last executing test programs: 2.773803897s ago: executing program 2 (id=4091): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 2.457802693s ago: executing program 0 (id=4094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x52d35ce30131f272}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "e3407b09760888d3", "a47f813cd2ae739931d4e46289ef8eed354b0a9cf3c5bc5a37c72b5ba32f643f", "de022d59", "f3a5d39bcc96cad3"}, 0x38) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0xfffffffffffffffd) r3 = socket(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/171, 0xab}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/100, 0x64}, {&(0x7f0000000580)=""/62, 0x3e}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/238, 0xee}], 0x7, 0x5, 0x8001) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002200010a"], 0x20}}, 0x0) 2.406136926s ago: executing program 1 (id=4095): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[], 0x0, 0x51, 0x0, 0x0, 0x6}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000040)="e572", 0x2, 0x8044, &(0x7f0000000140)={0x11, 0x19, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x180, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x74, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x96}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x180}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000b40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x180, r6, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000814) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x27, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, {}, {}, [@ldst={0x3, 0x1, 0x1, 0x2, 0x7, 0x50, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x52}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @alu={0x0, 0x0, 0xd, 0x9, 0x0, 0xffffffffffffffe0, 0xfffffffffffffffc}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000004c0)=[{0x3, 0x3, 0xd, 0x7}, {0x3, 0x5, 0xd, 0x6}, {0x4, 0x4, 0xd, 0x1}, {0x1, 0x4, 0xf, 0x5}, {0x3, 0x4, 0x3, 0x1}, {0x5, 0x1, 0x3, 0x9}], 0x10, 0x7f}, 0x94) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x10, r0}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000fbff0000050000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000ff0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r9}, 0x38) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x1}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40c4890}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r9, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x138, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r14}, &(0x7f0000000340), &(0x7f0000000140)=r13}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x13, &(0x7f00000000c0)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0xb, 0x1, 0xfffffffffffffff0}, @exit, @exit, @alu={0x7, 0x0, 0x9, 0x8, 0xa, 0xfffffffffffffffe}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000180)='GPL\x00', 0x1, 0x48, &(0x7f00000001c0)=""/72, 0x41100, 0x6, '\x00', r3, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x6, 0x4, 0xfffffffd}, 0x10, 0xffffffffffffffff, r7, 0x6, &(0x7f0000000680)=[0xffffffffffffffff, r8, 0x1, r9, r14], &(0x7f00000006c0)=[{0x1, 0x3, 0x1, 0x8}, {0x2, 0x5, 0x1, 0x5}, {0x4, 0x1, 0x3, 0x1}, {0x1, 0x3, 0x3, 0x2fb1089e18447f11}, {0x4, 0x4, 0xa, 0x5}, {0x0, 0x3, 0x7, 0x1}], 0x10, 0x10000}, 0x94) 2.26918652s ago: executing program 1 (id=4096): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) (async) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r2, 0x2000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x54}}, 0x0) 2.268780304s ago: executing program 2 (id=4097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000040000701feffffff00000100017c0000040042800c00018006050600800a00000801000000000b805f64d9c7a71e662ed6d075736ecf1b0f1aee309997e9a02db53721d25b20381b80a0041d3d0ea4d5cc8e3a5de891f9c4981f0ca0a5e246ea4f0598d60baf18b2e1e8a51d19e9fba319395830115132a425a1802b0aa88b4029e770489f9f30096393e8ba66b93abe1c8000000000000000c9d334cd6fde020af917875940"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet_tcp(0x2, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x88) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@ipv4_newnexthop={0xc4, 0x68, 0x200, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x28}, [@NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xe37}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x100}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffff4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xffffffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private2}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0x99}}, @NHA_GROUP={0x24, 0x2, [{0x0, 0x7}, {0x2, 0x7}, {0x0, 0x3}, {0x1}]}, @NHA_GROUP_TYPE={0x6}, @NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @ip4=@broadcast}]}, 0xc4}, 0x1, 0xba01}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)={0x1c, 0x2c, 0x107, 0x0, 0x25dfdbfd, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 2.09386737s ago: executing program 4 (id=4098): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) 1.965571691s ago: executing program 1 (id=4099): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "bb174795a1be15dbf06888"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "0da7e611c22ba8515f8a8e08be6d"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20008851) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080013400000000428000180080001006e6174001c0002800800014000000000090003400000001408000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000010000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x4040080) (async) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ec29e1fe5d0a06f0473f2d38a0ba0db5ebedfe", 0x14}], 0x1}, 0x8000) 1.929210257s ago: executing program 0 (id=4100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$802154_dgram(r2, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 1.909809052s ago: executing program 3 (id=4101): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x2a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xff, 0x2, 0x1, 0x5, 0x7}, @map_fd={0x18, 0x9}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6a}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_fd={0x18, 0xb}, @tail_call, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0xd32, 0x36, &(0x7f0000000400)=""/54, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x1, 0x4, 0x81}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r0, r0, 0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x0, 0x4, 0x40000a, 0xa}, {0x2, 0x3, 0x5, 0x4}, {0x0, 0x5, 0xf, 0x4}, {0x5, 0x2, 0x8, 0x8}], 0x10, 0x9}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)={[{0x2b, 'perf_event'}, {0x2d, 'net_cls'}]}, 0x15) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x5, 0xc}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000006c0)={r4, 0x4f, "6ad9eb514cfbd0582541c89431df0bd3d8e720fae08b03e2a1b28a48269257a671523d6a34e520dbe64a0645c1006ceeb830b314d0ce06e980b8569fbf598d8f8f8b0d07d2231f2f669e515276e070"}, &(0x7f0000000740)=0x57) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRESDEC=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.833055989s ago: executing program 4 (id=4102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9001e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea318800"}, 0xd8) listen(r3, 0x7c2) r4 = socket(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x44}}}]}, 0x3c}}, 0x0) listen(r9, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r12 = socket$netlink(0x10, 0x3, 0x6) r13 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r14}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.747531515s ago: executing program 1 (id=4103): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) sendmsg$kcm(r5, &(0x7f0000002100)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="fd30b4018d9e920c34e76e0b8eac052d8487e54b42984e1f4ab09366f7406c08f91b12d9144656e72a75f55aa2223b07cfffe7e2904196c25ce8cce7f3d08f9b567ab3913c6df2318d7c", 0x4a}, {&(0x7f00000002c0)="063be1f6e0daf31383461d4db1f37d01ff21b5acab8b9cd3c51b038ca9e058fb97b183b2e1949829d1518bb1098267e9d3c5569277795083f2405bd172ea7f6d160fc9934dc990342a21ea24ef504d5e1f01566562f384c330be", 0x5a}], 0x2, &(0x7f0000000e00)=[{0x88, 0x29, 0x8, "5e192a5e2ff587ba1d3e0c1477a15440017013bef1864e338bd6c3d99ddc58be1aca984688eec6bf4cecbec55f0e3450fc7a4b660e18f2efb7f9fb3a54d2654aa422ea473f327c896fa5c4a9a3d1eed26b09c916485652677e4541a2fd5e2ca2d531c455396ff21ef3431fbd6420abcfdad424"}, {0x18, 0x10c, 0xffffffff, "e2380735faebc7"}, {0xd0, 0x103, 0x8, "3296e35f8d96ef8aaa29ffd3bdb212f9f9da87311d4899b671d20e1112fe95f49eb9f4e9d6cfbdfbedc5c0f300d719792f2d5c934404fa90210e93209e3d056b021d3e5a5dc09ce60aaae44c8884788702011d277e92616c08aad2fa02c8c56e3446b1cb2f09c31c948b9b6e5ffc4599f71b3aaece17e39671ff033f5efb6809ae268e1686b190d3fe4c549e9fdeed336c4d61be52484240bcca521d2b48d663ebcfa7cb9990ca3f6891ec5bc9defefd05011849972feb4b7e352f4a"}, {0x60, 0x107, 0x3000, "45460dd605a9c754d338461fbb7abcdae1fb315c1bafdd672d4f3e730d30b20c84b42b1173058d46ae889800be827e2b36b2487a532e35f1d69da362289ebfd55da85b10b7a9ecb7b73677c40cd72239"}, {0xf8, 0x114, 0x4, "4892bfca4ec73bf8b75953ab4cb53f4f4d5be1173cc5f508d89a08462e01a4a422b7366640026021f676b1e0d4c7c7ebea264d2e4f383c855d7589f576a9157e55d18284cd4362e885c50d860fe2bbe5392ecc2f2b79c84016384224174925a0fc92a966c8664852939b692f4cf4bab7a8f6ff5976e76676c6a522921f4805de38e02b68580bd30a94e351566ac087db1ff42ab89220a5cb84711efa9cb71c9970150dde1b6457e526a3a9180537bd4b5ce12ff51826c7e79b4ed875bd85455a8679ab913d9678be54ef76e54824f01c15febff9ee786c92e97c0dee51f354c67b"}, {0x28, 0x111, 0x81, "7d3108192dd1cd6368782f972d7bc17203ff0e88de435219"}, {0x1010, 0x110, 0xf, "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"}], 0x1300}, 0x22000851) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x0, 0x0, 0x3f8, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) 1.695481278s ago: executing program 3 (id=4104): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040094}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @long={0x3, 0x1}}, 0x11, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008c10}, 0x0) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x6, 0x965, 0x2013, 0xe9}, 0x10) 1.512116069s ago: executing program 0 (id=4105): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f000008"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) (async, rerun: 32) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) (rerun: 32) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) (async) write$nci(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NFC_CMD_VENDOR(r10, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r8, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x60}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}]}, 0x24}}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r11, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x104, 0x11, 0x0, 0x1, [@nested={0x100, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x84}, 0x300) 1.414522232s ago: executing program 3 (id=4106): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x144, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x24, 0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000300000000000000000000008000080000000000000000000b030000000000000000000009000000000000"], 0x0, 0x4a}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) 1.314805555s ago: executing program 0 (id=4107): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000840), 0x2, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000ffffffffffff0000000000008000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000002000000000002000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/171], 0xfc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x0, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x55d082, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r7, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r7, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) ppoll(&(0x7f0000000180)=[{r6}], 0x1, &(0x7f0000001340), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000040)) 1.09393005s ago: executing program 4 (id=4108): r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0xe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0xf7}}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x5460, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x34}}, 0x0) 1.09249578s ago: executing program 1 (id=4109): unshare(0x22020400) r0 = socket(0x28, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5517499ae076dcd955d564c90c203", 0x12) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x200, 0x9377b5336e15b955}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)={0x2c8, 0x2d, 0x20, 0x70bd26, 0x25dfdbfd, "", [@nested={0xed, 0x153, 0x0, 0x1, [@typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}, @generic="5880f99bd1cad6b2644d2d5c13f1189f07a308b9079169ec5a99c5f8568c055839421be1980d4181d0045a51789fa718631b3efca253a72d3bdc983748b74bab93f3c9069fa7bbc018c801898b8947fe40cc4791bf93a85fbd141b5438b8f8f46b3b30e68a555f0a608c9332f47fb26c49d99ab38c3ab7022c5cdb73516c37ea01a95d230f510eeef733bda862defa9e773e0e2758764044c2840e3542ff00ab944e26b4841a990fd70dc217eb5a61f091589fbac6fa999e709ebf13090975b2ba", @typed={0x8, 0x13a, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x95, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x13}]}, @typed={0x8, 0x119, 0x0, 0x0, @fd=r3}, @generic="cfac59c431012902cc88b8ef957075fb2ad1c5e3940e88012a8df97f0b329b14cbce7070b8c691471e70d91b20c06541b9d1e448e424cb23530fa79b008f2dfbd5270db2d1cb7f0a208b96d3d9ca3d5b95bd207d16bcb8a52c48e554595bcd8f4d04e27449823b6cf2", @typed={0x4, 0x152}, @generic="85e5cb70b7cc941e03b4c030ab3e526abd70e37785fe27fd65b53939575ce17754169b9120b8c1fc2c9fab9a78f754029a6d291578aca8cd1162da05d15c4c94f61727c14be962b249735a77802cfe7b4482a163eb1b19ae85309d65d6eb626119106f9b69ab4d84f66873b4e6bef5d9df94ca370b17318d3d3cfd0fbaf92f32155067e85df752dc4c1886d6c579e7aebba7172c56e7ecc27a329eddb5c5e7e68778163a0d773ba1", @nested={0xa5, 0x83, 0x0, 0x1, [@generic="850350eb4fc2470f007e9ff305c4fded15bc97de214a4324d51ab6e3d1c561bdfbe1325aac0333ef0f8218e8f2301924cc9b773a0889b37d1a3abc57664cd5666149d04b8ddd9ff01fa5683c5ef5b964f589bb49b8d259df31d5461c4c374503210adffc17431d0b4b61ee56e692b79c76bee78da1c629e6e6907bf708893428b996760e7cd4f75d715d08710b7e9d2e33a38d1bad37570937", @nested={0x4, 0xfb}, @nested={0x4, 0x153}]}]}, 0x2c8}, {&(0x7f0000003980)={0xf0, 0x1e, 0x200, 0x70bd26, 0x25dfdbfc, "", [@generic="57d052cb8b62b78c947f6a4a44ed981bb86090304eb6c59fc2e04516fcc23beb7367ecf65346a19375c9ce2d29d8c8", @generic="4ec2bc2c0fa538eb5f5f2411c89cf47e2f9a33a5caf1bb2a83ec0a0a0b51ef9f75970f569b1b9ba45bc4dd6bcdbca56c9b89fe79a809205730a6d6aabee9e3cc58e28f41c20d002484b42be7eb435c942c579099a9332322be9f", @typed={0x21, 0x132, 0x0, 0x0, @binary="7fadf946fb6387b73dbf3dce84ac56edf90783df1ffb8d8714095714ed"}, @nested={0x2d, 0x34, 0x0, 0x1, [@nested={0x4, 0x11e}, @generic="fc14272bd63ca0ca0615edb69936c9927dfbd8b8f56a7663e65fcd53d18d13ab6e346f99b3"]}]}, 0xf0}, {&(0x7f0000003a80)={0x48, 0x32, 0x200, 0x70bd27, 0x25dfdbfd, "", [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@private2}, @nested={0x21, 0x7b, 0x0, 0x1, [@generic="f587245362da89f9d0f8acb9dc1248b3a87e32fa63ce2813a066421dc4"]}]}, 0x48}], 0x3, 0x0, 0xfffffffffffffe6f, 0x4c0d1}, 0x404c014) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000000)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x38, 0x1, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffffcf50}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000240)) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="8fa2608d7a99", @void, {@ipv4={0x88a2, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}, 0x0) socket$inet(0x2, 0x6, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x123202, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000000100)={'bond_slave_1\x00'}) 1.090339113s ago: executing program 2 (id=4110): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000008000000000ad000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r1, 0x0) (async, rerun: 64) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000240)={0x22, 0x4, 0x9, 0x3, 0x6}, 0x6) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)={@ifindex, r6, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r3, 0x2f}, 0x20) (async, rerun: 32) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) (rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r3, r5, 0x2f, 0x2030, 0x4, @void, @void, @value=r7}, 0x20) r8 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="660a00000000000061117100000000009500"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async, rerun: 64) accept$netrom(r8, 0x0, &(0x7f0000000040)) (async, rerun: 64) r9 = accept$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@remote, @remote, @default, @rose, @remote, @null, @rose, @netrom]}, &(0x7f00000001c0)=0x48) setsockopt$netrom_NETROM_N2(r9, 0x103, 0x3, &(0x7f0000000200)=0x6, 0x4) (async) r10 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r10, 0x0, &(0x7f0000005e00)) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) socket$inet(0x2, 0x6, 0x8d) 925.871206ms ago: executing program 4 (id=4111): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09050000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x74}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001412add427323b472545b456020f5aa80020008343c9675800800000f7f559fb5a4d7b00090080007f00000d8dabd0e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200", 0x58}], 0x100000000000000c) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000100)) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) 773.9037ms ago: executing program 2 (id=4112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r1, &(0x7f0000000b40)=""/184, 0xb8, 0x40000021, &(0x7f0000000c00)={0x23, 0x0, 0xf4, 0x6}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xb, @empty=0x4000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18176c1d0b8df9890000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x1a, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @printk={@s}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x100, 0xfe, &(0x7f00000001c0)=""/254, 0x41000, 0x49, '\x00', 0x0, @netfilter=0x2d, r2, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x7, 0x5, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r5}, 0x20) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0)="b4", 0x1) (async) splice(r8, 0x0, r9, 0x0, 0x25a5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xc, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x4}, @float={0x6, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x2}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0xb, 0x1}, {0x2, 0x2}, {0xd, 0x2}, {0x2, 0x4}, {0x7, 0x3}]}]}, {0x0, [0x0, 0x2e, 0x0, 0x2e, 0x30, 0x61, 0x61, 0x30, 0x5f, 0x2e]}}, &(0x7f00000007c0)=""/87, 0x88, 0x57, 0x1, 0x18, 0x10000, @value=r3}, 0x28) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x5, 0x2, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x8, &(0x7f00000005c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x4, 0x1, 0x0, r7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @jmp={0x5, 0x1, 0x4, 0x8, 0x0, 0x30, 0x1}], &(0x7f0000000600)='GPL\x00', 0x400, 0x7e, &(0x7f0000000640)=""/126, 0x41000, 0x4, '\x00', r10, 0x25, r11, 0x8, &(0x7f0000000880)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x4, 0x401, 0x2}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000980)=[r12], &(0x7f00000009c0)=[{0x3, 0x5, 0x10, 0x4}, {0x2, 0x3, 0x1, 0x7}, {0x1, 0x1, 0xa, 0x9}, {0x4, 0x5, 0xd, 0x8}, {0x0, 0x3, 0x6, 0x3}, {0x0, 0x1, 0xb}, {0x2, 0x2, 0xa}, {0x0, 0x2, 0xc, 0x2}, {0x5, 0x3, 0x0, 0x9}], 0x10, 0x101}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405002500000000d9304f00000800001f0200"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r6}, 0x94) 646.960383ms ago: executing program 3 (id=4113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff85000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010400000000000000010000000900010073797a30000000000900030073797a320000000034000000060a010400000000000000000000000008000b40000000000900010073797a31000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0xa8}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000003c0)={{r3, 0x0, 0x5, 0x6, 0x2, 0x8, 0xa58e, 0x0, 0x7, 0xea0b, 0x200, 0x7, 0x3, 0x5, 0x85}, 0x10, [0x0, 0x0]}) 630.106282ms ago: executing program 1 (id=4114): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0xd36326a4198b5e38) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="070017"], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r2, &(0x7f0000000080)={@val={0x0, 0xc}, @void, @eth={@empty, @random="8bc6002500", @val={@val, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x1d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x6, @empty, 0x72}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x1000, @local, 0x2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}], 0x58) 505.517747ms ago: executing program 2 (id=4115): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aa0cb5dcadcfaaaaaaaaaaffffffffffff86dd604dd308001c0600fe800000000000000000aafe8000080000000000000000000000aa00034001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020002907800002206269042f60000"], 0x0) 505.091217ms ago: executing program 0 (id=4116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000d9fb0ca000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000005000000000a0010"], 0xfc}}, 0x20000000) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x2, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@local, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x3ff}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x80) 467.804847ms ago: executing program 4 (id=4117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRESOCT=r1], 0xc3}, 0x1, 0x100000000000000}, 0x0) 210.7247ms ago: executing program 3 (id=4118): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x140}}], 0x2, 0x2400804c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @alu={0x7, 0x0, 0x4, 0x9, 0x9, 0x2}, @call={0x85, 0x0, 0x0, 0x92}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x17, &(0x7f0000000080)=""/23, 0x41000, 0xdcb7222ee7b8664b, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xa, 0x8001, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000001c0)=[{0x0, 0x2, 0x0, 0x7}, {0x0, 0x1, 0x0, 0x2}], 0x10, 0x1}, 0x94) getgid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="61124c00000000006108000000000000002000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000001c75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a259a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f957400000000000000000000000000000060b5c40f3e37175303b15bbbdf266a5ff38a3a429866f9a323ae42dad9da4a566eaf0b256a3c8760b4a34320369c6a715d35b6847971ee9d6c544c76740a0c7ca83b307b7007", @ANYRES64=r2, @ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 141.640906ms ago: executing program 0 (id=4119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r6, 0xc040ff0b, 0x200000000003) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex=r3, 0xd, 0x0, 0x6, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000e500000000000000808500000053000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@fallback=r2, 0xffffffffffffffff, 0xa, 0x2, r6, @void, @value=r8, @void, @void, r7}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd26, 0x8000003, {0x0, 0x0, 0x0, r3, {0x0, 0xfff4}, {}, {0x1, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x200, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, '\a'}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620bc6ff0000dce1925e50ace7db11fda22900000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) 141.406908ms ago: executing program 2 (id=4120): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113100000008008510000002000008850000ec750000009500081040000000d500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 127.72666ms ago: executing program 4 (id=4121): r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$sock_timeval(r0, 0x1, 0xc6, &(0x7f0000000000)={0x77359400}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800010000000000000000000a005100", @ANYRES32, @ANYBLOB="0000eaff070002"], 0x38}}, 0x0) 0s ago: executing program 3 (id=4122): pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x78, 0xf, 0x8, 0x201, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic="48de0550bb74f08dbf628f98aa7521279d0ea8058c34d85bc22d9b3bc818b0d9a17d01a20c68e0552902c74790c060aa7ded0a2ff8d392d373c535bd2eff3bda88beb4861fe787d9914dc6331271e96515f60124b631f46b7492c6424f2c58070b"]}, 0x78}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(r4, 0x0, 0x0) (async) sendmsg$key(r4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d1}, 0x4000000) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d1}, 0x4000000) socket$packet(0x11, 0x3, 0x300) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) ppoll(&(0x7f0000000180)=[{r5}], 0x1, &(0x7f0000001340), 0x0, 0x0) (async) ppoll(&(0x7f0000000180)=[{r5}], 0x1, &(0x7f0000001340), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, 0x0, 0x0, 0x20040000, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080", @ANYBLOB], 0x158}}, 0x4000) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r8, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1462}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44088) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000040000701feffffff80000000047c0000040042801400018006000600800a000008001c00", @ANYRES64=r2, @ANYRES8=r7], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x4000000) ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 9ÿ may have been left with an inconsistent configuration, please check. [ 263.960872][T15097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.230014][T15099] bond9 (unregistering): Released all slaves [ 264.428920][T15126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.643767][T15141] netlink: 'syz.0.2504': attribute type 3 has an invalid length. [ 265.134936][T15173] __nla_validate_parse: 14 callbacks suppressed [ 265.134954][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'. [ 265.783872][T15207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.791346][T15176] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 265.865579][T15210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2522'. [ 266.392087][T15230] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.2528'. [ 266.422653][T15232] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.2528'. [ 266.556122][T15236] xt_CT: No such helper "syz1" [ 266.639262][T15246] validate_nla: 2 callbacks suppressed [ 266.639283][T15246] netlink: 'syz.4.2531': attribute type 1 has an invalid length. [ 267.144197][T15287] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2543'. [ 267.472610][T15295] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2545'. [ 267.521384][T15300] syz_tun: refused to change device tx_queue_len [ 267.589817][T15254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.596718][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2548'. [ 267.843431][T15321] netlink: 'syz.0.2553': attribute type 3 has an invalid length. [ 267.866699][T15321] netlink: 'syz.0.2553': attribute type 3 has an invalid length. [ 267.888247][T15321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2553'. [ 268.039900][T15338] xt_policy: output policy not valid in PREROUTING and INPUT [ 268.131625][T15342] netlink: 'syz.2.2557': attribute type 10 has an invalid length. [ 268.162741][T15342] team0: Device ipvlan1 failed to register rx_handler [ 268.989067][T15358] nbd2: detected capacity change from 0 to 63 [ 269.012090][ T5826] block nbd2: Receive control failed (result -32) [ 269.016195][ T5827] block nbd2: Send control failed (result -32) [ 269.023363][ T5824] block nbd2: Receive control failed (result -32) [ 269.088262][ T5827] block nbd2: Request send failed, requeueing [ 269.122910][ T2073] block nbd2: Dead connection, failed to find a fallback [ 269.131134][ T2073] block nbd2: shutting down sockets [ 269.138479][ T2073] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.150354][ T2073] Buffer I/O error on dev nbd2, logical block 0, async page read [ 269.161534][ T5827] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.171402][ T5827] Buffer I/O error on dev nbd2, logical block 1, async page read [ 269.179811][ T5827] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.189029][ T5827] Buffer I/O error on dev nbd2, logical block 2, async page read [ 269.198812][ T5827] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.208411][ T5827] Buffer I/O error on dev nbd2, logical block 3, async page read [ 269.230681][T15373] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2569'. [ 269.232279][ T5827] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.249194][ T5827] Buffer I/O error on dev nbd2, logical block 0, async page read [ 269.257140][ T5827] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.267324][ T5827] Buffer I/O error on dev nbd2, logical block 1, async page read [ 269.275297][ T5827] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.285288][ T5827] Buffer I/O error on dev nbd2, logical block 2, async page read [ 269.295528][ T5827] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.304956][ T5827] Buffer I/O error on dev nbd2, logical block 3, async page read [ 269.313116][ T5827] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.322588][ T5827] Buffer I/O error on dev nbd2, logical block 0, async page read [ 269.334762][ T5827] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.349580][ T5827] Buffer I/O error on dev nbd2, logical block 1, async page read [ 269.369804][ T5827] ldm_validate_partition_table(): Disk read failed. [ 269.380103][ T5827] Dev nbd2: unable to read RDB block 0 [ 269.388153][ T5827] nbd2: unable to read partition table [ 269.413126][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 269.472571][ T5827] ldm_validate_partition_table(): Disk read failed. [ 269.482153][ T5827] Dev nbd2: unable to read RDB block 0 [ 269.491648][ T5827] nbd2: unable to read partition table [ 269.598002][T15382] 8021q: adding VLAN 0 to HW filter on device bond15 [ 270.485623][T15454] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.815260][T15473] SET target dimension over the limit! [ 271.134249][T15501] IPv6: NLM_F_REPLACE set, but no existing node found! [ 271.353348][T15510] 8021q: VLANs not supported on syzkaller1 [ 271.504741][T15516] __nla_validate_parse: 7 callbacks suppressed [ 271.504758][T15516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2611'. [ 271.560944][T15522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2612'. [ 271.591375][T15522] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2612'. [ 271.604291][T15522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2612'. [ 271.655983][ T2073] block nbd0: Possible stuck request ffff888027887000: control (read@0,1024B). Runtime 120 seconds [ 271.668711][ T2073] block nbd0: Possible stuck request ffff8880278871c0: control (read@1024,1024B). Runtime 120 seconds [ 271.680141][ T2073] block nbd0: Possible stuck request ffff888027887380: control (read@2048,1024B). Runtime 120 seconds [ 271.692147][ T2073] block nbd0: Possible stuck request ffff888027887540: control (read@3072,1024B). Runtime 120 seconds [ 271.749130][T15526] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 271.916946][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2619'. [ 272.075951][T15548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2622'. [ 272.096405][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2622'. [ 272.197583][T15552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2622'. [ 272.251890][T15552] bridge0: port 3(vlan2) entered blocking state [ 272.260626][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2624'. [ 272.275280][T15552] bridge0: port 3(vlan2) entered disabled state [ 272.302707][T15552] vlan2: entered allmulticast mode [ 272.320151][T15552] geneve0: entered allmulticast mode [ 272.342156][T15552] vlan2: entered promiscuous mode [ 272.357677][T15552] geneve0: entered promiscuous mode [ 272.476380][T15564] syzkaller0: entered promiscuous mode [ 272.493673][T15564] syzkaller0: entered allmulticast mode [ 272.522346][T15564] netlink: 'syz.3.2626': attribute type 3 has an invalid length. [ 272.551780][T15564] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2626'. [ 272.857907][T15594] netlink: 'syz.4.2631': attribute type 30 has an invalid length. [ 272.910717][T15600] netlink: 'syz.4.2631': attribute type 30 has an invalid length. [ 272.922804][ T6150] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 272.933156][ T5207] block nbd1: Connection timed out, retrying (0/2 alive) [ 272.941270][ T5207] block nbd1: Connection timed out, retrying (0/2 alive) [ 272.948884][ T5207] block nbd1: Connection timed out, retrying (0/2 alive) [ 272.956096][ T5207] block nbd1: Connection timed out, retrying (0/2 alive) [ 272.964210][ T5207] block nbd1: Dead connection, failed to find a fallback [ 272.972425][ T5207] block nbd1: shutting down sockets [ 272.983537][ T8340] ldm_validate_partition_table(): Disk read failed. [ 272.992777][ T8340] Dev nbd1: unable to read RDB block 0 [ 273.001143][ T8340] nbd1: unable to read partition table [ 273.016994][ T8340] ldm_validate_partition_table(): Disk read failed. [ 273.026635][ T8340] Dev nbd1: unable to read RDB block 0 [ 273.036653][ T8340] nbd1: unable to read partition table [ 273.082835][ T6150] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.119871][ T6150] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.154952][ T6150] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.200198][T15581] bond10: option packets_per_slave: invalid value (18446744073709551615) [ 273.213435][T15581] bond10: option packets_per_slave: allowed values 0 - 65535 [ 273.246967][T15581] bond10 (unregistering): Released all slaves [ 273.498707][T15619] bond9: (slave bond_slave_1): Device is not bonding slave [ 273.524055][T15619] bond9: option active_slave: invalid value (bond_slave_1) [ 273.559744][T15626] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.562556][T15619] bond9 (unregistering): Released all slaves [ 273.610911][T15623] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 273.637316][T15631] openvswitch: netlink: Actions may not be safe on all matching packets [ 273.812882][T15642] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 273.981886][T15655] syzkaller1: entered promiscuous mode [ 273.989881][T15655] syzkaller1: entered allmulticast mode [ 274.174290][T15672] netlink: 'syz.1.2658': attribute type 1 has an invalid length. [ 274.556655][T15693] openvswitch: netlink: Missing key (keys=40, expected=100) [ 274.588666][T15693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.760311][T15697] bridge3: entered promiscuous mode [ 274.765578][T15697] bridge3: entered allmulticast mode [ 274.781121][T15697] team0: Port device bridge3 added [ 274.939561][T15712] netlink: 'syz.2.2669': attribute type 16 has an invalid length. [ 274.957967][T15712] netlink: 'syz.2.2669': attribute type 17 has an invalid length. [ 274.978665][T15712] tunl0: left promiscuous mode [ 275.129845][T15719] netlink: 'syz.0.2671': attribute type 5 has an invalid length. [ 275.183892][T15724] netlink: 'syz.0.2671': attribute type 11 has an invalid length. [ 275.422514][T15712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.571354][T15730] netlink: 'syz.2.2674': attribute type 1 has an invalid length. [ 276.212757][T15769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.901237][T15828] __nla_validate_parse: 18 callbacks suppressed [ 276.901256][T15828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2698'. [ 276.934641][T15820] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 276.984987][T15820] bond9 (unregistering): Released all slaves [ 277.387218][T15862] netlink: 'syz.2.2706': attribute type 83 has an invalid length. [ 277.414504][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'. [ 277.438299][T15863] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 277.526902][T15863] team1: entered promiscuous mode [ 277.546284][T15863] team1: entered allmulticast mode [ 277.756705][T15881] netlink: 'syz.1.2711': attribute type 1 has an invalid length. [ 277.766112][T15879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2710'. [ 277.862221][T15881] 8021q: adding VLAN 0 to HW filter on device bond9 [ 277.962035][T15883] bond9: (slave geneve3): making interface the new active one [ 277.995267][T15883] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 278.009925][ T6143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.029894][ T6143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.050497][T15895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2714'. [ 278.084831][ T6143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.092687][T15895] netlink: 'syz.0.2714': attribute type 7 has an invalid length. [ 278.133137][T15895] netlink: 'syz.0.2714': attribute type 8 has an invalid length. [ 278.160255][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 278.190292][T15909] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 278.406516][T15918] netlink: 'syz.1.2721': attribute type 1 has an invalid length. [ 278.538676][T15927] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2725'. [ 278.621601][T15932] bond9: (slave team0): Device is not bonding slave [ 278.648122][T15932] bond9: option active_slave: invalid value (team0) [ 278.666187][T15932] bond9 (unregistering): Released all slaves [ 278.710693][T15943] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 278.713658][T15941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2727'. [ 278.733004][T15941] openvswitch: netlink: Flow actions attr not present in new flow. [ 278.880337][T15954] vlan3: entered allmulticast mode [ 278.885934][T15954] bond0: entered allmulticast mode [ 278.894526][T15954] geneve2: entered allmulticast mode [ 278.900724][T15954] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2732'. [ 278.913633][T15954] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2732'. [ 279.274160][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2739'. [ 279.903059][T16030] netlink: 'syz.2.2749': attribute type 15 has an invalid length. [ 282.322321][T15987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.514711][T16055] ipt_ECN: cannot use operation on non-tcp rule [ 282.599667][T16066] __nla_validate_parse: 6 callbacks suppressed [ 282.599685][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2759'. [ 282.661594][T16070] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2761'. [ 282.672119][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2761'. [ 282.884305][T16086] netlink: 'syz.1.2766': attribute type 1 has an invalid length. [ 282.898159][T16085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2765'. [ 283.052427][T16090] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 283.096735][T16090] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 283.116056][T16102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.129141][T16099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2770'. [ 283.182230][T16095] bond10: (slave bridge4): Enslaving as an active interface with a down link [ 283.243096][T16086] bond10: (slave gretap3): making interface the new active one [ 283.279769][T16086] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 283.303596][T16110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2772'. [ 283.483604][T16123] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2776'. [ 283.536851][T16128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2777'. [ 283.616534][T16131] netlink: 'syz.0.2779': attribute type 10 has an invalid length. [ 283.635206][T16135] syzkaller1: entered promiscuous mode [ 283.652861][T16135] syzkaller1: entered allmulticast mode [ 283.743686][T16145] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2784'. [ 283.767848][T16145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2784'. [ 283.772315][T16148] vlan1: entered allmulticast mode [ 283.794292][T16148] .` (unregistering): left promiscuous mode [ 283.803464][T16148] bond_slave_0: left promiscuous mode [ 283.814154][T16148] bond_slave_1: left promiscuous mode [ 283.832398][T16148] bridge_slave_1: left promiscuous mode [ 283.841724][T16148] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.868208][T16148] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.901983][T16148] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 283.922669][T16148] .` (unregistering): Released all slaves [ 284.034410][T16163] SET target dimension over the limit! [ 284.096170][T16167] netlink: 'syz.0.2790': attribute type 3 has an invalid length. [ 284.162178][T16156] tipc: Disabling bearer [ 284.421872][T16189] xt_HMARK: spi-set and port-set can't be combined [ 284.461668][T16191] netlink: 'syz.0.2795': attribute type 3 has an invalid length. [ 284.909015][T16219] nbd3: detected capacity change from 0 to 127 [ 284.980464][ T5824] block nbd3: Receive control failed (result -104) [ 285.576108][T16277] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 285.855506][ T5824] Bluetooth: hci4: link tx timeout [ 285.873034][ T5824] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.063480][T16308] tipc: Started in network mode [ 286.088930][T16308] tipc: Node identity 080211000001, cluster identity 4711 [ 286.108588][T16308] tipc: Enabled bearer , priority 0 [ 286.735237][T16363] netlink: zone id is out of range [ 286.747724][T16363] netlink: zone id is out of range [ 286.758547][T16363] netlink: zone id is out of range [ 286.772951][T16363] netlink: zone id is out of range [ 286.789185][T16363] netlink: zone id is out of range [ 286.801255][T16363] netlink: zone id is out of range [ 286.816302][T16363] netlink: zone id is out of range [ 286.833063][T16363] netlink: zone id is out of range [ 286.856128][T16363] netlink: zone id is out of range [ 286.896006][T16363] netlink: zone id is out of range [ 287.229826][ T5891] tipc: Node number set to 134418688 [ 287.274097][T16385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.325632][T16386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.559685][T16416] netlink: 'syz.3.2847': attribute type 1 has an invalid length. [ 287.821163][T16432] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 287.857043][T16437] __nla_validate_parse: 16 callbacks suppressed [ 287.857060][T16437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2854'. [ 287.961253][T16442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2856'. [ 287.977811][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 288.196460][T16454] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2859'. [ 288.211382][T16454] sctp: [Deprecated]: syz.2.2859 (pid 16454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.211382][T16454] Use struct sctp_sack_info instead [ 288.688712][T16481] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2866'. [ 288.731078][T16476] 8021q: adding VLAN 0 to HW filter on device bond11 [ 288.762054][T16476] bridge0: port 4(bond11) entered blocking state [ 288.776902][T16476] bridge0: port 4(bond11) entered disabled state [ 288.787306][T16476] bond11: entered allmulticast mode [ 288.795229][T16476] bond11: entered promiscuous mode [ 288.805360][T16476] bridge0: port 4(bond11) entered blocking state [ 288.811883][T16476] bridge0: port 4(bond11) entered forwarding state [ 288.893372][ T48] bridge0: port 4(bond11) entered disabled state [ 288.984967][T16503] tipc: Enabling of bearer rejected, already enabled [ 288.998619][T16503] tipc: Enabled bearer , priority 19 [ 289.214606][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 289.416776][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2878'. [ 289.449454][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2878'. [ 289.539575][T16530] veth9: entered allmulticast mode [ 289.546734][T16543] netlink: 'syz.0.2882': attribute type 10 has an invalid length. [ 289.825121][T16552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.983508][T16580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2891'. [ 290.164874][T16598] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.2898'. [ 290.179750][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2898'. [ 290.252207][T16596] netlink: 'syz.2.2895': attribute type 1 has an invalid length. [ 290.601458][T16616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.920968][T16654] sctp: [Deprecated]: syz.4.2914 (pid 16654) Use of int in max_burst socket option deprecated. [ 290.920968][T16654] Use struct sctp_assoc_value instead [ 290.976905][T16658] netlink: 'syz.1.2915': attribute type 10 has an invalid length. [ 290.989584][T16658] team0: Device ipvlan1 failed to register rx_handler [ 291.515407][T16695] netlink: 'syz.4.2925': attribute type 1 has an invalid length. [ 291.535738][T16695] netlink: 'syz.4.2925': attribute type 1 has an invalid length. [ 291.554332][T16695] netlink: 'syz.4.2925': attribute type 1 has an invalid length. [ 291.572452][T16695] netlink: 'syz.4.2925': attribute type 2 has an invalid length. [ 291.780526][T16715] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 291.819381][T16707] xt_CT: No such helper "syz1" [ 291.965779][T16725] xt_hashlimit: max too large, truncated to 1048576 [ 292.041134][T16728] netlink: 'syz.2.2934': attribute type 63 has an invalid length. [ 292.076842][T16722] bond9: option miimon: invalid value (18446744073709551585) [ 292.095210][T16722] bond9: option miimon: allowed values 0 - 2147483647 [ 292.200550][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.214124][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.222012][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.230128][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.239852][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.414311][T16722] bond9 (unregistering): Released all slaves [ 292.671910][T16731] lo speed is unknown, defaulting to 1000 [ 292.887214][T16755] __nla_validate_parse: 16 callbacks suppressed [ 292.887233][T16755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2941'. [ 292.909036][T16756] vcan1: entered promiscuous mode [ 292.912398][T16758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2942'. [ 292.923749][T16758] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.923793][T16756] vcan1: entered allmulticast mode [ 293.186463][T16731] chnl_net:caif_netlink_parms(): no params data found [ 293.343595][T16772] netlink: 'syz.3.2946': attribute type 10 has an invalid length. [ 293.370871][T16774] netlink: 'syz.3.2946': attribute type 10 has an invalid length. [ 293.401090][T16772] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 293.425903][T16774] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 293.447279][T16731] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.464477][T16731] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.481894][T16731] bridge_slave_0: entered allmulticast mode [ 293.497663][T16731] bridge_slave_0: entered promiscuous mode [ 293.507166][T16731] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.516678][T16731] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.528804][T16731] bridge_slave_1: entered allmulticast mode [ 293.537046][T16731] bridge_slave_1: entered promiscuous mode [ 293.578915][T16731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.592016][T16731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.634661][T16731] team0: Port device team_slave_0 added [ 293.643360][T16731] team0: Port device team_slave_1 added [ 293.682607][T16731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.694229][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.721444][T16731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.754941][T16731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.767862][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.818523][T16731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.898918][T16797] 8021q: adding VLAN 0 to HW filter on device bond12 [ 293.922618][T16798] macvlan3: entered promiscuous mode [ 293.928029][T16798] macvlan3: entered allmulticast mode [ 293.944064][T16797] bond12: (slave ip6gretap2): making interface the new active one [ 293.952937][T16797] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link [ 294.039027][T16731] hsr_slave_0: entered promiscuous mode [ 294.046037][T16731] hsr_slave_1: entered promiscuous mode [ 294.053289][T16731] debugfs: 'hsr0' already exists in 'hsr' [ 294.059389][T16731] Cannot create hsr debugfs directory [ 294.062567][T16798] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2952'. [ 294.293142][ T5824] Bluetooth: hci5: command tx timeout [ 294.305892][T16731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.379596][T16731] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.436816][T16731] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.367871][ T5824] Bluetooth: hci5: command tx timeout [ 296.434190][T16783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.538521][T16731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 296.560990][T16837] validate_nla: 1 callbacks suppressed [ 296.561006][T16837] netlink: 'syz.3.2958': attribute type 3 has an invalid length. [ 296.568252][T16731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 296.593240][T16837] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2958'. [ 296.629293][T16731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 296.665886][T16731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 296.681417][T16731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 296.718214][T16731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 296.752286][T16842] h: entered promiscuous mode [ 296.764622][T16731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 296.794713][T16848] netlink: 'syz.4.2962': attribute type 4 has an invalid length. [ 296.796530][T16731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.838058][T16848] syzkaller0: entered promiscuous mode [ 296.843585][T16848] syzkaller0: entered allmulticast mode [ 297.026257][T16863] syzkaller0: entered promiscuous mode [ 297.038087][T16863] syzkaller0: entered allmulticast mode [ 297.155635][T16731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.211330][T16731] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.222462][T16875] x_tables: duplicate underflow at hook 1 [ 297.253242][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.260479][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.304313][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.311713][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.334322][T16879] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2970'. [ 297.359189][T16879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2970'. [ 297.380768][T16879] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2970'. [ 297.393017][T16879] netlink: 'syz.4.2970': attribute type 11 has an invalid length. [ 297.394125][T16877] 8021q: adding VLAN 0 to HW filter on device bond13 [ 297.409799][T16877] bridge0: port 5(bond13) entered blocking state [ 297.412928][T16879] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2970'. [ 297.416280][T16877] bridge0: port 5(bond13) entered disabled state [ 297.433455][T16877] bond13: entered allmulticast mode [ 297.441670][T16877] bond13: entered promiscuous mode [ 297.448735][T16877] bridge0: port 5(bond13) entered blocking state [ 297.455324][T16877] bridge0: port 5(bond13) entered forwarding state [ 297.463894][ T74] bridge0: port 5(bond13) entered disabled state [ 297.590422][T16893] xt_hashlimit: size too large, truncated to 1048576 [ 297.693795][T16898] net_ratelimit: 135 callbacks suppressed [ 297.693813][T16898] openvswitch: netlink: Invalid VLAN frame [ 297.942901][T16907] gtp2: entered promiscuous mode [ 297.959438][T16907] gtp2: entered allmulticast mode [ 297.995288][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2978'. [ 298.024975][T16916] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 298.035196][T16912] openvswitch: netlink: Flow actions attr not present in new flow. [ 298.051884][T16731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.175569][T16731] veth0_vlan: entered promiscuous mode [ 298.203754][T16731] veth1_vlan: entered promiscuous mode [ 298.214165][T16926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2981'. [ 298.247295][T16925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2981'. [ 298.281630][T16930] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2981'. [ 298.311109][T16731] veth0_macvtap: entered promiscuous mode [ 298.326088][T16731] veth1_macvtap: entered promiscuous mode [ 298.366603][T16731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.424753][T16731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.452853][ T5824] Bluetooth: hci5: command tx timeout [ 298.489504][ T139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.515642][ T139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.551834][ T139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.589290][ T139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.647313][T16943] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2987'. [ 298.786811][T16953] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2990'. [ 298.819873][T16953] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2990'. [ 298.952919][T16961] netlink: 'syz.1.2991': attribute type 1 has an invalid length. [ 298.962188][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.988645][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.190908][T16989] netlink: 'syz.4.2995': attribute type 2 has an invalid length. [ 299.260971][ T6147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.287038][ T6147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.409614][T16999] batadv1: entered allmulticast mode [ 299.612962][T17005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.777064][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.791908][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.803885][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.829185][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.841508][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.287302][T17041] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3007'. [ 300.484936][T17034] netlink: 'syz.0.3006': attribute type 13 has an invalid length. [ 300.528280][ T5826] Bluetooth: hci5: command tx timeout [ 300.574600][T17039] bond1 (unregistering): Released all slaves [ 300.808588][T17018] lo speed is unknown, defaulting to 1000 [ 301.122033][T17018] chnl_net:caif_netlink_parms(): no params data found [ 301.341134][T17074] syzkaller0: entered promiscuous mode [ 301.379783][T17074] syzkaller0: entered allmulticast mode [ 301.659184][T17018] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.673811][T17018] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.696720][T17018] bridge_slave_0: entered allmulticast mode [ 301.724310][T17018] bridge_slave_0: entered promiscuous mode [ 301.739384][ T2073] block nbd0: Possible stuck request ffff888027887000: control (read@0,1024B). Runtime 150 seconds [ 301.745486][T17018] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.750269][ T2073] block nbd0: Possible stuck request ffff8880278871c0: control (read@1024,1024B). Runtime 150 seconds [ 301.750301][ T2073] block nbd0: Possible stuck request ffff888027887380: control (read@2048,1024B). Runtime 150 seconds [ 301.779777][ T2073] block nbd0: Possible stuck request ffff888027887540: control (read@3072,1024B). Runtime 150 seconds [ 301.809012][T17018] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.827318][T17018] bridge_slave_1: entered allmulticast mode [ 301.842609][T17018] bridge_slave_1: entered promiscuous mode [ 301.889478][ T5826] Bluetooth: hci0: command tx timeout [ 302.027090][T17018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.083126][T17018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.190660][T17018] team0: Port device team_slave_0 added [ 302.222086][T17018] team0: Port device team_slave_1 added [ 302.328524][T17107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.332352][T17113] xt_hashlimit: size too large, truncated to 1048576 [ 302.370933][T17018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.384354][T17018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.433260][T17018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.482809][T17018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.501003][T17018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.573146][T17018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.658536][T17119] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3026'. [ 302.744093][T17018] hsr_slave_0: entered promiscuous mode [ 302.760652][T17018] hsr_slave_1: entered promiscuous mode [ 302.767054][T17018] debugfs: 'hsr0' already exists in 'hsr' [ 302.796711][T17018] Cannot create hsr debugfs directory [ 303.101518][T17142] netlink: 'syz.2.3033': attribute type 10 has an invalid length. [ 303.119112][T17140] bridge0: port 1(vlan0) entered blocking state [ 303.127089][T17144] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3034'. [ 303.138219][T17140] bridge0: port 1(vlan0) entered disabled state [ 303.145083][T17140] vlan0: entered allmulticast mode [ 303.162234][T17140] geneve0: entered allmulticast mode [ 303.177224][T17140] vlan0: entered promiscuous mode [ 303.186191][T17140] geneve0: entered promiscuous mode [ 303.566079][T17018] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.592436][T17158] netlink: 'syz.0.3038': attribute type 4 has an invalid length. [ 303.614747][T17158] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3038'. [ 303.967893][ T5826] Bluetooth: hci0: command tx timeout [ 305.871629][T17167] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3040'. [ 305.906004][T17018] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.041171][T17018] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.058098][ T5826] Bluetooth: hci0: command tx timeout [ 306.359848][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'. [ 306.379980][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3053'. [ 306.397818][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3053'. [ 306.716920][T17018] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 306.734683][T17230] netlink: 'syz.0.3060': attribute type 1 has an invalid length. [ 306.737231][T17018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.744786][T17230] netlink: 'syz.0.3060': attribute type 2 has an invalid length. [ 306.761007][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3060'. [ 306.765017][T17018] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 306.802960][T17018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.813975][T17018] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 306.836138][T17018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.852438][T17018] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 306.876809][T17018] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.922585][T17243] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3061'. [ 306.945236][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'. [ 307.094085][T17250] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3065'. [ 307.223865][T17259] netlink: 'syz.3.3064': attribute type 21 has an invalid length. [ 307.349239][T17018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.396637][T17268] netlink: 'syz.2.3069': attribute type 8 has an invalid length. [ 307.409644][T17018] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.438322][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.445504][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.529334][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.536567][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.781060][T17289] netlink: 'syz.4.3074': attribute type 3 has an invalid length. [ 308.128068][ T5824] Bluetooth: hci0: command tx timeout [ 308.150522][T17018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.171835][T17312] netlink: 'syz.3.3080': attribute type 1 has an invalid length. [ 308.329941][T17018] veth0_vlan: entered promiscuous mode [ 308.374330][T17018] veth1_vlan: entered promiscuous mode [ 308.442668][T17328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.485031][T17018] veth0_macvtap: entered promiscuous mode [ 308.501396][T17328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.521473][T17018] veth1_macvtap: entered promiscuous mode [ 308.580526][T17018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.630091][T17018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.649115][T17337] netlink: 'syz.3.3089': attribute type 1 has an invalid length. [ 308.676555][ T3472] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.701452][ T3472] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.720417][ T3472] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.750590][T17347] dvmrp0: entered allmulticast mode [ 308.774496][ T3472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.853354][T17354] __nla_validate_parse: 1 callbacks suppressed [ 308.853371][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 308.898828][T17354] netlink: 'syz.3.3093': attribute type 29 has an invalid length. [ 308.934992][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 309.771486][T17366] netlink: 'syz.3.3097': attribute type 9 has an invalid length. [ 309.854861][T17374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3098'. [ 309.875442][ T6150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.887665][ T6150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.966307][T17379] ipt_REJECT: TCP_RESET invalid for non-tcp [ 310.041843][T17370] bond16: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 310.101631][T17370] bond16 (unregistering): Released all slaves [ 310.202999][ T5837] udevd[5837]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 310.218115][ T5824] Bluetooth: hci0: command 0x0405 tx timeout [ 310.243901][ T5827] udevd[5827]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 310.258814][T17378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3098'. [ 310.270630][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.279354][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.360116][T17383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3101'. [ 310.415469][T17383] unsupported nlmsg_type 40 [ 310.579508][T17404] IPVS: Unknown mcast interface: pim6reg [ 310.818967][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.833763][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.843080][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.851195][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.858991][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.936186][T17420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3108'. [ 311.149377][ T5822] bond8: (slave syz_tun): Removing an active aggregator [ 311.170340][ T5822] bond8: (slave syz_tun): Releasing backup interface [ 311.219909][T17416] lo speed is unknown, defaulting to 1000 [ 311.554354][T17416] chnl_net:caif_netlink_parms(): no params data found [ 311.613452][T17449] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 311.784235][T17416] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.792303][T17416] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.802116][T17416] bridge_slave_0: entered allmulticast mode [ 311.824550][T17416] bridge_slave_0: entered promiscuous mode [ 311.854392][T17416] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.857191][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3117'. [ 311.891488][T17416] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.904608][T17416] bridge_slave_1: entered allmulticast mode [ 311.916530][T17416] bridge_slave_1: entered promiscuous mode [ 311.929289][T17464] veth0_macvtap: left promiscuous mode [ 311.983257][T17473] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3117'. [ 312.112166][T17471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3119'. [ 312.181174][T17468] syzkaller0: entered promiscuous mode [ 312.192728][T17468] syzkaller0: entered allmulticast mode [ 312.220680][T17416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.256105][T17471] macvlan2: entered allmulticast mode [ 312.280907][T17471] hsr0: entered allmulticast mode [ 312.289957][T17471] hsr_slave_0: entered allmulticast mode [ 312.299673][T17471] hsr_slave_1: entered allmulticast mode [ 312.309200][T17471] hsr0: entered promiscuous mode [ 312.324258][T17416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.572143][T17497] netlink: 'syz.2.3125': attribute type 1 has an invalid length. [ 312.580353][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 312.943295][ T5824] Bluetooth: hci1: command tx timeout [ 314.539521][T17416] team0: Port device team_slave_0 added [ 314.558739][T17416] team0: Port device team_slave_1 added [ 314.619876][T17522] netlink: 'syz.3.3126': attribute type 3 has an invalid length. [ 314.640664][T17522] netlink: 'syz.3.3126': attribute type 1 has an invalid length. [ 314.657568][T17522] __nla_validate_parse: 2 callbacks suppressed [ 314.657591][T17522] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3126'. [ 314.669780][T17416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.705113][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.740508][T17523] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3127'. [ 314.745167][T17416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.764315][T17416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.795992][T17416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.833487][T17416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.007570][ T5824] Bluetooth: hci1: command tx timeout [ 315.019562][T17416] hsr_slave_0: entered promiscuous mode [ 315.044177][T17416] hsr_slave_1: entered promiscuous mode [ 315.053376][T17416] debugfs: 'hsr0' already exists in 'hsr' [ 315.061420][T17416] Cannot create hsr debugfs directory [ 315.091637][T17539] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3131'. [ 315.098535][T17543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3133'. [ 315.175376][T15601] block nbd3: Possible stuck request ffff888027a00000: control (read@0,1024B). Runtime 30 seconds [ 315.188432][T15601] block nbd3: Possible stuck request ffff888027a001c0: control (read@1024,1024B). Runtime 30 seconds [ 315.199853][T15601] block nbd3: Possible stuck request ffff888027a00380: control (read@2048,1024B). Runtime 30 seconds [ 315.212133][T15601] block nbd3: Possible stuck request ffff888027a00540: control (read@3072,1024B). Runtime 30 seconds [ 315.313552][T17416] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.325175][T17416] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 315.412471][T17416] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.422910][T17416] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 315.498145][T17416] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.508746][T17416] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 315.592072][T17555] netlink: 'syz.2.3137': attribute type 11 has an invalid length. [ 315.606184][T17416] batman_adv: batadv0: Removing interface:  [ 315.612678][T17555] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3137'. [ 315.623805][T17416] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.633914][T17416] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 315.648512][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3137'. [ 315.660889][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3137'. [ 315.892724][T17416] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 315.918925][T17416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.929850][T17416] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 315.944835][T17416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.953786][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3139'. [ 315.965830][T17416] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 316.011900][T17416] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 316.040805][T17416] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 316.074024][T17416] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 316.107201][T17565] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3140'. [ 316.121625][T17577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3142'. [ 316.233532][T17578] Bluetooth: MGMT ver 1.23 [ 316.268651][T17591] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 316.288178][T17591] syzkaller1: Linktype set failed because interface is up [ 316.399137][T17597] netlink: 'syz.1.3144': attribute type 2 has an invalid length. [ 316.413509][T17597] netlink: 'syz.1.3144': attribute type 5 has an invalid length. [ 316.517792][T17416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.583673][T17416] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.635821][ T6150] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.643074][ T6150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.669097][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.676288][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.689626][T17616] netlink: 'syz.0.3148': attribute type 1 has an invalid length. [ 316.749180][T17616] atomic_op ffff88808de53998 conn xmit_atomic 0000000000000000 [ 316.841111][T17620] netlink: 'syz.1.3150': attribute type 1 has an invalid length. [ 316.868618][T17620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.875941][T17620] IPv6: NLM_F_CREATE should be set when creating new route [ 316.883215][T17620] IPv6: NLM_F_CREATE should be set when creating new route [ 317.016024][T17631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.089628][ T5824] Bluetooth: hci1: command tx timeout [ 317.119932][T17416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.126101][T17636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.389141][T17645] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 317.462438][T17645] bond9 (unregistering): Released all slaves [ 317.508221][T17657] openvswitch: netlink: IPv4 tun info is not correct [ 317.858749][T17669] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 318.046835][T17416] veth0_vlan: entered promiscuous mode [ 318.101614][T17416] veth1_vlan: entered promiscuous mode [ 318.219686][T17416] veth0_macvtap: entered promiscuous mode [ 318.275562][T17416] veth1_macvtap: entered promiscuous mode [ 318.339041][T17416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.389701][T17416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.479270][T17700] bond9 (unregistering): Released all slaves [ 318.523870][T17709] veth1_to_bridge: entered promiscuous mode [ 318.534631][ T6150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.572773][ T6150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.633568][ T6150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.642854][ T6150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.652442][T17716] netlink: 'syz.0.3175': attribute type 21 has an invalid length. [ 318.653008][T17711] syzkaller1: entered promiscuous mode [ 318.666348][T17711] syzkaller1: entered allmulticast mode [ 318.692551][T17716] netlink: 'syz.0.3175': attribute type 5 has an invalid length. [ 318.995203][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.021545][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.100622][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.131963][T17734] pimreg: entered allmulticast mode [ 319.145731][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.168430][ T5824] Bluetooth: hci1: command tx timeout [ 319.242353][T17741] netlink: 'syz.0.3183': attribute type 2 has an invalid length. [ 319.251357][T17741] netlink: 'syz.0.3183': attribute type 1 has an invalid length. [ 319.348752][T17744] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 319.359648][T17751] xt_TCPMSS: Only works on TCP SYN packets [ 319.443048][T17754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 319.724523][T17763] netlink: 'syz.4.3192': attribute type 21 has an invalid length. [ 319.749828][T17763] __nla_validate_parse: 16 callbacks suppressed [ 319.749844][T17763] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3192'. [ 319.816857][T17770] syzkaller0: entered promiscuous mode [ 319.854218][T17770] syzkaller0: entered allmulticast mode [ 319.862895][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.879842][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.890052][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.901944][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.911842][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.981490][T17779] dvmrp0: left allmulticast mode [ 320.031261][T17782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3196'. [ 320.049391][T17774] lo speed is unknown, defaulting to 1000 [ 320.078209][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3196'. [ 320.278780][T17774] chnl_net:caif_netlink_parms(): no params data found [ 320.396245][T17774] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.403721][T17774] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.411508][T17774] bridge_slave_0: entered allmulticast mode [ 320.419681][T17774] bridge_slave_0: entered promiscuous mode [ 320.432885][T17774] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.451040][T17774] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.459129][T17774] bridge_slave_1: entered allmulticast mode [ 320.467103][T17774] bridge_slave_1: entered promiscuous mode [ 320.511239][T17774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.524634][T17774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.641054][T17774] team0: Port device team_slave_0 added [ 320.655394][T17774] team0: Port device team_slave_1 added [ 320.714897][T17807] xt_TCPMSS: Only works on TCP SYN packets [ 320.745562][T17774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.768995][T17774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.825304][T17774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.838817][T17814] x_tables: duplicate entry at hook 1 [ 320.854385][T17774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.878633][T17774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.935168][T17774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.080701][T17827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3211'. [ 321.123192][T17774] hsr_slave_0: entered promiscuous mode [ 321.130289][T17774] hsr_slave_1: entered promiscuous mode [ 321.136687][T17774] debugfs: 'hsr0' already exists in 'hsr' [ 321.146965][T17774] Cannot create hsr debugfs directory [ 321.333628][T17838] Bluetooth: MGMT ver 1.23 [ 321.456009][T17774] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.603479][T17774] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.628434][T17844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.891886][T17774] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.966748][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3220'. [ 321.978546][ T5826] Bluetooth: hci2: command tx timeout [ 321.994276][T17859] lo speed is unknown, defaulting to 1000 [ 322.030478][T17774] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.063698][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'. [ 322.112812][T17883] netlink: 'syz.4.3223': attribute type 1 has an invalid length. [ 322.120921][T17883] netlink: 'syz.4.3223': attribute type 2 has an invalid length. [ 322.162102][T17880] macvlan2: mtu less than device minimum [ 322.217970][T17887] netlink: 'syz.1.3224': attribute type 3 has an invalid length. [ 322.234657][T17887] netlink: 'syz.1.3224': attribute type 3 has an invalid length. [ 322.316525][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3224'. [ 322.722488][T17774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 322.752360][T17774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.760840][T17774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 322.776274][T17774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.789024][T17774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 322.800261][T17774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.816614][T17774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.826767][T17774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.855508][T17912] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3229'. [ 323.005669][T17774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.061095][T17774] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.082231][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.089420][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.114574][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.121826][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.133117][T17929] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 323.165443][T17929] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.203918][T17928] bond2: (slave veth3): Enslaving as an active interface with a down link [ 323.232013][T17928] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 323.239736][T17928] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 323.498918][T17941] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3236'. [ 323.527095][T17774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.716745][T17774] veth0_vlan: entered promiscuous mode [ 323.783758][T17774] veth1_vlan: entered promiscuous mode [ 323.875337][T17958] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3241'. [ 323.886256][T17774] veth0_macvtap: entered promiscuous mode [ 323.900375][T17774] veth1_macvtap: entered promiscuous mode [ 323.975124][T17964] ip6gre1: entered allmulticast mode [ 324.020527][T17774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.048443][ T5826] Bluetooth: hci2: command tx timeout [ 324.072872][T17774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.135894][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.166059][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.199522][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.236754][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.507672][T17996] batadv_slave_1: entered promiscuous mode [ 324.552540][T17988] lo speed is unknown, defaulting to 1000 [ 324.600862][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.603296][T17995] delete_channel: no stack [ 324.622758][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.761642][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.784892][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.813004][T17987] batadv_slave_1: left promiscuous mode [ 325.052204][T18019] __nla_validate_parse: 1 callbacks suppressed [ 325.052221][T18019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3188'. [ 325.405944][T18038] syzkaller0: entered promiscuous mode [ 325.428056][T18038] syzkaller0: entered allmulticast mode [ 325.429615][T18040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3263'. [ 325.560432][T18042] syzkaller0: entered promiscuous mode [ 325.576287][T18042] syzkaller0: entered allmulticast mode [ 325.589205][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.606956][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.620749][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.631952][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.642000][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.720159][T18046] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3265'. [ 325.751504][T18043] lo speed is unknown, defaulting to 1000 [ 325.934535][T18050] netlink: 'syz.0.3266': attribute type 6 has an invalid length. [ 326.023187][T18043] chnl_net:caif_netlink_parms(): no params data found [ 326.129037][ T5826] Bluetooth: hci2: command tx timeout [ 326.148477][T18043] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.160224][T18043] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.169785][T18043] bridge_slave_0: entered allmulticast mode [ 326.179665][T18043] bridge_slave_0: entered promiscuous mode [ 326.191476][T18043] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.199090][T18043] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.206328][T18043] bridge_slave_1: entered allmulticast mode [ 326.214631][T18043] bridge_slave_1: entered promiscuous mode [ 326.247965][T18043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.260683][T18043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.293825][T18043] team0: Port device team_slave_0 added [ 326.301791][T18043] team0: Port device team_slave_1 added [ 326.325846][T18043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.333116][T18043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.359691][T18043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.373215][T18043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.386292][T18043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.444811][T18043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.465451][T18077] lo speed is unknown, defaulting to 1000 [ 326.465554][T18078] lo speed is unknown, defaulting to 1000 [ 326.521878][T18043] hsr_slave_0: entered promiscuous mode [ 326.529356][T18043] hsr_slave_1: entered promiscuous mode [ 326.535549][T18043] debugfs: 'hsr0' already exists in 'hsr' [ 326.541595][T18043] Cannot create hsr debugfs directory [ 326.726042][T18043] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.737285][T18043] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 326.748876][T18043] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.865823][T18043] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.878478][T18043] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 326.889192][T18043] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.013005][T18043] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.023663][T18043] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 327.034263][T18043] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.728485][ T5826] Bluetooth: hci3: command tx timeout [ 328.208286][ T5826] Bluetooth: hci2: command tx timeout [ 328.687815][ T5826] Bluetooth: hci1: command tx timeout [ 329.020978][T18060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.101563][T18043] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.135866][T18043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.161568][T18112] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.3277'. [ 329.175099][T18043] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.216716][T18114] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3278'. [ 329.228335][T18043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.255962][T18043] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.280925][T18043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.306215][T18119] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 329.324239][T18043] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.346928][T18043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.372253][T18127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3281'. [ 329.569473][T18146] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 329.641669][T18043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.679498][T18043] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.705057][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.709818][T18149] netlink: 'syz.0.3286': attribute type 1 has an invalid length. [ 329.712273][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.734214][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3286'. [ 329.750367][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.757576][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.809019][ T5826] Bluetooth: hci3: command tx timeout [ 330.025361][T18158] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.046152][T18158] bridge_slave_1: left allmulticast mode [ 330.052188][T18158] bridge_slave_1: left promiscuous mode [ 330.073207][T18158] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.290638][T18043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.331950][T18181] syzkaller1: entered promiscuous mode [ 330.340706][T18183] netlink: 'syz.0.3297': attribute type 1 has an invalid length. [ 330.349406][T18181] syzkaller1: entered allmulticast mode [ 330.422624][T18185] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 330.456374][T18185] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 330.469543][T18185] bond3: (slave ip6gre2): making interface the new active one [ 330.478640][T18185] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 330.520255][T18189] netlink: 'syz.2.3298': attribute type 1 has an invalid length. [ 330.546712][T18183] tipc: Started in network mode [ 330.552529][T18183] tipc: Node identity ac14140f, cluster identity 4711 [ 330.560714][T18183] tipc: Enabled bearer , priority 10 [ 330.624406][T18191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3298'. [ 330.652007][T18043] veth0_vlan: entered promiscuous mode [ 331.543358][T18043] veth1_vlan: entered promiscuous mode [ 331.646465][ T5876] tipc: Node number set to 2886997007 [ 331.743766][T18208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3302'. [ 331.807218][T18212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3305'. [ 331.820100][ T2073] block nbd0: Possible stuck request ffff888027887000: control (read@0,1024B). Runtime 180 seconds [ 331.830964][ T2073] block nbd0: Possible stuck request ffff8880278871c0: control (read@1024,1024B). Runtime 180 seconds [ 331.842346][ T2073] block nbd0: Possible stuck request ffff888027887380: control (read@2048,1024B). Runtime 180 seconds [ 331.853739][ T2073] block nbd0: Possible stuck request ffff888027887540: control (read@3072,1024B). Runtime 180 seconds [ 331.888635][ T5826] Bluetooth: hci3: command tx timeout [ 331.947787][T18043] veth0_macvtap: entered promiscuous mode [ 331.969962][T18043] veth1_macvtap: entered promiscuous mode [ 332.018796][T18043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.044548][T18043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.061912][ T74] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.080983][ T74] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.125140][ T74] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.177421][ T74] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.331687][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.384057][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.463320][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.526032][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.995368][T18277] netlink: 'syz.2.3311': attribute type 10 has an invalid length. [ 333.052262][T18277] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.064783][T18277] bridge_slave_1: left allmulticast mode [ 333.082407][T18277] bridge_slave_1: left promiscuous mode [ 333.089174][T18277] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.101417][T18277] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 333.150104][T18281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.164038][T18281] bridge0: port 3(bond1) entered blocking state [ 333.191714][T18281] bridge0: port 3(bond1) entered disabled state [ 333.201841][T18281] bond1: entered allmulticast mode [ 333.212660][T18281] bond1: entered promiscuous mode [ 333.219953][T18281] bridge0: port 3(bond1) entered blocking state [ 333.226509][T18281] bridge0: port 3(bond1) entered forwarding state [ 333.335713][T18297] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3315'. [ 333.472612][T18302] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 333.516396][T18304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.589883][T18306] H: renamed from dummy0 (while UP) [ 333.638904][ T6152] bridge0: port 3(bond1) entered disabled state [ 333.968237][ T5826] Bluetooth: hci3: command tx timeout [ 335.100819][T18233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.467003][T18333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3326'. [ 335.587903][T18333] syzkaller0: entered promiscuous mode [ 335.593457][T18333] syzkaller0: entered allmulticast mode [ 335.653787][T18341] bond2: entered promiscuous mode [ 335.676129][T18340] bridge_slave_0: left allmulticast mode [ 335.682611][T18340] bridge_slave_0: left promiscuous mode [ 335.690608][T18340] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.701818][T18340] bond0: (slave bridge_slave_1): Releasing backup interface [ 335.716584][T18340] bond0: (slave bond_slave_0): Releasing backup interface [ 335.733873][T18340] bond0: (slave bond_slave_1): Releasing backup interface [ 335.755444][T18340] team0: Port device team_slave_0 removed [ 335.768619][T18340] team0: Port device team_slave_1 removed [ 335.776233][T18340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.785256][T18340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.795487][T18340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.803491][T18340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.818187][T18340] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 337.974177][T18371] netlink: 'syz.2.3334': attribute type 44 has an invalid length. [ 337.982564][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3334'. [ 338.003636][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3335'. [ 338.677910][T18352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.919472][T18380] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 338.945058][T18380] bond3 (unregistering): Released all slaves [ 339.280952][T18423] sch_fq: defrate 0 ignored. [ 339.434381][T18414] syzkaller0: entered promiscuous mode [ 339.442576][T18414] syzkaller0: entered allmulticast mode [ 339.515301][T18433] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3348'. [ 341.702034][T18454] syzkaller0: entered promiscuous mode [ 341.711706][T18454] syzkaller0: entered allmulticast mode [ 341.725157][T18460] netlink: 'syz.0.3355': attribute type 4 has an invalid length. [ 341.839473][T18467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3357'. [ 344.185198][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3368'. [ 344.219029][T18513] block nbd4: Unsupported socket: should be TCP or UNIX. [ 344.238677][T18518] netlink: 'syz.1.3371': attribute type 1 has an invalid length. [ 344.246781][T18519] netlink: 'syz.2.3368': attribute type 4 has an invalid length. [ 344.257050][T18515] netlink: 'syz.3.3369': attribute type 1 has an invalid length. [ 344.289023][T18518] bond3: entered promiscuous mode [ 344.294517][T18518] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.295483][T18525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3372'. [ 344.445181][T18518] bond3: (slave bridge4): making interface the new active one [ 344.456833][T18518] bridge4: entered promiscuous mode [ 344.464130][T18518] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 344.921740][T18563] : renamed from hsr0 (while UP) [ 345.241251][T18588] openvswitch: netlink: Tunnel attr 32 out of range max 16 [ 345.259912][T15601] block nbd3: Possible stuck request ffff888027a00000: control (read@0,1024B). Runtime 60 seconds [ 345.271110][T15601] block nbd3: Possible stuck request ffff888027a001c0: control (read@1024,1024B). Runtime 60 seconds [ 345.282436][T15601] block nbd3: Possible stuck request ffff888027a00380: control (read@2048,1024B). Runtime 60 seconds [ 345.296057][T15601] block nbd3: Possible stuck request ffff888027a00540: control (read@3072,1024B). Runtime 60 seconds [ 345.421339][T18598] ipt_rpfilter: unknown options [ 348.557599][ T5191] udevd[5191]: worker [5823] /devices/virtual/block/nbd0 timeout; kill it [ 348.566980][ T5191] udevd[5191]: seq 13969 '/devices/virtual/block/nbd0' killed [ 348.574680][ T5191] udevd[5191]: worker [8340] /devices/virtual/block/nbd3 is taking a long time [ 361.890525][ T2073] block nbd0: Possible stuck request ffff888027887000: control (read@0,1024B). Runtime 210 seconds [ 361.901399][ T2073] block nbd0: Possible stuck request ffff8880278871c0: control (read@1024,1024B). Runtime 210 seconds [ 361.912526][ T2073] block nbd0: Possible stuck request ffff888027887380: control (read@2048,1024B). Runtime 210 seconds [ 361.924472][ T2073] block nbd0: Possible stuck request ffff888027887540: control (read@3072,1024B). Runtime 210 seconds [ 368.294115][T18617] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3400'. [ 368.403333][ T6157] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 368.414325][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3397'. [ 368.682869][T18637] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 368.703100][T18637] bond1 (unregistering): Released all slaves [ 368.920487][T18650] netlink: 'syz.0.3406': attribute type 21 has an invalid length. [ 368.921248][T18648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3408'. [ 368.933222][T18650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'. [ 368.966044][T18650] netlink: 'syz.0.3406': attribute type 21 has an invalid length. [ 368.976436][T18650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'. [ 369.056288][T18660] netlink: 'syz.0.3409': attribute type 1 has an invalid length. [ 369.381790][T18676] sctp: [Deprecated]: syz.2.3413 (pid 18676) Use of int in max_burst socket option deprecated. [ 369.381790][T18676] Use struct sctp_assoc_value instead [ 369.424625][T18678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3415'. [ 369.434975][T18680] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3416'. [ 369.444647][T18680] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3416'. [ 369.454560][T18678] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3415'. [ 369.464024][T18680] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3416'. [ 370.100003][T18723] netlink: 'syz.4.3428': attribute type 11 has an invalid length. [ 370.116421][T18705] veth3: entered allmulticast mode [ 370.461336][T18719] netlink: 'syz.0.3427': attribute type 4 has an invalid length. [ 370.590400][T18733] vlan2: entered allmulticast mode [ 370.602791][T18733] bond0: entered allmulticast mode [ 370.631520][T18733] bond_slave_0: entered allmulticast mode [ 370.665916][T18733] bond_slave_1: entered allmulticast mode [ 370.854955][T18755] netlink: 'syz.2.3436': attribute type 6 has an invalid length. [ 371.045463][T18765] bridge0: port 3(gretap0) entered blocking state [ 371.063595][T18765] bridge0: port 3(gretap0) entered disabled state [ 371.093851][T18765] gretap0: entered allmulticast mode [ 371.130234][T18765] gretap0: entered promiscuous mode [ 371.150256][T18765] bridge0: port 3(gretap0) entered blocking state [ 371.156869][T18765] bridge0: port 3(gretap0) entered forwarding state [ 372.035166][T18836] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 372.049126][ T6159] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca [ 372.065110][T18836] tc_dump_action: action bad kind [ 372.107663][T18836] vlan2: entered promiscuous mode [ 372.113046][T18836] bridge0: entered promiscuous mode [ 372.193271][T18847] openvswitch: netlink: IPv6 tunnel dst address is zero [ 372.288903][T18852] xt_ecn: cannot match TCP bits for non-tcp packets [ 372.432046][T18860] vlan2: entered allmulticast mode [ 372.437265][T18860] veth0_to_bond: entered allmulticast mode [ 373.476387][T18873] __nla_validate_parse: 12 callbacks suppressed [ 373.476399][T18873] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3469'. [ 374.607914][ T5824] Bluetooth: hci3: command 0x0405 tx timeout [ 374.939050][T18826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.281637][ T9] IPVS: starting estimator thread 0... [ 375.306037][T18900] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3478'. [ 375.330804][T15601] block nbd3: Possible stuck request ffff888027a00000: control (read@0,1024B). Runtime 90 seconds [ 375.344511][T15601] block nbd3: Possible stuck request ffff888027a001c0: control (read@1024,1024B). Runtime 90 seconds [ 375.355598][T15601] block nbd3: Possible stuck request ffff888027a00380: control (read@2048,1024B). Runtime 90 seconds [ 375.366819][T15601] block nbd3: Possible stuck request ffff888027a00540: control (read@3072,1024B). Runtime 90 seconds [ 375.372498][T18904] netlink: 'syz.2.3479': attribute type 10 has an invalid length. [ 375.410157][T18898] IPVS: using max 40 ests per chain, 96000 per kthread [ 375.461072][T18904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.485143][T18904] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 375.982653][T18925] syzkaller0: entered promiscuous mode [ 376.001735][T18925] syzkaller0: entered allmulticast mode [ 376.523493][T18953] erspan0: entered promiscuous mode [ 376.676836][T18963] veth0: entered promiscuous mode [ 376.683417][T18965] team0: No ports can be present during mode change [ 376.693159][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3499'. [ 376.709870][T18961] netlink: 'syz.3.3496': attribute type 5 has an invalid length. [ 376.752883][T18967] netlink: 'syz.1.3498': attribute type 5 has an invalid length. [ 376.763104][T18967] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3498'. [ 376.926613][T18976] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3502'. [ 377.167891][ T5826] Bluetooth: hci3: command 0x0405 tx timeout [ 377.494534][T19016] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3513'. [ 377.533258][T19016] xt_policy: neither incoming nor outgoing policy selected [ 378.019689][T19055] xt_time: unknown flags 0xf4 [ 378.032327][T19056] xt_time: unknown flags 0xf4 [ 378.208863][T19067] netlink: 'syz.3.3528': attribute type 1 has an invalid length. [ 378.470530][T19092] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3534'. [ 391.971625][ T2073] block nbd0: Possible stuck request ffff888027887000: control (read@0,1024B). Runtime 240 seconds [ 391.982472][ T2073] block nbd0: Possible stuck request ffff8880278871c0: control (read@1024,1024B). Runtime 240 seconds [ 391.993988][ T2073] block nbd0: Possible stuck request ffff888027887380: control (read@2048,1024B). Runtime 240 seconds [ 392.005137][ T2073] block nbd0: Possible stuck request ffff888027887540: control (read@3072,1024B). Runtime 240 seconds [ 400.060767][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3541'. [ 400.081980][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3541'. [ 400.111053][T19106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3539'. [ 400.111053][T19109] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3539'. [ 400.134308][T19104] netlink: 'syz.4.3541': attribute type 1 has an invalid length. [ 400.157473][T19104] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3541'. [ 400.168525][T19104] netlink: 'syz.4.3541': attribute type 1 has an invalid length. [ 400.176682][T19104] netlink: 618 bytes leftover after parsing attributes in process `syz.4.3541'. [ 400.179712][T19111] netlink: 'syz.3.3542': attribute type 1 has an invalid length. [ 400.234700][T19111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.262113][T19111] netlink: 'syz.3.3542': attribute type 1 has an invalid length. [ 400.359559][T19127] netlink: 'syz.1.3546': attribute type 7 has an invalid length. [ 400.573761][T19143] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3550'. [ 400.601556][T19142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3551'. [ 400.613554][T19143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3550'. [ 400.637476][T19143] openvswitch: netlink: Flow key attr not present in new flow. [ 400.813617][T19155] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3554'. [ 400.888806][T19155] netlink: 'syz.4.3554': attribute type 11 has an invalid length. [ 400.916319][T19170] netlink: 'syz.1.3559': attribute type 64 has an invalid length. [ 401.016075][T19170] netlink: 'syz.1.3559': attribute type 64 has an invalid length. [ 401.068889][T19170] netlink: 'syz.1.3559': attribute type 64 has an invalid length. [ 401.099965][T19170] netlink: 'syz.1.3559': attribute type 64 has an invalid length. [ 401.115714][T19170] netlink: 'syz.1.3559': attribute type 64 has an invalid length. [ 401.127250][T19176] ipt_rpfilter: unknown options [ 401.203630][T19183] block nbd0: NBD_DISCONNECT [ 401.224705][T19183] block nbd0: Send disconnect failed -32 [ 401.241544][T19183] block nbd0: shutting down sockets [ 401.270361][ C1] blk_print_req_error: 286 callbacks suppressed [ 401.270385][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 401.285820][ C1] buffer_io_error: 286 callbacks suppressed [ 401.285840][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 401.310947][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 401.320097][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 401.328782][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 401.337880][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 401.345732][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 401.354810][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 401.363505][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 401.423244][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read [ 401.459355][ T5823] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 401.494505][ T5823] Buffer I/O error on dev nbd0, logical block 1, async page read [ 401.516595][ T5823] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 401.548879][ T5823] Buffer I/O error on dev nbd0, logical block 2, async page read [ 401.574150][ T5823] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 401.589710][ T5823] Buffer I/O error on dev nbd0, logical block 3, async page read [ 401.598281][ T5823] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 401.607449][ T5823] Buffer I/O error on dev nbd0, logical block 0, async page read [ 401.615417][ T5823] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 401.630406][ T5823] Buffer I/O error on dev nbd0, logical block 1, async page read [ 401.655457][ T5823] ldm_validate_partition_table(): Disk read failed. [ 401.669378][ T5823] Dev nbd0: unable to read RDB block 0 [ 401.676884][ T5823] nbd0: unable to read partition table [ 401.693504][T19208] syzkaller0: entered promiscuous mode [ 401.704380][T19208] syzkaller0: entered allmulticast mode [ 401.718836][ T5191] udevd[5191]: worker [5823] terminated by signal 9 (Killed) [ 401.726563][ T5191] udevd[5191]: worker [5823] failed while handling '/devices/virtual/block/nbd0' [ 401.760963][T19214] team0: Port device gretap1 added [ 402.776489][T19256] syz_tun: entered allmulticast mode [ 403.024102][T19277] openvswitch: netlink: Missing valid actions attribute. [ 403.046402][T19277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.804642][T19327] xt_l2tp: v2 doesn't support IP mode [ 403.811957][T19323] xt_l2tp: v2 doesn't support IP mode [ 403.898530][T19330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.959429][T19330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.003394][T19330] bond0 (unregistering): Released all slaves [ 404.021108][T19335] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 404.315103][T19340] can: request_module (can-proto-0) failed. [ 404.611358][T19352] geneve2: entered promiscuous mode [ 404.624181][T19352] geneve2: entered allmulticast mode [ 404.649168][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 404.680002][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 404.715402][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 404.743108][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 405.113249][T19369] __nla_validate_parse: 23 callbacks suppressed [ 405.113271][T19369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3617'. [ 405.160428][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3618'. [ 405.408724][T15601] block nbd3: Possible stuck request ffff888027a00000: control (read@0,1024B). Runtime 120 seconds [ 405.421829][T15601] block nbd3: Possible stuck request ffff888027a001c0: control (read@1024,1024B). Runtime 120 seconds [ 405.436412][T15601] block nbd3: Possible stuck request ffff888027a00380: control (read@2048,1024B). Runtime 120 seconds [ 405.448732][T15601] block nbd3: Possible stuck request ffff888027a00540: control (read@3072,1024B). Runtime 120 seconds [ 405.591481][T19383] validate_nla: 66 callbacks suppressed [ 405.591500][T19383] netlink: 'syz.3.3620': attribute type 4 has an invalid length. [ 406.081508][T19403] netlink: 'syz.3.3626': attribute type 10 has an invalid length. [ 406.689246][T19421] sctp: [Deprecated]: syz.1.3631 (pid 19421) Use of int in maxseg socket option. [ 406.689246][T19421] Use struct sctp_assoc_value instead [ 406.769054][T19424] netlink: 'syz.3.3632': attribute type 1 has an invalid length. [ 406.773363][T19421] sctp: [Deprecated]: syz.1.3631 (pid 19421) Use of int in maxseg socket option. [ 406.773363][T19421] Use struct sctp_assoc_value instead [ 406.830335][T19429] netlink: 'syz.0.3633': attribute type 2 has an invalid length. [ 408.144920][T19465] netlink: 'syz.0.3641': attribute type 1 has an invalid length. [ 408.231242][T19473] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3641'. [ 408.256260][T19469] netlink: 'syz.2.3642': attribute type 29 has an invalid length. [ 408.266519][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3641'. [ 408.291824][T19471] erspan0: entered promiscuous mode [ 408.297308][T19471] vlan3: entered promiscuous mode [ 408.318413][T19465] bond0 (unregistering): Released all slaves [ 408.345937][T19469] netlink: 'syz.2.3642': attribute type 29 has an invalid length. [ 408.370539][T19478] netlink: 'syz.2.3642': attribute type 32 has an invalid length. [ 408.388152][T19478] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3642'. [ 408.662166][T19489] netlink: zone id is out of range [ 408.700636][T19489] netlink: zone id is out of range [ 408.733830][T19489] netlink: zone id is out of range [ 408.768998][T19489] netlink: zone id is out of range [ 408.818769][T19489] netlink: zone id is out of range [ 408.908176][T19489] netlink: zone id is out of range [ 408.958727][T19489] netlink: zone id is out of range [ 409.000676][T19489] netlink: set zone limit has 4 unknown bytes [ 409.027540][T19498] wireguard0: entered promiscuous mode [ 409.046299][T19498] wireguard0: entered allmulticast mode [ 409.151268][T19484] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 409.174624][T19484] syzkaller0: entered promiscuous mode [ 409.182860][T19484] syzkaller0: entered allmulticast mode [ 409.202991][T19509] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3652'. [ 409.538529][T19151] syzkaller0: tun_net_xmit 76 [ 409.563075][ T1208] syzkaller0: tun_net_xmit 76 [ 409.576699][T19151] syzkaller0: tun_net_xmit 48 [ 409.608430][T19522] netlink: 'syz.0.3655': attribute type 1 has an invalid length. [ 409.653807][T19522] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3655'. [ 409.709470][T19526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3656'. [ 412.263018][T19544] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3658'. [ 412.273785][T19528] tbf_change: 23 callbacks suppressed [ 412.273803][T19528] sch_tbf: burst 12 is lower than device bridge1 mtu (1514) ! [ 412.299553][T19544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3658'. [ 412.315873][T19544] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3658'. [ 412.401205][T19547] geneve0: entered allmulticast mode [ 412.514459][T19548] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3659'. [ 412.667238][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3663'. [ 412.891533][T19569] syzkaller0: entered promiscuous mode [ 412.914853][T19569] syzkaller0: entered allmulticast mode [ 413.004863][T19575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3666'. [ 413.020039][T19575] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3666'. [ 414.528595][T19653] netlink: 'syz.0.3680': attribute type 1 has an invalid length. [ 414.544274][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3681'. [ 414.733313][T19656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.761498][T19656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.773928][T19656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.783594][T19656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.104361][T19681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.118938][T19681] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3688'. [ 415.144889][T19685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.232117][T19690] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3690'. [ 415.406048][T19702] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 416.457921][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 417.957194][T19672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.571385][T19741] __nla_validate_parse: 1 callbacks suppressed [ 418.571462][T19741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3701'. [ 418.637166][T19742] syzkaller1: entered promiscuous mode [ 418.670570][T19742] syzkaller1: entered allmulticast mode [ 418.866070][T19755] tipc: Enabling of bearer rejected, failed to enable media [ 419.025706][T19755] netlink: 'syz.4.3707': attribute type 5 has an invalid length. [ 419.481493][T19782] C: renamed from lo (while UP) [ 419.537303][T19784] netlink: 'syz.2.3712': attribute type 11 has an invalid length. [ 419.542579][T19782] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 419.562201][T19784] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3712'. [ 419.562226][T19784] openvswitch: netlink: Flow key attr not present in new flow. [ 419.694382][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3717'. [ 419.735920][T19803] netlink: 'syz.4.3716': attribute type 8 has an invalid length. [ 419.759089][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3716'. [ 419.780530][T19803] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.788314][T19803] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.023564][T19817] 8021q: adding VLAN 0 to HW filter on device bond4 [ 420.032240][T19817] bridge0: port 4(bond4) entered blocking state [ 420.041190][T19817] bridge0: port 4(bond4) entered disabled state [ 420.049219][T19817] bond4: entered allmulticast mode [ 420.060362][T19817] bond4: entered promiscuous mode [ 420.069724][T19817] bridge0: port 4(bond4) entered blocking state [ 420.076224][T19817] bridge0: port 4(bond4) entered forwarding state [ 420.939515][T19147] bridge0: port 4(bond4) entered disabled state [ 422.418814][T19782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.714967][T19829] netlink: 'syz.1.3722': attribute type 1 has an invalid length. [ 422.868666][T19838] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3726'. [ 422.878677][T19829] 8021q: adding VLAN 0 to HW filter on device bond5 [ 422.889216][T19838] openvswitch: netlink: Missing key (keys=40, expected=100) [ 422.903893][T19838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3726'. [ 422.917164][T19832] bond5: (slave batadv1): Opening slave failed [ 422.939033][T19838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3726'. [ 422.995836][T19843] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3726'. [ 423.060688][T19843] openvswitch: netlink: Missing key (keys=40, expected=100) [ 423.169938][T19853] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 423.176954][T19852] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 423.636927][T19874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3736'. [ 423.657031][T19874] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3736'. [ 423.919055][T19887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3741'. [ 423.930397][T19889] gretap0: left allmulticast mode [ 423.936267][T19889] gretap0: left promiscuous mode [ 423.941997][T19889] bridge0: port 3(gretap0) entered disabled state [ 423.995039][T19889] bridge_slave_0: left allmulticast mode [ 424.013956][T19889] bridge_slave_0: left promiscuous mode [ 424.023510][T19889] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.038655][T19889] bridge_slave_1: left allmulticast mode [ 424.057530][T19889] bridge_slave_1: left promiscuous mode [ 424.065422][T19889] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.176257][T19889] bond0: (slave bond_slave_0): Releasing backup interface [ 424.227273][T19906] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3745'. [ 424.244622][T19889] bond0: (slave bond_slave_1): Releasing backup interface [ 424.321995][T19889] team0: Port device team_slave_0 removed [ 424.371676][T19889] team0: Port device team_slave_1 removed [ 424.394091][T19889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.418043][T19889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.443962][T19889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.470726][T19889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.500375][T19889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 424.760097][T19917] netlink: get zone limit has 4 unknown bytes [ 424.889390][T19923] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3749'. [ 424.904377][T19916] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3747'. [ 424.915543][T19923] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 425.161842][T19931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3752'. [ 425.456560][T19953] netlink: 'syz.2.3759': attribute type 1 has an invalid length. [ 425.923344][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3763'. [ 426.363884][T20004] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 426.374934][T20005] netlink: 'syz.2.3771': attribute type 10 has an invalid length. [ 426.383652][T20005] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3771'. [ 426.708785][T20020] netlink: 'syz.2.3773': attribute type 1 has an invalid length. [ 426.725583][T20020] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3773'. [ 427.276623][T20033] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.286351][T20033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.655753][ T5876] IPVS: starting estimator thread 0... [ 427.678328][T20067] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20265 [ 427.747621][T20068] IPVS: using max 29 ests per chain, 69600 per kthread [ 427.988402][T20079] syzkaller0: entered promiscuous mode [ 427.999379][T20079] syzkaller0: entered allmulticast mode [ 428.032697][T20083] bridge0: entered allmulticast mode [ 428.123470][T20083] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 428.141668][T20083] bond1 (unregistering): Released all slaves [ 428.928664][T20114] __nla_validate_parse: 4 callbacks suppressed [ 428.928699][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3798'. [ 428.961610][T20117] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 429.793960][T20149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3806'. [ 429.895582][T20154] netlink: 'syz.4.3808': attribute type 1 has an invalid length. [ 429.919188][T20154] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3808'. [ 429.955039][T20159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'. [ 429.995108][T20159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'. [ 430.105072][T20159] vxcan1 speed is unknown, defaulting to 1000 [ 430.152002][T20159] vxcan1 speed is unknown, defaulting to 1000 [ 430.163321][T20174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3813'. [ 430.164876][T20159] vxcan1 speed is unknown, defaulting to 1000 [ 430.210734][T20174] hsr_slave_0: left promiscuous mode [ 430.228157][T20174] hsr_slave_1: left promiscuous mode [ 430.375235][T20186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3816'. [ 430.714312][T20196] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3819'. [ 431.060497][T20210] netlink: 'syz.3.3824': attribute type 1 has an invalid length. [ 431.414856][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 431.425924][T20159] infiniband syz2: set active [ 431.442346][T20159] infiniband syz2: added vxcan1 [ 431.571097][T20159] RDS/IB: syz2: added [ 431.583359][T20159] smc: adding ib device syz2 with port count 1 [ 431.590872][T20159] smc: ib device syz2 port 1 has no pnetid [ 431.600444][ T5876] vxcan1 speed is unknown, defaulting to 1000 [ 431.715341][T20159] vxcan1 speed is unknown, defaulting to 1000 [ 432.021958][T20250] veth0: entered promiscuous mode [ 432.145019][T20252] tipc: Failed to obtain node identity [ 432.160476][T20252] tipc: Enabling of bearer rejected, failed to enable media [ 432.171725][T20257] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3836'. [ 432.184470][T20255] netlink: 'syz.3.3836': attribute type 11 has an invalid length. [ 432.204188][T20253] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 432.216554][T20255] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3836'. [ 432.274351][T20249] veth0: left promiscuous mode [ 432.481028][T20262] netlink: 'syz.4.3838': attribute type 1 has an invalid length. [ 432.531327][T20262] netlink: 'syz.4.3838': attribute type 1 has an invalid length. [ 432.574383][T20262] netlink: 'syz.4.3838': attribute type 1 has an invalid length. [ 432.647915][T20262] netlink: 'syz.4.3838': attribute type 1 has an invalid length. [ 432.709424][T20262] netlink: 'syz.4.3838': attribute type 1 has an invalid length. [ 432.750709][T20262] netlink: 'syz.4.3838': attribute type 1 has an invalid length. [ 432.864585][T20262] netlink: 'syz.4.3838': attribute type 1 has an invalid length. [ 433.043803][T20262] netlink: 'syz.4.3838': attribute type 1 has an invalid length. [ 433.056053][T20159] vxcan1 speed is unknown, defaulting to 1000 [ 433.056358][T20262] netlink: 'syz.4.3838': attribute type 1 has an invalid length. [ 433.194366][T20277] xt_cluster: node mask cannot exceed total number of nodes [ 434.242062][T20302] veth0_to_team: entered promiscuous mode [ 434.256413][T20302] macsec1: entered promiscuous mode [ 434.324351][T20302] veth0_to_team: left promiscuous mode [ 434.438483][T20159] vxcan1 speed is unknown, defaulting to 1000 [ 434.858745][T20330] __nla_validate_parse: 5 callbacks suppressed [ 434.858765][T20330] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3858'. [ 434.926064][T20330] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3858'. [ 434.957768][T20330] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3858'. [ 435.000936][T20326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3857'. [ 435.109437][T20335] x_tables: duplicate underflow at hook 1 [ 435.140388][T20159] vxcan1 speed is unknown, defaulting to 1000 [ 435.502891][T15601] block nbd3: Possible stuck request ffff888027a00000: control (read@0,1024B). Runtime 150 seconds [ 435.515160][T15601] block nbd3: Possible stuck request ffff888027a001c0: control (read@1024,1024B). Runtime 150 seconds [ 435.526348][T15601] block nbd3: Possible stuck request ffff888027a00380: control (read@2048,1024B). Runtime 150 seconds [ 435.540267][T15601] block nbd3: Possible stuck request ffff888027a00540: control (read@3072,1024B). Runtime 150 seconds [ 435.698060][T20159] vxcan1 speed is unknown, defaulting to 1000 [ 435.703495][T20359] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3867'. [ 436.162708][T20371] pimreg: entered allmulticast mode [ 436.297758][T20379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3872'. [ 436.330908][T20379] validate_nla: 26 callbacks suppressed [ 436.330929][T20379] netlink: 'syz.1.3872': attribute type 13 has an invalid length. [ 436.363637][T20159] vxcan1 speed is unknown, defaulting to 1000 [ 436.498446][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3874'. [ 436.539350][T20387] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 436.563010][T20387] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 436.857296][T20392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3876'. [ 437.114717][T20159] vxcan1 speed is unknown, defaulting to 1000 [ 437.517300][T20411] xt_TCPMSS: Only works on TCP SYN packets [ 437.546616][T20414] netlink: 'syz.1.3883': attribute type 1 has an invalid length. [ 437.658348][T20414] 8021q: adding VLAN 0 to HW filter on device bond7 [ 437.710894][T20414] x_tables: duplicate entry at hook 3 [ 437.764372][T20416] vlan3: entered promiscuous mode [ 437.785697][T20416] bond7: entered promiscuous mode [ 437.795902][T20416] vlan3: entered allmulticast mode [ 437.801971][T20416] bond7: entered allmulticast mode [ 437.885922][T20414] bond7: (slave bridge5): making interface the new active one [ 437.894722][T20414] bridge5: entered promiscuous mode [ 437.904433][T20414] bridge5: entered allmulticast mode [ 437.916074][T20414] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 437.982280][T20159] vxcan1 speed is unknown, defaulting to 1000 [ 438.116301][T20433] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3888'. [ 438.139280][T20434] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3887'. [ 438.209281][T20431] delete_channel: no stack [ 438.727652][T20159] vxcan1 speed is unknown, defaulting to 1000 [ 439.350211][T20159] vxcan1 speed is unknown, defaulting to 1000 [ 442.047577][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 447.167834][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 463.187273][ T5891] vxcan1 speed is unknown, defaulting to 1000 [ 463.256652][T20494] sctp: [Deprecated]: syz.0.3909 (pid 20494) Use of int in max_burst socket option deprecated. [ 463.256652][T20494] Use struct sctp_assoc_value instead [ 463.274968][T20493] netlink: 'syz.4.3908': attribute type 1 has an invalid length. [ 463.299631][T20493] netlink: 'syz.4.3908': attribute type 2 has an invalid length. [ 463.316854][T20493] netlink: 'syz.4.3908': attribute type 1 has an invalid length. [ 463.342577][T20493] __nla_validate_parse: 2 callbacks suppressed [ 463.342594][T20493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3908'. [ 463.655924][T20514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3913'. [ 463.755695][ T6156] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.763935][T20514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3913'. [ 463.771581][ T6156] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.814630][T20513] lo speed is unknown, defaulting to 1000 [ 463.816998][ T6156] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.860886][T20514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3913'. [ 463.871231][ T6156] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.920750][T20513] vxcan1 speed is unknown, defaulting to 1000 [ 464.019321][T20525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3916'. [ 464.099537][T20532] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 464.393548][T20537] xt_hashlimit: size too large, truncated to 1048576 [ 464.961555][T20559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3925'. [ 465.004412][T20560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3925'. [ 465.203626][T20565] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.3926'. [ 465.295172][T20566] netlink: 'syz.4.3926': attribute type 10 has an invalid length. [ 465.327650][T20565] netlink: 'syz.4.3926': attribute type 10 has an invalid length. [ 465.349963][T20566] bond0: (slave wlan1): Opening slave failed [ 465.377087][T20565] bond0: (slave wlan1): Opening slave failed [ 465.581214][T15601] block nbd3: Possible stuck request ffff888027a00000: control (read@0,1024B). Runtime 180 seconds [ 465.594327][T15601] block nbd3: Possible stuck request ffff888027a001c0: control (read@1024,1024B). Runtime 180 seconds [ 465.610978][T15601] block nbd3: Possible stuck request ffff888027a00380: control (read@2048,1024B). Runtime 180 seconds [ 465.622369][T15601] block nbd3: Possible stuck request ffff888027a00540: control (read@3072,1024B). Runtime 180 seconds [ 465.718757][T20580] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3930'. [ 465.924473][T20580] bond1: option lacp_rate: invalid value (6) [ 465.943805][T20580] bond1 (unregistering): Released all slaves [ 466.289654][T20591] netlink: 'syz.4.3932': attribute type 1 has an invalid length. [ 466.501105][T20591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3932'. [ 466.663345][T20599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.696691][T20599] bond1: (slave bond2): making interface the new active one [ 466.719924][T20599] bond1: (slave bond2): Enslaving as an active interface with an up link [ 466.751156][T20601] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 466.761625][T20604] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 466.790491][T20591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.955331][T20609] openvswitch: netlink: Duplicate key (type 32). [ 467.091553][T20618] netlink: 'syz.4.3939': attribute type 1 has an invalid length. [ 467.093907][T20617] netlink: 'syz.4.3939': attribute type 1 has an invalid length. [ 467.235053][T20627] xt_l2tp: v2 doesn't support IP mode [ 467.344835][T20618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.374021][T20632] netlink: 'syz.3.3942': attribute type 1 has an invalid length. [ 467.465053][T20632] bond3: entered promiscuous mode [ 467.470796][T20632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.493210][T20634] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 467.515962][T20634] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 467.528695][T20634] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 467.771814][T20642] netlink: 'syz.1.3945': attribute type 2 has an invalid length. [ 468.076406][T20655] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 468.319396][T20671] tipc: Started in network mode [ 468.342183][T20671] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 468.385795][T20671] tipc: Enabled bearer , priority 24 [ 468.471529][T20681] __nla_validate_parse: 64 callbacks suppressed [ 468.471550][T20681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3956'. [ 468.556659][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3956'. [ 468.562511][T20684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3957'. [ 468.656435][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3958'. [ 468.686093][T20690] x_tables: duplicate underflow at hook 3 [ 468.971569][T20709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 469.155924][T20721] : renamed from hsr0 (while UP) [ 469.293359][T20724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3966'. [ 469.379874][T20729] validate_nla: 1 callbacks suppressed [ 469.379893][T20729] netlink: 'syz.3.3968': attribute type 10 has an invalid length. [ 469.499427][ T5892] tipc: Node number set to 10005162 [ 469.762062][T20746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3972'. [ 469.952272][T20752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3976'. [ 470.284875][T20771] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.545207][T20788] netlink: 'syz.0.3987': attribute type 16 has an invalid length. [ 470.554981][T20788] netlink: 'syz.0.3987': attribute type 17 has an invalid length. [ 470.591002][T20788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.673546][T20796] openvswitch: netlink: Unknown key attributes 2 [ 470.850286][ T6156] bond13: left allmulticast mode [ 470.885327][T20803] siw: device registration error -23 [ 470.889183][ T6156] bond13: left promiscuous mode [ 470.915646][ T6156] bridge0: port 5(bond13) entered disabled state [ 470.931832][T20806] siw: device registration error -23 [ 470.966360][T20807] netlink: 'syz.4.3993': attribute type 15 has an invalid length. [ 470.998096][T20807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3993'. [ 471.009478][ T6156] bond11: left allmulticast mode [ 471.029005][ T6156] bond11: left promiscuous mode [ 471.042174][ T6156] bridge0: port 4(bond11) entered disabled state [ 471.076598][T20813] netlink: 'syz.1.3994': attribute type 4 has an invalid length. [ 471.088382][ T6156] vlan2: left allmulticast mode [ 471.099285][ T6156] geneve0: left allmulticast mode [ 471.115538][ T6156] vlan2: left promiscuous mode [ 471.121280][ T6156] geneve0: left promiscuous mode [ 471.133113][ T6156] bridge0: port 3(vlan2) entered disabled state [ 471.142778][ T6156] bridge_slave_1: left allmulticast mode [ 471.151532][ T6156] bridge_slave_1: left promiscuous mode [ 471.158224][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.173814][ T6156] ¾x9ÿ: left allmulticast mode [ 471.180679][ T6156] ¾x9ÿ: left promiscuous mode [ 471.189040][ T6156] bridge0: port 1(1¾x9ÿ) entered disabled state [ 471.248108][ T6156] pimreg3: left allmulticast mode [ 471.320610][T20823] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3994'. [ 471.514177][ T6156] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 471.572177][ T6156] bond12 (unregistering): (slave ip6gretap2): Releasing active interface [ 471.707280][ T6156] erspan0 (unregistering): left allmulticast mode [ 471.818682][ T6156] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 472.345983][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.356927][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.371299][ T6156] bond0 (unregistering): Released all slaves [ 472.387046][ T6156] bond1 (unregistering): Released all slaves [ 472.409531][ T6156] bond2 (unregistering): Released all slaves [ 472.437213][ T6156] bond3 (unregistering): Released all slaves [ 472.462778][ T6156] bond4 (unregistering): Released all slaves [ 472.489773][ T6156] bond5 (unregistering): (slave bond6): Releasing backup interface [ 472.499446][ T6156] bond5 (unregistering): Released all slaves [ 472.525297][ T6156] bond6 (unregistering): Released all slaves [ 472.545165][ T6156] bond7 (unregistering): Released all slaves [ 472.571559][ T6156] bond8 (unregistering): Released all slaves [ 472.600776][ T6156] bond9 (unregistering): Released all slaves [ 472.621499][ T6156] bond10 (unregistering): Released all slaves [ 472.644270][ T6156] bond11 (unregistering): Released all slaves [ 472.677254][ T6156] bond12 (unregistering): Released all slaves [ 472.696784][ T6156] bond13 (unregistering): Released all slaves [ 472.800513][T20825] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 473.105377][ T6156] tipc: Left network mode [ 473.521114][T20845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.883057][T20859] pim6reg1: entered promiscuous mode [ 473.899729][T20859] pim6reg1: entered allmulticast mode [ 473.950818][T20865] __nla_validate_parse: 4 callbacks suppressed [ 473.950851][T20865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4009'. [ 474.092868][T20872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4010'. [ 474.184294][T20877] netlink: 'syz.0.4011': attribute type 4 has an invalid length. [ 474.213187][T20876] netlink: 'syz.0.4011': attribute type 4 has an invalid length. [ 474.239309][T20879] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 474.784161][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4015'. [ 474.980428][T20879] syzkaller0: entered promiscuous mode [ 474.986069][T20879] syzkaller0: entered allmulticast mode [ 477.645986][ T5191] udevd[5191]: worker [8340] /devices/virtual/block/nbd3 timeout; kill it [ 477.665651][ T5191] udevd[5191]: seq 19676 '/devices/virtual/block/nbd3' killed [ 477.829162][T20900] macvlan3: entered allmulticast mode [ 477.834619][T20900] hsr0: entered allmulticast mode [ 477.841404][T20900] hsr_slave_0: entered allmulticast mode [ 477.847099][T20900] hsr_slave_1: entered allmulticast mode [ 478.121525][T20922] syzkaller0: entered promiscuous mode [ 478.143675][T20922] syzkaller0: entered allmulticast mode [ 478.857300][T20959] netlink: 'syz.1.4028': attribute type 1 has an invalid length. [ 478.999004][T20962] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4028'. [ 481.012993][T20942] tipc: Started in network mode [ 481.018077][T20942] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 481.025470][T20942] tipc: Enabled bearer , priority 24 [ 481.071302][T20959] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 481.256659][T20980] xt_hashlimit: size too large, truncated to 1048576 [ 481.676357][T20997] netlink: 'syz.3.4038': attribute type 10 has an invalid length. [ 481.717156][T20997] tipc: Resetting bearer [ 481.793653][T20997] veth0_vlan: left promiscuous mode [ 481.804884][T21001] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 481.827332][T20997] veth0_vlan: entered promiscuous mode [ 481.890675][T20997] team0: Device veth0_vlan failed to register rx_handler [ 481.946989][T20997] tipc: Resetting bearer [ 482.161937][ T5891] tipc: Node number set to 10005162 [ 482.422491][T21031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4047'. [ 482.641309][T21039] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4050'. [ 482.663612][T21036] batadv_slave_0: entered allmulticast mode [ 482.880804][T21041] block nbd3: reconnected socket [ 482.996069][ T6156] hsr_slave_0: left promiscuous mode [ 483.021814][ T6156] hsr_slave_1: left promiscuous mode [ 483.034031][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.189283][ T6156] veth0_macvtap: left allmulticast mode [ 483.384111][ T5824] block nbd3: Receive control failed (result -32) [ 483.462780][T21065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4058'. [ 483.516055][T21065] netlink: 'syz.1.4058': attribute type 1 has an invalid length. [ 483.568672][T21065] netlink: 'syz.1.4058': attribute type 1 has an invalid length. [ 483.579826][T21065] netlink: 'syz.1.4058': attribute type 2 has an invalid length. [ 483.588876][T21065] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4058'. [ 483.939114][ T6156] team0 (unregistering): Port device team_slave_1 removed [ 483.963576][ T6156] team0 (unregistering): Port device team_slave_0 removed [ 484.317453][T21041] netlink: 'syz.3.4048': attribute type 12 has an invalid length. [ 484.553248][T21079] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4061'. [ 485.062517][T21107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4069'. [ 485.124393][T21107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4069'. [ 485.171836][T21107] netlink: 'syz.2.4069': attribute type 7 has an invalid length. [ 485.228858][T21107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4069'. [ 485.575852][ T6156] IPVS: stop unused estimator thread 0... [ 485.602554][T21126] netlink: 'syz.4.4074': attribute type 1 has an invalid length. [ 485.634146][T21129] netlink: 'syz.4.4074': attribute type 1 has an invalid length. [ 485.663122][T21131] netlink: 'syz.3.4076': attribute type 1 has an invalid length. [ 485.738518][T21126] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 485.880499][T21129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.950621][T21131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 486.000739][T21146] netlink: 'syz.1.4077': attribute type 7 has an invalid length. [ 486.095836][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4077'. [ 486.424731][ T6156] dvmrp0: left allmulticast mode [ 486.473722][ T6156] tipc: Resetting bearer [ 486.676311][T21184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4082'. [ 486.835776][ T6156] tipc: Disabling bearer [ 486.962494][ T6156] batman_adv: batadv0: Removing interface: gretap1 [ 487.000452][ T6156] bond10 (unregistering): (slave gretap3): Releasing active interface [ 487.155157][ T6156] bond9 (unregistering): (slave geneve3): Releasing active interface [ 487.255580][ T6156] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 487.347317][ T6156] team0: Port device bridge3 removed [ 487.395004][ T6156] bond10 (unregistering): (slave bridge4): Releasing active interface [ 487.441363][ T6156] bond0 (unregistering): Released all slaves [ 487.454563][ T6156] bond1 (unregistering): Released all slaves [ 487.485322][ T6156] bond2 (unregistering): Released all slaves [ 487.506402][ T6156] bond3 (unregistering): (slave veth3): Releasing active interface [ 487.516474][ T6156] bond3 (unregistering): Released all slaves [ 487.541031][ T6156] bond4 (unregistering): Released all slaves [ 487.561454][ T6156] bond5 (unregistering): Released all slaves [ 487.583294][ T6156] bond6 (unregistering): Released all slaves [ 487.615224][ T6156] bond7 (unregistering): (slave bond8): Releasing backup interface [ 487.625016][ T6156] bond7 (unregistering): Released all slaves [ 487.650758][ T6156] bond8 (unregistering): Released all slaves [ 487.671803][ T6156] bond9 (unregistering): Released all slaves [ 487.700968][ T6156] bond10 (unregistering): Released all slaves [ 487.726887][ T6156] bond11 (unregistering): Released all slaves [ 488.022848][ T6156] tipc: Disabling bearer [ 488.089004][ T6156] tipc: Left network mode [ 488.100805][T21207] netlink: 'syz.4.4092': attribute type 29 has an invalid length. [ 488.120523][T21207] netlink: 'syz.4.4092': attribute type 29 has an invalid length. [ 488.149514][T21208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4091'. [ 488.163887][T21210] netlink: 'syz.4.4092': attribute type 32 has an invalid length. [ 488.175384][T21210] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4092'. [ 488.294042][ T5824] block nbd0: Receive control failed (result -32) [ 488.329118][T21215] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4095'. [ 488.384560][T21216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4093'. [ 488.596954][T21226] openvswitch: netlink: Flow actions attr not present in new flow. [ 489.021028][T21244] bond5: entered allmulticast mode [ 489.563734][T21265] bridge0: port 4(gretap0) entered blocking state [ 489.580971][T21265] bridge0: port 4(gretap0) entered disabled state [ 489.597772][T21265] gretap0: entered allmulticast mode [ 489.610566][T21265] gretap0: entered promiscuous mode [ 489.624134][T21265] bridge0: port 4(gretap0) entered blocking state [ 489.630767][T21265] bridge0: port 4(gretap0) entered forwarding state [ 489.935072][T21282] __nla_validate_parse: 4 callbacks suppressed [ 489.935090][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4111'. [ 490.026636][T21283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4111'. [ 490.376732][T21302] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4116'. [ 490.423143][T21305] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4114'. [ 490.439453][T21301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4117'. [ 490.496964][T21305] openvswitch: netlink: Message has 3 unknown bytes. [ 490.776899][ T6156] [ 490.779268][ T6156] ====================================================== [ 490.786286][ T6156] WARNING: possible circular locking dependency detected [ 490.793316][ T6156] syzkaller #0 Not tainted [ 490.797752][ T6156] ------------------------------------------------------ [ 490.804413][T21318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4124'. [ 490.804759][ T6156] kworker/u8:14/6156 is trying to acquire lock: [ 490.804772][ T6156] ffff88801be9da10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 490.830419][ T6156] [ 490.830419][ T6156] but task is already holding lock: [ 490.837782][ T6156] ffff88801be9d980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 490.847364][ T6156] [ 490.847364][ T6156] which lock already depends on the new lock. [ 490.847364][ T6156] [ 490.857773][ T6156] [ 490.857773][ T6156] the existing dependency chain (in reverse order) is: [ 490.866793][ T6156] [ 490.866793][ T6156] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 490.874991][ T6156] down_write+0x96/0x200 [ 490.879768][ T6156] kernfs_add_one+0x41/0x5c0 [ 490.884886][ T6156] kernfs_create_dir_ns+0xde/0x130 [ 490.890522][ T6156] internal_create_group+0x425/0x1180 [ 490.896411][ T6156] cpuhp_invoke_callback+0x445/0x860 [ 490.902215][ T6156] cpuhp_issue_call+0x430/0x7a0 [ 490.907585][ T6156] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 490.914199][ T6156] __cpuhp_setup_state+0x3f/0x60 [ 490.919650][ T6156] do_one_initcall+0x250/0x870 [ 490.924932][ T6156] do_initcall_level+0x104/0x190 [ 490.930384][ T6156] do_initcalls+0x59/0xa0 [ 490.935229][ T6156] kernel_init_freeable+0x2a6/0x3e0 [ 490.940947][ T6156] kernel_init+0x1d/0x1d0 [ 490.945788][ T6156] ret_from_fork+0x514/0xb70 [ 490.950891][ T6156] ret_from_fork_asm+0x1a/0x30 [ 490.956184][ T6156] [ 490.956184][ T6156] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 490.963991][ T6156] [ 490.963991][ T6156] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 490.971801][ T6156] cpus_read_lock+0x42/0x160 [ 490.976907][ T6156] static_key_slow_inc+0x12/0x30 [ 490.982357][ T6156] nbd_genl_reconfigure+0x132f/0x1ea0 [ 490.988240][ T6156] genl_family_rcv_msg_doit+0x22a/0x330 [ 490.994388][ T6156] genl_rcv_msg+0x61c/0x7a0 [ 490.999403][ T6156] netlink_rcv_skb+0x232/0x4b0 [ 491.004679][ T6156] genl_rcv+0x28/0x40 [ 491.009175][ T6156] netlink_unicast+0x75c/0x8e0 [ 491.014473][ T6156] netlink_sendmsg+0x813/0xb40 [ 491.019752][ T6156] ____sys_sendmsg+0x972/0x9f0 [ 491.025031][ T6156] ___sys_sendmsg+0x2a5/0x360 [ 491.030221][ T6156] __x64_sys_sendmsg+0x1bd/0x2a0 [ 491.035681][ T6156] do_syscall_64+0x15f/0xf80 [ 491.040785][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.047185][ T6156] [ 491.047185][ T6156] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 491.054820][ T6156] __mutex_lock+0x1a3/0x1550 [ 491.059924][ T6156] nbd_queue_rq+0x37b/0x1100 [ 491.065026][ T6156] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 491.071167][ T6156] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 491.078001][ T6156] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 491.084491][ T6156] blk_mq_run_hw_queue+0x348/0x4f0 [ 491.090120][ T6156] blk_mq_dispatch_list+0xd16/0xe10 [ 491.095838][ T6156] blk_mq_flush_plug_list+0x48d/0x570 [ 491.101717][ T6156] __blk_flush_plug+0x3ed/0x4d0 [ 491.107076][ T6156] __submit_bio+0x28d/0x580 [ 491.112088][ T6156] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 491.118231][ T6156] block_read_full_folio+0x599/0x830 [ 491.124024][ T6156] filemap_read_folio+0x137/0x3b0 [ 491.129552][ T6156] do_read_cache_folio+0x358/0x590 [ 491.135168][ T6156] read_part_sector+0xb6/0x2b0 [ 491.140526][ T6156] adfspart_check_ICS+0xb1/0x960 [ 491.145972][ T6156] bdev_disk_changed+0x817/0x1770 [ 491.151512][ T6156] blkdev_get_whole+0x380/0x510 [ 491.156869][ T6156] bdev_open+0x31e/0xd30 [ 491.161626][ T6156] blkdev_open+0x470/0x610 [ 491.166553][ T6156] do_dentry_open+0x785/0x14e0 [ 491.171825][ T6156] vfs_open+0x3b/0x340 [ 491.176405][ T6156] path_openat+0x2e08/0x3860 [ 491.181513][ T6156] do_file_open+0x23e/0x4a0 [ 491.186529][ T6156] do_sys_openat2+0x113/0x200 [ 491.191716][ T6156] __x64_sys_openat+0x138/0x170 [ 491.197077][ T6156] do_syscall_64+0x15f/0xf80 [ 491.202179][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.208580][ T6156] [ 491.208580][ T6156] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 491.216041][ T6156] __mutex_lock+0x1a3/0x1550 [ 491.221150][ T6156] nbd_queue_rq+0xc6/0x1100 [ 491.226160][ T6156] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 491.232210][ T6156] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 491.239050][ T6156] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 491.245561][ T6156] blk_mq_run_hw_queue+0x348/0x4f0 [ 491.251184][ T6156] blk_mq_dispatch_list+0xd16/0xe10 [ 491.256902][ T6156] blk_mq_flush_plug_list+0x48d/0x570 [ 491.262783][ T6156] __blk_flush_plug+0x3ed/0x4d0 [ 491.268141][ T6156] __submit_bio+0x28d/0x580 [ 491.273161][ T6156] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 491.279305][ T6156] block_read_full_folio+0x599/0x830 [ 491.285098][ T6156] filemap_read_folio+0x137/0x3b0 [ 491.290642][ T6156] do_read_cache_folio+0x358/0x590 [ 491.296264][ T6156] read_part_sector+0xb6/0x2b0 [ 491.301889][ T6156] adfspart_check_ICS+0xb1/0x960 [ 491.307339][ T6156] bdev_disk_changed+0x817/0x1770 [ 491.312964][ T6156] blkdev_get_whole+0x380/0x510 [ 491.318325][ T6156] bdev_open+0x31e/0xd30 [ 491.323078][ T6156] blkdev_open+0x470/0x610 [ 491.328002][ T6156] do_dentry_open+0x785/0x14e0 [ 491.333274][ T6156] vfs_open+0x3b/0x340 [ 491.337879][ T6156] path_openat+0x2e08/0x3860 [ 491.343068][ T6156] do_file_open+0x23e/0x4a0 [ 491.348084][ T6156] do_sys_openat2+0x113/0x200 [ 491.353274][ T6156] __x64_sys_openat+0x138/0x170 [ 491.358816][ T6156] do_syscall_64+0x15f/0xf80 [ 491.363919][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.370320][ T6156] [ 491.370320][ T6156] -> #4 (set->srcu){.+.+}-{0:0}: [ 491.377437][ T6156] __synchronize_srcu+0xca/0x300 [ 491.382888][ T6156] elevator_switch+0x1e8/0x7a0 [ 491.388158][ T6156] elevator_change+0x2cc/0x450 [ 491.393431][ T6156] elevator_set_default+0x36c/0x430 [ 491.399135][ T6156] blk_register_queue+0x3e9/0x4e0 [ 491.404675][ T6156] __add_disk+0x677/0xd50 [ 491.409514][ T6156] add_disk_fwnode+0xfb/0x480 [ 491.414702][ T6156] nbd_dev_add+0x72c/0xb50 [ 491.419632][ T6156] nbd_init+0x168/0x1f0 [ 491.424300][ T6156] do_one_initcall+0x250/0x870 [ 491.429605][ T6156] do_initcall_level+0x104/0x190 [ 491.435078][ T6156] do_initcalls+0x59/0xa0 [ 491.439936][ T6156] kernel_init_freeable+0x2a6/0x3e0 [ 491.445659][ T6156] kernel_init+0x1d/0x1d0 [ 491.450504][ T6156] ret_from_fork+0x514/0xb70 [ 491.455611][ T6156] ret_from_fork_asm+0x1a/0x30 [ 491.460896][ T6156] [ 491.460896][ T6156] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 491.468711][ T6156] __mutex_lock+0x1a3/0x1550 [ 491.473819][ T6156] elevator_change+0x1b3/0x450 [ 491.479101][ T6156] elevator_set_none+0xb5/0x140 [ 491.484462][ T6156] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 491.490781][ T6156] nbd_start_device+0x17f/0xb10 [ 491.496139][ T6156] nbd_genl_connect+0x165b/0x1cf0 [ 491.501674][ T6156] genl_family_rcv_msg_doit+0x22a/0x330 [ 491.507734][ T6156] genl_rcv_msg+0x61c/0x7a0 [ 491.512752][ T6156] netlink_rcv_skb+0x232/0x4b0 [ 491.518028][ T6156] genl_rcv+0x28/0x40 [ 491.522521][ T6156] netlink_unicast+0x75c/0x8e0 [ 491.527801][ T6156] netlink_sendmsg+0x813/0xb40 [ 491.533079][ T6156] ____sys_sendmsg+0x972/0x9f0 [ 491.538358][ T6156] ___sys_sendmsg+0x2a5/0x360 [ 491.543557][ T6156] __x64_sys_sendmsg+0x1bd/0x2a0 [ 491.549009][ T6156] do_syscall_64+0x15f/0xf80 [ 491.554115][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.560604][ T6156] [ 491.560604][ T6156] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 491.569201][ T6156] blk_alloc_queue+0x546/0x680 [ 491.574480][ T6156] __blk_mq_alloc_disk+0x197/0x390 [ 491.580097][ T6156] nbd_dev_add+0x499/0xb50 [ 491.585051][ T6156] nbd_init+0x168/0x1f0 [ 491.589711][ T6156] do_one_initcall+0x250/0x870 [ 491.595078][ T6156] do_initcall_level+0x104/0x190 [ 491.600526][ T6156] do_initcalls+0x59/0xa0 [ 491.605373][ T6156] kernel_init_freeable+0x2a6/0x3e0 [ 491.611080][ T6156] kernel_init+0x1d/0x1d0 [ 491.615923][ T6156] ret_from_fork+0x514/0xb70 [ 491.621038][ T6156] ret_from_fork_asm+0x1a/0x30 [ 491.626320][ T6156] [ 491.626320][ T6156] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 491.633532][ T6156] fs_reclaim_acquire+0x71/0x100 [ 491.638989][ T6156] kmem_cache_alloc_noprof+0x40/0x650 [ 491.644878][ T6156] __kernfs_iattrs+0xdf/0x320 [ 491.650074][ T6156] kernfs_iop_setattr+0xea/0x3f0 [ 491.655535][ T6156] notify_change+0xc1a/0xf40 [ 491.660723][ T6156] do_truncate+0x1c2/0x250 [ 491.665658][ T6156] path_openat+0x2f89/0x3860 [ 491.670775][ T6156] do_file_open+0x23e/0x4a0 [ 491.675793][ T6156] do_sys_openat2+0x113/0x200 [ 491.680978][ T6156] __x64_sys_openat+0x138/0x170 [ 491.686340][ T6156] do_syscall_64+0x15f/0xf80 [ 491.691450][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.697849][ T6156] [ 491.697849][ T6156] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 491.706353][ T6156] __lock_acquire+0x15a5/0x2cf0 [ 491.711717][ T6156] lock_acquire+0x106/0x350 [ 491.716733][ T6156] down_write+0x96/0x200 [ 491.721488][ T6156] kernfs_unlink_sibling+0x71/0x180 [ 491.727191][ T6156] kernfs_rename_ns+0x4a6/0x830 [ 491.732547][ T6156] sysfs_rename_link_ns+0x16e/0x1b0 [ 491.738289][ T6156] device_rename+0x110/0x210 [ 491.743394][ T6156] __dev_change_net_namespace+0x15d3/0x20a0 [ 491.749797][ T6156] cfg802154_switch_netns+0xbf/0x3d0 [ 491.755687][ T6156] cfg802154_pernet_exit+0x75/0xe0 [ 491.761312][ T6156] ops_undo_list+0x49f/0x940 [ 491.766416][ T6156] cleanup_net+0x56b/0x800 [ 491.771351][ T6156] process_scheduled_works+0xb5d/0x1860 [ 491.777412][ T6156] worker_thread+0xa53/0xfc0 [ 491.782523][ T6156] kthread+0x388/0x470 [ 491.787099][ T6156] ret_from_fork+0x514/0xb70 [ 491.792201][ T6156] ret_from_fork_asm+0x1a/0x30 [ 491.797486][ T6156] [ 491.797486][ T6156] other info that might help us debug this: [ 491.797486][ T6156] [ 491.807702][ T6156] Chain exists of: [ 491.807702][ T6156] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 491.807702][ T6156] [ 491.822146][ T6156] Possible unsafe locking scenario: [ 491.822146][ T6156] [ 491.829593][ T6156] CPU0 CPU1 [ 491.834940][ T6156] ---- ---- [ 491.840291][ T6156] lock(&root->kernfs_rwsem); [ 491.845043][ T6156] lock(cpuhp_state_mutex); [ 491.852225][ T6156] lock(&root->kernfs_rwsem); [ 491.859495][ T6156] lock(&root->kernfs_iattr_rwsem); [ 491.864771][ T6156] [ 491.864771][ T6156] *** DEADLOCK *** [ 491.864771][ T6156] [ 491.872982][ T6156] 5 locks held by kworker/u8:14/6156: [ 491.878339][ T6156] #0: ffff88801be9e940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 491.889216][ T6156] #1: ffffc90005b9fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 491.899741][ T6156] #2: ffffffff8fdc01c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 491.909055][ T6156] #3: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 491.918621][ T6156] #4: ffff88801be9d980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 491.928619][ T6156] [ 491.928619][ T6156] stack backtrace: [ 491.934509][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 491.934533][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 491.934543][ T6156] Workqueue: netns cleanup_net [ 491.934573][ T6156] Call Trace: [ 491.934585][ T6156] [ 491.934593][ T6156] dump_stack_lvl+0xe8/0x150 [ 491.934614][ T6156] print_circular_bug+0x2e1/0x300 [ 491.934638][ T6156] check_noncircular+0x12e/0x150 [ 491.934663][ T6156] __lock_acquire+0x15a5/0x2cf0 [ 491.934683][ T6156] ? __lock_acquire+0x6b5/0x2cf0 [ 491.934703][ T6156] ? __lock_acquire+0x6b5/0x2cf0 [ 491.934722][ T6156] ? kernfs_unlink_sibling+0x71/0x180 [ 491.934736][ T6156] lock_acquire+0x106/0x350 [ 491.934753][ T6156] ? kernfs_unlink_sibling+0x71/0x180 [ 491.934772][ T6156] down_write+0x96/0x200 [ 491.934792][ T6156] ? kernfs_unlink_sibling+0x71/0x180 [ 491.934805][ T6156] ? __pfx_down_write+0x10/0x10 [ 491.934825][ T6156] ? kernfs_root+0x1c/0x230 [ 491.934841][ T6156] ? kernfs_root+0x1c/0x230 [ 491.934859][ T6156] ? kernfs_root+0x1c/0x230 [ 491.934876][ T6156] ? kernfs_root+0x1ea/0x230 [ 491.934895][ T6156] kernfs_unlink_sibling+0x71/0x180 [ 491.934908][ T6156] kernfs_rename_ns+0x4a6/0x830 [ 491.934927][ T6156] sysfs_rename_link_ns+0x16e/0x1b0 [ 491.934945][ T6156] device_rename+0x110/0x210 [ 491.934966][ T6156] __dev_change_net_namespace+0x15d3/0x20a0 [ 491.934991][ T6156] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 491.935012][ T6156] ? do_raw_spin_lock+0x12b/0x2f0 [ 491.935035][ T6156] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 491.935051][ T6156] ? lockdep_hardirqs_on+0x7a/0x110 [ 491.935069][ T6156] ? __mutex_lock+0xef6/0x1550 [ 491.935091][ T6156] ? __mutex_lock+0x606/0x1550 [ 491.935110][ T6156] ? __pfx___mutex_lock+0x10/0x10 [ 491.935131][ T6156] ? __pfx_netdev_run_todo+0x10/0x10 [ 491.935147][ T6156] cfg802154_switch_netns+0xbf/0x3d0 [ 491.935165][ T6156] cfg802154_pernet_exit+0x75/0xe0 [ 491.935179][ T6156] ops_undo_list+0x49f/0x940 [ 491.935216][ T6156] ? __pfx_ops_undo_list+0x10/0x10 [ 491.935234][ T6156] ? idr_destroy+0x227/0x290 [ 491.935253][ T6156] cleanup_net+0x56b/0x800 [ 491.935271][ T6156] ? __pfx_cleanup_net+0x10/0x10 [ 491.935292][ T6156] ? preempt_schedule_thunk+0x16/0x30 [ 491.935306][ T6156] ? process_scheduled_works+0xa70/0x1860 [ 491.935326][ T6156] ? process_scheduled_works+0xa70/0x1860 [ 491.935346][ T6156] process_scheduled_works+0xb5d/0x1860 [ 491.935376][ T6156] ? __pfx_process_scheduled_works+0x10/0x10 [ 491.935397][ T6156] ? assign_work+0x3d5/0x5e0 [ 491.935417][ T6156] worker_thread+0xa53/0xfc0 [ 491.935445][ T6156] kthread+0x388/0x470 [ 491.935459][ T6156] ? __pfx_worker_thread+0x10/0x10 [ 491.935477][ T6156] ? __pfx_kthread+0x10/0x10 [ 491.935491][ T6156] ret_from_fork+0x514/0xb70 [ 491.935513][ T6156] ? __pfx_ret_from_fork+0x10/0x10 [ 491.935530][ T6156] ? __switch_to+0xc79/0x1410 [ 491.935548][ T6156] ? __pfx_kthread+0x10/0x10 [ 491.935561][ T6156] ret_from_fork_asm+0x1a/0x30 [ 491.935592][ T6156] [ 492.315534][ T6156] hsr_slave_0: left promiscuous mode [ 492.743977][ T6156] IPVS: stop unused estimator thread 0... [ 494.289298][ T5826] Bluetooth: hci3: command 0x0405 tx timeout [ 495.650485][T15601] block nbd3: Possible stuck request ffff888027a00000: control (read@0,1024B). Runtime 210 seconds [ 495.661743][ T11] block nbd3: Dead connection, failed to find a fallback [ 495.668865][T15601] block nbd3: Possible stuck request ffff888027a001c0: control (read@1024,1024B). Runtime 210 seconds [ 495.681056][ T11] block nbd3: shutting down sockets [ 495.686379][ T11] blk_print_req_error: 54 callbacks suppressed [ 495.686396][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 495.701810][T15601] block nbd3: Possible stuck request ffff888027a00380: control (read@2048,1024B). Runtime 210 seconds [ 495.713982][ T11] buffer_io_error: 54 callbacks suppressed [ 495.713994][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 495.727799][T15601] block nbd3: Possible stuck request ffff888027a00540: control (read@3072,1024B). Runtime 210 seconds [ 495.740006][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 495.749154][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 495.756926][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 495.766080][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 495.774942][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 495.784073][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 495.792637][ T8340] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 495.802235][ T8340] Buffer I/O error on dev nbd3, logical block 0, async page read [ 495.811587][ T8340] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 495.820939][ T8340] Buffer I/O error on dev nbd3, logical block 1, async page read [ 495.829017][ T8340] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 495.839108][ T8340] Buffer I/O error on dev nbd3, logical block 2, async page read [ 495.846967][ T8340] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 495.856150][ T8340] Buffer I/O error on dev nbd3, logical block 3, async page read [ 495.864088][ T8340] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 495.874226][ T8340] Buffer I/O error on dev nbd3, logical block 0, async page read [ 495.882184][ T8340] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 495.891346][ T8340] Buffer I/O error on dev nbd3, logical block 1, async page read [ 495.902049][ T8340] ldm_validate_partition_table(): Disk read failed. [ 495.909894][ T8340] Dev nbd3: unable to read RDB block 0 [ 495.916566][ T8340] nbd3: unable to read partition table [ 495.930829][ T5191] udevd[5191]: worker [8340] terminated by signal 9 (Killed) [ 495.938833][ T5191] udevd[5191]: worker [8340] failed while handling '/devices/virtual/block/nbd3'