b2c61d242b0c0d42b1e66c00b9f0facc348ce96efb706fabbf61269abb684f61f5fb0c52a4af36facfd8c1712099e2630d167f9388c982da15b0e1d4c0bab6af786e64d7abe706ee75b3dd9b73063c266879aaba95f900e7980a029c72d95ff25f246af3f96161f69712cf597c5c9bd8375a6d6adac57c2ac0864d4188a850135a28062646e1e6e39a99506fae6a198ea1800d3e4c6f8c10b53d9504daa83", 0xeb}, {&(0x7f0000000100)="f8b1", 0x2}, {&(0x7f0000000400)="6c65d0d925dd6844d6eb7417e0d7fbda1f1386d8d947999146e49f53c753079c653862ee13e82f4c53d9c3d4696fb157980960d85a50377b573dcca60fbae86ae01b208a664f0b6a0346aabb187c31ca9bbb43cad6ac7ecfbd86509f3f37a1c182a5df0536ea9a7f4b0f36840f1e364f0d504375edff87bc05c6595be3d3064f1bd103c73b0e8ca137ad42d103b6a9120f4eb8af3b7cfb", 0x97}, {&(0x7f0000000880)="2b8e30e82cbd5c0b141b558711e0eb928b76eb659ee93d9f35d7863d6dd2b1d85ccc52f99279dcce5775e3d795266db5d5b238d8c8e50e2c32a7b04670fe64033324f979f7b5c9f65f820a005ca6e9a58212cc302ef15c4e42d6ece101e6af27bba2e8e1c47e73f5d94bb7207856658c77fec8bf6991b9c4710c0f64075f4a08f92ff0217654210332376a9832fd005d2b10819c4061885bdc50c901a07c42718ee4", 0xa2}, {&(0x7f0000000980)="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", 0x1000}], 0x8) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x1d, &(0x7f0000001b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80}, [@jmp={0x5, 0x0, 0xa, 0x3, 0x4, 0x30, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff}, @ldst={0x2, 0x2, 0x3, 0xb, 0xe, 0x20, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb0000000}]}, &(0x7f00000004c0)='GPL\x00', 0x2, 0xa0, &(0x7f0000001c00)=""/160, 0x40f00, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000000580)=[{0x2, 0x1, 0x6, 0x3}], 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001d80)=r10, 0x4) 57.787289ms ago: executing program 0 (id=13816): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20001d00}}, 0x1c}, 0x1, 0x0, 0x0, 0x24042051}, 0x4010) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 507.111µs ago: executing program 3 (id=13817): socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=13818): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x8, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.3.12263'. [ 1206.463263][T18842] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12263'. [ 1206.529515][T18842] netlink: 634 bytes leftover after parsing attributes in process `syz.3.12263'. [ 1206.651934][T18852] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1206.826845][T18857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12267'. [ 1207.062899][T18857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12267'. [ 1207.138209][T18857] bridge0: port 4(team0) entered disabled state [ 1207.144818][T18857] bridge0: port 3(dummy0) entered disabled state [ 1207.151500][T18857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.159214][T18857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.317792][T18876] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1207.672603][T18894] syzkaller1: entered promiscuous mode [ 1207.697226][T18894] syzkaller1: entered allmulticast mode [ 1207.922567][T18913] team0: left allmulticast mode [ 1207.927933][T18913] team_slave_0: left allmulticast mode [ 1207.957073][T18913] team_slave_1: left allmulticast mode [ 1207.965688][T18913] team0: left promiscuous mode [ 1207.993349][T18913] team_slave_0: left promiscuous mode [ 1208.013362][T18913] team_slave_1: left promiscuous mode [ 1208.026807][T18913] bridge0: port 4(team0) entered disabled state [ 1208.065281][T18913] dummy0: left allmulticast mode [ 1208.070931][T18913] bridge0: port 3(dummy0) entered disabled state [ 1208.089667][T18913] bridge_slave_1: left allmulticast mode [ 1208.106917][T18913] bridge_slave_1: left promiscuous mode [ 1208.126511][T18913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.162455][T18913] bridge_slave_0: left allmulticast mode [ 1208.187101][T18913] bridge_slave_0: left promiscuous mode [ 1208.197516][T18913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.271003][T18932] netlink: zone id is out of range [ 1208.277563][T18932] netlink: zone id is out of range [ 1208.295326][T18932] netlink: zone id is out of range [ 1208.304007][T18932] netlink: zone id is out of range [ 1208.310939][T18932] netlink: zone id is out of range [ 1208.319285][T18932] netlink: zone id is out of range [ 1208.332821][T18932] netlink: zone id is out of range [ 1208.346601][T18932] netlink: set zone limit has 4 unknown bytes [ 1210.768541][T18948] __nla_validate_parse: 3 callbacks suppressed [ 1210.768561][T18948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12289'. [ 1210.800714][T18951] validate_nla: 3 callbacks suppressed [ 1210.800733][T18951] netlink: 'syz.2.12292': attribute type 3 has an invalid length. [ 1210.915518][T18966] netlink: 'syz.1.12294': attribute type 9 has an invalid length. [ 1211.570318][T19007] openvswitch: netlink: Geneve option length err (len 12750, max 255). [ 1211.615750][T19015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12312'. [ 1211.677806][T19015] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1211.728279][T19020] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1211.735593][T19020] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1211.754706][T19020] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 1211.975199][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12317'. [ 1212.003418][T19032] ipvlan3: entered promiscuous mode [ 1212.385176][T19051] sit0: entered promiscuous mode [ 1212.393819][T19053] x_tables: duplicate underflow at hook 2 [ 1212.453793][T19051] netlink: 'syz.3.12324': attribute type 1 has an invalid length. [ 1212.507079][T19051] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12324'. [ 1212.584350][T19066] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1212.915955][T19086] pim6reg: entered allmulticast mode [ 1212.928517][T19086] pim6reg: left allmulticast mode [ 1212.949090][T19088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1212.980871][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12332'. [ 1213.177499][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1213.260079][T19111] netlink: 'syz.1.12342': attribute type 1 has an invalid length. [ 1213.278736][T19111] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.12342'. [ 1213.348401][T19112] lo speed is unknown, defaulting to 1000 [ 1213.412591][T19119] tipc: Failed to remove unknown binding: 66,1,1/4:3790348929/3790348931 [ 1213.652146][T19131] netlink: 'syz.2.12347': attribute type 16 has an invalid length. [ 1213.669877][T19131] netlink: 'syz.2.12347': attribute type 3 has an invalid length. [ 1213.703108][T19114] lo speed is unknown, defaulting to 1000 [ 1213.709643][T19131] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12347'. [ 1214.296746][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1214.318726][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1214.328967][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1214.360939][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1214.381675][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1214.533000][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1214.548283][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1214.573621][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1214.590376][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1214.620256][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1214.868576][T19149] lo speed is unknown, defaulting to 1000 [ 1215.023398][T19170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12356'. [ 1215.044383][T19112] syzkaller0 speed is unknown, defaulting to 1000 [ 1215.073432][T19170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12356'. [ 1215.106387][T19170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12356'. [ 1215.148473][ T8402] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.194016][ T8402] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 40874 - 0 [ 1215.228073][ T8402] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1215.249605][ T8402] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1215.328491][T19180] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.453656][ T8402] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.469942][ T8402] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 40874 - 0 [ 1215.507764][ T8402] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1215.543245][ T8402] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1215.614897][T19180] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.659854][T19175] lo speed is unknown, defaulting to 1000 [ 1215.703930][ T8402] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.724185][ T8402] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 40874 - 0 [ 1215.745984][ T8402] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1215.762891][T19196] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1215.779468][ T8402] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1215.840305][T19180] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.953770][T19114] syzkaller0 speed is unknown, defaulting to 1000 [ 1215.967339][T19180] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1216.002000][ T8402] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1216.013448][T19201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12364'. [ 1216.027497][ T8402] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 40874 - 0 [ 1216.038795][ T8402] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1216.050292][ T8402] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 1216.227912][ T975] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.252806][ T975] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.343362][ T7657] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.437747][ T7657] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.475789][T19149] syzkaller0 speed is unknown, defaulting to 1000 [ 1216.604619][T19207] netlink: 'syz.1.12367': attribute type 1 has an invalid length. [ 1216.697426][ T5842] Bluetooth: hci2: command tx timeout [ 1216.756609][T19207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12367'. [ 1216.974850][T19211] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1217.001675][T19211] bond10: (slave bond11): making interface the new active one [ 1217.030331][T19211] bond10: (slave bond11): Enslaving as an active interface with an up link [ 1217.051192][T19207] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1217.219649][T19225] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12369'. [ 1217.250714][T19225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12369'. [ 1217.377983][T19229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12368'. [ 1217.892792][ T8402] gretap0 (unregistering): left promiscuous mode [ 1217.981406][ T8402] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1218.242539][ T8402] team0: Port device bridge6 removed [ 1218.304167][ T8402] bond6 (unregistering): (slave bridge7): Removing an active aggregator [ 1218.313443][ T8402] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 1218.323235][ T8402] bridge7 (unregistering): left promiscuous mode [ 1218.329737][ T8402] bridge7 (unregistering): left allmulticast mode [ 1218.351362][ T8402] bond7 (unregistering): (slave bridge8): Releasing active interface [ 1218.471757][ T8402] bond1 (unregistering): Released all slaves [ 1218.487403][ T8402] bond2 (unregistering): Released all slaves [ 1218.503592][ T8402] bond3 (unregistering): Released all slaves [ 1218.520372][ T8402] bond0 (unregistering): Released all slaves [ 1218.539271][ T8402] bond4 (unregistering): Released all slaves [ 1218.562272][ T8402] bond5 (unregistering): Released all slaves [ 1218.577267][ T8402] bond6 (unregistering): Released all slaves [ 1218.597275][ T8402] bond7 (unregistering): Released all slaves [ 1218.612716][ T8402] bond8 (unregistering): Released all slaves [ 1218.631552][ T8402] bond9 (unregistering): Released all slaves [ 1218.650218][T19175] syzkaller0 speed is unknown, defaulting to 1000 [ 1218.767321][ T5842] Bluetooth: hci2: command tx timeout [ 1219.054423][ T8402] tipc: Disabling bearer [ 1219.060796][ T8402] tipc: Left network mode [ 1219.067188][T19255] syzkaller0: entered promiscuous mode [ 1219.102967][T19255] syzkaller0: entered allmulticast mode [ 1219.163095][T19250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12372'. [ 1219.223838][ T8402] IPVS: stopping master sync thread 14575 ... [ 1219.470051][T19262] bond0: entered promiscuous mode [ 1219.475229][T19262] bond0: entered allmulticast mode [ 1219.895566][T19260] lo speed is unknown, defaulting to 1000 [ 1220.145200][T19149] chnl_net:caif_netlink_parms(): no params data found [ 1220.797018][T19149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.809872][T19149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.829225][T19149] bridge_slave_0: entered allmulticast mode [ 1220.837765][T19149] bridge_slave_0: entered promiscuous mode [ 1220.861413][ T5842] Bluetooth: hci2: command tx timeout [ 1220.898199][T19149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.907596][T19149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.914984][T19149] bridge_slave_1: entered allmulticast mode [ 1220.928677][T19149] bridge_slave_1: entered promiscuous mode [ 1221.043985][T19149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1221.071840][T19149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1221.173836][T19149] team0: Port device team_slave_0 added [ 1221.236669][T19149] team0: Port device team_slave_1 added [ 1221.379566][T19149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.386821][T19149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.481105][T19149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.500813][T19260] syzkaller0 speed is unknown, defaulting to 1000 [ 1221.590399][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12385'. [ 1221.606643][T19149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.613666][T19149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.680822][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12385'. [ 1221.704626][T19149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.399794][T19149] hsr_slave_0: entered promiscuous mode [ 1222.423599][T19149] hsr_slave_1: entered promiscuous mode [ 1222.478716][T19149] debugfs: 'hsr0' already exists in 'hsr' [ 1222.484548][T19149] Cannot create hsr debugfs directory [ 1222.782426][T19376] netlink: 'syz.4.12400': attribute type 12 has an invalid length. [ 1222.884837][T19372] netlink: 'syz.4.12400': attribute type 7 has an invalid length. [ 1222.942273][ T5842] Bluetooth: hci2: command tx timeout [ 1223.098203][ T8402] hsr_slave_0: left promiscuous mode [ 1223.104522][ T8402] hsr_slave_1: left promiscuous mode [ 1223.136960][ T8402] veth1_macvtap: left promiscuous mode [ 1223.142548][ T8402] veth0_macvtap: left promiscuous mode [ 1223.177218][ T8402] veth1_vlan: left promiscuous mode [ 1223.677755][ T8402] team0 (unregistering): Port device team_slave_1 removed [ 1223.694508][ T8402] team0 (unregistering): Port device team_slave_0 removed [ 1223.707215][ T8402] veth0_to_team (unregistering): left allmulticast mode [ 1223.860059][T19383] pim6reg: entered allmulticast mode [ 1223.869538][T19390] pim6reg: left allmulticast mode [ 1223.874991][T19390] vcan0: left allmulticast mode [ 1224.374966][T19420] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12411'. [ 1224.539824][ T8402] IPVS: stop unused estimator thread 0... [ 1224.915140][T19439] netlink: 'syz.0.12415': attribute type 24 has an invalid length. [ 1225.199937][T19149] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1225.253619][T19149] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1225.292330][T19149] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1225.347098][T19149] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1225.433557][T19457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12419'. [ 1225.536260][T19464] netlink: 'syz.1.12420': attribute type 2 has an invalid length. [ 1225.570326][T19464] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12420'. [ 1225.660320][T19149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.735927][T19149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.787768][T11260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.794984][T11260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.861516][T11260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.868774][T11260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.962879][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12424'. [ 1226.017438][T19480] Cannot find map_set index 65533 as target [ 1226.203810][T19493] pimreg: entered allmulticast mode [ 1226.339921][T19496] netlink: 'syz.4.12427': attribute type 4 has an invalid length. [ 1226.359022][T19506] sctp: [Deprecated]: syz.3.12429 (pid 19506) Use of int in maxseg socket option. [ 1226.359022][T19506] Use struct sctp_assoc_value instead [ 1226.376887][T19496] netlink: 'syz.4.12427': attribute type 1 has an invalid length. [ 1226.384925][T19496] netlink: 228 bytes leftover after parsing attributes in process `syz.4.12427'. [ 1226.525135][T19515] netlink: 'syz.1.12431': attribute type 11 has an invalid length. [ 1226.542042][T19515] netlink: 173856 bytes leftover after parsing attributes in process `syz.1.12431'. [ 1226.579427][T19518] netlink: 'syz.1.12431': attribute type 11 has an invalid length. [ 1226.611987][T19518] netlink: 173856 bytes leftover after parsing attributes in process `syz.1.12431'. [ 1226.662727][T19524] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12433'. [ 1226.778814][T19149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.945908][T19149] veth0_vlan: entered promiscuous mode [ 1226.980356][T19149] veth1_vlan: entered promiscuous mode [ 1227.094977][T19149] veth0_macvtap: entered promiscuous mode [ 1227.124535][T19149] veth1_macvtap: entered promiscuous mode [ 1227.199963][T19149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.244799][T19149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.323148][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.345110][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.374044][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.383078][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.335431][T19564] syzkaller1: entered promiscuous mode [ 1228.341634][T19564] syzkaller1: entered allmulticast mode [ 1228.480424][T19580] netlink: 'syz.4.12441': attribute type 11 has an invalid length. [ 1228.489915][T19580] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12441'. [ 1228.550384][T19580] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1228.845921][T19590] netlink: 'syz.3.12443': attribute type 1 has an invalid length. [ 1228.871580][T19591] netlink: 'syz.3.12443': attribute type 1 has an invalid length. [ 1228.905566][T19594] netlink: 'syz.4.12444': attribute type 11 has an invalid length. [ 1228.946658][T19594] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12444'. [ 1228.975286][T19591] bond9: entered promiscuous mode [ 1228.982478][T19591] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1229.028912][T19602] bond9: (slave bridge6): making interface the new active one [ 1229.037408][T19602] bridge6: entered promiscuous mode [ 1229.043775][T19602] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 1229.078602][ T8406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.108059][ T8406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.213916][ T8406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.229142][ T8406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.305029][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12450'. [ 1229.667330][T19635] netlink: 124 bytes leftover after parsing attributes in process `syz.3.12452'. [ 1229.759291][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12453'. [ 1230.175867][T19668] syzkaller0: entered promiscuous mode [ 1230.181934][T19668] syzkaller0: entered allmulticast mode [ 1232.402207][T19622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1232.634884][T19694] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1232.793709][T19704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12461'. [ 1233.034014][T19720] netlink: 'syz.4.12466': attribute type 13 has an invalid length. [ 1233.138855][T19730] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.12467'. [ 1233.450025][T19740] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.12470'. [ 1233.466372][T19740] net_ratelimit: 1 callbacks suppressed [ 1233.466390][T19740] netlink: Conntrack attr has 3 unknown bytes [ 1233.551223][T19743] netlink: 'syz.1.12471': attribute type 1 has an invalid length. [ 1233.817865][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1233.829283][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1233.848593][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1233.860685][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1233.870566][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1233.912136][T19753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12474'. [ 1233.925533][T19753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12474'. [ 1233.974444][T19750] lo speed is unknown, defaulting to 1000 [ 1233.999763][T19755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12475'. [ 1234.097413][T19755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12475'. [ 1234.701647][T19750] chnl_net:caif_netlink_parms(): no params data found [ 1234.802929][T19750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.810638][T19750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.818907][T19750] bridge_slave_0: entered allmulticast mode [ 1234.826586][T19750] bridge_slave_0: entered promiscuous mode [ 1234.835015][T19750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.842682][T19750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.851236][T19750] bridge_slave_1: entered allmulticast mode [ 1234.861776][T19750] bridge_slave_1: entered promiscuous mode [ 1234.895357][T19750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.908368][T19750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.951075][T19750] team0: Port device team_slave_0 added [ 1234.959621][T19750] team0: Port device team_slave_1 added [ 1234.989387][T19750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.996698][T19750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.024592][T19750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.038719][T19750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.045700][T19750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.072392][T19750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.122601][T19750] hsr_slave_0: entered promiscuous mode [ 1235.130113][T19750] hsr_slave_1: entered promiscuous mode [ 1235.136887][T19750] debugfs: 'hsr0' already exists in 'hsr' [ 1235.142679][T19750] Cannot create hsr debugfs directory [ 1235.966941][ T5825] Bluetooth: hci3: command tx timeout [ 1236.101888][T19726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1236.159628][T19750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1236.244585][T19750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1236.322816][T19750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1236.367551][T19750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1236.704882][T19827] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1236.769684][T19827] bond10 (unregistering): Released all slaves [ 1236.776547][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12485'. [ 1237.025703][T19750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.114128][T19750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.153452][ T7657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.160729][ T7657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.215396][ T7657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.222648][ T7657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.048050][ T5825] Bluetooth: hci3: command tx timeout [ 1238.205153][T19750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.214518][T19888] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12493'. [ 1238.365535][T19750] veth0_vlan: entered promiscuous mode [ 1238.414505][T19750] veth1_vlan: entered promiscuous mode [ 1238.506413][T19750] veth0_macvtap: entered promiscuous mode [ 1238.535256][T19750] veth1_macvtap: entered promiscuous mode [ 1238.777631][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1239.200658][T19750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.241594][T19750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.289157][T29876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.309875][T29876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.330975][T29876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.368757][T29876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.126281][ T5825] Bluetooth: hci3: command tx timeout [ 1240.714052][T19869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1240.934944][ T7657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.965435][ T7657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.026194][T19960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12501'. [ 1241.171614][ T8402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.200003][ T8402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.410846][T19972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12472'. [ 1241.843202][T19962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12502'. [ 1241.927378][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1241.942084][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1241.951312][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1241.970180][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1241.978337][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1242.039145][T19962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1242.155134][T19964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1242.168084][T19964] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1242.180277][T19964] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1242.208168][ T5842] Bluetooth: hci3: command tx timeout [ 1242.318156][ T8769] syz_tun (unregistering): left allmulticast mode [ 1242.345367][ T8769] syz_tun (unregistering): left promiscuous mode [ 1242.371385][ T8769] bridge0: port 1(syz_tun) entered disabled state [ 1242.512897][ T7657] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1242.550781][ T7657] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.660374][T19986] lo speed is unknown, defaulting to 1000 [ 1242.688042][ T7657] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1242.736427][ T7657] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.857565][ T7657] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1242.903756][ T7657] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.119237][ T7657] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.155504][ T7657] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.191474][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12512'. [ 1243.334321][T20029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12513'. [ 1243.446647][T20029] hsr_slave_0: left promiscuous mode [ 1243.454425][T20029] hsr_slave_1: left promiscuous mode [ 1243.488793][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12514'. [ 1243.558548][T20034] netem: change failed [ 1243.590175][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12514'. [ 1243.889402][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1243.897530][ C1] lec:lec_tx_timeout: lec0 [ 1244.050611][ T5842] Bluetooth: hci0: command tx timeout [ 1244.091100][ T7657] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 1244.143763][T20050] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12517'. [ 1244.218288][T20050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12517'. [ 1244.491336][ T7657] bond5 (unregistering): (slave gretap2): Releasing active interface [ 1244.573449][ T7657] bond7 (unregistering): (slave gretap3): Releasing active interface [ 1244.642434][ T7657] dvmrp6 (unregistering): left allmulticast mode [ 1245.194484][ T7657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1245.210800][ T7657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1245.222793][ T7657] bond0 (unregistering): Released all slaves [ 1245.235626][ T7657] bond1 (unregistering): Released all slaves [ 1245.265344][ T7657] bond2 (unregistering): Released all slaves [ 1245.287046][ T7657] bond3 (unregistering): Released all slaves [ 1245.302341][ T7657] bond4 (unregistering): Released all slaves [ 1245.320708][ T7657] bond5 (unregistering): Released all slaves [ 1245.339183][T20079] syz.3.12522: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1245.351555][ T7657] bond6 (unregistering): Released all slaves [ 1245.358443][T20079] CPU: 0 UID: 0 PID: 20079 Comm: syz.3.12522 Not tainted syzkaller #0 PREEMPT(full) [ 1245.358531][T20079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1245.358571][T20079] Call Trace: [ 1245.358611][T20079] [ 1245.358635][T20079] dump_stack_lvl+0xe8/0x150 [ 1245.358748][T20079] warn_alloc+0x249/0x340 [ 1245.358822][T20079] ? stack_trace_save+0xa9/0x100 [ 1245.358904][T20079] ? __pfx_warn_alloc+0x10/0x10 [ 1245.358991][T20079] ? kasan_save_track+0x4f/0x80 [ 1245.359054][T20079] ? kasan_save_track+0x3e/0x80 [ 1245.359109][T20079] ? __kasan_kmalloc+0x93/0xb0 [ 1245.359171][T20079] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1245.359235][T20079] ? xskq_create+0x56/0x170 [ 1245.359327][T20079] ? xsk_setsockopt+0x54c/0x990 [ 1245.359392][T20079] ? do_sock_setsockopt+0x17c/0x1b0 [ 1245.359493][T20079] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1245.359583][T20079] ? do_syscall_64+0x14d/0xf80 [ 1245.359647][T20079] __vmalloc_node_range_noprof+0x132/0x1730 [ 1245.359860][T20079] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1245.359945][T20079] ? __kasan_kmalloc+0x93/0xb0 [ 1245.360038][T20079] vmalloc_user_noprof+0xad/0xe0 [ 1245.360087][T20079] ? xskq_create+0xbf/0x170 [ 1245.360118][T20079] xskq_create+0xbf/0x170 [ 1245.360153][T20079] xsk_init_queue+0x8a/0xe0 [ 1245.360185][T20079] xsk_setsockopt+0x54c/0x990 [ 1245.360217][T20079] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1245.360247][T20079] ? __pfx_aa_sk_perm+0x10/0x10 [ 1245.360283][T20079] ? aa_sock_opt_perm+0xff/0x1a0 [ 1245.360317][T20079] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1245.360342][T20079] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1245.360373][T20079] do_sock_setsockopt+0x17c/0x1b0 [ 1245.360414][T20079] __x64_sys_setsockopt+0x13d/0x1b0 [ 1245.360454][T20079] do_syscall_64+0x14d/0xf80 [ 1245.360476][T20079] ? trace_irq_disable+0x3b/0x150 [ 1245.360569][T20079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.360656][T20079] ? clear_bhb_loop+0x40/0x90 [ 1245.360740][T20079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.360801][T20079] RIP: 0033:0x7f0eaf79c799 [ 1245.360855][T20079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.360907][T20079] RSP: 002b:00007f0eb05d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1245.360970][T20079] RAX: ffffffffffffffda RBX: 00007f0eafa16180 RCX: 00007f0eaf79c799 [ 1245.361019][T20079] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1245.361052][T20079] RBP: 00007f0eaf832c99 R08: 0000000000000004 R09: 0000000000000000 [ 1245.361099][T20079] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.361141][T20079] R13: 00007f0eafa16218 R14: 00007f0eafa16180 R15: 00007ffe93d099e8 [ 1245.361239][T20079] [ 1245.361419][T20079] Mem-Info: [ 1245.465881][ T7657] bond7 (unregistering): Released all slaves [ 1245.474312][T20079] active_anon:6121 inactive_anon:0 isolated_anon:0 [ 1245.474312][T20079] active_file:3403 inactive_file:40404 isolated_file:0 [ 1245.474312][T20079] unevictable:768 dirty:71 writeback:0 [ 1245.474312][T20079] slab_reclaimable:15093 slab_unreclaimable:153528 [ 1245.474312][T20079] mapped:31670 shmem:1390 pagetables:3488 [ 1245.474312][T20079] sec_pagetables:0 bounce:0 [ 1245.474312][T20079] kernel_misc_reclaimable:0 [ 1245.474312][T20079] free:1242912 free_pcp:24837 free_cma:0 [ 1245.474379][T20079] Node 0 active_anon:24484kB inactive_anon:0kB active_file:13612kB inactive_file:161424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20280kB dirty:280kB writeback:0kB shmem:4024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19132kB pagetables:13812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1245.474435][T20079] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106400kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1245.474489][T20079] Node 0 DMA free:11208kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:16kB free_cma:0kB [ 1245.474558][T20079] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1245.474622][T20079] Node 0 DMA32 free:1276136kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24484kB inactive_anon:0kB active_file:13612kB inactive_file:161424kB unevictable:1536kB writepending:280kB zspages:0kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:36164kB local_pcp:15280kB free_cma:0kB [ 1245.474695][T20079] lowmem_reserve[]: 0 0 0 0 0 [ 1245.474744][T20079] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1245.521385][ T7657] bond8 (unregistering): Released all slaves [ 1245.625697][ T7657] bond9 (unregistering): Released all slaves [ 1245.847514][T20081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12522'. [ 1245.899670][T20079] lowmem_reserve[]: 0 0 0 0 0 [ 1245.904503][T20079] Node 1 Normal free:3684408kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:63124kB local_pcp:30824kB free_cma:0kB [ 1245.921980][ T7657] bond10 (unregistering): (slave bond11): Releasing backup interface [ 1245.945572][T20079] lowmem_reserve[]: 0 0 0 0 0 [ 1245.950505][T20079] Node 0 DMA: 0*4kB 1*8kB (U) 2*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11208kB [ 1245.967200][T20079] Node 0 DMA32: 11550*4kB (UME) 11234*8kB (UME) 5790*16kB (UME) 985*32kB (UME) 377*64kB (UME) 253*128kB (UME) 516*256kB (UME) 340*512kB (UE) 366*1024kB (U) 136*2048kB (UM) 0*4096kB = 1276232kB [ 1245.989897][T20079] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1246.006312][T20079] Node 1 Normal: 8*4kB (U) 15*8kB (UM) 16*16kB (UM) 11*32kB (UM) 21*64kB (UM) 14*128kB (UM) 15*256kB (UM) 11*512kB (UM) 11*1024kB (UM) 9*2048kB (U) 889*4096kB (UM) = 3684408kB [ 1246.032099][T20079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1246.042457][T20079] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1246.044459][ T7657] bond10 (unregistering): Released all slaves [ 1246.060680][T20079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1246.070909][T20079] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1246.088939][T20079] 45191 total pagecache pages [ 1246.093936][T20079] 0 pages in swap cache [ 1246.100080][T20079] Free swap = 124996kB [ 1246.104029][ T7657] bond11 (unregistering): Released all slaves [ 1246.104927][T20079] Total swap = 124996kB [ 1246.116757][T20079] 2097051 pages RAM [ 1246.120692][T20079] 0 pages HighMem/MovableOnly [ 1246.127215][ T5842] Bluetooth: hci0: command tx timeout [ 1246.133150][T20079] 427026 pages reserved [ 1246.138790][T20079] 0 pages cma reserved [ 1246.154731][ T7657] bond12 (unregistering): Released all slaves [ 1246.169907][T20041] team0: No ports can be present during mode change [ 1246.178616][T20047] syz_tun: refused to change device tx_queue_len [ 1246.230377][T20065] lo: Caught tx_queue_len zero misconfig [ 1246.440472][ T7657] tipc: Left network mode [ 1246.571369][ T7657] IPVS: stopping backup sync thread 11424 ... [ 1247.312563][T19986] chnl_net:caif_netlink_parms(): no params data found [ 1247.540760][T20142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12530'. [ 1247.560131][T20143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1247.586667][T20145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1247.729357][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1248.065538][T19986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.103998][T19986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.115972][T19986] bridge_slave_0: entered allmulticast mode [ 1248.145472][T19986] bridge_slave_0: entered promiscuous mode [ 1248.169642][T19986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.187392][T19986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.201025][T19986] bridge_slave_1: entered allmulticast mode [ 1248.222788][ T5842] Bluetooth: hci0: command tx timeout [ 1248.230964][T19986] bridge_slave_1: entered promiscuous mode [ 1248.300708][ T7657] hsr_slave_1: left promiscuous mode [ 1248.330960][T20173] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12537'. [ 1248.427949][ T7657] pim6reg527 (unregistering): left allmulticast mode [ 1248.499282][ T7657] team0 (unregistering): Port device batadv1 removed [ 1248.809650][ T7657] team0 (unregistering): Port device team_slave_1 removed [ 1249.000202][T19986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.037459][T20172] syzkaller1: entered promiscuous mode [ 1249.049366][T20172] syzkaller1: entered allmulticast mode [ 1249.058957][T20182] syzkaller1: entered promiscuous mode [ 1249.087780][T20182] syzkaller1: entered allmulticast mode [ 1249.124903][T19986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.348779][T19986] team0: Port device team_slave_0 added [ 1249.377593][T19986] team0: Port device team_slave_1 added [ 1249.442324][T20209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12541'. [ 1249.464117][T20209] bond0: Caught tx_queue_len zero misconfig [ 1249.472272][T20209] netlink: 6 bytes leftover after parsing attributes in process `syz.4.12541'. [ 1249.549287][T19986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.589018][T19986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.662332][T19986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.678583][T19986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.685657][T19986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.721534][T19986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.797131][ T7657] IPVS: stop unused estimator thread 0... [ 1249.887636][ T8402] wlan1: Trigger new scan to find an IBSS to join [ 1249.982929][T20234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12547'. [ 1249.995031][T20234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12547'. [ 1250.049204][T20234] ip6gre1: entered allmulticast mode [ 1250.062290][T20232] Bluetooth: MGMT ver 1.23 [ 1250.095426][T19986] hsr_slave_0: entered promiscuous mode [ 1250.114554][T19986] hsr_slave_1: entered promiscuous mode [ 1250.126509][T19986] debugfs: 'hsr0' already exists in 'hsr' [ 1250.139418][T19986] Cannot create hsr debugfs directory [ 1250.245217][T20244] tipc: Started in network mode [ 1250.259634][T20248] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12551'. [ 1250.269261][T20244] tipc: Node identity ac14140f, cluster identity 4711 [ 1250.277213][T20244] tipc: New replicast peer: 255.255.255.255 [ 1250.283928][T20244] tipc: Enabled bearer , priority 10 [ 1250.296221][ T5842] Bluetooth: hci0: command tx timeout [ 1250.399999][T20248] vlan2: entered allmulticast mode [ 1250.408818][T20248] gretap0: entered allmulticast mode [ 1250.573103][T20263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12556'. [ 1250.796791][T20273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12558'. [ 1250.961315][T20283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1251.223255][T20297] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1251.374355][T20305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12562'. [ 1251.397482][ T1083] tipc: Node number set to 2886997007 [ 1251.831598][T20315] syzkaller0: entered promiscuous mode [ 1251.838257][T20315] syzkaller0: entered allmulticast mode [ 1251.874028][T20319] netlink: 'syz.4.12566': attribute type 1 has an invalid length. [ 1251.885924][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12566'. [ 1252.002600][T19986] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1252.037473][T19986] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1252.070372][T19986] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1252.121340][T19986] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1252.542495][T20357] netlink: 272 bytes leftover after parsing attributes in process `syz.2.12573'. [ 1252.592627][T19986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.660229][T19986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.708421][ T7657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.715619][ T7657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.780760][ T7657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.788027][ T7657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.924059][T19986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1252.948847][T19986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1253.250889][T20386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1253.599674][T19986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.755132][T20405] sock: sock_timestamping_bind_phc: sock not bind to device [ 1253.817816][T19986] veth0_vlan: entered promiscuous mode [ 1253.838127][T19986] veth1_vlan: entered promiscuous mode [ 1253.953849][T19986] veth0_macvtap: entered promiscuous mode [ 1253.983757][T19986] veth1_macvtap: entered promiscuous mode [ 1254.045498][T19986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.087966][T19986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.142948][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.169400][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.214658][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.243087][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.365535][T20425] netlink: 'syz.4.12591': attribute type 10 has an invalid length. [ 1254.432708][T20425] team0 (unregistering): Port device team_slave_0 removed [ 1254.450047][T20425] team0 (unregistering): Port device team_slave_1 removed [ 1254.492403][T20427] netlink: 'syz.2.12593': attribute type 7 has an invalid length. [ 1254.506580][ T8402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.524115][ T8402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.660086][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.673140][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.787163][T20435] netlink: 'syz.0.12594': attribute type 1 has an invalid length. [ 1254.795948][T20437] __nla_validate_parse: 1 callbacks suppressed [ 1254.795969][T20437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12597'. [ 1254.847234][ T8406] wlan1: Trigger new scan to find an IBSS to join [ 1254.899067][T20442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12597'. [ 1254.949608][T20440] netlink: 'syz.1.12504': attribute type 1 has an invalid length. [ 1254.969445][T20443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12597'. [ 1254.999506][T20435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1255.097657][T20441] bond1: (slave veth0_to_bond): making interface the new active one [ 1255.160390][T20441] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1255.177261][T20442] xfrm1: entered promiscuous mode [ 1255.246778][T20442] xfrm1: entered allmulticast mode [ 1255.315181][T20454] tipc: Enabling of bearer rejected, already enabled [ 1255.551345][T20460] syzkaller1: entered promiscuous mode [ 1255.558563][T20460] syzkaller1: entered allmulticast mode [ 1255.674031][T20472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12607'. [ 1255.788320][T20473] tipc: Enabled bearer , priority 0 [ 1255.799672][ T7657] wlan1: Creating new IBSS network, BSSID 36:e4:ce:51:37:4e [ 1255.815859][T20475] syzkaller0: entered promiscuous mode [ 1255.860914][T20475] syzkaller0: entered allmulticast mode [ 1255.903341][T20465] tipc: Resetting bearer [ 1255.937404][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1255.950133][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1255.964468][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1255.999052][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1256.012292][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1256.097520][T20483] syzkaller0: entered promiscuous mode [ 1256.103504][T20483] syzkaller0: entered allmulticast mode [ 1256.221345][T20478] lo speed is unknown, defaulting to 1000 [ 1256.344967][T20491] netlink: 'syz.1.12612': attribute type 6 has an invalid length. [ 1256.500836][T20464] tipc: Resetting bearer [ 1256.544121][T20498] netlink: 'syz.2.12613': attribute type 39 has an invalid length. [ 1256.604161][T20464] tipc: Disabling bearer [ 1256.796656][ T8402] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.035609][T20508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12617'. [ 1257.082310][ T8402] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.555889][ T8402] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.926968][ T8402] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1257.990652][T20537] syzkaller1: entered promiscuous mode [ 1258.007495][T20537] syzkaller1: entered allmulticast mode [ 1258.014360][T20540] netlink: 'syz.2.12624': attribute type 10 has an invalid length. [ 1258.048210][ T5842] Bluetooth: hci1: command tx timeout [ 1258.110153][T20544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1258.149290][T20540] team0: Device vxcan1 is of different type [ 1258.167464][T20540] netlink: 'syz.2.12624': attribute type 10 has an invalid length. [ 1258.187707][T20548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1258.216482][T20540] team0: Device vxcan1 is of different type [ 1258.262181][T20540] netlink: 'syz.2.12624': attribute type 10 has an invalid length. [ 1258.294904][T20551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12627'. [ 1258.352831][T20540] team0: Device vxcan1 is of different type [ 1258.373276][T20540] netlink: 'syz.2.12624': attribute type 10 has an invalid length. [ 1258.405626][T20540] team0: Device vxcan1 is of different type [ 1258.420924][T20558] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1258.433415][T20540] netlink: 'syz.2.12624': attribute type 10 has an invalid length. [ 1258.510003][T20560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12630'. [ 1258.522011][T20540] team0: Device vxcan1 is of different type [ 1258.547911][T20540] netlink: 'syz.2.12624': attribute type 10 has an invalid length. [ 1258.558817][T20540] team0: Device vxcan1 is of different type [ 1258.581264][T20540] netlink: 'syz.2.12624': attribute type 10 has an invalid length. [ 1258.644236][T20540] team0: Device vxcan1 is of different type [ 1258.672853][T20540] netlink: 'syz.2.12624': attribute type 10 has an invalid length. [ 1258.728507][T20540] team0: Device vxcan1 is of different type [ 1258.747511][T20570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12632'. [ 1258.760865][T20540] netlink: 'syz.2.12624': attribute type 10 has an invalid length. [ 1259.129373][ T8402] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1259.180908][ T8402] dvmrp0 (unregistering): left allmulticast mode [ 1259.482044][ T8402] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 1259.490648][ T8402] bridge6 (unregistering): left promiscuous mode [ 1259.530327][ T8402] bond0 (unregistering): Released all slaves [ 1259.543430][ T8402] bond1 (unregistering): Released all slaves [ 1259.558769][ T8402] bond2 (unregistering): Released all slaves [ 1259.586682][ T8402] bond3 (unregistering): Released all slaves [ 1259.601572][ T8402] bond4 (unregistering): Released all slaves [ 1259.619478][ T8402] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1259.638664][ T8402] bond5 (unregistering): Released all slaves [ 1259.659941][ T8402] bond6 (unregistering): (slave veth3): Releasing active interface [ 1259.670072][ T8402] bond6 (unregistering): Released all slaves [ 1259.686119][ T8402] bond7 (unregistering): Released all slaves [ 1259.709592][ T8402] bond8 (unregistering): Released all slaves [ 1259.724913][ T8402] bond9 (unregistering): Released all slaves [ 1259.744063][T20540] team0: Device vxcan1 is of different type [ 1259.812989][T20566] netlink: 'syz.1.12631': attribute type 1 has an invalid length. [ 1260.001389][ T8402] tipc: Disabling bearer [ 1260.011031][ T8402] tipc: Left network mode [ 1260.025537][T20478] chnl_net:caif_netlink_parms(): no params data found [ 1260.128793][ T5842] Bluetooth: hci1: command tx timeout [ 1260.154285][T20601] netlink: 'syz.0.12637': attribute type 11 has an invalid length. [ 1260.605700][T20627] C: renamed from lo (while UP) [ 1260.639909][T20627] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1260.708763][T20478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.728002][T20478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.745232][T20478] bridge_slave_0: entered allmulticast mode [ 1260.771489][T20478] bridge_slave_0: entered promiscuous mode [ 1260.822525][T20478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.842233][T20478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.858020][T20478] bridge_slave_1: entered allmulticast mode [ 1260.867857][T20634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12644'. [ 1260.882566][T20478] bridge_slave_1: entered promiscuous mode [ 1260.915740][T20634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12644'. [ 1261.091935][T20478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.133174][T20478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.304123][T20478] team0: Port device team_slave_0 added [ 1261.448243][T20478] team0: Port device team_slave_1 added [ 1261.771646][T20478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.800295][T20478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.905324][T20478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.014617][T20478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.035324][T20478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.117187][T20478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.197050][T20682] mac80211_hwsim hwsim109 wlan1: Caught tx_queue_len zero misconfig [ 1262.215747][ T5842] Bluetooth: hci1: command tx timeout [ 1262.361733][T20686] netlink: 136 bytes leftover after parsing attributes in process `syz.4.12655'. [ 1262.403422][ T8402] hsr_slave_0: left promiscuous mode [ 1262.420137][ T8402] hsr_slave_1: left promiscuous mode [ 1262.634817][ T8402] pimreg3 (unregistering): left allmulticast mode [ 1263.077667][T20478] hsr_slave_0: entered promiscuous mode [ 1263.089007][T20478] hsr_slave_1: entered promiscuous mode [ 1263.095559][T20478] debugfs: 'hsr0' already exists in 'hsr' [ 1263.106523][T20478] Cannot create hsr debugfs directory [ 1263.317139][T20713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12662'. [ 1263.365943][T20713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12662'. [ 1263.453988][T20717] netlink: 340 bytes leftover after parsing attributes in process `syz.4.12664'. [ 1263.528548][T20725] validate_nla: 2 callbacks suppressed [ 1263.528563][T20725] netlink: 'syz.0.12667': attribute type 1 has an invalid length. [ 1263.545121][T20725] netlink: 4248 bytes leftover after parsing attributes in process `syz.0.12667'. [ 1263.646840][T20720] syzkaller0: entered promiscuous mode [ 1263.652391][T20720] syzkaller0: entered allmulticast mode [ 1263.885558][ T8402] IPVS: stop unused estimator thread 0... [ 1264.286324][ T5842] Bluetooth: hci1: command tx timeout [ 1264.558985][T20764] Bluetooth: MGMT ver 1.23 [ 1264.653357][T20478] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1264.673299][T20478] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1264.723248][T20478] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1264.764311][T20478] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1265.008836][T20791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12683'. [ 1265.056466][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12684'. [ 1265.091375][T20791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12683'. [ 1265.102834][T20791] netlink: 'syz.4.12683': attribute type 2 has an invalid length. [ 1265.252071][T20798] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 1265.327292][T20478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.356812][T20478] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.371297][T29876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.378505][T29876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.421797][T20811] syzkaller1: entered promiscuous mode [ 1265.435581][T20811] syzkaller1: entered allmulticast mode [ 1265.464681][ T8406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.471970][ T8406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.069575][T20478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.278072][T20852] netlink: zone id is out of range [ 1266.307008][T20852] netlink: zone id is out of range [ 1266.312197][T20852] netlink: zone id is out of range [ 1266.334040][T20478] veth0_vlan: entered promiscuous mode [ 1266.346166][T20852] netlink: zone id is out of range [ 1266.355152][T20852] netlink: zone id is out of range [ 1266.376294][T20852] netlink: zone id is out of range [ 1266.382611][T20852] netlink: zone id is out of range [ 1266.392823][T20852] netlink: set zone limit has 4 unknown bytes [ 1266.415917][T20478] veth1_vlan: entered promiscuous mode [ 1266.603291][T20868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.702969][T20478] veth0_macvtap: entered promiscuous mode [ 1266.763283][T20478] veth1_macvtap: entered promiscuous mode [ 1266.831514][T20478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.870840][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.918688][T20478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.978779][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.998949][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.049060][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.120978][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.198601][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.216252][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.385273][T11260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.444817][T11260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.513849][T20909] netlink: 'syz.0.12710': attribute type 13 has an invalid length. [ 1267.548331][T20909] gretap0: refused to change device tx_queue_len [ 1267.680423][T20914] __nla_validate_parse: 2 callbacks suppressed [ 1267.680443][T20914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12711'. [ 1267.728365][T20914] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12711'. [ 1267.780581][T20919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12604'. [ 1267.820765][T20919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12604'. [ 1268.165664][T20934] block nbd7: server does not support multiple connections per device. [ 1268.187270][T20934] block nbd7: shutting down sockets [ 1268.303252][T20950] netlink: 'syz.4.12720': attribute type 10 has an invalid length. [ 1268.341542][T20954] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12721'. [ 1268.380232][T20954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12721'. [ 1268.416912][T20954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12721'. [ 1268.455537][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12719'. [ 1268.475962][T20960] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1268.495653][T20962] netlink: 576 bytes leftover after parsing attributes in process `syz.3.12722'. [ 1268.808720][T20971] netlink: 'syz.3.12726': attribute type 1 has an invalid length. [ 1268.844297][T20971] bridge0: port 3(veth0_to_bond) entered blocking state [ 1268.909858][T20971] bridge0: port 3(veth0_to_bond) entered disabled state [ 1268.946748][T20971] veth0_to_bond: entered allmulticast mode [ 1268.977881][T20971] veth0_to_bond: entered promiscuous mode [ 1269.026018][T20978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.033793][T20978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.067950][T20978] bridge0: entered promiscuous mode [ 1269.099413][T20978] bridge0: entered allmulticast mode [ 1269.748956][T21025] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12740'. [ 1270.415214][T21059] syzkaller1: entered promiscuous mode [ 1270.436131][T21059] syzkaller1: entered allmulticast mode [ 1270.471413][T21067] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1270.654880][T21075] netlink: 'syz.3.12751': attribute type 1 has an invalid length. [ 1270.754402][T21077] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1270.807918][T21075] veth3: entered promiscuous mode [ 1270.814250][T21079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1270.942893][T21084] vlan2: entered allmulticast mode [ 1271.740322][T21144] netlink: 'syz.3.12766': attribute type 1 has an invalid length. [ 1271.770627][T21144] netlink: 'syz.3.12766': attribute type 23 has an invalid length. [ 1272.098876][T21162] IPv6: sit1: Disabled Multicast RS [ 1272.113324][T21162] sit1: entered allmulticast mode [ 1272.268691][T21168] nbd: must specify at least one socket [ 1272.475366][T21177] ip6tnl0: Caught tx_queue_len zero misconfig [ 1272.699833][T21194] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1272.714117][T21194] bond1 (unregistering): Released all slaves [ 1273.064241][T21223] IPv6: sit1: Disabled Multicast RS [ 1273.100213][T21223] sit1: entered allmulticast mode [ 1273.185129][T21229] __nla_validate_parse: 7 callbacks suppressed [ 1273.185459][T21229] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12790'. [ 1273.224948][T21231] bond3: entered promiscuous mode [ 1273.232293][T21231] bond3: entered allmulticast mode [ 1273.238842][T21231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1273.338462][T21236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12794'. [ 1273.409230][T21236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12794'. [ 1273.804654][T21273] netlink: 192 bytes leftover after parsing attributes in process `syz.1.12805'. [ 1273.848120][T21273] syzkaller0: entered promiscuous mode [ 1273.853779][T21273] syzkaller0: entered allmulticast mode [ 1273.866782][T21273] ±ÿ: renamed from team_slave_1 (while UP) [ 1274.045661][T21284] netlink: 'syz.3.12808': attribute type 4 has an invalid length. [ 1274.352208][T21299] Cannot find set identified by id 65534 to match [ 1274.593869][T21310] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1274.613730][T21310] syzkaller0: entered promiscuous mode [ 1274.621396][T21310] syzkaller0: entered allmulticast mode [ 1274.752624][T21320] netlink: 'syz.4.12819': attribute type 1 has an invalid length. [ 1274.897938][T21327] netlink: 'syz.3.12822': attribute type 1 has an invalid length. [ 1274.941067][T21331] net_ratelimit: 7 callbacks suppressed [ 1274.941091][T21331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1275.147351][T21339] netlink: 'syz.0.12827': attribute type 1 has an invalid length. [ 1275.157451][T21335] lo speed is unknown, defaulting to 1000 [ 1275.279047][T21339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12827'. [ 1275.311831][T21339] tipc: Enabling of bearer rejected, failed to enable media [ 1275.591567][T21360] netlink: 'syz.4.12835': attribute type 1 has an invalid length. [ 1275.632123][T21360] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12835'. [ 1275.942500][T21386] netlink: 'syz.1.12843': attribute type 2 has an invalid length. [ 1276.308558][T21405] pim6reg1: entered promiscuous mode [ 1276.314384][T21405] pim6reg1: entered allmulticast mode [ 1276.429522][T21408] syzkaller1: entered promiscuous mode [ 1276.455758][T21408] syzkaller1: entered allmulticast mode [ 1276.521796][T21412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12851'. [ 1276.654048][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12850'. [ 1276.829648][T21418] veth1_macvtap: left promiscuous mode [ 1277.295862][T21434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12857'. [ 1277.404254][T21443] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12862'. [ 1277.696425][T21467] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1277.704219][T21467] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1278.151354][T21494] netlink: 'syz.3.12876': attribute type 5 has an invalid length. [ 1278.166712][T21501] gretap0: entered promiscuous mode [ 1278.452973][T12018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.714243][T21513] syzkaller0: entered promiscuous mode [ 1278.720110][T21513] syzkaller0: entered allmulticast mode [ 1278.730013][T21529] __nla_validate_parse: 6 callbacks suppressed [ 1278.730042][T21529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12887'. [ 1278.751292][T21532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12887'. [ 1278.762043][T21531] netlink: 'syz.2.12888': attribute type 1 has an invalid length. [ 1278.809254][T21531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1278.853945][T21531] bond2: (slave geneve2): making interface the new active one [ 1278.884484][T21531] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1278.895013][T29876] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1278.905289][T29876] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1279.616616][T21556] IPv6: NLM_F_CREATE should be specified when creating new route [ 1280.377059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.947502][ T975] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1280.957079][ T975] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1281.090571][T21545] lo speed is unknown, defaulting to 1000 [ 1281.131721][T21561] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1281.202469][T21563] veth0: entered promiscuous mode [ 1281.243130][T21563] netlink: 'syz.4.12896': attribute type 32 has an invalid length. [ 1281.257071][T21563] netlink: 776 bytes leftover after parsing attributes in process `syz.4.12896'. [ 1281.286927][T21562] veth0: left promiscuous mode [ 1281.432035][T21567] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1281.474713][T21567] bond3 (unregistering): Released all slaves [ 1281.558632][T21575] bridge0: port 3(bond0) entered blocking state [ 1281.565186][T21575] bridge0: port 3(bond0) entered disabled state [ 1281.583771][T21575] bond0: entered allmulticast mode [ 1281.603013][T21575] bond_slave_0: entered allmulticast mode [ 1281.617474][T21575] bond_slave_1: entered allmulticast mode [ 1281.638817][T21575] bond0: entered promiscuous mode [ 1281.643993][T21575] bond_slave_0: entered promiscuous mode [ 1281.658806][T21575] bond_slave_1: entered promiscuous mode [ 1281.961336][T21597] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1282.081393][T21599] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1282.118143][T21601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12907'. [ 1282.132779][T21599] xt_TCPMSS: Only works on TCP SYN packets [ 1282.394135][T21611] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1282.545153][T21622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12911'. [ 1282.697231][T21628] delete_channel: no stack [ 1283.107265][T21649] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12919'. [ 1283.333294][T21655] gtp0: entered promiscuous mode [ 1283.367538][T21655] gtp0: entered allmulticast mode [ 1283.383351][T21662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12920'. [ 1283.493759][T21666] netlink: 'syz.3.12924': attribute type 4 has an invalid length. [ 1283.664081][T21666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.681718][T21666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.802911][T29876] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.856899][T29876] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.867607][T29876] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.878883][T29876] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.995871][T21686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1284.104544][T21696] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20002 [ 1284.254181][T21704] netlink: 260 bytes leftover after parsing attributes in process `syz.0.12933'. [ 1284.322487][T21706] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12935'. [ 1284.449357][T21712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12937'. [ 1284.465459][T21712] vxcan2: entered allmulticast mode [ 1284.701969][T21723] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12940'. [ 1284.769537][T21729] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12940'. [ 1284.785886][T21729] bridge0: port 3(bond0) entered blocking state [ 1284.792435][T21729] bridge0: port 3(bond0) entered listening state [ 1284.799130][T21729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.806377][T21729] bridge0: port 2(bridge_slave_1) entered listening state [ 1284.813835][T21729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.821093][T21729] bridge0: port 1(bridge_slave_0) entered listening state [ 1284.840474][T21729] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12940'. [ 1284.867360][T21729] bridge0: port 3(bond0) entered disabled state [ 1284.873973][T21729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.881278][T21729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.350468][T21759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1285.476236][T21771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12956'. [ 1285.499587][T21772] netlink: 'syz.4.12955': attribute type 10 has an invalid length. [ 1285.521982][T21772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.537912][T21772] batadv0: entered promiscuous mode [ 1285.543399][T21772] batadv0: entered allmulticast mode [ 1285.555351][T21772] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1285.684875][T21783] syzkaller1: entered promiscuous mode [ 1285.691131][T21783] syzkaller1: entered allmulticast mode [ 1285.727622][T21785] netlink: 'syz.2.12959': attribute type 33 has an invalid length. [ 1285.754002][T21785] netlink: 'syz.2.12959': attribute type 33 has an invalid length. [ 1285.862725][T21792] netlink: 88 bytes leftover after parsing attributes in process `syz.3.12961'. [ 1285.927218][T11260] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1285.937005][T11260] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1286.072677][T21813] netlink: 'syz.2.12967': attribute type 4 has an invalid length. [ 1286.088747][T21813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12967'. [ 1286.264696][T21819] xt_hashlimit: invalid rate [ 1286.282484][T21819] netlink: 'syz.1.12970': attribute type 1 has an invalid length. [ 1286.291382][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12970'. [ 1286.303850][T21819] netlink: 'syz.1.12970': attribute type 2 has an invalid length. [ 1286.334952][T21819] netlink: 'syz.1.12970': attribute type 2 has an invalid length. [ 1286.347337][T21819] netlink: 'syz.1.12970': attribute type 2 has an invalid length. [ 1286.962393][T21862] bond4: entered promiscuous mode [ 1286.969746][T21862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1286.989940][T21868] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1286.994649][T21862] macvlan2: entered promiscuous mode [ 1287.002922][T21862] macvlan2: entered allmulticast mode [ 1287.010301][T21862] bond4: (slave macvlan2): Opening slave failed [ 1287.034470][T21868] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:0 [ 1287.308993][T21877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1287.610090][T21831] delete_channel: no stack [ 1287.956452][T21897] syzkaller0: entered promiscuous mode [ 1287.962104][T21897] syzkaller0: entered allmulticast mode [ 1288.058006][T11260] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1290.688931][T21892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1290.845556][T21920] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1290.859660][T21920] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1291.017171][T21938] __nla_validate_parse: 4 callbacks suppressed [ 1291.017191][T21938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13001'. [ 1291.289234][T21953] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1291.773892][T21984] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13013'. [ 1291.901692][T21988] sctp: [Deprecated]: syz.4.13015 (pid 21988) Use of int in max_burst socket option. [ 1291.901692][T21988] Use struct sctp_assoc_value instead [ 1291.989251][T21991] veth0: entered promiscuous mode [ 1292.013700][T21992] netlink: 240 bytes leftover after parsing attributes in process `syz.2.13017'. [ 1292.014254][T21990] veth0: left promiscuous mode [ 1292.029986][T21992] tc_dump_action: action bad kind [ 1292.161996][T22005] netlink: 'syz.3.13019': attribute type 33 has an invalid length. [ 1292.171297][T22005] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13019'. [ 1292.185633][T22006] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13019'. [ 1292.661291][T22029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13027'. [ 1293.331337][T22065] openvswitch: netlink: IP tunnel dst address not specified [ 1293.368818][T22065] openvswitch: netlink: IP tunnel dst address not specified [ 1293.386286][T22065] openvswitch: netlink: IP tunnel dst address not specified [ 1293.410620][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13038'. [ 1293.520645][ T8402] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 1293.910744][T22099] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13049'. [ 1293.972310][T22099] netlink: 'syz.0.13049': attribute type 2 has an invalid length. [ 1294.041237][T22099] syzkaller0: entered promiscuous mode [ 1294.063927][T22099] syzkaller0: entered allmulticast mode [ 1294.389555][T22112] syzkaller0: entered promiscuous mode [ 1294.407800][T22112] syzkaller0: entered allmulticast mode [ 1294.522346][T22130] mac80211_hwsim hwsim112 wlan0: entered promiscuous mode [ 1294.813050][T22143] x_tables: duplicate underflow at hook 2 [ 1294.998976][T22156] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.13063'. [ 1295.439733][T22173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13065'. [ 1295.584388][T22174] netlink: 'syz.3.13065': attribute type 21 has an invalid length. [ 1295.655017][T22175] xt_ecn: cannot match TCP bits for non-tcp packets [ 1297.240040][T22184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13069'. [ 1297.886964][T22174] netlink: 'syz.3.13065': attribute type 1 has an invalid length. [ 1298.056811][T22190] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13072'. [ 1298.319202][T22209] set match dimension is over the limit! [ 1298.491611][T22217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13078'. [ 1298.659928][T22233] erspan1: entered allmulticast mode [ 1299.068716][T22253] ip6gre1: entered promiscuous mode [ 1299.252436][T22258] bond1: (slave bond_slave_1): Device is not our slave [ 1299.260565][T22258] bond1: option active_slave: invalid value (bond_slave_1) [ 1299.281892][T22258] bond1 (unregistering): Released all slaves [ 1299.289098][T22263] netlink: 'syz.1.13087': attribute type 11 has an invalid length. [ 1299.346341][T22263] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13087'. [ 1299.693073][T22279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13093'. [ 1299.703966][T22279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.711699][T22279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.916241][T22290] netlink: 'syz.3.13097': attribute type 1 has an invalid length. [ 1299.996227][T22290] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1300.017693][T22261] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1300.194988][T22295] bond3: (slave ip6erspan0): making interface the new active one [ 1300.231009][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1300.258834][T22295] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1300.471870][T22318] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1300.538607][T22322] netlink: 'syz.2.13103': attribute type 1 has an invalid length. [ 1300.573712][T22322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1300.654969][T22328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1300.664172][T22329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1300.691657][T22322] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1300.728364][T22326] vlan2: entered allmulticast mode [ 1300.733866][T22326] veth0_to_bond: entered allmulticast mode [ 1300.741906][T22326] veth0_to_bond: entered promiscuous mode [ 1300.752290][T22326] veth0_to_bond: left promiscuous mode [ 1300.763343][T22326] bond3: (slave vlan2): making interface the new active one [ 1300.776615][T22326] veth0_to_bond: entered promiscuous mode [ 1300.783528][T22326] vlan2: entered promiscuous mode [ 1300.791767][T22326] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 1300.982807][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13108'. [ 1301.072420][T22344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13110'. [ 1301.247429][ T5842] Bluetooth: hci0: command 0x0c20 tx timeout [ 1301.322673][T22352] netlink: 144 bytes leftover after parsing attributes in process `syz.0.13114'. [ 1301.499857][T22360] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.13117'. [ 1301.575516][T22367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13119'. [ 1301.684980][T22362] syzkaller0: entered promiscuous mode [ 1301.691436][T22362] syzkaller0: entered allmulticast mode [ 1301.703273][T22367] netlink: 'syz.2.13119': attribute type 2 has an invalid length. [ 1301.745084][T22371] syzkaller0: entered promiscuous mode [ 1301.755217][T22371] syzkaller0: entered allmulticast mode [ 1301.951894][T22379] IPv6: NLM_F_CREATE should be specified when creating new route [ 1302.085465][ T5842] block nbd7: Receive control failed (result -32) [ 1303.977495][T22399] vcan0: tx address claim with dest, not broadcast [ 1304.288155][T22423] netlink: 'syz.2.13134': attribute type 3 has an invalid length. [ 1304.564259][T22396] __nla_validate_parse: 3 callbacks suppressed [ 1304.564282][T22396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13128'. [ 1304.710894][T22452] netlink: 'syz.4.13141': attribute type 4 has an invalid length. [ 1304.768516][T22455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13142'. [ 1304.794215][T22452] bond0: left allmulticast mode [ 1304.807542][T22454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13142'. [ 1304.818453][T22452] bond_slave_0: left allmulticast mode [ 1304.824113][T22452] bond_slave_1: left allmulticast mode [ 1304.841351][T22452] batadv0: left allmulticast mode [ 1304.855874][T22452] bond0: left promiscuous mode [ 1304.862920][T22452] bond_slave_0: left promiscuous mode [ 1304.874123][T22452] bond_slave_1: left promiscuous mode [ 1304.881568][T22452] batadv0: left promiscuous mode [ 1304.888173][T22452] bridge0: port 3(bond0) entered disabled state [ 1304.905513][T22452] bond0: (slave batadv0): Releasing backup interface [ 1304.949381][T22452] bridge_slave_0: left allmulticast mode [ 1304.955540][T22452] bridge_slave_0: left promiscuous mode [ 1304.975832][T22452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.991875][T22452] bridge_slave_1: left allmulticast mode [ 1305.003218][T22452] bridge_slave_1: left promiscuous mode [ 1305.033875][T22452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.061983][T22452] bond0: (slave bond_slave_0): Releasing backup interface [ 1305.080604][T22452] bond0: (slave bond_slave_1): Releasing backup interface [ 1305.100944][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.109886][T22452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.121330][T22452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.130086][T22452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.141559][T22452] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1305.173579][T22448] syzkaller1: entered promiscuous mode [ 1305.182715][T22448] syzkaller1: entered allmulticast mode [ 1305.620880][T22497] netlink: 'syz.1.13155': attribute type 142 has an invalid length. [ 1305.631933][T22498] netlink: 'syz.3.13154': attribute type 1 has an invalid length. [ 1305.683319][T22496] syzkaller0: entered promiscuous mode [ 1305.691482][T22496] syzkaller0: entered allmulticast mode [ 1305.709443][T22500] netlink: 124 bytes leftover after parsing attributes in process `syz.4.13157'. [ 1305.774039][T22504] netlink: 'syz.0.13158': attribute type 11 has an invalid length. [ 1305.789647][T22504] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13158'. [ 1305.888025][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 1305.896151][ C1] lec:lec_tx_timeout: lec0 [ 1306.134112][T22514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13162'. [ 1306.136833][T22523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13163'. [ 1306.177964][T22518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13162'. [ 1306.271549][T22529] bond0: option ad_select: unable to set because the bond device is up [ 1306.521598][T22545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13167'. [ 1306.574615][T22550] xt_hashlimit: size too large, truncated to 1048576 [ 1306.671187][T22556] netlink: 'syz.4.13168': attribute type 1 has an invalid length. [ 1306.824730][T22561] syzkaller0: entered promiscuous mode [ 1306.841316][T22562] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1307.275477][T22585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13179'. [ 1307.374360][T22585] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1307.909639][T22631] lo speed is unknown, defaulting to 1000 [ 1307.950354][T22635] netlink: 'syz.2.13194': attribute type 1 has an invalid length. [ 1308.096950][T22635] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1308.145555][T22642] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1308.165727][T22642] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1308.202420][T22642] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1308.359104][T22648] veth5: entered promiscuous mode [ 1308.375742][T22648] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1308.406669][T22635] vlan3: entered allmulticast mode [ 1308.412126][T22635] bond4: entered allmulticast mode [ 1308.727835][T22670] netlink: 'syz.1.13204': attribute type 1 has an invalid length. [ 1308.735884][T22670] netlink: 'syz.1.13204': attribute type 1 has an invalid length. [ 1308.744991][T22670] netlink: 'syz.1.13204': attribute type 2 has an invalid length. [ 1308.755764][ T30] audit: type=1800 audit(1773752445.494:16): pid=22670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13204" name="memory.events" dev="tmpfs" ino=714 res=0 errno=0 [ 1309.262932][T22690] mac80211_hwsim hwsim114 wlan0: entered promiscuous mode [ 1309.338078][ T5842] Bluetooth: hci0: command 0x0c20 tx timeout [ 1309.727892][T22712] netlink: 'syz.0.13215': attribute type 21 has an invalid length. [ 1309.759640][T22712] netlink: 'syz.0.13215': attribute type 22 has an invalid length. [ 1309.791425][T22712] netlink: 'syz.0.13215': attribute type 23 has an invalid length. [ 1309.855102][T22712] netlink: 'syz.0.13215': attribute type 25 has an invalid length. [ 1309.894494][T22712] __nla_validate_parse: 10 callbacks suppressed [ 1309.894516][T22712] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13215'. [ 1309.974577][T22720] geneve3: entered promiscuous mode [ 1309.987836][T11260] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 53833 - 0 [ 1310.006475][T11260] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 53833 - 0 [ 1310.027122][T11260] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 53833 - 0 [ 1310.044012][T11260] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 53833 - 0 [ 1310.191883][T22737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13222'. [ 1310.250973][T22737] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1310.263029][T22737] netlink: 184 bytes leftover after parsing attributes in process `syz.2.13222'. [ 1310.400824][T22749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13224'. [ 1310.494310][T22755] netlink: 212 bytes leftover after parsing attributes in process `syz.3.13228'. [ 1310.529350][T22755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13228'. [ 1310.555591][T22753] syzkaller0: entered promiscuous mode [ 1310.561402][T22753] syzkaller0: entered allmulticast mode [ 1310.739723][T22777] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20004 [ 1310.919425][T22785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13234'. [ 1310.946522][T22785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13234'. [ 1310.971219][T22790] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13236'. [ 1310.995450][T22790] netlink: 92 bytes leftover after parsing attributes in process `syz.0.13236'. [ 1311.109732][T22798] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 1311.176193][T22802] IPv6: sit2: Disabled Multicast RS [ 1311.211229][T22802] syzkaller0: entered promiscuous mode [ 1311.226375][T22802] syzkaller0: entered allmulticast mode [ 1311.413692][T22807] syzkaller0: entered promiscuous mode [ 1311.432997][T22817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1311.442542][T22807] syzkaller0: entered allmulticast mode [ 1311.483786][T22807] syzkaller0: tun_net_xmit 1 [ 1313.153081][T22846] netlink: 'syz.3.13253': attribute type 1 has an invalid length. [ 1313.489908][T22841] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1313.517313][T22841] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1313.682608][T22856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1313.718452][T22859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1313.736528][T11260] vlan2: left promiscuous mode [ 1313.745687][T22864] netlink: 'syz.2.13257': attribute type 1 has an invalid length. [ 1313.860949][T22864] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1313.924809][T22864] bond5: (slave gretap1): making interface the new active one [ 1313.940428][T22864] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1313.955727][T22864] macvlan2: entered promiscuous mode [ 1313.961798][T22864] macvlan2: entered allmulticast mode [ 1313.969103][T22864] bond5: entered promiscuous mode [ 1313.978815][T22864] gretap1: entered promiscuous mode [ 1313.985547][T22864] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1313.998917][T22864] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1314.036478][T22864] bond5: left promiscuous mode [ 1314.041329][T22864] gretap1: left promiscuous mode [ 1314.151378][T22872] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1314.391410][T22906] netlink: 'syz.2.13268': attribute type 12 has an invalid length. [ 1314.475473][T22906] bond6: option primary_reselect: invalid value (255) [ 1314.487573][T22906] bond6 (unregistering): Released all slaves [ 1314.521569][T22917] netlink: 'syz.4.13270': attribute type 1 has an invalid length. [ 1314.535147][T22917] pim6reg1: entered promiscuous mode [ 1314.546806][T22917] pim6reg1: entered allmulticast mode [ 1314.649874][T22920] lo speed is unknown, defaulting to 1000 [ 1314.762875][T22926] veth0_to_team: entered allmulticast mode [ 1315.025716][T22939] __nla_validate_parse: 9 callbacks suppressed [ 1315.025739][T22939] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13277'. [ 1315.069575][T22939] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13277'. [ 1315.090670][T22922] lo speed is unknown, defaulting to 1000 [ 1315.174038][T22942] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1315.485712][T22962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1315.496721][T22962] netlink: 360 bytes leftover after parsing attributes in process `syz.2.13283'. [ 1315.699179][T22973] syzkaller0: entered promiscuous mode [ 1315.720218][T22973] syzkaller0: entered allmulticast mode [ 1315.734628][T22971] netlink: 'syz.2.13285': attribute type 1 has an invalid length. [ 1315.752739][T22974] TC_ACT_REPEAT abuse ? [ 1315.769008][T22976] TC_ACT_REPEAT abuse ? [ 1315.792614][T22973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13286'. [ 1315.836789][T22971] netlink: 'syz.2.13285': attribute type 1 has an invalid length. [ 1315.873018][T22974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13286'. [ 1315.948018][T22971] netlink: 'syz.2.13285': attribute type 1 has an invalid length. [ 1316.151002][T22971] netlink: 'syz.2.13285': attribute type 1 has an invalid length. [ 1316.224133][T22971] netlink: 'syz.2.13285': attribute type 1 has an invalid length. [ 1316.303647][T22971] netlink: 'syz.2.13285': attribute type 1 has an invalid length. [ 1316.405169][T22971] netlink: 'syz.2.13285': attribute type 1 has an invalid length. [ 1316.448928][T22971] netlink: 'syz.2.13285': attribute type 1 has an invalid length. [ 1316.507594][T22994] tipc: Started in network mode [ 1316.512601][T22994] tipc: Node identity , cluster identity 4711 [ 1316.531840][T23007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13292'. [ 1316.541687][T22994] tipc: Failed to obtain node identity [ 1316.548199][T22994] tipc: Enabling of bearer rejected, failed to enable media [ 1316.558183][T23007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13292'. [ 1316.586376][T23010] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13293'. [ 1316.593548][T23005] bridge_slave_0: left allmulticast mode [ 1316.602800][T23005] bridge_slave_0: left promiscuous mode [ 1316.613096][T23005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.649645][T23005] bridge_slave_1: left allmulticast mode [ 1316.655506][T23005] bridge_slave_1: left promiscuous mode [ 1316.665876][T23005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.708057][T23005] bond1: (slave veth0_to_bond): Releasing active interface [ 1316.723022][T23005] bond0: (slave bond_slave_0): Releasing backup interface [ 1316.751077][T23005] bond0: (slave bond_slave_1): Releasing backup interface [ 1316.788381][T23005] team0: Port device team_slave_0 removed [ 1316.820064][T23005] team0: Port device team_slave_1 removed [ 1316.828073][T23005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1316.835619][T23005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.863200][T23005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1316.875555][T23005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.202177][T23021] netlink: 284 bytes leftover after parsing attributes in process `syz.4.13296'. [ 1317.256191][T23030] syzkaller0: entered promiscuous mode [ 1317.261812][T23030] syzkaller0: entered allmulticast mode [ 1317.423798][T23036] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 1317.620096][T23044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13302'. [ 1317.660899][T23051] netlink: 'syz.3.13303': attribute type 14 has an invalid length. [ 1318.211981][T23074] netlink: 'syz.0.13312': attribute type 12 has an invalid length. [ 1318.436021][T23086] xt_limit: Overflow, try lower: 604147548/4200216962 [ 1319.278382][T23115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.286125][T23115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.410377][ T7657] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1319.532580][T23126] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1319.808795][T23138] syzkaller1: entered promiscuous mode [ 1319.835013][T23140] openvswitch: netlink: IP tunnel dst address not specified [ 1319.851053][T23138] syzkaller1: entered allmulticast mode [ 1319.873967][T23138] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20004 [ 1320.090663][T23157] __nla_validate_parse: 9 callbacks suppressed [ 1320.090696][T23157] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13337'. [ 1320.599112][T23170] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1320.688294][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1320.794399][T23175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13343'. [ 1320.940307][T23187] batadv_slave_0: entered promiscuous mode [ 1320.947837][T23187] validate_nla: 1 callbacks suppressed [ 1320.947856][T23187] netlink: 'syz.1.13342': attribute type 1 has an invalid length. [ 1320.973905][T23184] syzkaller1: entered promiscuous mode [ 1321.001611][T23184] syzkaller1: entered allmulticast mode [ 1321.101598][T23173] batadv_slave_0: left promiscuous mode [ 1321.178024][T23198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13345'. [ 1321.188738][T23198] netlink: 'syz.1.13345': attribute type 3 has an invalid length. [ 1322.083968][T23223] netlink: 'syz.4.13350': attribute type 32 has an invalid length. [ 1322.092755][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13350'. [ 1322.120337][T23223] bond5: option coupled_control: invalid value (118) [ 1322.131968][T23223] bond5 (unregistering): Released all slaves [ 1323.918373][T23190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1324.089839][T23232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13351'. [ 1324.210691][T11260] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.241639][T23233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13353'. [ 1324.243013][T11260] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.300611][T23233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13353'. [ 1324.324843][T23240] lo speed is unknown, defaulting to 1000 [ 1324.354764][T23247] netlink: 'syz.4.13356': attribute type 2 has an invalid length. [ 1324.395460][T11260] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.417050][T11260] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.727609][T23271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13361'. [ 1325.081816][T23293] netlink: 'syz.0.13366': attribute type 2 has an invalid length. [ 1325.200410][T23296] tipc: Enabling of bearer rejected, failed to enable media [ 1325.221466][T23296] nbd: must specify an index to disconnect [ 1325.800372][T23330] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1326.189331][T23345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13381'. [ 1326.218358][T23347] netlink: 'syz.0.13382': attribute type 5 has an invalid length. [ 1326.258459][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13381'. [ 1326.501897][T23356] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1326.524977][T23356] netlink: 'syz.0.13384': attribute type 1 has an invalid length. [ 1326.676927][T23364] netlink: 'syz.3.13387': attribute type 4 has an invalid length. [ 1326.718163][T23364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13387'. [ 1327.074826][T23376] lo speed is unknown, defaulting to 1000 [ 1327.205767][T23390] macvtap1: entered promiscuous mode [ 1327.225574][T23390] macvtap1: entered allmulticast mode [ 1327.240073][T23390] veth1_vlan: entered allmulticast mode [ 1327.519896][T23408] syzkaller0: entered promiscuous mode [ 1327.533499][T23408] syzkaller0: entered allmulticast mode [ 1327.675973][T23420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13400'. [ 1327.687442][T23420] netlink: 176 bytes leftover after parsing attributes in process `syz.2.13400'. [ 1327.696772][T23420] netlink: 'syz.2.13400': attribute type 5 has an invalid length. [ 1327.708765][T23420] netlink: 'syz.2.13400': attribute type 11 has an invalid length. [ 1327.935587][T23427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13402'. [ 1327.972405][T23429] Bluetooth: MGMT ver 1.23 [ 1328.020068][T23426] macvtap0: entered promiscuous mode [ 1328.056929][T23427] veth0_macvtap: left promiscuous mode [ 1328.161214][T23427] macvtap0 (unregistering): left promiscuous mode [ 1328.978140][T23457] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13412'. [ 1329.038786][T23457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13412'. [ 1329.563163][T23473] lo: Caught tx_queue_len zero misconfig [ 1329.865478][T23494] syzkaller1: entered promiscuous mode [ 1329.888624][T23494] syzkaller1: entered allmulticast mode [ 1329.974514][T23502] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13423'. [ 1330.046585][T23506] syzkaller0: entered promiscuous mode [ 1330.075418][T23506] syzkaller0: entered allmulticast mode [ 1330.508300][T23519] unsupported nla_type 33542 [ 1330.606812][T23526] netlink: 'syz.3.13431': attribute type 20 has an invalid length. [ 1330.614794][T23526] IPv6: NLM_F_CREATE should be specified when creating new route [ 1330.658969][T23529] netlink: 'syz.0.13432': attribute type 15 has an invalid length. [ 1330.699653][T23527] netlink: 'syz.3.13431': attribute type 3 has an invalid length. [ 1330.710784][T23527] netlink: 'syz.3.13431': attribute type 1 has an invalid length. [ 1330.719188][T23527] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13431'. [ 1330.910286][ T10] IPVS: starting estimator thread 0... [ 1331.016546][T23540] IPVS: using max 26 ests per chain, 62400 per kthread [ 1331.235594][T23554] hsr_slave_0 (unregistering): left promiscuous mode [ 1331.417351][T23571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1331.432653][T23571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1331.522074][T23575] __nla_validate_parse: 3 callbacks suppressed [ 1331.522098][T23575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13449'. [ 1331.957180][ T5842] block nbd8: Receive control failed (result -32) [ 1332.296600][T23607] bond2: entered promiscuous mode [ 1332.524211][T23617] syzkaller0: entered promiscuous mode [ 1332.551068][T23617] syzkaller0: entered allmulticast mode [ 1332.825315][T23634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13465'. [ 1332.854943][T23634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13465'. [ 1332.931513][T23641] netlink: 'syz.4.13467': attribute type 17 has an invalid length. [ 1332.932905][T23650] netlink: 'syz.4.13467': attribute type 17 has an invalid length. [ 1332.962478][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13467'. [ 1332.977417][T23650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13467'. [ 1332.987149][T23650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13467'. [ 1333.002431][T23643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13468'. [ 1333.004226][T23650] gretap0: entered promiscuous mode [ 1333.036584][T23641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13467'. [ 1333.052163][T23650] gretap0: left promiscuous mode [ 1333.092833][T23641] gretap0: entered promiscuous mode [ 1333.119713][T23641] gretap0: left promiscuous mode [ 1333.299591][T23666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13472'. [ 1333.344625][T23673] netlink: 105 bytes leftover after parsing attributes in process `syz.2.13475'. [ 1333.709042][T23643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1333.896781][T23702] netlink: 'syz.3.13481': attribute type 1 has an invalid length. [ 1333.908584][T23700] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1333.918648][T23702] netlink: 'syz.3.13481': attribute type 1 has an invalid length. [ 1333.929328][T23702] netlink: 'syz.3.13481': attribute type 8 has an invalid length. [ 1333.945212][T23700] 8021q: VLANs not supported on vxcan1 [ 1334.285314][T23726] netlink: 'syz.3.13490': attribute type 1 has an invalid length. [ 1334.322804][T23726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1334.334812][T23726] veth0_to_bond: left allmulticast mode [ 1334.344041][T23726] veth0_to_bond: left promiscuous mode [ 1334.350999][T23726] bridge0: port 3(veth0_to_bond) entered disabled state [ 1334.372177][T23726] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1334.383427][T23726] bond4: entered promiscuous mode [ 1334.389448][T23726] bond4: entered allmulticast mode [ 1334.460279][T23745] netlink: 'syz.0.13494': attribute type 26 has an invalid length. [ 1334.532315][T23748] lo speed is unknown, defaulting to 1000 [ 1334.666896][T23755] netlink: 'syz.0.13497': attribute type 7 has an invalid length. [ 1337.226607][T23718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1337.459293][T23790] __nla_validate_parse: 59 callbacks suppressed [ 1337.459315][T23790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13508'. [ 1337.467518][T23792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13506'. [ 1337.533932][T23790] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1337.605574][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13508'. [ 1337.771017][T23807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13511'. [ 1337.961566][T23812] netlink: 'syz.2.13513': attribute type 39 has an invalid length. [ 1338.107566][T23818] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13515'. [ 1338.258585][T23814] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1338.291529][T23830] dvmrp6: entered allmulticast mode [ 1338.606895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.615574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.625455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.634523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.677062][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.779036][ T7657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.931463][T23865] bond5: entered allmulticast mode [ 1338.980354][T23878] netlink: 'syz.2.13535': attribute type 1 has an invalid length. [ 1339.015552][T23865] bond6: (slave sit0): Device is not bonding slave [ 1339.023195][T23865] bond6: option active_slave: invalid value (sit0) [ 1339.037864][T23865] bond6 (unregistering): Released all slaves [ 1339.078716][T23888] nbd: socks must be embedded in a SOCK_ITEM attr [ 1339.096653][T23878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13535'. [ 1339.137716][T23882] bond15: (slave bridge4): making interface the new active one [ 1339.148025][T23882] bond15: (slave bridge4): Enslaving as an active interface with an up link [ 1339.170585][T23878] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1339.275842][T23890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13538'. [ 1339.382306][T23897] netlink: 220 bytes leftover after parsing attributes in process `syz.3.13541'. [ 1339.393694][T23900] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.13543'. [ 1339.421503][T23898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13539'. [ 1339.519415][T23905] netlink: 'syz.1.13544': attribute type 5 has an invalid length. [ 1339.541560][T23907] xt_hashlimit: size too large, truncated to 1048576 [ 1339.732158][T23920] netlink: 'syz.1.13548': attribute type 1 has an invalid length. [ 1339.787394][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.887691][T32561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.930419][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.007936][T23920] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1340.084333][T23929] veth7: entered promiscuous mode [ 1340.094153][T23929] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1340.154998][T23932] vlan2: entered allmulticast mode [ 1340.161294][T23932] bond3: entered allmulticast mode [ 1340.169857][T23932] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1340.393018][T23955] bond6: option min_links: invalid value (18446744073709551614) [ 1340.402016][T23955] bond6: option min_links: allowed values 0 - 2147483647 [ 1340.432351][T23955] bond6 (unregistering): Released all slaves [ 1340.533904][ T1081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.311314][T24007] netlink: 'syz.2.13572': attribute type 10 has an invalid length. [ 1341.348675][T24007] bridge_slave_1: left allmulticast mode [ 1341.379960][T24007] bridge_slave_1: left promiscuous mode [ 1341.409202][T24007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.423248][T24016] IPVS: length: 239 != 24 [ 1341.458263][T24007] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1342.033101][T24053] syzkaller0: entered promiscuous mode [ 1342.041179][T24053] syzkaller0: entered allmulticast mode [ 1342.502336][T24083] netlink: 'syz.4.13597': attribute type 1 has an invalid length. [ 1342.536190][T24080] __nla_validate_parse: 12 callbacks suppressed [ 1342.536214][T24080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13596'. [ 1342.755484][T24091] team_slave_1: Caught tx_queue_len zero misconfig [ 1342.933471][T24096] netlink: 'syz.1.13603': attribute type 4 has an invalid length. [ 1342.971569][T24103] IPVS: set_ctl: invalid protocol: 2 100.1.1.6:20003 [ 1342.985911][T24102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13605'. [ 1342.988819][T24103] Unsupported ieee802154 address type: 0 [ 1343.009575][T24102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13605'. [ 1343.019744][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13604'. [ 1343.031432][T24106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13604'. [ 1343.180610][T24114] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1343.199621][T24114] bond4: entered promiscuous mode [ 1343.207681][T24114] bond4: entered allmulticast mode [ 1343.213327][T24114] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1343.294680][T12018] IPVS: starting estimator thread 0... [ 1343.370021][T24130] netlink: 'syz.1.13611': attribute type 1 has an invalid length. [ 1343.411979][T24122] IPVS: using max 27 ests per chain, 64800 per kthread [ 1343.422001][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13611'. [ 1343.456359][T24130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13611'. [ 1343.465595][T24130] netlink: 'syz.1.13611': attribute type 2 has an invalid length. [ 1343.519582][T24136] sctp: [Deprecated]: syz.0.13614 (pid 24136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1343.519582][T24136] Use struct sctp_sack_info instead [ 1343.535929][T24130] netlink: 'syz.1.13611': attribute type 2 has an invalid length. [ 1343.544177][T24130] netlink: 'syz.1.13611': attribute type 2 has an invalid length. [ 1343.599374][T24131] netlink: 'syz.1.13611': attribute type 1 has an invalid length. [ 1343.627192][T24131] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13611'. [ 1343.652591][T24131] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13611'. [ 1343.665880][T24131] netlink: 'syz.1.13611': attribute type 1 has an invalid length. [ 1343.676241][T24131] netlink: 618 bytes leftover after parsing attributes in process `syz.1.13611'. [ 1343.903706][T24160] netlink: 'syz.4.13623': attribute type 1 has an invalid length. [ 1343.937836][T24167] netlink: 'syz.1.13622': attribute type 9 has an invalid length. [ 1344.223856][T24192] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20003 [ 1344.321311][T24198] netlink: 'syz.4.13632': attribute type 1 has an invalid length. [ 1344.321448][ T976] net_ratelimit: 9 callbacks suppressed [ 1344.321512][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.354146][T24192] syzkaller0: entered promiscuous mode [ 1344.371219][T24192] syzkaller0: entered allmulticast mode [ 1344.439222][T11260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.456651][T24192] netlink: 'syz.3.13630': attribute type 10 has an invalid length. [ 1344.734683][T24218] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1344.754821][T24218] macvlan3: entered promiscuous mode [ 1344.760870][T24218] macvlan3: entered allmulticast mode [ 1344.768233][T24218] bond6: entered allmulticast mode [ 1344.773477][T24218] bond6: entered promiscuous mode [ 1344.779793][T24218] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1344.789882][T24218] team0: Port device macvlan3 added [ 1344.902250][T24224] tipc: Started in network mode [ 1344.915041][T24224] tipc: Node identity 2e190a463802, cluster identity 4711 [ 1344.937042][T24224] tipc: Enabled bearer , priority 0 [ 1344.966615][T24221] tipc: Disabling bearer [ 1345.060254][T24228] bridge_slave_0: left allmulticast mode [ 1345.079245][T24228] bridge_slave_0: left promiscuous mode [ 1345.089313][T24228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.290303][T24230] veth7: entered promiscuous mode [ 1345.295431][T24230] veth7: entered allmulticast mode [ 1345.477115][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.492514][T24244] openvswitch: netlink: IP tunnel dst address not specified [ 1345.638098][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.646843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.863584][T24271] ip6tnl0: Caught tx_queue_len zero misconfig [ 1346.323269][T24293] tipc: Started in network mode [ 1346.328357][T24293] tipc: Node identity ac14142f, cluster identity 4711 [ 1346.335417][T24293] tipc: New replicast peer: 0.0.0.0 [ 1346.341157][T24293] tipc: Enabled bearer , priority 10 [ 1346.350243][T24293] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 1346.628414][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.642771][T24311] syzkaller0: entered promiscuous mode [ 1346.658954][T24311] syzkaller0: entered allmulticast mode [ 1346.687795][T24311] tipc: Enabled bearer , priority 0 [ 1346.733984][T24305] tipc: Resetting bearer [ 1346.799353][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.859113][T24305] tipc: Disabling bearer [ 1346.912834][T24324] syzkaller0: entered promiscuous mode [ 1346.920683][T24324] syzkaller0: entered allmulticast mode [ 1347.457885][ T1081] tipc: Node number set to 2886997039 [ 1347.474439][T24361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.535674][T24366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.622605][T24371] __nla_validate_parse: 23 callbacks suppressed [ 1347.622639][T24371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13684'. [ 1347.646484][T24371] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1347.858086][T24389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1347.883135][T24393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13691'. [ 1347.979814][T24397] : renamed from bond0 (while UP) [ 1348.188234][T24410] netlink: 204 bytes leftover after parsing attributes in process `syz.4.13696'. [ 1348.197806][T24405] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13694'. [ 1348.258665][T24412] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13697'. [ 1348.334240][T24414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13698'. [ 1348.378052][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 1348.409804][T24418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13700'. [ 1348.504760][T24421] sctp: [Deprecated]: syz.2.13701 (pid 24421) Use of int in maxseg socket option. [ 1348.504760][T24421] Use struct sctp_assoc_value instead [ 1348.524605][T24421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13701'. [ 1348.663638][T24425] bond3: Removing last arp target with arp_interval on [ 1348.813124][T24437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13705'. [ 1348.947455][T24437] syzkaller0: entered promiscuous mode [ 1348.953080][T24437] syzkaller0: entered allmulticast mode [ 1349.045211][T24446] : entered promiscuous mode [ 1349.069149][T24453] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13711'. [ 1349.147758][T24460] sit0: entered promiscuous mode [ 1349.321681][T24464] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1349.429503][T24474] validate_nla: 7 callbacks suppressed [ 1349.429527][T24474] netlink: 'syz.0.13716': attribute type 1 has an invalid length. [ 1349.602302][T24474] bond4: entered promiscuous mode [ 1349.609186][T24474] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1349.655793][T24483] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1349.691966][T24483] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1349.704180][T24483] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1349.866267][T24498] netlink: 'syz.2.13721': attribute type 13 has an invalid length. [ 1349.897019][T24492] syzkaller0: entered promiscuous mode [ 1349.902639][T24492] syzkaller0: entered allmulticast mode [ 1350.098601][ T8402] net_ratelimit: 6 callbacks suppressed [ 1350.098622][ T8402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.177658][T24512] openvswitch: netlink: Flow actions attr not present in new flow. [ 1350.244083][T24514] : (slave bridge_slave_1): Releasing backup interface [ 1350.280345][T24514] : (slave bond_slave_0): Releasing backup interface [ 1350.299340][T24514] : (slave bond_slave_1): Releasing backup interface [ 1350.321767][T24514] team0: Port device team_slave_0 removed [ 1350.334685][T24514] team0: Port device team_slave_1 removed [ 1350.343867][ T8402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.364326][T24514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1350.374956][T24514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.395787][T24514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1350.415523][T24514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.429719][T24514] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1350.581189][T11260] bond3: (slave vlan2): link status definitely down, disabling slave [ 1350.595397][T11260] bond3: now running without any active interface! [ 1350.662844][T24527] syzkaller0: entered promiscuous mode [ 1350.690275][T24527] syzkaller0: entered allmulticast mode [ 1350.760008][T24532] veth9: entered allmulticast mode [ 1350.777181][T32561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.790912][T24521] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1350.809316][T24521] team0: Port device batadv2 added [ 1351.241642][T29876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.407895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.416134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.431778][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1351.431867][ T8402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.452131][T32561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.198308][T24555] bridge0: port 3(syz_tun) entered blocking state [ 1353.204874][T24555] bridge0: port 3(syz_tun) entered disabled state [ 1353.218135][T24555] syz_tun: entered allmulticast mode [ 1353.225692][T24555] syz_tun: entered promiscuous mode [ 1353.397958][T24571] __nla_validate_parse: 6 callbacks suppressed [ 1353.397979][T24571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13739'. [ 1353.500000][T24573] tipc: Enabled bearer , priority 0 [ 1353.542176][T24573] syzkaller0: entered promiscuous mode [ 1353.567520][T24573] syzkaller0: entered allmulticast mode [ 1353.615818][T24573] tipc: Resetting bearer [ 1353.652991][T24584] syzkaller1: entered promiscuous mode [ 1353.666210][T24584] syzkaller1: entered allmulticast mode [ 1353.751297][T24586] tipc: Resetting bearer [ 1353.785590][T24577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13744'. [ 1353.809576][T24586] tipc: Disabling bearer [ 1353.850932][T24577] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1353.937495][T24577] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1353.960355][T24577] gretap3: entered promiscuous mode [ 1353.992765][T24577] gretap3: entered allmulticast mode [ 1354.011299][T24602] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1354.103316][T24613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13750'. [ 1354.121161][T24614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13750'. [ 1354.230600][T24617] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1354.274418][T24622] syzkaller0: entered promiscuous mode [ 1354.298989][T24622] syzkaller0: entered allmulticast mode [ 1354.542864][T24632] sctp: [Deprecated]: syz.2.13756 (pid 24632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1354.542864][T24632] Use struct sctp_sack_info instead [ 1354.913241][T24656] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1354.979829][T24660] netlink: 'syz.4.13765': attribute type 2 has an invalid length. [ 1354.996570][T24660] netlink: 'syz.4.13765': attribute type 2 has an invalid length. [ 1355.086073][T24663] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13766'. [ 1355.187343][T24671] net_ratelimit: 10 callbacks suppressed [ 1355.187363][T24671] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 1355.468098][T24682] lo speed is unknown, defaulting to 1000 [ 1355.701629][T29876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.918795][ T7657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.005699][T24707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1356.051794][T24707] syz_tun: left allmulticast mode [ 1356.065380][T24707] syz_tun: left promiscuous mode [ 1356.077012][T24707] bridge0: port 3(syz_tun) entered disabled state [ 1356.104918][T24707] bridge_slave_0: left promiscuous mode [ 1356.114658][T24711] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1356.122060][T24707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.134924][T24707] bridge_slave_1: left allmulticast mode [ 1356.141577][T24707] bridge_slave_1: left promiscuous mode [ 1356.150137][T24707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.161890][T24707] bond4: (slave veth0_to_bond): Releasing active interface [ 1356.175901][T24707] bond0: (slave bond_slave_0): Releasing backup interface [ 1356.187343][T24716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13783'. [ 1356.200397][T24707] bond0: (slave bond_slave_1): Releasing backup interface [ 1356.213941][T24707] team0: Port device team_slave_0 removed [ 1356.222665][T24707] team0: Port device team_slave_1 removed [ 1356.230151][T24707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.239686][T24707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.250991][T24707] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1356.268433][T24708] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1356.285094][T24711] dummy0: Caught tx_queue_len zero misconfig [ 1356.638404][T24732] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13785'. [ 1356.760841][T24739] x_tables: duplicate underflow at hook 2 [ 1356.773545][T24739] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13791'. [ 1356.851411][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.862048][ T5842] Bluetooth: hci1: command 0x0405 tx timeout [ 1356.945829][T24745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13792'. [ 1356.980805][T24745] netlink: 'syz.2.13792': attribute type 1 has an invalid length. [ 1356.990543][T24745] netlink: 'syz.2.13792': attribute type 1 has an invalid length. [ 1356.999427][T24745] netlink: 'syz.2.13792': attribute type 2 has an invalid length. [ 1357.008022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.030318][T24745] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13792'. [ 1357.073547][T29876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.183312][ T975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.296494][T24755] netlink: 'syz.4.13795': attribute type 1 has an invalid length. [ 1357.455460][T24755] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1357.490526][T24757] bond6: (slave veth9): Enslaving as an active interface with a down link [ 1357.511942][T24762] bond0 (unregistering): Released all slaves [ 1357.550009][T24763] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1357.650033][T24755] bond6: (slave veth11): Enslaving as an active interface with a down link [ 1357.660380][T24755] netlink: 'syz.4.13795': attribute type 1 has an invalid length. [ 1357.670170][T24755] netlink: 'syz.4.13795': attribute type 2 has an invalid length. [ 1357.901486][T24774] bond7: option miimon: invalid value (18446744073709551585) [ 1357.910332][T24774] bond7: option miimon: allowed values 0 - 2147483647 [ 1357.921761][T24774] bond7 (unregistering): Released all slaves [ 1357.990393][T24785] netlink: 'syz.1.13804': attribute type 10 has an invalid length. [ 1358.078276][T24792] netlink: 'syz.2.13806': attribute type 64 has an invalid length. [ 1358.118571][T24785] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1358.606652][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 1358.732308][T24817] __nla_validate_parse: 4 callbacks suppressed [ 1358.732329][T24817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13813'. [ 1358.870710][T24820] [ 1358.873116][T24820] ====================================================== [ 1358.880161][T24820] WARNING: possible circular locking dependency detected [ 1358.887232][T24820] syzkaller #0 Not tainted [ 1358.891680][T24820] ------------------------------------------------------ [ 1358.898726][T24820] syz.4.13814/24820 is trying to acquire lock: [ 1358.904905][T24820] ffff8880269398b0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1358.914491][T24820] [ 1358.914491][T24820] but task is already holding lock: [ 1358.921879][T24820] ffff888026939370 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1358.932110][T24820] [ 1358.932110][T24820] which lock already depends on the new lock. [ 1358.932110][T24820] [ 1358.942538][T24820] [ 1358.942538][T24820] the existing dependency chain (in reverse order) is: [ 1358.951574][T24820] [ 1358.951574][T24820] -> #6 (&q->q_usage_counter(io)#58){++++}-{0:0}: [ 1358.960209][T24820] blk_alloc_queue+0x546/0x680 [ 1358.965603][T24820] __blk_mq_alloc_disk+0x197/0x390 [ 1358.971293][T24820] nbd_dev_add+0x499/0xb50 [ 1358.976339][T24820] nbd_init+0x168/0x1f0 [ 1358.981177][T24820] do_one_initcall+0x250/0x8d0 [ 1358.986503][T24820] do_initcall_level+0x104/0x190 [ 1358.991987][T24820] do_initcalls+0x59/0xa0 [ 1358.996870][T24820] kernel_init_freeable+0x2a6/0x3e0 [ 1359.002617][T24820] kernel_init+0x1d/0x1d0 [ 1359.007567][T24820] ret_from_fork+0x51e/0xb90 [ 1359.012732][T24820] ret_from_fork_asm+0x1a/0x30 [ 1359.018042][T24820] [ 1359.018042][T24820] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1359.025275][T24820] fs_reclaim_acquire+0x71/0x100 [ 1359.030761][T24820] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1359.037117][T24820] __alloc_skb+0x1d0/0x7d0 [ 1359.042101][T24820] tcp_stream_alloc_skb+0x3f/0x580 [ 1359.047860][T24820] tcp_sendmsg_locked+0x1375/0x5490 [ 1359.053596][T24820] tcp_sendmsg+0x2f/0x50 [ 1359.058380][T24820] sock_write_iter+0x406/0x4f0 [ 1359.063681][T24820] vfs_write+0x61d/0xb90 [ 1359.068462][T24820] ksys_write+0x150/0x270 [ 1359.073335][T24820] do_syscall_64+0x14d/0xf80 [ 1359.078472][T24820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.084922][T24820] [ 1359.084922][T24820] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1359.092599][T24820] lock_sock_nested+0x48/0x100 [ 1359.097909][T24820] inet_shutdown+0x6a/0x390 [ 1359.102963][T24820] nbd_mark_nsock_dead+0x2e9/0x560 [ 1359.108614][T24820] recv_work+0x1c7f/0x1d90 [ 1359.113639][T24820] process_scheduled_works+0xb02/0x1830 [ 1359.119735][T24820] worker_thread+0xa50/0xfc0 [ 1359.124874][T24820] kthread+0x388/0x470 [ 1359.129503][T24820] ret_from_fork+0x51e/0xb90 [ 1359.134651][T24820] ret_from_fork_asm+0x1a/0x30 [ 1359.139961][T24820] [ 1359.139961][T24820] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1359.147651][T24820] __mutex_lock+0x19f/0x1300 [ 1359.152784][T24820] nbd_queue_rq+0x37b/0x1100 [ 1359.157916][T24820] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1359.164012][T24820] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1359.170947][T24820] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1359.177470][T24820] blk_mq_run_hw_queue+0x348/0x4f0 [ 1359.183196][T24820] blk_mq_dispatch_list+0xd16/0xe10 [ 1359.188963][T24820] blk_mq_flush_plug_list+0x48d/0x570 [ 1359.194877][T24820] __blk_flush_plug+0x3ed/0x4d0 [ 1359.200272][T24820] __submit_bio+0x28d/0x580 [ 1359.205311][T24820] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1359.211473][T24820] block_read_full_folio+0x599/0x830 [ 1359.217356][T24820] filemap_read_folio+0x137/0x3b0 [ 1359.222967][T24820] do_read_cache_folio+0x358/0x590 [ 1359.228631][T24820] read_part_sector+0xb6/0x2b0 [ 1359.234031][T24820] adfspart_check_ICS+0xa5/0xa40 [ 1359.239521][T24820] bdev_disk_changed+0x7ba/0x1550 [ 1359.245109][T24820] blkdev_get_whole+0x380/0x510 [ 1359.250592][T24820] bdev_open+0x31e/0xd30 [ 1359.255385][T24820] blkdev_open+0x470/0x610 [ 1359.260343][T24820] do_dentry_open+0x785/0x14e0 [ 1359.265653][T24820] vfs_open+0x3b/0x340 [ 1359.270267][T24820] path_openat+0x2e08/0x3860 [ 1359.275402][T24820] do_file_open+0x23e/0x4a0 [ 1359.280455][T24820] do_sys_openat2+0x113/0x200 [ 1359.285703][T24820] __x64_sys_openat+0x138/0x170 [ 1359.291103][T24820] do_syscall_64+0x14d/0xf80 [ 1359.296235][T24820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.302666][T24820] [ 1359.302666][T24820] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1359.309909][T24820] __mutex_lock+0x19f/0x1300 [ 1359.315049][T24820] nbd_queue_rq+0xc6/0x1100 [ 1359.320101][T24820] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1359.326190][T24820] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1359.333074][T24820] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1359.339605][T24820] blk_mq_run_hw_queue+0x348/0x4f0 [ 1359.345274][T24820] blk_mq_dispatch_list+0xd16/0xe10 [ 1359.351015][T24820] blk_mq_flush_plug_list+0x48d/0x570 [ 1359.356936][T24820] __blk_flush_plug+0x3ed/0x4d0 [ 1359.362326][T24820] __submit_bio+0x28d/0x580 [ 1359.367371][T24820] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1359.373544][T24820] block_read_full_folio+0x599/0x830 [ 1359.379386][T24820] filemap_read_folio+0x137/0x3b0 [ 1359.384964][T24820] do_read_cache_folio+0x358/0x590 [ 1359.390622][T24820] read_part_sector+0xb6/0x2b0 [ 1359.395971][T24820] adfspart_check_ICS+0xa5/0xa40 [ 1359.401500][T24820] bdev_disk_changed+0x7ba/0x1550 [ 1359.407063][T24820] blkdev_get_whole+0x380/0x510 [ 1359.412457][T24820] bdev_open+0x31e/0xd30 [ 1359.417245][T24820] blkdev_open+0x470/0x610 [ 1359.422214][T24820] do_dentry_open+0x785/0x14e0 [ 1359.427539][T24820] vfs_open+0x3b/0x340 [ 1359.432173][T24820] path_openat+0x2e08/0x3860 [ 1359.437308][T24820] do_file_open+0x23e/0x4a0 [ 1359.442347][T24820] do_sys_openat2+0x113/0x200 [ 1359.447576][T24820] __x64_sys_openat+0x138/0x170 [ 1359.453022][T24820] do_syscall_64+0x14d/0xf80 [ 1359.458286][T24820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.464734][T24820] [ 1359.464734][T24820] -> #1 (set->srcu){.+.+}-{0:0}: [ 1359.471882][T24820] __synchronize_srcu+0xca/0x3e0 [ 1359.477370][T24820] elevator_switch+0x1e8/0x7a0 [ 1359.482691][T24820] elevator_change+0x2cc/0x450 [ 1359.487990][T24820] elevator_set_default+0x36c/0x430 [ 1359.493728][T24820] blk_register_queue+0x366/0x430 [ 1359.499285][T24820] __add_disk+0x677/0xd50 [ 1359.504154][T24820] add_disk_fwnode+0xfb/0x480 [ 1359.509374][T24820] nbd_dev_add+0x72c/0xb50 [ 1359.514334][T24820] nbd_init+0x168/0x1f0 [ 1359.519040][T24820] do_one_initcall+0x250/0x8d0 [ 1359.524354][T24820] do_initcall_level+0x104/0x190 [ 1359.529853][T24820] do_initcalls+0x59/0xa0 [ 1359.534732][T24820] kernel_init_freeable+0x2a6/0x3e0 [ 1359.540472][T24820] kernel_init+0x1d/0x1d0 [ 1359.545347][T24820] ret_from_fork+0x51e/0xb90 [ 1359.550480][T24820] ret_from_fork_asm+0x1a/0x30 [ 1359.555788][T24820] [ 1359.555788][T24820] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1359.563627][T24820] __lock_acquire+0x15a5/0x2cf0 [ 1359.569023][T24820] lock_acquire+0xf0/0x2e0 [ 1359.573982][T24820] __mutex_lock+0x19f/0x1300 [ 1359.579109][T24820] elevator_change+0x1b3/0x450 [ 1359.584443][T24820] elevator_set_none+0xb5/0x140 [ 1359.589859][T24820] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1359.596212][T24820] nbd_start_device+0x17f/0xb10 [ 1359.601622][T24820] nbd_genl_connect+0x165b/0x1cf0 [ 1359.607210][T24820] genl_family_rcv_msg_doit+0x22a/0x330 [ 1359.613371][T24820] genl_rcv_msg+0x61c/0x7a0 [ 1359.618412][T24820] netlink_rcv_skb+0x232/0x4b0 [ 1359.623715][T24820] genl_rcv+0x28/0x40 [ 1359.628238][T24820] netlink_unicast+0x80f/0x9b0 [ 1359.633550][T24820] netlink_sendmsg+0x813/0xb40 [ 1359.638858][T24820] ____sys_sendmsg+0x972/0x9f0 [ 1359.644177][T24820] ___sys_sendmsg+0x2a5/0x360 [ 1359.649416][T24820] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1359.654888][T24820] do_syscall_64+0x14d/0xf80 [ 1359.660023][T24820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.666454][T24820] [ 1359.666454][T24820] other info that might help us debug this: [ 1359.666454][T24820] [ 1359.676694][T24820] Chain exists of: [ 1359.676694][T24820] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#58 [ 1359.676694][T24820] [ 1359.690485][T24820] Possible unsafe locking scenario: [ 1359.690485][T24820] [ 1359.697956][T24820] CPU0 CPU1 [ 1359.703330][T24820] ---- ---- [ 1359.708714][T24820] lock(&q->q_usage_counter(io)#58); [ 1359.714132][T24820] lock(fs_reclaim); [ 1359.720672][T24820] lock(&q->q_usage_counter(io)#58); [ 1359.728599][T24820] lock(&q->elevator_lock); [ 1359.733231][T24820] [ 1359.733231][T24820] *** DEADLOCK *** [ 1359.733231][T24820] [ 1359.741386][T24820] 6 locks held by syz.4.13814/24820: [ 1359.746682][T24820] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1359.754895][T24820] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1359.763880][T24820] #2: ffff888026b3f1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 1359.775310][T24820] #3: ffff888026b3f0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 1359.786307][T24820] #4: ffff888026939370 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1359.796976][T24820] #5: ffff8880269393a8 (&q->q_usage_counter(queue)#42){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1359.807889][T24820] [ 1359.807889][T24820] stack backtrace: [ 1359.813794][T24820] CPU: 1 UID: 0 PID: 24820 Comm: syz.4.13814 Not tainted syzkaller #0 PREEMPT(full) [ 1359.813816][T24820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1359.813828][T24820] Call Trace: [ 1359.813836][T24820] [ 1359.813844][T24820] dump_stack_lvl+0xe8/0x150 [ 1359.813871][T24820] print_circular_bug+0x2e1/0x300 [ 1359.813908][T24820] check_noncircular+0x12e/0x150 [ 1359.813938][T24820] __lock_acquire+0x15a5/0x2cf0 [ 1359.813971][T24820] lock_acquire+0xf0/0x2e0 [ 1359.813992][T24820] ? elevator_change+0x1b3/0x450 [ 1359.814013][T24820] __mutex_lock+0x19f/0x1300 [ 1359.814031][T24820] ? elevator_change+0x1b3/0x450 [ 1359.814049][T24820] ? rcu_is_watching+0x15/0xb0 [ 1359.814075][T24820] ? elevator_change+0x1b3/0x450 [ 1359.814093][T24820] ? __pfx___mutex_lock+0x10/0x10 [ 1359.814110][T24820] ? enable_work+0x17f/0x230 [ 1359.814137][T24820] ? lockdep_hardirqs_on+0x7a/0x110 [ 1359.814167][T24820] ? __cancel_work_sync+0xf7/0x110 [ 1359.814194][T24820] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1359.814215][T24820] elevator_change+0x1b3/0x450 [ 1359.814236][T24820] elevator_set_none+0xb5/0x140 [ 1359.814252][T24820] ? __pfx_elevator_set_none+0x10/0x10 [ 1359.814272][T24820] ? xa_load+0x1db/0x210 [ 1359.814392][T24820] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1359.814435][T24820] ? kernfs_add_one+0x477/0x5c0 [ 1359.814484][T24820] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1359.814510][T24820] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1359.814536][T24820] nbd_start_device+0x17f/0xb10 [ 1359.814567][T24820] ? device_create_file+0xf4/0x1b0 [ 1359.814618][T24820] nbd_genl_connect+0x165b/0x1cf0 [ 1359.814650][T24820] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1359.814679][T24820] ? rcu_is_watching+0x15/0xb0 [ 1359.814707][T24820] ? __nla_parse+0x40/0x60 [ 1359.814735][T24820] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1359.814759][T24820] genl_family_rcv_msg_doit+0x22a/0x330 [ 1359.814780][T24820] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1359.814805][T24820] ? __lock_acquire+0x6b5/0x2cf0 [ 1359.814829][T24820] genl_rcv_msg+0x61c/0x7a0 [ 1359.814849][T24820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1359.814866][T24820] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1359.814891][T24820] ? __lock_acquire+0x6b5/0x2cf0 [ 1359.814923][T24820] netlink_rcv_skb+0x232/0x4b0 [ 1359.814947][T24820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1359.814964][T24820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1359.814994][T24820] ? down_read+0x272/0x2e0 [ 1359.815012][T24820] ? genl_rcv+0xd/0x40 [ 1359.815028][T24820] genl_rcv+0x28/0x40 [ 1359.815043][T24820] netlink_unicast+0x80f/0x9b0 [ 1359.815068][T24820] ? __pfx_netlink_unicast+0x10/0x10 [ 1359.815090][T24820] ? netlink_sendmsg+0x650/0xb40 [ 1359.815113][T24820] ? skb_put+0x11b/0x210 [ 1359.815141][T24820] netlink_sendmsg+0x813/0xb40 [ 1359.815169][T24820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1359.815195][T24820] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1359.815221][T24820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1359.815243][T24820] ____sys_sendmsg+0x972/0x9f0 [ 1359.815264][T24820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1359.815284][T24820] ? import_iovec+0x73/0xa0 [ 1359.815314][T24820] ___sys_sendmsg+0x2a5/0x360 [ 1359.815333][T24820] ? __pfx____sys_sendmsg+0x10/0x10 [ 1359.815352][T24820] ? futex_wake+0x4ac/0x580 [ 1359.815401][T24820] ? __fget_files+0x2a/0x420 [ 1359.815427][T24820] ? __fget_files+0x3a0/0x420 [ 1359.815457][T24820] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1359.815475][T24820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1359.815497][T24820] ? rcu_is_watching+0x15/0xb0 [ 1359.815526][T24820] do_syscall_64+0x14d/0xf80 [ 1359.815541][T24820] ? trace_irq_disable+0x3b/0x150 [ 1359.815569][T24820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.815597][T24820] ? clear_bhb_loop+0x40/0x90 [ 1359.815616][T24820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.815632][T24820] RIP: 0033:0x7f5a9e19c799 [ 1359.815650][T24820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.815665][T24820] RSP: 002b:00007f5a9f13e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1359.815701][T24820] RAX: ffffffffffffffda RBX: 00007f5a9e415fa0 RCX: 00007f5a9e19c799 [ 1359.815714][T24820] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000007 [ 1359.815727][T24820] RBP: 00007f5a9e232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1359.815738][T24820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1359.815749][T24820] R13: 00007f5a9e416038 R14: 00007f5a9e415fa0 R15: 00007fffbcba9c58 [ 1359.815769][T24820] [ 1360.344737][ T5825] block nbd9: Receive control failed (result -32) [ 1360.344741][ T5842] block nbd9: Receive control failed (result -32) [ 1360.376496][T24820] nbd9: detected capacity change from 0 to 63 [ 1360.383640][T24731] block nbd9: Dead connection, failed to find a fallback [ 1360.391394][T24731] block nbd9: shutting down sockets [ 1360.396758][T24731] blk_print_req_error: 138 callbacks suppressed [ 1360.396788][T24731] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1360.413064][T24821] netlink: 'syz.1.13815': attribute type 1 has an invalid length. [ 1360.413091][T24821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13815'. [ 1360.415033][T24823] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13814'. [ 1360.421267][T24731] buffer_io_error: 138 callbacks suppressed [ 1360.421284][T24731] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1360.421361][T24731] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1360.421388][T24731] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1360.421427][T24731] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1360.421452][T24731] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1360.421486][T24731] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1360.421510][T24731] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1360.421572][T24731] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1360.421598][T24731] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1360.421632][T24731] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1360.421656][T24731] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1360.421690][T24731] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1360.421715][T24731] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1360.421748][T24731] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1360.421773][T24731] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1360.421820][T24731] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1360.587143][T24731] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1360.594999][T24731] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1360.604568][T24731] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1360.613380][T24731] ldm_validate_partition_table(): Disk read failed. [ 1360.620778][T24731] Dev nbd9: unable to read RDB block 0 [ 1360.626846][T24731] nbd9: unable to read partition table [ 1360.635734][T24731] ldm_validate_partition_table(): Disk read failed. [ 1360.644195][T24731] Dev nbd9: unable to read RDB block 0 [ 1360.652446][T24731] nbd9: unable to read partition table [ 1361.651189][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1366.846021][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 1366.854122][ C1] lec:lec_tx_timeout: lec0