last executing test programs: 7.264414043s ago: executing program 3 (id=5055): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r1, 0xfffffffa}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x7}, &(0x7f0000000100)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000400)={0x5, 0x1, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) sendto$inet6(r6, &(0x7f00000003c0)='\b', 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x58c3, 0x3, 0x3, 0x5800e, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x3, @value=r7, @void, @value=r8}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0x3, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffb, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0x40, 0x8, 0x4000004, 0xfffffe00, 0x5, 0x0, 0xb, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 6.412198422s ago: executing program 3 (id=5065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000219440cac96d0300846108d05f2d996560f69b3e583a1aaeebcfe81df87a225d276fe05e7df4d42384d91b33484fe1982c3048f7079cecc5d6499a0821aa48d2dbe6e84533e36ec9a738"], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x8, 0x0, &(0x7f0000000140)) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000002600)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/110, 0x6e}], 0x1, &(0x7f0000000280)=""/77, 0x4d}, 0x6}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000300)=""/188, 0xbc}, {&(0x7f00000003c0)=""/93, 0x5d}, {&(0x7f0000000740)}, {&(0x7f0000000780)=""/43, 0x2b}, {&(0x7f00000007c0)=""/195, 0xc3}, {&(0x7f00000008c0)=""/240, 0xf0}, {&(0x7f00000009c0)=""/80, 0x50}, {&(0x7f0000000a40)=""/59, 0x3b}, {&(0x7f0000000a80)=""/161, 0xa1}], 0x9}, 0x7}, {{&(0x7f0000000c00)=@ax25={{0x3, @null}, [@default, @remote, @rose, @default, @null, @netrom, @default, @netrom]}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000c80)=""/234, 0xea}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/95, 0x5f}, {&(0x7f0000001e00)=""/176, 0xb0}, {&(0x7f0000001ec0)=""/197, 0xc5}, {&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002000)=""/204, 0xcc}, {&(0x7f0000002100)=""/138, 0x8a}], 0x8, &(0x7f0000002240)=""/162, 0xa2}, 0x7f}, {{&(0x7f0000002300)=@alg, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002380)}], 0x1, &(0x7f0000002400)=""/237, 0xed}, 0x81}], 0x4, 0x2, &(0x7f0000002640)={r5, r6+60000000}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000002380), 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x1a0, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5b8, 0x48}}}}, [@NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x2}, {0x6, 0x2}, {0x2, 0x5}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x5}, {0x5, 0x3}, {0x6, 0x6}, {0x3, 0x7}, {0x5, 0x3}, {0x0, 0x1}, {0x3, 0x4}, {0x7, 0x2}, {0x4}, {0x5, 0x3}, {0x0, 0x9}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0x4}, {0x6, 0x7}, {0x0, 0x5}, {0x7, 0x6}, {0x7, 0x3}, {0x7, 0x1}, {0x7, 0xa}, {0x7}, {0x3, 0x4}, {}, {0x7, 0x8}, {0x7, 0x6}, {0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x4}, {0x7, 0x5}, {0x2, 0x3}, {0x1, 0x3}, {0x7}, {0x2, 0xa}, {0x6, 0xa}, {0x1}, {0x7, 0x5}, {0x7, 0xa}, {0x3, 0x7}, {0x2, 0x8}, {0x3, 0x4}, {0x1, 0x2}, {0x5, 0x8}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x3, 0xa3be, 0x1, 0x0, 0x4a83, 0x1ff, 0xe88]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x48, 0x1d, 0x12, 0x0, 0x5, 0x1, 0x1, 0x6c, 0x12, 0x48, 0x5, 0x3, 0x6c, 0x24, 0x60, 0x16, 0x6, 0x60, 0x30, 0x1, 0x5, 0xb]}]}, @NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x6}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x2}, {0x4, 0x7}, {0x7, 0x5}, {0x5, 0x5}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0xa}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x7}, {0x7}, {}, {0x1, 0x7}, {0x3, 0x6}, {0x3, 0x7}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x4}, {0x3, 0x1}, {0x3, 0x3}, {0x6, 0x8}, {0x2, 0xa}, {0x1, 0x5}, {0x2, 0x1}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x4}, {0x6, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x2}, {0x6, 0x4}, {0x7, 0x1}, {0x7, 0x2}, {0x2, 0xb}, {0x1}, {0x6, 0x6}, {0x0, 0x3}, {0x3, 0x5}, {0x6, 0x1}, {0x3, 0x9}, {0x1, 0x1}, {0x1}, {0x6, 0x3}, {0x2, 0x5}, {0x0, 0x1e}, {0x6, 0x7}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0xa}, {0x4, 0x3}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x2}, {0x4, 0x1}, {0x0, 0x8}, {0x0, 0x4}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x5}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x8}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x7, 0x2, 0xfffe, 0x5, 0x9fed, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xc, 0x1, 0x1ff, 0x40, 0x3, 0x4, 0x5]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1}, {0x7}, {0x1, 0x7}, {0x5, 0x6}, {0x3, 0xa}, {0x6, 0x2}, {0x2}, {0x6, 0x6}, {0x4, 0x9}, {0x4}, {0x4, 0x9}, {0x7}, {0x2, 0x3}, {0x7, 0x3}, {0x1, 0x6}, {0x6, 0x5}, {0x7, 0x6}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x2}, {0x5, 0x3}, {0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x2, 0x8}, {0x1, 0x2}, {0x0, 0xa}, {0x2, 0x3}, {0x2, 0x3}, {0x2, 0x8}, {0x4, 0x7}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0x5}, {0x6, 0x4}, {0x7, 0x7}, {0x2, 0x8}, {0x5, 0x9}, {0x1, 0x8}, {0x5, 0x1}, {0x7, 0x3}, {0x0, 0xa}, {0x0, 0x7}, {0x0, 0x2}, {0x3, 0xa}, {0x1, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x6, 0x5}, {0x6, 0x6}, {0x2, 0xa}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x5}, {0x4, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x5, 0xa}, {0x4, 0x3}, {0x7, 0x6}, {0x4, 0x9}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x4}, {0x6, 0x3}, {0x0, 0x7}, {0x6, 0x15}, {0x1, 0x8}, {0x6, 0xa}, {0x7, 0x2}, {0x3, 0x8}]}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4044010}, 0x44080) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x4}}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r1, 0xa773a000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x12, r0, 0x604ac000) socket$kcm(0x29, 0xd, 0x0) nanosleep(&(0x7f00000001c0), &(0x7f0000000740)) 5.365531624s ago: executing program 3 (id=5077): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x4, 0x7, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x3, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x4, 0xfffffff7, 0x1, 0x2, 0x9, 0xf8000000, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x40, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x5, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x55, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0x8000ed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x49, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x1, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x2, 0x3, 0x8, 0x5, 0xa, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0xffffffff, 0x0, 0x200, 0x10000005, 0x7, 0x4002, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd31, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x20040fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x9, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x10, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x4, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0xfffffffc, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0x401, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0x7, 0x6, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x3, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffff7f, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xef9a, 0x7, 0x3, 0x3, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0x3, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x9, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) (async) write$nci(r5, &(0x7f0000000000)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x1, 0x2, 0x6, 0x3}, 0x61) (async, rerun: 32) close(0x3) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc131480b6130d"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x90) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x8000000000000001, 0x353d, 0x6}) 4.183334808s ago: executing program 1 (id=5085): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000ce7d000002000001010000000000002e000000000000000000000000000000000028b0b4d859bfb122e76d1c81cddbe744181c672c4e60785c541666c30c89fa3084a767a254277e837cc5c39b67d7631878d0553e2127e5e70a71fd02c82e2935e322cd348d03fc5bbd45762d27cf36b717a47c1760"], &(0x7f0000000f40)=""/4096, 0x35, 0x1000, 0xa}, 0x20) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40500000000000079108100000000000500000000000000950004000000000060a633a45c6314764f8f0d80197bcfaae5c754979187bfd9a21bb0d7209bb7a0807413d4926746aa34"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfffffffffffffef8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000ce7d000002000001010000000000002e000000000000000000000000000000000028b0b4d859bfb122e76d1c81cddbe744181c672c4e60785c541666c30c89fa3084a767a254277e837cc5c39b67d7631878d0553e2127e5e70a71fd02c82e2935e322cd348d03fc5bbd45762d27cf36b717a47c1760"], &(0x7f0000000f40)=""/4096, 0x35, 0x1000, 0xa}, 0x20) (async) socket$inet6(0xa, 0x805, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x50) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40500000000000079108100000000000500000000000000950004000000000060a633a45c6314764f8f0d80197bcfaae5c754979187bfd9a21bb0d7209bb7a0807413d4926746aa34"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfffffffffffffef8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) 3.769177427s ago: executing program 1 (id=5087): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000071122e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r4, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x6a8, 0x478, 0x1b0, 0x0, 0x1b0, 0x478, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, [], [0xc5a2f505a334aa82, 0xffffffff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x800, 0xdd2, 0x401, 0x0, 0xb, 0x3a5f2568, 0xcc, 0x2]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@remote, 0x0, 0x37}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@rateest={{0x68}, {'team_slave_1\x00', 'virt_wifi0\x00', 0x30, 0x3, 0x5, 0x1ff, 0x400, 0x2, {0xf666}, {0x4000000000000}}}]}, @HL={0x28, 'HL\x00', 0x0, {0xfe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x6212633ef4a2b82, {{0x42}}}, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000791838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9c, r7, 0x4}, 0x38) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x54382}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (rerun: 32) 3.33727765s ago: executing program 4 (id=5089): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f00000001c0), 0x1000000}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 3.063802925s ago: executing program 4 (id=5091): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80) 2.988163971s ago: executing program 0 (id=5092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="a9f50a0c033b5a9322acfd5b8b2f818320ccf74b68335e21ead7ceb50527413ba2edd51a9baf64167ae5602fffbe864cc6c95623df034ba7a12c4f02a14d24a78baab8f099340f0703663a2a9963157d2b6ed8d9caa118ca88857eeeaf29fb6de1c0e89ef3af66c5fa4040cf83165bba0972fb2f69d93dc364b5b5727d8d485b249c030b0626d7f3782fc8de354eb0ae2e1741f186d39409c7af8112202d7d9f8f7e"], 0x64) 2.799172269s ago: executing program 1 (id=5094): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) 2.665679088s ago: executing program 4 (id=5095): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x9, 0x2, {0x2, 0x3ff}}}]}, 0x3c}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f7, &(0x7f0000003200)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)=ANY=[@ANYBLOB='$\x00 \x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000a00000004000180080004000000000004000680"], 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x224, r6, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x1ec, 0x84, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="157e2b4fe896"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x101}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="9d8ee36235fe"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x4fcd}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xbd}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="0730bc2990d3"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x785}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="634041d8433b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xd672}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xe}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x400}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xf}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x57f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x81}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xd23}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3a86}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xcce}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x40190}, 0x800) 2.546401429s ago: executing program 1 (id=5096): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000100)={0x4c, 0x12, 0x1, 0x70bd2b, 0x25dfdbfb, {0x15, 0x2, 0x7, 0xe, {0x4e20, 0x4e22, [0x6, 0x8, 0x2a44, 0x3], [0x2, 0x8, 0x4, 0x3], 0x0, [0x1000, 0x6]}, 0xeea0, 0x1183}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000009b40)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0xfffffff7, 0x1, 0x3ff}, 0x3c) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d94c8f9e9390"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) 2.240200855s ago: executing program 3 (id=5097): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000903000000010000000000000f03000000000000000000000202000000005f"], 0x0, 0x3f}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7961fdffffff000000007e32"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000140)={0xad, {{0x2, 0x4e22, @empty}}}, 0x88) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x402, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 2.2356755s ago: executing program 0 (id=5098): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0xffff}, {0x3, 0xffe7}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "dc450c3e0cd486b59a21e735845991e2"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x70, r1, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x6, 0x1, @void, @void, @val={0x3, 0x1, 0x64}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xd, 0x80}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9}}, @void}}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e080001400000001508"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x3, 0x11}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}}, 0x0) 1.951723899s ago: executing program 4 (id=5099): r0 = socket$inet(0x2, 0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4050, &(0x7f00000002c0)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) socket$inet(0x2, 0x3, 0x4) (async) sendto$inet(r0, 0x0, 0x0, 0x4050, &(0x7f00000002c0)={0x2, 0x4e22, @empty}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, 0x0) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) (async) 1.864312492s ago: executing program 0 (id=5100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x8, 0x9, {{0x15, 0x4, 0x0, 0x8, 0x54, 0x64, 0x0, 0x10, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x27, 0xa7, [@rand_addr=0x64010101, @remote, @multicast2, @rand_addr=0x3, @local, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @remote]}, @lsrr={0x83, 0x7, 0xea, [@local]}, @ra={0x94, 0x4}, @generic={0x7, 0xc, "51f0891b95c0aaef6bb3"}]}}}}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="6e1855fbd65c2f4b26de9a55921f25a00be6dee5cfcb61d7b12b658ddbf6b0ae7b6d04433053e748d9bc85c514cf1671d78076465729abe515a826da146ee30f156b1c19fef6", 0x46}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "51edef7214e4ff93", "42635001e90003a25f49631e467e1074", "6bbc39e1", "e01cf9ab6c03e72d"}, 0x28) 1.717695471s ago: executing program 2 (id=5101): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x8991, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800080000000000000000000000000061107c00000000009500000000000000e50f5f7f5eabcbe27da1e28922734e5e30f9dab7941fa9ad6136f60112fc9e87515d83c1525cbfdcf1e7e0514ae52f691f7b35f148db7c6dc47307ead1f1056c127683d45332aa1ec88aaa674bf8233466c1ab1b7fe09b4bf3441f31707bdeae7a98cffe269660b6334d63add18c6cdb0573a882f86daf9db9ca000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)={[{0x2d, 'rlimit'}, {0x2b, 'net'}]}, 0xd) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r3 = accept4(r2, &(0x7f0000000080)=@xdp, &(0x7f0000000100)=0x80, 0x0) sendmsg$nl_route(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x0, 0x30, 0x0, &(0x7f000000a500)) ioctl$FICLONE(r4, 0x40049409, 0xffffffffffffffff) 1.634862516s ago: executing program 3 (id=5102): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'sh\x00', 0x1d}, 0x2c) r1 = socket$inet(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000400)="3f15fd9075290d231e9719c8f5db76ba50594ebb03fb03c9d2578cb523219ceded7e579c9155c02c8433d6e86932c47e33ef1c1d99cc73ab6e26e3bda3983c22efe669a9065feefc4d7452137ee0fa0b89e9c0eae9763aac7ea16ba501902b1a129e9007ce3390912d4d186fe909d2cd3b8587901a992f9ac5025a", 0x7b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000001e000100000000000000000007"], 0x28}}, 0x0) connect(r1, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)={0x430, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x41d, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @nested={0x324, 0x122, 0x0, 0x1, [@nested={0x2, 0xb9}, @nested={0x158, 0xa6, 0x0, 0x1, [@typed={0x4, 0x7d}, @nested={0x4, 0x7f}, @nested={0x4, 0x134}, @typed={0x0, 0xe0, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0xad}, @typed={0x0, 0x86, 0x0, 0x0, @u32=0x1}]}, @typed={0x6, 0xc6, 0x0, 0x0, @str=']\x00'}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x3}, @generic="f3060dbe0e5de6d7bca328a7875971b52d0a7a0dd712dd076a03853c4ebf0ed7a31588fbf643edb8bda56ffe283d4091ccb3f7d1356fe6bb48f2fcdc3a0b056a95958f5d999e203f9d46874d32a69fc0796804c20b82bc871652d7b8b6a6185350b707b5f73a6850394455c5d94b18f967875029dd81d2ee40a2ae06e6f4a1c173acb5a375afff554218ea86356c04963b7016", @generic="bf13900473f8af3c0a7f7724a7990b99a6b748477ec73b388b559dad73d15c084f11d9", @generic="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"]}]}]}, 0x430}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001200010a000000000000000080020000299a50bdc19377268b5707eafb000000d019ef93bc71ba04b7dcea00b49cadeb8eb9fedb975458bbb8365f3dadb42182ea0df94c8a41d743a69c7e870aa77466a6c7044aabdf6edcc33c5ac809967484d7ce3a2833021789893690cf8407258f37efcab82cd2fd01042d2be8a4e6ddf074ecf62eeb7df52e322a550bc10a670a44236894f348274379e647c5ea"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000300)="060000000300030000", 0x9) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r6, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xfd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 1.269455038s ago: executing program 4 (id=5103): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB="010025bd7000fddbdf250c000000080001000100000008000100030000000c00060003e800000000000008000300714fd378fa70154d6fb55308b2a03efc3e80595054dd7b59722f7618eb62983bea5b92abd6af4e80b5c774344e2924c403877b5075b79a7930787a35b37890fc8be78a2b20f5ae9ba324a7c7adaf962aea7464facfaec7762b38b4caa62b5d365dcc4adfabd44a8e9e21d70b3bba91a201ddf6081854f44269bf1d636e84e141802b4feec3310d6af34efb2aa6b23fb99872a47e7d747efb25b5bf730b2c99a87180823a2b020c5f86b3bfde6e9c56023d5848280bd092d6b987d22a1ff0cf2b3aaaf7980b9850a9", @ANYRES32=r3, @ANYBLOB="b2507f538844b041d997cc93beec5bfabf2fd9eac3e5f6b2a0bea41ef37f46320e5ebfc70ca894982123073db8dcef661d7111000073ba7b120c2c3a225ee790bc8863ba70c2dc77e164b195d2650ea2d76627e5ca814fd1660a154e4333e566177ecd6ce050334919a983019332a3657eaae696855f2a667fb890cdf1fc93bf97d548"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10810) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, {0x2, @empty, 'batadv_slave_1\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 1.268899898s ago: executing program 0 (id=5104): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_DEL_VIF(r0, 0x0, 0x1a, 0x0, 0x0) r1 = socket$inet6(0x10, 0x5, 0x0) r2 = socket(0xf, 0x3, 0xff) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xe, 0xfdf00002}, {0x7, 0x0, 0x86, 0xfffffffe}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 1.248286052s ago: executing program 1 (id=5105): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xd10, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0xff, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xdfdddf82bb4cc70c, 0x28011, r2, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="4ff3c74a360001000000000000000100040000806d9c2a734ac244a5ee806b6bf19bbcb55e2708d499758efb"], 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d08000500000000000800050000000000080005000000000008000500"], 0x134}}, 0x4048014) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x2689e000) 1.186360197s ago: executing program 2 (id=5106): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000601000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) 1.003680287s ago: executing program 3 (id=5107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0, 0x0, 0x200000000000000}, 0x38) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}]}}}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c204", @ANYRES64], 0x0) (async) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) 917.392726ms ago: executing program 2 (id=5108): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xd, 0x1}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x5, 0x3}}]}}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000840) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x7) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x3, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}]}, 0x54}}, 0x0) 835.947174ms ago: executing program 0 (id=5109): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4aef6a06}, [@call={0x85, 0x0, 0x0, 0x43}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0xfffffffffffffc8d}, 0x4c) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xf8980, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket(0x18, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x64, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x48, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0xb}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4024001}, 0x40) 612.034915ms ago: executing program 2 (id=5110): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500000000000500010006000000140007"], 0x5c}}, 0x0) listen(r1, 0x20005) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7) accept4(r0, 0x0, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 415.020514ms ago: executing program 0 (id=5111): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x1c) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000003c0)={r5, 0x4, 0x7, 0x4, 0x280, 0x7d6, 0xc370, 0x7, {0x0, @in6={{0xa, 0x4e22, 0x4, @private2, 0xfffff801}}, 0x2, 0x16, 0x8000, 0x0, 0x1383e2ce}}, &(0x7f0000000480)=0xb0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, &(0x7f00000004c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0) 388.955972ms ago: executing program 1 (id=5112): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c46f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000046c0)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="01000000fe800000000000000000000000002988ce3186c0d63587705843f6292b77003b86dd00003d739cfb39e46a0b7649524ec20792308aceff1ef0f6ebf300f64b8ca967bb343b961cb76682d4f4d280eff02b640729073f13ee94e60f1bcdfdc70697c71c46196b3b2c8a3cb177bd"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x48, r9, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, 0x0, 0x40010) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES8=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r13, 0x0, 0xff03, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000000000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r12}, 0x38) socket$tipc(0x1e, 0x8, 0x0) recvmmsg(r0, &(0x7f0000005f40)=[{{&(0x7f0000000080)=@caif=@dgm, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/51, 0x33}], 0x1, &(0x7f0000000180)=""/217, 0xd9}, 0x8}, {{&(0x7f0000001ec0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)=""/152, 0x98}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f0000000580)=""/222, 0xde}, {&(0x7f0000000680)=""/125, 0x7d}], 0x7, &(0x7f0000000780)=""/249, 0xf9}, 0x9f}, {{&(0x7f0000000880)=@nfc, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000900)=""/166, 0xa6}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/185, 0xb9}], 0x4, &(0x7f0000001b80)=""/47, 0x2f}, 0x4d}, {{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001c40)=""/210, 0xd2}, {&(0x7f0000001d40)=""/158, 0x9e}, {&(0x7f0000001e00)=""/38, 0x26}, {&(0x7f0000001e40)=""/72, 0x48}, {&(0x7f0000006140)=""/72, 0x48}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/116, 0x74}], 0x7, &(0x7f0000001a00)=""/98, 0x62}, 0x2}, {{&(0x7f00000030c0)=@tipc=@id, 0x80, &(0x7f0000004600)=[{&(0x7f0000003140)=""/110, 0x6e}, {&(0x7f00000061c0)=""/132, 0x84}, {&(0x7f0000003280)=""/100, 0x64}, {&(0x7f0000006280)=""/156, 0x9c}, {&(0x7f00000033c0)=""/52, 0x34}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/129, 0x81}, {&(0x7f00000044c0)=""/76, 0x4c}, {&(0x7f0000004540)=""/145, 0x91}], 0x9, &(0x7f0000006340)=""/4096, 0x1000}, 0x7}, {{&(0x7f00000056c0)=@nfc, 0x80, &(0x7f00000059c0)=[{&(0x7f0000005740)=""/87, 0x57}, {&(0x7f00000057c0)=""/228, 0xe4}, {&(0x7f00000058c0)=""/48, 0x30}, {&(0x7f0000005900)=""/189, 0xbd}], 0x4, &(0x7f0000005a00)=""/249, 0xf9}, 0x93}, {{&(0x7f0000005b00)=@nfc_llcp, 0x80, &(0x7f0000000000)=[{&(0x7f0000005b80)=""/147, 0x93}], 0x1, &(0x7f0000003300)=""/162, 0xa2}, 0xfffffff1}, {{&(0x7f0000005d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/100, 0x64}], 0x1, &(0x7f0000005e80)=""/160, 0xa0}, 0x4000}], 0x8, 0x10000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r14, 0x8905, &(0x7f00000019c0)) shutdown(r0, 0x0) 319.773266ms ago: executing program 2 (id=5113): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000019580)={'filter\x00', 0x7, 0x4, 0x4c8, 0x110, 0x1f8, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0xff000000, 0xff, 0x9, 0x1, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x0, 0x8, 0x3ff, 0x2, 0x2, 'veth0_vlan\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010100, @loopback, 0xf, 0x1}}}, {{@arp={@local, @empty, 0xff000000, 0xff000000, 0xe, 0x6, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="757930b1b98a", {[0x0, 0xff]}}, 0x0, 0xffff, 0x4, 0x21, 0x5, 0x2, 'ip_vti0\x00', 'pim6reg1\x00', {0xff}, {0x7f}, 0x0, 0x26c}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@multicast2, @broadcast, 0xffffff00, 0x0, 0xc, 0x9, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="23fc13b910db", {[0x0, 0xff]}}, 0xfb3, 0x1, 0x2, 0x9, 0x5, 0x3, 'geneve0\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x0, 0xbdffa750df69ccdb}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x40, 'system_u:object_r:lost_found_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) 203.698185ms ago: executing program 4 (id=5114): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x3, 0x97) (async) syz_extract_tcp_res(&(0x7f0000000040), 0x3, 0x97) syz_extract_tcp_res(&(0x7f0000000080), 0x6, 0xfffffffb) (async) syz_extract_tcp_res(&(0x7f0000000080), 0x6, 0xfffffffb) syz_extract_tcp_res(&(0x7f00000000c0), 0x4, 0x6) (async) syz_extract_tcp_res(&(0x7f00000000c0), 0x4, 0x6) syz_extract_tcp_res(&(0x7f0000000100), 0x6, 0x5) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'pim6reg1\x00', 0x4}, 0x18) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'pim6reg1\x00', 0x4}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x501200, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x501200, 0x0) write$tun(r1, &(0x7f0000000240)={@void, @void, @mpls={[{0xe}], @ipv6=@tipc_packet={0xd, 0x6, "58cf0f", 0x3a, 0x6, 0xd6658574c89b1bb1, @empty, @mcast1, {[@hopopts={0x85, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], @payload_named={{{{{0x2a, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x4, 0x0, 0x2, 0xb, 0x2, 0x2, 0x3, 0x0, 0x0, 0x4e24, 0x4e21}, 0x3, 0x2}, 0x0, 0x3}}, [0x0, 0x0]}}}}}, 0x66) (async) write$tun(r1, &(0x7f0000000240)={@void, @void, @mpls={[{0xe}], @ipv6=@tipc_packet={0xd, 0x6, "58cf0f", 0x3a, 0x6, 0xd6658574c89b1bb1, @empty, @mcast1, {[@hopopts={0x85, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], @payload_named={{{{{0x2a, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x4, 0x0, 0x2, 0xb, 0x2, 0x2, 0x3, 0x0, 0x0, 0x4e24, 0x4e21}, 0x3, 0x2}, 0x0, 0x3}}, [0x0, 0x0]}}}}}, 0x66) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f00000002c0)) getsockname$unix(r1, &(0x7f0000000300), &(0x7f0000000380)=0x6e) (async) getsockname$unix(r1, &(0x7f0000000300), &(0x7f0000000380)=0x6e) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r3 = accept$unix(r2, &(0x7f0000000400), &(0x7f0000000480)=0x6e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x20, 0x1, 0x7, 0x8, {{0xb, 0x4, 0x3, 0x2, 0x2c, 0x65, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@rr={0x7, 0x17, 0x62, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000580)={r4, @local, @loopback}, 0xc) syz_extract_tcp_res$synack(&(0x7f00000005c0), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f00000005c0), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000600), 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000a40)={{r2, &(0x7f0000000640)='ip_vti0\x00', 0x18f800, &(0x7f0000000680)={@_ha_fsid={[0x4, 0x2]}, {0x5, 0x9d7, 0x80, 0x3}}, 0x0, &(0x7f00000006c0), &(0x7f0000000700)=0x4e4}, 0x3, &(0x7f00000009c0)=[{0x2, 0x0, &(0x7f0000000740)='sit0\x00', &(0x7f0000000780)="bb58b4a8900e27e3885b7bb00e669a4e4ac9a83b1a", 0x15, 0x10}, {0x1, 0x8, &(0x7f00000007c0)='ip_vti0\x00', &(0x7f0000000800)="673dc657f14e5a2ce0d8c4d634c385b8b3b1bc33e625ecf1198448e2b03d60a0408dd3a384a219c33873d9706429824e060d508319a69202275150df8129d6d6e54cac90d9963d5dc18e2f637fc64b5ccd3b0592f8efabcb5a90cfa3b539d251fc279d7169dac65c05993f4016afd22aefb0d931378d25da94970d15ddd34d1c24856ea80add5f1e7bff4e3bafad8d08c62736e71c98abf55e5294d450a41c6564d31fe6bcaf61c5fcad13", 0xab, 0x20}, {0x1, 0x4, &(0x7f00000008c0)='%,\x00', &(0x7f0000000900)="4f8d721f47d54f3cfcae25767b3de5428c50cd3d9f917c20b2a12aebbdcbd6316dfc4904108e0392e9083c97395fd03bde6a940cf902d871a1f2f14de64ba4988cae3f66255bdf1cc44333c998ae2af1115745b1a0fcc5174232186292912f6c8de9a0b34b66cf0c2f5ffcb98666c7d6b96c2aa795fbbbdb3306a5a69315957eb258ba04efe89d18c75438ff61dc93df4fb8edb5a5ea3df2d1558f0804a3bf4f1b2b65398813be91f3a95707850fe3bbe2c24e5c3f", 0xb5, 0x6}]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000a40)={{r2, &(0x7f0000000640)='ip_vti0\x00', 0x18f800, &(0x7f0000000680)={@_ha_fsid={[0x4, 0x2]}, {0x5, 0x9d7, 0x80, 0x3}}, 0x0, &(0x7f00000006c0), &(0x7f0000000700)=0x4e4}, 0x3, &(0x7f00000009c0)=[{0x2, 0x0, &(0x7f0000000740)='sit0\x00', &(0x7f0000000780)="bb58b4a8900e27e3885b7bb00e669a4e4ac9a83b1a", 0x15, 0x10}, {0x1, 0x8, &(0x7f00000007c0)='ip_vti0\x00', &(0x7f0000000800)="673dc657f14e5a2ce0d8c4d634c385b8b3b1bc33e625ecf1198448e2b03d60a0408dd3a384a219c33873d9706429824e060d508319a69202275150df8129d6d6e54cac90d9963d5dc18e2f637fc64b5ccd3b0592f8efabcb5a90cfa3b539d251fc279d7169dac65c05993f4016afd22aefb0d931378d25da94970d15ddd34d1c24856ea80add5f1e7bff4e3bafad8d08c62736e71c98abf55e5294d450a41c6564d31fe6bcaf61c5fcad13", 0xab, 0x20}, {0x1, 0x4, &(0x7f00000008c0)='%,\x00', &(0x7f0000000900)="4f8d721f47d54f3cfcae25767b3de5428c50cd3d9f917c20b2a12aebbdcbd6316dfc4904108e0392e9083c97395fd03bde6a940cf902d871a1f2f14de64ba4988cae3f66255bdf1cc44333c998ae2af1115745b1a0fcc5174232186292912f6c8de9a0b34b66cf0c2f5ffcb98666c7d6b96c2aa795fbbbdb3306a5a69315957eb258ba04efe89d18c75438ff61dc93df4fb8edb5a5ea3df2d1558f0804a3bf4f1b2b65398813be91f3a95707850fe3bbe2c24e5c3f", 0xb5, 0x6}]}) ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, &(0x7f0000000ac0)={0x3, 0x2}) (async) ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, &(0x7f0000000ac0)={0x3, 0x2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) accept4$inet(r0, &(0x7f0000000b40)={0x2, 0x0, @multicast2}, &(0x7f0000000b80)=0x10, 0x800) write$tun(r1, &(0x7f0000000bc0)={@val, @void, @x25={0x3, 0x5, 0xfb, "172a4fc0629403ee37b7d98cf95f6514de78966e47338b7f0ec20bfc3f6007c57a801280ee8c4b192b8cde0c6c70572c23ec6ea2faff72d289d8fce8023c7ad5bfb9acd0edf12ed9ef827024a885451d1c236c291a2c77afa7a2878bc6b52473fa8d0a73aa0f45a837fe35d3a1bdb66ea41a779d3e87e041e2e177e4200779f25fa4f7f568689ecc1fadaac5037b74ec1feebf327fff9f"}}, 0x9e) syz_emit_ethernet(0x16, &(0x7f0000000c80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@llc={0x4, {@llc={0x80, 0xe, "7f33"}}}}}, &(0x7f0000000cc0)={0x1, 0x1, [0x384, 0xc0e, 0x42f, 0xf84]}) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000d00)=0x2, 0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000d40)) syz_extract_tcp_res$synack(&(0x7f0000000d80), 0x1, 0x0) bind$netlink(r5, &(0x7f0000000dc0)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) syz_extract_tcp_res(&(0x7f0000000e00), 0x9, 0x4fd) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f0000000e40)={'NETMAP\x00'}, &(0x7f0000000e80)=0x1e) 0s ago: executing program 2 (id=5115): syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001451cced3f65a52000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000300"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) kernel console output (not intermixed with test programs): adv_slave_0 (retrying later): interface not active [ 432.209992][T18556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.210008][T18556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.253567][T18556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.079417][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3288'. [ 433.190304][T18556] hsr_slave_0: entered promiscuous mode [ 433.193782][T18556] hsr_slave_1: entered promiscuous mode [ 433.212570][T18556] debugfs: 'hsr0' already exists in 'hsr' [ 433.212593][T18556] Cannot create hsr debugfs directory [ 433.577184][T18790] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3289'. [ 434.602757][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 434.948228][T18817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3294'. [ 434.948262][T18817] netlink: 'syz.1.3294': attribute type 7 has an invalid length. [ 434.948274][T18817] netlink: 'syz.1.3294': attribute type 8 has an invalid length. [ 434.948285][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'. [ 435.000490][T18400] veth1_macvtap: left promiscuous mode [ 435.000524][T18400] veth0_macvtap: left allmulticast mode [ 435.000541][T18400] veth0_macvtap: left promiscuous mode [ 435.024266][T18400] veth0_vlan: left promiscuous mode [ 435.393046][T18797] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3290'. [ 435.845328][T18400] team0 (unregistering): Port device team_slave_1 removed [ 435.869796][T18400] team0 (unregistering): Port device team_slave_0 removed [ 436.628232][T18833] Bluetooth: hci0: unsupported parameter 5161 [ 436.628256][T18833] Bluetooth: hci0: unsupported parameter 8192 [ 436.628276][T18833] Bluetooth: hci0: unsupported parameter 5161 [ 436.628287][T18833] Bluetooth: hci0: unsupported parameter 8192 [ 436.665858][T18832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3298'. [ 436.790406][T18832] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3298'. [ 436.790432][T18832] openvswitch: netlink: Flow key attr not present in new flow. [ 436.943873][T18400] IPVS: stop unused estimator thread 0... [ 437.257124][T18556] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.781663][T18556] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.828283][T18854] netlink: 'syz.3.3303': attribute type 8 has an invalid length. [ 438.026667][T18852] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3301'. [ 438.823172][T18556] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.990464][T18875] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 438.990490][T18875] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 439.039293][T18878] netlink: 'syz.2.3307': attribute type 1 has an invalid length. [ 439.343347][T18878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.505453][T18880] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 439.508752][T18880] bond1 (unregistering): Released all slaves [ 439.677150][T18875] bond1: (slave veth0_to_bond): making interface the new active one [ 439.698047][T18875] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 440.079805][T18556] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.565639][T18907] bond0: (slave ip6tnl0): refused to change device type [ 440.574927][T18905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3314'. [ 440.902644][T18917] dvmrp0: entered allmulticast mode [ 440.999825][T18912] netlink: 'syz.1.3315': attribute type 9 has an invalid length. [ 441.566172][T18556] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 441.608784][T18556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.630630][T18556] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 441.674406][T18556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.693005][T18556] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 441.810501][T18556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.831782][T18556] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 441.967005][T18556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.988602][T18556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.185396][T18556] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.303973][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.304096][ T7013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.369348][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.369454][ T7013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.460732][T18965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.462513][T18963] gre0: Caught tx_queue_len zero misconfig [ 443.919383][T18556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.841759][T18985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3330'. [ 445.618916][T19003] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3333'. [ 445.711889][T19007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3334'. [ 446.348671][T19023] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3337'. [ 446.452115][T19018] syzkaller1: entered promiscuous mode [ 446.452146][T19018] syzkaller1: entered allmulticast mode [ 447.013745][T19035] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3339'. [ 447.133728][T19037] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3340'. [ 447.570536][T18556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.854285][T19060] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3345'. [ 448.070006][T19063] vlan2: entered promiscuous mode [ 448.070028][T19063] geneve1: entered promiscuous mode [ 448.071020][T19063] vlan2: entered allmulticast mode [ 448.071036][T19063] geneve1: entered allmulticast mode [ 448.384212][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3349'. [ 448.473529][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.497089][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.497581][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.498000][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.498427][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.525720][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.528371][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.528770][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.529172][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.529557][T19073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.589793][T19081] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 7, id = 0 [ 448.671165][T19085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3349'. [ 448.671186][T19085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3349'. [ 448.697130][T19089] IPVS: stopping backup sync thread 19081 ... [ 449.501782][T18556] veth0_vlan: entered promiscuous mode [ 449.709453][T18556] veth1_vlan: entered promiscuous mode [ 450.027718][T18556] veth0_macvtap: entered promiscuous mode [ 450.052776][T18556] veth1_macvtap: entered promiscuous mode [ 450.190083][T18556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.235733][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 450.262077][T18556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.368742][T18405] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.368788][T18405] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.368820][T18405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.374684][T18405] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.971454][T18404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.971477][T18404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.404139][T18405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.404160][T18405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.887600][T19162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3235'. [ 451.925281][T19163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3235'. [ 452.308295][T19172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3366'. [ 453.465938][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 453.479439][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 453.480233][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 453.481123][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 453.481667][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 453.918404][T19201] netlink: 'syz.2.3374': attribute type 9 has an invalid length. [ 455.515154][ T5621] Bluetooth: hci1: command tx timeout [ 456.198515][T19243] sctp: [Deprecated]: syz.1.3384 (pid 19243) Use of int in maxseg socket option. [ 456.198515][T19243] Use struct sctp_assoc_value instead [ 456.853140][T19259] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 456.853167][T19259] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 456.858376][T19252] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3386'. [ 456.858398][T19252] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3386'. [ 456.860250][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3386'. [ 456.860267][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3386'. [ 456.942387][T19254] rdma_rxe: rxe_newlink: failed to add wg1 [ 457.600555][T19269] netlink: 'syz.4.3392': attribute type 10 has an invalid length. [ 457.613076][ T5621] Bluetooth: hci1: command tx timeout [ 457.778591][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3392'. [ 457.846287][T19269] net_ratelimit: 13 callbacks suppressed [ 457.846306][T19269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.846853][T19278] 8021q: VLANs not supported on ip6_vti0 [ 459.481916][T19190] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.482107][T19190] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.482241][T19190] bridge_slave_0: entered allmulticast mode [ 459.508984][T19190] bridge_slave_0: entered promiscuous mode [ 459.522432][T19190] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.522599][T19190] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.522742][T19190] bridge_slave_1: entered allmulticast mode [ 459.546739][T19190] bridge_slave_1: entered promiscuous mode [ 459.586238][T19190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.589888][T19190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.645124][T19190] team0: Port device team_slave_0 added [ 459.648229][T19190] team0: Port device team_slave_1 added [ 459.676999][ T5621] Bluetooth: hci1: command tx timeout [ 459.699724][T19190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.699741][T19190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.699763][T19190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.702075][T19190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.702088][T19190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.702111][T19190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.406652][T19190] hsr_slave_0: entered promiscuous mode [ 460.441530][T19190] hsr_slave_1: entered promiscuous mode [ 460.442254][T19190] debugfs: 'hsr0' already exists in 'hsr' [ 460.442272][T19190] Cannot create hsr debugfs directory [ 461.345802][T19344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.768031][ T5632] Bluetooth: hci1: command tx timeout [ 461.873693][T19190] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.873726][T19190] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 461.873749][T19190] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 461.873772][T19190] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 462.117724][T19190] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.117758][T19190] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 462.117783][T19190] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 462.117806][T19190] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 462.320213][T19369] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3418'. [ 462.853531][T19190] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.853565][T19190] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 462.853589][T19190] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 462.853613][T19190] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 463.328286][T19376] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 463.329341][T19374] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 463.329364][T19374] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 463.403926][T19374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3420'. [ 463.408202][T19190] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.408234][T19190] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 463.408258][T19190] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 463.408282][T19190] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 464.324808][T19403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3430'. [ 464.368355][T19406] netlink: 'syz.2.3432': attribute type 1 has an invalid length. [ 464.497083][T19412] netlink: 'syz.2.3432': attribute type 10 has an invalid length. [ 464.546564][T19406] bond3: entered promiscuous mode [ 464.546921][T19406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.873585][T19416] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 464.939682][T19190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 464.983162][T19190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 465.002313][T19190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.057264][T19190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 465.077195][T19190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 465.111478][T19190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 465.135082][T19190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 465.202246][T19190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 465.924657][T19190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.045973][T19190] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.097393][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.097497][ T7026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.178876][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.178982][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.347286][T19471] netlink: 'syz.4.3444': attribute type 64 has an invalid length. [ 467.347307][T19471] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3444'. [ 467.680689][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 467.941029][T19478] bond4: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 467.974991][T19478] bond4 (unregistering): Released all slaves [ 468.061722][T19493] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 468.559717][T19499] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3450'. [ 469.513105][T19190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.588536][T19190] veth0_vlan: entered promiscuous mode [ 469.611992][T19190] veth1_vlan: entered promiscuous mode [ 469.653745][T19190] veth0_macvtap: entered promiscuous mode [ 469.666718][T19190] veth1_macvtap: entered promiscuous mode [ 469.708500][T19190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.729774][T19190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.757028][ T7013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.820167][T19521] bridge1: entered promiscuous mode [ 469.820223][T19521] bridge1: entered allmulticast mode [ 469.833688][ T7013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.853094][T18408] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.879911][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.031056][T19523] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 470.796791][T19483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.651588][T18408] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 472.673804][T18408] bond6 (unregistering): (slave gretap3): Releasing active interface [ 472.736787][T18408] bond9 (unregistering): (slave geneve5): Releasing active interface [ 472.765707][T18408] bond8 (unregistering): (slave geneve3): Releasing active interface [ 472.900165][T18408] bond1 (unregistering): (slave bridge3): Releasing active interface [ 472.953656][T18408] bond0 (unregistering): Released all slaves [ 473.007553][T18408] bond1 (unregistering): Released all slaves [ 473.026744][T18408] bond2 (unregistering): Released all slaves [ 473.075893][T18408] bond3 (unregistering): (slave bond4): Releasing backup interface [ 473.076671][T18408] bond3 (unregistering): Released all slaves [ 473.101268][T18408] bond4 (unregistering): Released all slaves [ 473.117349][T18408] bond5 (unregistering): Released all slaves [ 473.138324][T18408] bond6 (unregistering): Released all slaves [ 473.179006][T18408] bond7 (unregistering): Released all slaves [ 473.199389][T18408] bond8 (unregistering): Released all slaves [ 473.217012][T18408] bond9 (unregistering): Released all slaves [ 473.233645][T18408] bond10 (unregistering): Released all slaves [ 473.257078][T18408] bond11 (unregistering): Released all slaves [ 473.496838][ T7026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.496861][ T7026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.713104][T18408] ovs-dp0: left promiscuous mode [ 473.862400][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3460'. [ 473.862849][T19573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3460'. [ 474.385714][T18408] tipc: Disabling bearer [ 474.385749][T18400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.385763][T18400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.386173][T18408] tipc: Left network mode [ 475.128616][T19604] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 475.306147][T19608] Cannot find add_set index 4 as target [ 475.308267][T19610] lo speed is unknown, defaulting to 1000 [ 475.308337][T19610] lo speed is unknown, defaulting to 1000 [ 475.309119][T19610] lo speed is unknown, defaulting to 1000 [ 475.351524][T19610] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 475.351558][T19610] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 475.351595][T19610] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 475.369726][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3468'. [ 475.501369][T19610] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 475.773805][T19610] lo speed is unknown, defaulting to 1000 [ 475.868822][T19610] lo speed is unknown, defaulting to 1000 [ 475.973771][T19628] syzkaller1: entered promiscuous mode [ 475.982968][T19628] syzkaller1: entered allmulticast mode [ 476.012343][T19610] lo speed is unknown, defaulting to 1000 [ 476.063319][T19610] lo speed is unknown, defaulting to 1000 [ 476.435484][T19610] lo speed is unknown, defaulting to 1000 [ 476.452207][T19638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3473'. [ 476.514689][T19639] netlink: 'syz.1.3473': attribute type 16 has an invalid length. [ 476.593504][T19610] lo speed is unknown, defaulting to 1000 [ 476.850675][T19610] lo speed is unknown, defaulting to 1000 [ 476.869612][T19610] lo speed is unknown, defaulting to 1000 [ 476.980450][T19647] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3474'. [ 477.060740][T19646] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 477.607785][T19653] netlink: 734 bytes leftover after parsing attributes in process `syz.4.3475'. [ 478.064545][T19664] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3478'. [ 478.064570][T19664] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3478'. [ 478.772233][T19675] h: entered promiscuous mode [ 478.903908][T19680] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3481'. [ 479.693670][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3485'. [ 480.520629][T19714] Bluetooth: MGMT ver 1.23 [ 480.733877][ T5632] Bluetooth: hci1: SCO packet too small [ 481.680403][T19748] lo: entered allmulticast mode [ 481.700950][T19748] netlink: 'syz.1.3493': attribute type 1 has an invalid length. [ 481.878427][T19759] Bluetooth: hci0: unsupported parameter 5134 [ 481.878447][T19759] Bluetooth: hci0: unsupported parameter 8192 [ 481.878461][T19759] Bluetooth: hci0: unsupported parameter 5134 [ 481.878472][T19759] Bluetooth: hci0: unsupported parameter 8192 [ 482.044833][T19762] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 482.044869][T19762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.207001][T19774] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 482.239487][T19774] xt_hashlimit: size too large, truncated to 1048576 [ 482.293916][T19748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.598341][T19777] tunl0: entered promiscuous mode [ 482.662078][T19777] netlink: 'syz.3.3497': attribute type 4 has an invalid length. [ 482.662100][T19777] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3497'. [ 482.801110][T19790] netlink: 'syz.2.3501': attribute type 17 has an invalid length. [ 482.801131][T19790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3501'. [ 482.801155][T19790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3501'. [ 482.887772][T19786] erspan0: entered promiscuous mode [ 483.169643][T18408] hsr_slave_0: left promiscuous mode [ 483.187496][T18408] hsr_slave_1: left promiscuous mode [ 483.213041][T18408] veth1_macvtap: left promiscuous mode [ 483.232987][T18408] veth0_macvtap: left promiscuous mode [ 483.233263][T18408] veth0_vlan: left promiscuous mode [ 483.427408][T19805] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 483.427746][T19805] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 483.428084][T19805] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 483.428411][T19805] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 483.460202][T19805] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 483.506430][T19804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3505'. [ 483.811530][T19814] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3509'. [ 483.819174][T19812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3508'. [ 483.819209][T19812] netlink: 'syz.2.3508': attribute type 7 has an invalid length. [ 483.819220][T19812] netlink: 'syz.2.3508': attribute type 8 has an invalid length. [ 483.819231][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3508'. [ 485.061604][T19824] netlink: 'syz.2.3512': attribute type 1 has an invalid length. [ 485.085745][T19828] netlink: 'syz.2.3512': attribute type 1 has an invalid length. [ 485.321906][T18408] IPVS: stop unused estimator thread 0... [ 486.311665][T19851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3517'. [ 486.539446][T19859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3518'. [ 487.201603][T19875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3525'. [ 487.442134][T19873] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3523'. [ 487.701623][T19892] IPv6: NLM_F_CREATE should be specified when creating new route [ 487.722527][T19892] netlink: 'syz.4.3529': attribute type 6 has an invalid length. [ 487.953778][T19896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3530'. [ 488.097882][T19891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.351276][T19901] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3532'. [ 488.390529][T19901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3532'. [ 488.562242][T19904] sctp: [Deprecated]: syz.1.3533 (pid 19904) Use of int in maxseg socket option. [ 488.562242][T19904] Use struct sctp_assoc_value instead [ 488.863832][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3534'. [ 489.541641][T19935] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3541'. [ 489.969836][T19948] netlink: 'syz.2.3544': attribute type 23 has an invalid length. [ 490.627562][T19959] Cannot find add_set index 0 as target [ 490.722316][T19965] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3552'. [ 490.913237][T19961] syzkaller1: entered promiscuous mode [ 490.913261][T19961] syzkaller1: entered allmulticast mode [ 490.979799][T19959] tipc: Started in network mode [ 490.979829][T19959] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 491.045157][T19959] tipc: Enabled bearer , priority 0 [ 491.386745][T19978] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 491.419818][T19978] __nla_validate_parse: 1 callbacks suppressed [ 491.419840][T19978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3551'. [ 492.051586][T19995] Cannot find add_set index 4 as target [ 492.078949][T19995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3558'. [ 492.612114][T20014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3562'. [ 492.709116][T20017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3562'. [ 492.988156][T19995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.119678][T19995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.247603][ T30] tipc: Node number set to 43690 [ 494.322997][T20051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3570'. [ 494.323023][T20051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3570'. [ 495.004473][T20068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 495.070735][T20071] SET target dimension over the limit! [ 496.250681][T20099] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3582'. [ 496.460681][T20100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3583'. [ 496.495650][T20100] netlink: 'syz.1.3583': attribute type 10 has an invalid length. [ 496.662110][T20100] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.723236][T20107] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.3584'. [ 496.754333][T20100] bond0: (slave team0): Enslaving as an active interface with an up link [ 496.861888][T20107] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.3584'. [ 497.702282][T20129] netlink: 'syz.2.3589': attribute type 3 has an invalid length. [ 497.702303][T20129] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3589'. [ 497.823654][T20136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.930264][T20128] syzkaller0: entered promiscuous mode [ 497.930285][T20128] syzkaller0: entered allmulticast mode [ 497.960435][T20138] block nbd0: reconnected socket [ 498.027254][T20148] netlink: 'syz.2.3589': attribute type 3 has an invalid length. [ 498.027275][T20148] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3589'. [ 498.073377][ T5632] block nbd0: Receive control failed (result -32) [ 498.547551][T20150] syzkaller1: entered promiscuous mode [ 498.547577][T20150] syzkaller1: entered allmulticast mode [ 499.210957][T18404] dvmrp0: left allmulticast mode [ 499.279199][T20189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3600'. [ 499.311004][T20190] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 499.331679][T18403] IPVS: starting estimator thread 0... [ 499.430692][T20193] IPVS: using max 31 ests per chain, 74400 per kthread [ 499.604776][T20188] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2 [ 499.604813][T20188] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿ [ 499.839633][T18404] ip6gretap0 (unregistering): left promiscuous mode [ 500.058203][T18404] 0ªî{X¹¦ (unregistering): left promiscuous mode [ 500.093239][T18404] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 500.153164][T18404] bond9 (unregistering): (slave gretap0): Releasing active interface [ 500.312137][T18404] bond4 (unregistering): (slave geneve2): Releasing active interface [ 500.469770][T18404] bond0 (unregistering): Released all slaves [ 500.487329][T18404] bond1 (unregistering): Released all slaves [ 500.507545][T18404] bond2 (unregistering): Released all slaves [ 500.530456][T18404] bond3 (unregistering): Released all slaves [ 500.580834][T18404] bond4 (unregistering): Released all slaves [ 500.607700][T18404] bond5 (unregistering): (slave bond6): Releasing backup interface [ 500.608552][T18404] bond5 (unregistering): Released all slaves [ 500.647508][T18404] bond6 (unregistering): Released all slaves [ 500.677031][T18404] bond7 (unregistering): Released all slaves [ 500.701136][T18404] bond8 (unregistering): Released all slaves [ 500.730242][T18404] bond9 (unregistering): Released all slaves [ 500.756580][T18404] bond10 (unregistering): Released all slaves [ 500.776841][T18404] bond11 (unregistering): Released all slaves [ 500.809411][T18404] bond12 (unregistering): Released all slaves [ 500.829832][T18404] bond13 (unregistering): Released all slaves [ 501.171921][T20194] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.3600'. [ 501.171946][T20194] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.3600'. [ 501.173478][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3599'. [ 501.207244][T20199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.214783][T18404] tipc: Disabling bearer [ 501.291800][T18404] tipc: Disabling bearer [ 501.291916][T18404] tipc: Disabling bearer [ 501.344326][T18404] tipc: Left network mode [ 501.554937][T20205] netlink: 'syz.2.3603': attribute type 142 has an invalid length. [ 501.602949][T20212] sctp: [Deprecated]: syz.0.3606 (pid 20212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.602949][T20212] Use struct sctp_sack_info instead [ 501.667771][T20217] SET target dimension over the limit! [ 501.905036][T20223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3605'. [ 502.005016][T18404] IPVS: stopping master sync thread 10242 ... [ 502.127098][T20232] netlink: 'syz.1.3612': attribute type 5 has an invalid length. [ 502.637349][T20251] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3615'. [ 502.993768][T20258] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 503.096782][ T7024] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 503.100877][T20257] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3617'. [ 503.157609][T18404] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 503.322421][T20263] ipt_rpfilter: unknown options [ 503.635801][T20278] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3618'. [ 503.923391][T20288] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3624'. [ 506.611356][T18404] batman_adv: batadv0: Removing interface: syzkaller0 [ 507.157090][T20300] pimreg: entered allmulticast mode [ 507.229368][T20301] netlink: 'syz.0.3627': attribute type 10 has an invalid length. [ 507.324461][T20301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 507.328029][T20301] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 507.356627][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 507.495551][T20304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3626'. [ 507.645809][T20314] ip_tables: iptables: counters copy to user failed while replacing table [ 508.058595][T20325] netlink: Setting conntrack mark requires 'commit' flag. [ 508.058628][T20325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.811688][T20344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3640'. [ 509.200000][T20364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'. [ 509.218784][T20361] netlink: 12127 bytes leftover after parsing attributes in process `syz.1.3641'. [ 509.786640][T20372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3643'. [ 509.882263][T18404] hsr_slave_0: left promiscuous mode [ 509.883176][T18404] hsr_slave_1: left promiscuous mode [ 509.977905][T18404] veth1_vlan: left promiscuous mode [ 509.977983][T18404] veth0_vlan: left promiscuous mode [ 510.328146][T20383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3643'. [ 512.200848][T20368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3642'. [ 512.218955][T20369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3642'. [ 512.371464][T20372] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 512.383110][T20211] Set syz1 is full, maxelem 65536 reached [ 512.831262][T20407] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3648'. [ 512.897564][T20410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3648'. [ 513.083296][T20406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 513.136321][T20409] vxcan2: entered promiscuous mode [ 513.263034][T20407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 513.488052][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'. [ 513.514244][T20422] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3653'. [ 513.721425][T18404] IPVS: stop unused estimator thread 0... [ 513.732780][T20431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3656'. [ 513.762739][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3652'. [ 513.820465][T20431] ip6gre1: entered promiscuous mode [ 513.820487][T20431] ip6gre1: entered allmulticast mode [ 513.869049][T20432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3654'. [ 513.871326][T20431] netlink: 'syz.3.3656': attribute type 6 has an invalid length. [ 513.871344][T20431] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3656'. [ 514.098616][T20453] team0: Device veth1_macvtap failed to register rx_handler [ 514.229011][T20461] netlink: 'syz.1.3663': attribute type 16 has an invalid length. [ 514.229035][T20461] netlink: 'syz.1.3663': attribute type 17 has an invalid length. [ 514.347976][T20461] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 514.348361][T20461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.381343][T20461] vlan2: left promiscuous mode [ 514.381364][T20461] geneve1: left promiscuous mode [ 514.381578][T20461] vlan2: left allmulticast mode [ 514.381589][T20461] geneve1: left allmulticast mode [ 514.408877][T20461] h: left promiscuous mode [ 514.602452][T20474] syzkaller0: entered promiscuous mode [ 514.602473][T20474] syzkaller0: entered allmulticast mode [ 514.673659][T20474] sctp: [Deprecated]: syz.3.3669 (pid 20474) Use of int in max_burst socket option deprecated. [ 514.673659][T20474] Use struct sctp_assoc_value instead [ 514.797511][T20482] team0: Device gtp0 is up. Set it down before adding it as a team port [ 515.134287][ T7026] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.135572][ T7026] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.135612][ T7026] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.135645][ T7026] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.501169][T20516] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 515.501192][T20516] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 515.786761][T20536] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 515.790428][T20536] bond2 (unregistering): Released all slaves [ 515.828794][T20546] netlink: 'syz.1.3689': attribute type 5 has an invalid length. [ 516.164205][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 516.240785][T20572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.241179][T20572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.241536][T20572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.241906][T20572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.283807][T20572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.293828][T20572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.306177][T20572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.306545][T20572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.306911][T20572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.307298][T20572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.568730][T20583] geneve3: entered promiscuous mode [ 516.568752][T20583] geneve3: entered allmulticast mode [ 516.586674][T18403] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 516.586719][T18403] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 516.586750][T18403] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 516.586780][T18403] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 516.610909][T20582] macvlan0: entered promiscuous mode [ 516.915183][T20607] netlink: 'syz.1.3706': attribute type 27 has an invalid length. [ 517.831710][T20655] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:21 [ 517.950686][T20660] __nla_validate_parse: 21 callbacks suppressed [ 517.950705][T20660] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3724'. [ 517.976623][T20657] xt_IDLETIMER: timeout value is zero [ 518.247249][T20668] syzkaller0: entered promiscuous mode [ 518.247270][T20668] syzkaller0: entered allmulticast mode [ 518.281148][T20676] netlink: 'syz.2.3728': attribute type 2 has an invalid length. [ 518.340670][T20676] : entered promiscuous mode [ 518.562436][T20692] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3734'. [ 518.705306][T20694] netlink: 'syz.3.3738': attribute type 23 has an invalid length. [ 518.705328][T20694] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3738'. [ 518.851830][T20703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3735'. [ 518.930440][T20705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3735'. [ 519.026888][T20722] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3741'. [ 519.076087][T20726] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 521.681788][T20694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.913800][T20733] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3746'. [ 522.008349][T20739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3747'. [ 522.379334][T20763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 522.379351][T20763] IPv6: NLM_F_CREATE should be set when creating new route [ 522.455973][T20767] netlink: 'syz.1.3757': attribute type 11 has an invalid length. [ 522.455994][T20767] netlink: 3800 bytes leftover after parsing attributes in process `syz.1.3757'. [ 522.545349][T20765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3756'. [ 522.829445][T20789] netlink: 'syz.0.3765': attribute type 10 has an invalid length. [ 522.883084][T20789] geneve2: entered promiscuous mode [ 522.883106][T20789] geneve2: entered allmulticast mode [ 523.100204][T20809] __nla_validate_parse: 3 callbacks suppressed [ 523.100222][T20809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3770'. [ 523.180626][T20812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3771'. [ 523.181194][T20811] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3771'. [ 523.373495][T20825] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 523.502113][T20834] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 523.616915][T20839] net_ratelimit: 20 callbacks suppressed [ 523.616934][T20839] netlink: Invalid conntrack timeout [ 523.616957][T20839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.622215][T20839] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 523.667793][T20839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3781'. [ 523.916154][T20832] infiniband syz1: set active [ 523.916552][T20832] infiniband syz1: added team_slave_0 [ 523.929294][T20848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3786'. [ 523.952284][T20832] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 523.952319][T20832] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 523.952353][T20832] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 523.998697][T20742] Bluetooth: hci2: command 0x0406 tx timeout [ 524.047263][T20832] RDS/IB: syz1: added [ 524.048538][T20832] smc: adding ib device syz1 with port count 1 [ 524.048561][T20832] smc: ib device syz1 port 1 has no pnetid [ 524.443323][T18403] IPVS: starting estimator thread 0... [ 524.466180][T20863] netlink: 'syz.0.3791': attribute type 1 has an invalid length. [ 524.534144][T20864] IPVS: using max 33 ests per chain, 79200 per kthread [ 524.593011][T20863] bond2: entered promiscuous mode [ 524.593420][T20863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 524.613901][T20874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3791'. [ 524.647221][T20868] ipvlan4: entered allmulticast mode [ 524.647242][T20868] bond2: entered allmulticast mode [ 524.723919][T20863] bond2: (slave bridge1): making interface the new active one [ 524.726045][T20863] bridge1: entered promiscuous mode [ 524.726268][T20863] bridge1: entered allmulticast mode [ 524.748114][T20863] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 524.774634][T20880] netlink: 'syz.4.3795': attribute type 1 has an invalid length. [ 524.784298][T20881] netlink: 'syz.4.3795': attribute type 1 has an invalid length. [ 524.819838][T20880] bond1: entered promiscuous mode [ 524.820228][T20880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 524.827833][T20881] netlink: 'syz.4.3795': attribute type 2 has an invalid length. [ 524.878674][T20881] bond1: (slave bridge2): making interface the new active one [ 524.878696][T20881] bridge2: entered promiscuous mode [ 524.898557][T20881] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 525.025303][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3796'. [ 525.140647][T20884] netlink: 'syz.3.3796': attribute type 1 has an invalid length. [ 525.505175][T20902] Cannot find map_set index 135 as target [ 525.781736][T20914] syz_tun: entered allmulticast mode [ 526.384837][T20950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3812'. [ 526.433025][T20952] netlink: 'syz.4.3813': attribute type 1 has an invalid length. [ 526.557373][T20913] syz_tun: left allmulticast mode [ 527.127479][T21000] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3825'. [ 527.360017][T21006] openvswitch: netlink: Message has 8 unknown bytes. [ 527.362803][T21006] netlink: 'syz.1.3826': attribute type 21 has an invalid length. [ 527.362859][T21006] netlink: 'syz.1.3826': attribute type 6 has an invalid length. [ 527.362870][T21006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3826'. [ 527.707853][T21016] batadv_slave_0: entered promiscuous mode [ 527.707899][T21016] batadv_slave_0: entered allmulticast mode [ 529.890095][T20983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.348613][T21033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3834'. [ 531.007678][T21051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3843'. [ 531.047214][T21053] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 531.606037][ T5780] lo speed is unknown, defaulting to 1000 [ 531.949992][T21078] veth0: entered promiscuous mode [ 531.951018][T21078] veth0: left promiscuous mode [ 532.037012][T21080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3850'. [ 532.045756][T21077] x_tables: unsorted entry at hook 3 [ 532.339794][T21083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3851'. [ 532.340101][T21082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3851'. [ 532.428611][T21083] netlink: 'syz.0.3851': attribute type 10 has an invalid length. [ 532.562803][T21103] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3852'. [ 532.794232][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 533.087750][T21124] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 533.291990][T21135] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 533.352736][T21128] syzkaller1: entered promiscuous mode [ 533.352915][T21128] syzkaller1: entered allmulticast mode [ 533.503443][T21140] ip_tables: iptables: counters copy to user failed while replacing table [ 534.460103][T21166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3869'. [ 534.542923][T21169] team0 (unregistering): Port device team_slave_0 removed [ 534.698669][T21169] team0 (unregistering): Port device team_slave_1 removed [ 534.788012][T21180] tipc: Enabling of bearer rejected, failed to enable media [ 534.882125][ T25] syz1: Port: 1 Link DOWN [ 534.923528][T21189] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3875'. [ 535.006521][T21191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3874'. [ 535.165026][T21199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3877'. [ 535.424369][T21202] siw: device registration error -23 [ 535.583256][T21163] netlink: NAT attribute has 5 unknown bytes [ 535.583289][T21163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.583649][T21163] netlink: NAT attribute has 5 unknown bytes [ 535.583674][T21163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.592344][T21204] netlink: 'syz.4.3879': attribute type 1 has an invalid length. [ 535.592369][T21204] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3879'. [ 535.620939][T21166] veth1_macvtap: left promiscuous mode [ 535.648080][T21163] netlink: NAT attribute has 5 unknown bytes [ 535.648113][T21163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.649693][T21163] netlink: NAT attribute has 5 unknown bytes [ 535.929612][T21217] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3881'. [ 536.038843][T18403] IPVS: starting estimator thread 0... [ 536.124401][T21221] IPVS: using max 30 ests per chain, 72000 per kthread [ 536.195082][T21207] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 536.361113][T21227] netlink: 'syz.3.3888': attribute type 1 has an invalid length. [ 536.361136][T21227] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.3888'. [ 537.031500][T21246] bridge_slave_0: left allmulticast mode [ 537.031846][T21246] bridge_slave_0: left promiscuous mode [ 537.032715][T21246] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.285742][T21262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3896'. [ 538.223175][T21290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3905'. [ 538.301239][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3906'. [ 538.500778][ T5281] veth1_macvtap: entered promiscuous mode [ 538.647167][T21311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3910'. [ 538.961233][T21321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3912'. [ 539.123667][T21321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3912'. [ 539.747492][T21367] netlink: 'syz.0.3921': attribute type 2 has an invalid length. [ 539.873820][T21376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3923'. [ 539.960765][T21378] tc_dump_action: action bad kind [ 540.078855][T21382] netlink: 'syz.2.3922': attribute type 14 has an invalid length. [ 540.078875][T21382] netlink: 'syz.2.3922': attribute type 13 has an invalid length. [ 540.762516][T21347] __nla_validate_parse: 2 callbacks suppressed [ 540.762534][T21347] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3919'. [ 540.762549][T21347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3919'. [ 540.763342][T21347] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3919'. [ 540.763359][T21347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3919'. [ 540.764243][T21347] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3919'. [ 540.764260][T21347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3919'. [ 540.765062][T21347] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3919'. [ 540.765078][T21347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3919'. [ 540.765844][T21347] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3919'. [ 540.765859][T21347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3919'. [ 541.370285][T21432] netlink: 'syz.4.3931': attribute type 1 has an invalid length. [ 541.451810][T21431] bond4: entered promiscuous mode [ 541.451832][T21431] bond4: entered allmulticast mode [ 541.589609][T21439] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 541.838663][ T5632] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 542.253257][T21461] rdma_rxe: rxe_newlink: failed to add team0 [ 542.779590][T21480] net_ratelimit: 58 callbacks suppressed [ 542.779611][T21480] netlink: Conntrack attr has 1 unknown bytes [ 542.779638][T21480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.698352][T21520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.701715][T21520] v: renamed from veth0_vlan (while UP) [ 544.475557][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 544.977185][T21553] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 545.014920][T21553] bond2: left promiscuous mode [ 545.014942][T21553] bridge1: left promiscuous mode [ 545.643536][T21580] netlink: 'syz.0.3970': attribute type 21 has an invalid length. [ 545.707690][T21584] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.887718][T21584] __nla_validate_parse: 105 callbacks suppressed [ 545.887742][T21584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3972'. [ 545.887767][T21584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3972'. [ 546.088706][T21597] netlink: 'syz.2.3975': attribute type 23 has an invalid length. [ 546.437890][T21601] netlink: 'syz.4.3976': attribute type 2 has an invalid length. [ 546.513269][T21603] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 546.742579][T21610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3979'. [ 546.903852][T21610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 547.337649][T21634] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 547.876685][T21662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.097085][T21669] sctp: [Deprecated]: syz.2.3996 (pid 21669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.097085][T21669] Use struct sctp_sack_info instead [ 548.527863][T21687] netlink: 'syz.3.4002': attribute type 21 has an invalid length. [ 548.527943][T21687] netlink: 'syz.3.4002': attribute type 1 has an invalid length. [ 548.725295][T21691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.029813][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4006'. [ 549.321286][T21712] x_tables: duplicate underflow at hook 2 [ 549.334332][T21719] x_tables: duplicate underflow at hook 2 [ 549.548052][T21723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4011'. [ 549.826159][T21721] bond3: entered promiscuous mode [ 549.826350][T21721] bond3: entered allmulticast mode [ 549.829127][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4014'. [ 549.829149][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4014'. [ 549.889035][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4014'. [ 549.898176][T21740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4014'. [ 549.973048][T21741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4016'. [ 550.159416][T21747] syzkaller1: entered promiscuous mode [ 550.159437][T21747] syzkaller1: entered allmulticast mode [ 550.467598][T21759] pim6reg: entered allmulticast mode [ 550.924237][T21772] netlink: 'syz.3.4027': attribute type 49 has an invalid length. [ 551.617657][T21789] ip_tables: iptables: counters copy to user failed while replacing table [ 552.067543][T21798] sctp: [Deprecated]: syz.3.4033 (pid 21798) Use of int in maxseg socket option. [ 552.067543][T21798] Use struct sctp_assoc_value instead [ 552.395131][T21797] syzkaller0: entered promiscuous mode [ 552.395155][T21797] syzkaller0: entered allmulticast mode [ 552.497526][T21813] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4037'. [ 553.153696][T21830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4034'. [ 553.212525][T21827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4034'. [ 553.564816][T21832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.438629][T21850] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4043'. [ 557.582350][T21854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4044'. [ 557.582381][T21854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4044'. [ 557.691188][T21861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4046'. [ 557.847896][T21864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4048'. [ 557.886502][T21864] unsupported nlmsg_type 40 [ 558.100655][T21880] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4051'. [ 558.685823][T21902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.686659][T21902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4056'. [ 559.172967][T21920] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4059'. [ 559.509137][T21936] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4063'. [ 560.084764][T21953] netlink: 'syz.1.4067': attribute type 1 has an invalid length. [ 560.128092][T21953] bond2: option mode: invalid value (18) [ 560.143355][T21953] bond2 (unregistering): Released all slaves [ 560.152854][T21962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4070'. [ 560.342361][T21972] netlink: 'syz.1.4067': attribute type 10 has an invalid length. [ 560.342380][T21972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4067'. [ 560.635375][T21960] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 560.635400][T21960] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 560.956099][T21992] tipc: Enabling of bearer rejected, failed to enable media [ 561.153419][T21996] netlink: 'syz.2.4074': attribute type 1 has an invalid length. [ 561.307377][T21996] netlink: 'syz.2.4074': attribute type 1 has an invalid length. [ 561.368606][T21997] bond5: (slave geneve3): making interface the new active one [ 561.369054][T21997] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 561.696027][T21996] netlink: 'syz.2.4074': attribute type 1 has an invalid length. [ 561.700000][T21996] netlink: 'syz.2.4074': attribute type 1 has an invalid length. [ 561.701681][T21996] netlink: 'syz.2.4074': attribute type 1 has an invalid length. [ 561.714969][T21996] netlink: 'syz.2.4074': attribute type 1 has an invalid length. [ 561.751624][T21996] netlink: 'syz.2.4074': attribute type 1 has an invalid length. [ 561.751827][T21996] netlink: 'syz.2.4074': attribute type 1 has an invalid length. [ 561.816858][ T59] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 561.834606][ T7021] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 561.834644][ T7021] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 561.840398][ T7021] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 561.977162][T22017] block nbd0: NBD_DISCONNECT [ 561.977190][T22017] block nbd0: Send disconnect failed -32 [ 561.977211][T22017] block nbd0: shutting down sockets [ 562.038592][T22018] nftables ruleset with unbound set [ 562.320746][T22022] syz.1.4078 (22022) used obsolete PPPIOCDETACH ioctl [ 562.391237][T22031] ip_tables: iptables: counters copy to user failed while replacing table [ 562.822215][T22045] vcan0: entered allmulticast mode [ 563.217033][ T144] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.217109][T22061] veth1_to_bond: entered allmulticast mode [ 563.286188][T22056] veth1_to_bond: left allmulticast mode [ 563.704561][T22087] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 563.977482][T22092] veth0: entered promiscuous mode [ 564.017545][T22092] veth0: left promiscuous mode [ 564.121629][T22099] ip6t_srh: unknown srh invflags 4000 [ 564.283517][T22097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4103'. [ 564.409235][T22111] netlink: 'syz.4.4107': attribute type 11 has an invalid length. [ 564.667093][T22122] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4110'. [ 564.978605][T19451] hid-generic 0005:0C45:0009.0002: item fetching failed at offset 0/1 [ 564.979242][T19451] hid-generic 0005:0C45:0009.0002: probe with driver hid-generic failed with error -22 [ 565.072637][T22138] rdma_rxe: rxe_newlink: failed to add wg1 [ 565.115482][T22133] bond3: option mode: invalid value (10) [ 565.140319][T22140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.166506][T22133] bond3 (unregistering): Released all slaves [ 565.314962][T22144] validate_nla: 25 callbacks suppressed [ 565.315068][T22144] netlink: 'syz.1.4116': attribute type 1 has an invalid length. [ 565.343767][T22144] netlink: 'syz.1.4116': attribute type 1 has an invalid length. [ 565.528684][T22144] bond2: entered promiscuous mode [ 565.530487][T22144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.562791][T22146] IPv6: sit2: Disabled Multicast RS [ 565.648321][T22158] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4121'. [ 565.654365][T22147] ipvlan2: entered allmulticast mode [ 565.654384][T22147] bond2: entered allmulticast mode [ 565.656979][T22147] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 565.656999][T22147] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 565.657013][T22147] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 565.676071][T22147] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 565.861271][T22172] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 565.961958][T22176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4126'. [ 565.991155][T22152] ipvlan2: entered allmulticast mode [ 565.991578][T22152] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 565.991596][T22152] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 565.993168][T22152] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 566.050237][T22174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4126'. [ 566.065749][T22174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4126'. [ 566.067361][T22174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4126'. [ 566.067691][T22174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4126'. [ 566.068163][T22174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4126'. [ 566.070522][T22174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4126'. [ 566.070733][T22162] : renamed from bond0 (while UP) [ 566.074270][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 566.204808][T22180] tipc: Resetting bearer [ 566.399977][T22180] tipc: Disabling bearer [ 566.545627][T22190] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 567.682915][T22220] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 567.790047][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058341000: rx timeout, send abort [ 567.792122][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058341000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 569.399669][T22267] team0: Device xfrm0 is of different type [ 569.681111][T22278] __nla_validate_parse: 62 callbacks suppressed [ 569.681132][T22278] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4154'. [ 570.049420][T22290] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4157'. [ 570.101051][T22293] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4160'. [ 570.101146][T22293] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4160'. [ 570.144932][T22290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4157'. [ 570.577869][T22302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4161'. [ 570.726430][T22309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.823740][T22322] netlink: 'syz.4.4168': attribute type 13 has an invalid length. [ 570.975961][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4170'. [ 571.008666][T22332] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4169'. [ 571.008690][T22332] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4169'. [ 571.264919][T22335] netlink: 'syz.4.4171': attribute type 1 has an invalid length. [ 571.343225][T22335] bond4: entered promiscuous mode [ 571.343792][T22335] 8021q: adding VLAN 0 to HW filter on device bond4 [ 571.397012][T22346] netlink: 'syz.0.4173': attribute type 10 has an invalid length. [ 571.397035][T22346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4173'. [ 572.711461][T22390] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 572.760741][T22393] ip_tables: iptables: counters copy to user failed while replacing table [ 573.014684][T18411] IPVS: starting estimator thread 0... [ 573.105369][T22407] IPVS: using max 30 ests per chain, 72000 per kthread [ 574.576353][T22454] lo: left allmulticast mode [ 574.797216][T22468] netlink: 'syz.3.4211': attribute type 7 has an invalid length. [ 574.861742][T22470] __nla_validate_parse: 10 callbacks suppressed [ 574.861761][T22470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4212'. [ 574.937485][T22478] netlink: 'syz.2.4215': attribute type 24 has an invalid length. [ 575.049221][T22481] sctp: [Deprecated]: syz.4.4217 (pid 22481) Use of int in max_burst socket option. [ 575.049221][T22481] Use struct sctp_assoc_value instead [ 575.292979][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4212'. [ 575.508353][T22493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4220'. [ 575.667750][T22497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4221'. [ 576.180940][T22511] bond3: entered promiscuous mode [ 576.181686][T22511] bond3: entered allmulticast mode [ 576.577526][T22528] netlink: 'syz.2.4228': attribute type 1 has an invalid length. [ 576.577549][T22528] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4228'. [ 576.869366][T22536] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 577.106354][T22544] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 577.190555][T22548] netlink: 'syz.3.4234': attribute type 33 has an invalid length. [ 577.257219][T22533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.257255][T22533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.257281][T22533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 577.314174][T22539] : vlans aren't supported yet for dev_uc|mc_add() [ 577.620564][T22533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.620601][T22533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.620627][T22533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 577.647441][T22557] SET target dimension over the limit! [ 577.733203][T22563] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4238'. [ 577.734010][T22564] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4238'. [ 577.776467][T22548] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4234'. [ 578.083128][T22533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.083163][T22533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.083189][T22533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 578.228521][T22579] netlink: 'syz.0.4241': attribute type 21 has an invalid length. [ 578.287680][T22573] xt_NFQUEUE: number of total queues is 0 [ 578.308644][T22533] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.308679][T22533] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.308704][T22533] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 578.353396][T22579] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4241'. [ 578.371827][T22582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 578.566294][ T144] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.566326][ T144] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 578.566347][ T144] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 578.618581][T18409] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.618612][T18409] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 578.618630][T18409] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 578.618695][T18409] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.618718][T18409] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 578.618739][T18409] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 578.635180][T22588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4244'. [ 578.644324][ T144] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.644355][ T144] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 578.644377][ T144] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 578.970061][T22596] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 579.253435][T22604] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 579.261753][T22604] team0: Device ipvlan5 is already an upper device of the team interface [ 580.530824][T22638] ip_tables: iptables: counters copy to user failed while replacing table [ 580.707016][T22563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 581.062794][T22647] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4258'. [ 581.083770][T22647] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4258'. [ 581.353142][T22662] nbd4: detected capacity change from 0 to 63 [ 581.353531][T22663] block nbd4: NBD_DISCONNECT [ 581.382422][T22663] block nbd4: Disconnected due to user request. [ 581.391295][T22663] block nbd4: shutting down sockets [ 581.498734][ C1] blk_print_req_error: 42 callbacks suppressed [ 581.498756][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.498865][ C1] buffer_io_error: 138 callbacks suppressed [ 581.498963][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 581.557223][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 581.557305][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 581.557352][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 581.557389][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 581.557751][T22666] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 581.557778][T22666] Buffer I/O error on dev nbd4, logical block 0, async page read [ 581.557791][T22666] Buffer I/O error on dev nbd4, logical block 1, async page read [ 581.557805][T22666] Buffer I/O error on dev nbd4, logical block 2, async page read [ 581.557817][T22666] Buffer I/O error on dev nbd4, logical block 3, async page read [ 581.557964][T22666] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 581.557985][T22666] Buffer I/O error on dev nbd4, logical block 0, async page read [ 581.557998][T22666] Buffer I/O error on dev nbd4, logical block 1, async page read [ 581.558165][T22666] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 581.558320][T22666] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 581.558464][T22666] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.558574][T22666] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.558668][T22666] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.558766][T22666] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 581.559503][T21835] ldm_validate_partition_table(): Disk read failed. [ 581.562453][T21835] Dev nbd4: unable to read RDB block 0 [ 581.563791][T21835] nbd4: unable to read partition table [ 581.787600][T21835] ldm_validate_partition_table(): Disk read failed. [ 581.791122][T21835] Dev nbd4: unable to read RDB block 0 [ 581.797498][T21835] nbd4: unable to read partition table [ 582.055333][T22689] netlink: 'syz.4.4271': attribute type 1 has an invalid length. [ 582.055353][T22689] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4271'. [ 582.055368][T22689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4271'. [ 582.281841][T22699] syzkaller1: entered promiscuous mode [ 582.281864][T22699] syzkaller1: entered allmulticast mode [ 582.310169][T22684] syzkaller1: entered promiscuous mode [ 582.310375][T22684] syzkaller1: entered allmulticast mode [ 582.952999][T22718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4277'. [ 583.001179][T22718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4277'. [ 583.001214][T22718] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4277'. [ 583.306054][T22731] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.306180][T22731] bridge0: port 2(bridge_slave_1) entered listening state [ 583.439383][T22731] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4282'. [ 583.439442][T22731] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4282'. [ 583.630084][T22750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4289'. [ 583.768966][T22757] netlink: 'syz.1.4290': attribute type 1 has an invalid length. [ 583.804265][T22757] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.319486][T22757] bond4: (slave geneve4): making interface the new active one [ 584.352159][T22757] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 584.569328][T22757] syz.1.4290 (22757) used greatest stack depth: 18752 bytes left [ 584.930490][T22797] netlink: 'syz.1.4300': attribute type 4 has an invalid length. [ 584.945869][T22798] netlink: 'syz.1.4300': attribute type 4 has an invalid length. [ 585.021583][T22797] netlink: Setting conntrack mark requires 'commit' flag. [ 585.021613][T22797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.334704][T22806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 585.340574][T22806] Cannot find del_set index 3 as target [ 585.359125][T20742] Bluetooth: hci5: command 0x0406 tx timeout [ 585.368999][T22727] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 585.369023][T22727] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 586.171971][T22727] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 586.171999][T22727] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 586.224665][T22727] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 586.224688][T22727] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 586.303406][T22727] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 586.303430][T22727] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 586.843936][T22833] netlink: 'syz.4.4309': attribute type 1 has an invalid length. [ 586.937793][T22840] __nla_validate_parse: 5 callbacks suppressed [ 586.937813][T22840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4310'. [ 586.955538][T22840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.956787][T22840] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4310'. [ 587.064728][T22842] veth7: entered allmulticast mode [ 587.068987][T22842] bond6: (slave veth7): Enslaving as an active interface with a down link [ 587.102754][T22850] bond6: (slave veth0_to_bond): making interface the new active one [ 587.140860][T22850] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 587.172825][T22852] netlink: 'syz.3.4311': attribute type 1 has an invalid length. [ 587.172844][T22852] netlink: 'syz.3.4311': attribute type 2 has an invalid length. [ 587.173018][T22853] netlink: 'syz.3.4311': attribute type 1 has an invalid length. [ 587.173031][T22853] netlink: 'syz.3.4311': attribute type 2 has an invalid length. [ 587.272410][T22855] bond0: entered promiscuous mode [ 587.272434][T22855] bond_slave_0: entered promiscuous mode [ 587.272706][T22855] bond_slave_1: entered promiscuous mode [ 587.272885][T22855] team0: entered promiscuous mode [ 587.272898][T22855] team_slave_0: entered promiscuous mode [ 587.273117][T22855] team_slave_1: entered promiscuous mode [ 587.336863][T22855] batadv0: entered promiscuous mode [ 587.340312][T22855] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 587.374029][T22855] bond0: left promiscuous mode [ 587.374052][T22855] bond_slave_0: left promiscuous mode [ 587.374299][T22855] bond_slave_1: left promiscuous mode [ 587.374475][T22855] team0: left promiscuous mode [ 587.374488][T22855] team_slave_0: left promiscuous mode [ 587.374687][T22855] team_slave_1: left promiscuous mode [ 587.380720][T22858] netlink: 'syz.0.4312': attribute type 1 has an invalid length. [ 587.383699][T22855] batadv0: left promiscuous mode [ 587.463530][T22857] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4312'. [ 587.463555][T22857] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4312'. [ 587.681401][T22862] bond3: (slave gretap1): making interface the new active one [ 587.695553][T22862] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 588.146888][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4318'. [ 588.203372][T22883] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.204025][T22883] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.254028][T22891] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4320'. [ 588.288770][T22881] tc action pedit offset 132 out of bounds [ 588.316645][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4315'. [ 588.331569][T22890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4319'. [ 588.336741][T22894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4321'. [ 588.339531][T22883] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4317'. [ 588.343142][T22890] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 588.344780][T20742] block nbd0: Receive control failed (result -32) [ 588.384572][T22899] IPVS: set_ctl: invalid protocol: 1 172.20.20.28:20000 [ 588.646955][T22909] netlink: Conntrack attr has 8 unknown bytes [ 588.646995][T22909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.790642][T22918] netlink: 'syz.4.4324': attribute type 1 has an invalid length. [ 589.061851][T22918] bond7: entered promiscuous mode [ 589.062308][T22918] 8021q: adding VLAN 0 to HW filter on device bond7 [ 589.203075][T22911] 8021q: adding VLAN 0 to HW filter on device bond7 [ 589.204472][T22911] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 589.204494][T22911] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 589.237130][T22911] bond7: (slave ip6gre1): making interface the new active one [ 589.237153][T22911] ip6gre1: entered promiscuous mode [ 589.254280][T22911] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 589.373636][T22920] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 589.402156][T22920] bond5 (unregistering): Released all slaves [ 589.553186][T22935] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 589.553212][T22935] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 590.204841][T22966] tipc: Enabling of bearer rejected, failed to enable media [ 590.998860][T22996] netlink: 'syz.1.4344': attribute type 11 has an invalid length. [ 591.310999][T23008] netlink: 'syz.2.4349': attribute type 10 has an invalid length. [ 591.447784][T23009] netlink: 'syz.2.4349': attribute type 10 has an invalid length. [ 592.454559][T23049] __nla_validate_parse: 11 callbacks suppressed [ 592.454579][T23049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4360'. [ 592.743397][T23055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4363'. [ 592.743427][T23055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4363'. [ 592.965914][T23062] sock: sock_timestamping_bind_phc: sock not bind to device [ 593.225437][T23069] bridge_slave_1: left allmulticast mode [ 593.225462][T23069] bridge_slave_1: left promiscuous mode [ 593.225657][T23069] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.291573][T23069] bond6: (slave veth0_to_bond): Releasing active interface [ 593.320541][T23069] : (slave bond_slave_0): Releasing backup interface [ 593.355929][T23069] : (slave bond_slave_1): Releasing backup interface [ 593.407576][T23069] team0: Port device team_slave_0 removed [ 593.465590][T23069] team0: Port device team_slave_1 removed [ 593.466444][T23069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.466461][T23069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.489034][T23069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 593.605032][T23070] team0: Port device xfrm0 added [ 594.176479][T23096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4374'. [ 594.290802][T23108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4376'. [ 594.290862][T23108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4376'. [ 594.331309][T23096] team0 (unregistering): Port device team_slave_0 removed [ 594.363342][T23096] team0 (unregistering): Port device team_slave_1 removed [ 594.518314][T23095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.147638][T23129] netlink: 'syz.0.4382': attribute type 1 has an invalid length. [ 595.889130][T23152] Unsupported ieee802154 address type: 0 [ 595.899000][T23157] netlink: 'syz.2.4390': attribute type 1 has an invalid length. [ 595.901765][T23152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4387'. [ 596.136232][T23162] bond0: invalid NS target ff00:: specified for addition [ 596.136263][T23162] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 597.110262][T23193] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 597.410859][T23201] bond6: invalid ARP target 0.0.0.0 specified for addition [ 597.410886][T23201] bond6: option arp_ip_target: invalid value (0) [ 597.439683][T23201] bond6 (unregistering): Released all slaves [ 597.911215][T23228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4411'. [ 597.911251][T23228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4411'. [ 598.001811][T23229] xt_hashlimit: size too large, truncated to 1048576 [ 598.146285][T23240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4416'. [ 598.224501][T23240] team0 (unregistering): Port device xfrm0 removed [ 598.521122][T23248] netlink: 'syz.2.4419': attribute type 3 has an invalid length. [ 598.810188][T23258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.095263][T23272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4428'. [ 599.170639][T23273] sctp: [Deprecated]: syz.3.4427 (pid 23273) Use of int in max_burst socket option deprecated. [ 599.170639][T23273] Use struct sctp_assoc_value instead [ 599.239246][T23279] netlink: 'syz.1.4425': attribute type 1 has an invalid length. [ 599.239268][T23279] netlink: 'syz.1.4425': attribute type 268 has an invalid length. [ 599.239281][T23279] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4425'. [ 599.588112][T23291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4431'. [ 599.794305][T23300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4432'. [ 600.099442][T23308] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4435'. [ 600.101952][T23308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4435'. [ 600.188249][T23311] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 600.202298][T23311] batman_adv: batadv0: Adding interface: gretap2 [ 600.202315][T23311] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.202341][T23311] batman_adv: batadv0: Interface activated: gretap2 [ 600.603227][T23330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4440'. [ 600.756205][T23333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.804363][T23390] netlink: 'syz.0.4454': attribute type 21 has an invalid length. [ 601.878806][T23388] netlink: NAT attribute has 4 unknown bytes [ 601.878838][T23388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.995975][T23369] xt_hashlimit: size too large, truncated to 1048576 [ 602.079374][T23375] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.199831][T23375] bridge_slave_0 (unregistering): left allmulticast mode [ 602.199857][T23375] bridge_slave_0 (unregistering): left promiscuous mode [ 602.199928][T23375] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.460774][T23405] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 602.460799][T23405] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 602.508726][T23409] netlink: 'syz.4.4458': attribute type 4 has an invalid length. [ 602.536365][T23409] netlink: 'syz.4.4458': attribute type 4 has an invalid length. [ 603.058111][T23427] netlink: 'syz.1.4465': attribute type 4 has an invalid length. [ 603.147488][T23427] netlink: 'syz.1.4465': attribute type 4 has an invalid length. [ 603.518536][T23442] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 603.530416][T23442] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 603.857658][T23457] __nla_validate_parse: 3 callbacks suppressed [ 603.857679][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4474'. [ 603.861083][T23457] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4474'. [ 604.125502][T23461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4476'. [ 604.125523][T23461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4476'. [ 604.133571][T23461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4476'. [ 604.133592][T23461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4476'. [ 604.150566][T23461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4476'. [ 604.150585][T23461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4476'. [ 604.176017][T23461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4476'. [ 604.176037][T23461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4476'. [ 604.218297][T23470] netlink: 'syz.0.4479': attribute type 21 has an invalid length. [ 604.218321][T23470] IPv6: NLM_F_CREATE should be specified when creating new route [ 604.272723][T23472] xt_TPROXY: Can be used only with -p tcp or -p udp [ 605.133494][T23491] netlink: 'syz.3.4482': attribute type 17 has an invalid length. [ 605.191704][T23491] gretap0: entered promiscuous mode [ 605.212842][T23491] gretap0: left promiscuous mode [ 605.251543][T23495] netlink: 'syz.0.4484': attribute type 1 has an invalid length. [ 605.452850][T23499] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 605.656934][T23509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.662720][T23509] netlink: 'syz.3.4488': attribute type 1 has an invalid length. [ 605.663332][T23504] bond4: option fail_over_mac: invalid value (16) [ 605.682899][T23504] bond4 (unregistering): Released all slaves [ 606.487930][T23541] netlink: 'syz.0.4497': attribute type 27 has an invalid length. [ 607.073419][T23550] netlink: 'syz.1.4500': attribute type 1 has an invalid length. [ 607.468571][T23550] block nbd296: server does not support multiple connections per device. [ 607.520995][T23550] block nbd296: shutting down sockets [ 608.417529][T23607] sctp: [Deprecated]: syz.2.4514 (pid 23607) Use of int in maxseg socket option. [ 608.417529][T23607] Use struct sctp_assoc_value instead [ 608.610343][T23613] netlink: 'syz.3.4515': attribute type 1 has an invalid length. [ 608.666241][T23615] netlink: 'syz.1.4516': attribute type 1 has an invalid length. [ 608.810770][T23613] bond2: entered promiscuous mode [ 608.826850][T23613] 8021q: adding VLAN 0 to HW filter on device bond2 [ 608.941716][T23615] 8021q: adding VLAN 0 to HW filter on device bond5 [ 609.133914][T23621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.153752][T23621] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 609.153776][T23621] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 609.249590][T23621] bond2: (slave wireguard0): making interface the new active one [ 609.249614][T23621] wireguard0: entered promiscuous mode [ 609.251392][T23621] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 609.253570][T23624] __nla_validate_parse: 132 callbacks suppressed [ 609.253586][T23624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4516'. [ 609.253601][T23624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4516'. [ 609.346976][T23635] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 609.352856][T23635] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 609.562046][T23647] bond4: option mode: invalid value (10) [ 609.578477][T23647] bond4 (unregistering): Released all slaves [ 609.704806][T23657] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4522'. [ 609.822964][T23657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4522'. [ 609.919306][T23665] IPVS: ip_vs_edit_dest(): server weight less than zero [ 609.960110][T23657] netlink: 'syz.2.4522': attribute type 1 has an invalid length. [ 610.286123][T23675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.330820][T23676] xt_TPROXY: Can be used only with -p tcp or -p udp [ 610.376279][T23675] netlink: 'syz.3.4530': attribute type 3 has an invalid length. [ 610.428984][T23680] xt_limit: Overflow, try lower: 536871034/0 [ 610.430201][T23680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4531'. [ 610.430220][T23680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4531'. [ 610.458233][T23682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4532'. [ 610.562017][T23682] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 610.823539][T23691] netlink: 'syz.2.4535': attribute type 3 has an invalid length. [ 610.846505][T23696] netlink: 'syz.2.4535': attribute type 3 has an invalid length. [ 610.946324][T23695] : renamed from bond0 (while UP) [ 611.028925][T23687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4533'. [ 614.146471][T23723] netlink: 'syz.1.4543': attribute type 1 has an invalid length. [ 614.251178][T23726] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4544'. [ 614.482771][T23742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4551'. [ 614.513042][T23742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4551'. [ 614.523507][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4549'. [ 614.523532][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4549'. [ 614.523595][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4549'. [ 614.609155][T23745] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4552'. [ 614.649857][T23749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4553'. [ 614.799882][T23739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4549'. [ 615.012514][T23764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4555'. [ 615.125788][T23772] netlink: 'syz.4.4558': attribute type 1 has an invalid length. [ 615.150013][T23776] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.4560'. [ 615.150036][T23776] netlink: 'syz.3.4560': attribute type 1 has an invalid length. [ 615.310099][T23779] bond8: (slave geneve2): making interface the new active one [ 615.311008][T23779] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 615.377162][T23781] 8021q: adding VLAN 0 to HW filter on device bond8 [ 615.404470][T18403] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 615.404872][T18403] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 615.404907][T18403] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 615.932554][T23797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.208042][T23805] syzkaller0: entered promiscuous mode [ 616.208091][T23805] syzkaller0: entered allmulticast mode [ 616.703901][T23814] bond0: entered promiscuous mode [ 616.772535][T23817] macvlan2: entered promiscuous mode [ 616.772559][T23817] macvlan2: entered allmulticast mode [ 616.789870][T23817] bond0: (slave macvlan2): Opening slave failed [ 617.150851][T23831] bond4: invalid ARP target 0.0.0.0 specified for addition [ 617.150882][T23831] bond4: option arp_ip_target: invalid value (0) [ 617.173777][T23831] bond4 (unregistering): Released all slaves [ 617.381970][T23839] bond4: invalid ARP target 0.0.0.0 specified for addition [ 617.381995][T23839] bond4: option arp_ip_target: invalid value (0) [ 617.410243][T23839] bond4 (unregistering): Released all slaves [ 617.412892][T23860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 618.381530][T23884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.381666][T23886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 618.707739][T23902] bond4: option xmit_hash_policy: invalid value (64) [ 618.709702][T23902] bond4 (unregistering): Released all slaves [ 619.499089][T23931] netlink: 'syz.3.4601': attribute type 1 has an invalid length. [ 619.499110][T23931] __nla_validate_parse: 6 callbacks suppressed [ 619.499120][T23931] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.4601'. [ 619.499134][T23931] netlink: 'syz.3.4601': attribute type 1 has an invalid length. [ 619.499146][T23931] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.4601'. [ 619.633345][T23941] netlink: 'syz.1.4603': attribute type 142 has an invalid length. [ 619.750455][T23947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4604'. [ 619.797900][T23944] bond9: option downdelay: invalid value (18446744073709551615) [ 619.797925][T23944] bond9: option downdelay: allowed values 0 - 2147483647 [ 619.807786][T23944] bond9 (unregistering): Released all slaves [ 620.306160][T23959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4608'. [ 620.313732][T23959] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.412702][T23959] bridge_slave_1 (unregistering): left allmulticast mode [ 620.412730][T23959] bridge_slave_1 (unregistering): left promiscuous mode [ 620.412804][T23959] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.463200][T23966] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4612'. [ 621.152834][T23993] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 621.499005][T24007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4618'. [ 621.901700][T24023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4623'. [ 621.901874][T24023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4623'. [ 621.902041][T24023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4623'. [ 621.902228][T24023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4623'. [ 622.230264][T24029] ip_tables: iptables: counters copy to user failed while replacing table [ 622.558163][T24045] netlink: 'syz.0.4630': attribute type 15 has an invalid length. [ 622.603616][T24048] netlink: 'syz.4.4631': attribute type 11 has an invalid length. [ 622.618255][T24047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.058543][T24071] netlink: 'syz.3.4637': attribute type 1 has an invalid length. [ 623.161144][T24071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 623.376959][T24083] gretap0: entered promiscuous mode [ 623.447517][T24083] 0ªî{X¹¦: renamed from gretap0 [ 623.475548][T24083] 0ªî{X¹¦: left promiscuous mode [ 623.475569][T24083] 0ªî{X¹¦: entered allmulticast mode [ 623.509943][T24083] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 623.548154][T24100] 0ªî{X¹¦: entered promiscuous mode [ 623.548336][T24100] 0ªî{X¹¦: left allmulticast mode [ 623.657364][T24094] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 623.698448][T24094] 1ªî{X¹¦: left promiscuous mode [ 623.698469][T24094] 1ªî{X¹¦: entered allmulticast mode [ 623.711246][T24094] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 623.998245][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.475158][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.696205][T24146] netlink: 'syz.0.4651': attribute type 64 has an invalid length. [ 624.726612][T19450] lo speed is unknown, defaulting to 1000 [ 624.726636][T19450] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 625.002605][T24156] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 625.160138][T24150] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 625.167116][T24150] batman_adv: batadv0: Adding interface: gretap1 [ 625.167131][T24150] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.167156][T24150] batman_adv: batadv0: Interface activated: gretap1 [ 625.167511][T24163] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20002 [ 625.169965][T24158] __nla_validate_parse: 69 callbacks suppressed [ 625.169981][T24158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4655'. [ 625.218706][T24158] syzkaller0: entered promiscuous mode [ 625.218732][T24158] syzkaller0: entered allmulticast mode [ 625.251913][T24158] tipc: Enabled bearer , priority 0 [ 625.263167][T24157] tipc: Resetting bearer [ 625.392189][T24157] tipc: Disabling bearer [ 625.505383][T24171] xt_CT: You must specify a L4 protocol and not use inversions on it [ 625.666837][T24174] batman_adv: batadv0: Adding interface: syzkaller0 [ 625.666855][T24174] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.666878][T24174] batman_adv: batadv0: Interface activated: syzkaller0 [ 625.856798][T24180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4661'. [ 626.105463][T24187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4663'. [ 626.186623][T24188] netlink: 'syz.0.4664': attribute type 3 has an invalid length. [ 626.186643][T24188] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4664'. [ 626.246317][T24194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4665'. [ 626.246965][T24189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4664'. [ 626.447177][T24172] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 626.600516][T24172] batman_adv: batadv0: Removing interface: syzkaller0 [ 626.840519][T24207] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4670'. [ 627.229928][T24226] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 627.766187][T24241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4681'. [ 628.127841][T24254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4683'. [ 628.625743][T24265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4688'. [ 628.625777][T24265] netlink: 'syz.0.4688': attribute type 30 has an invalid length. [ 628.906258][T24276] netlink: 'syz.1.4690': attribute type 2 has an invalid length. [ 628.946961][T24282] netlink: 'syz.1.4690': attribute type 2 has an invalid length. [ 629.062129][T24288] netlink: 'syz.4.4693': attribute type 6 has an invalid length. [ 629.353049][T24304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.761282][T24315] bond9: Removing last ns target with arp_interval on [ 630.180357][T24329] netlink: 'syz.1.4706': attribute type 1 has an invalid length. [ 630.398149][T24329] 8021q: adding VLAN 0 to HW filter on device bond7 [ 633.953916][T24355] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 634.450914][T24384] __nla_validate_parse: 6 callbacks suppressed [ 634.450934][T24384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4717'. [ 634.452306][T24381] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4715'. [ 634.556303][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 634.631884][T24388] : renamed from bond0 (while UP) [ 635.065805][T24408] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 635.121097][T24411] ip6t_hbh: unknown flags 38 [ 635.129205][T24412] netlink: 'syz.2.4725': attribute type 1 has an invalid length. [ 635.332411][T24415] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4727'. [ 635.368795][T24415] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4727'. [ 635.480177][T24423] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 635.510684][T24423] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4730'. [ 635.632707][T24426] netlink: 'syz.2.4732': attribute type 26 has an invalid length. [ 635.632728][T24426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4732'. [ 635.633983][T24424] netlink: 'syz.0.4731': attribute type 12 has an invalid length. [ 635.634000][T24424] netlink: 'syz.0.4731': attribute type 29 has an invalid length. [ 635.634012][T24424] netlink: 'syz.0.4731': attribute type 2 has an invalid length. [ 635.634023][T24424] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4731'. [ 635.692862][T24426] netlink: 'syz.2.4732': attribute type 26 has an invalid length. [ 635.692882][T24426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4732'. [ 635.818168][T24432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4736'. [ 635.971163][T24432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4736'. [ 636.766299][T24478] netlink: 'syz.2.4747': attribute type 2 has an invalid length. [ 636.959827][T24477] bond4: Unable to set up delay as MII monitoring is disabled [ 636.989408][T24477] bond4 (unregistering): Released all slaves [ 637.097888][T24479] bridge0: entered promiscuous mode [ 637.098155][T24479] bridge0: entered allmulticast mode [ 637.272984][T24490] bond10: Unable to set up delay as MII monitoring is disabled [ 637.457342][T24490] bond10 (unregistering): Released all slaves [ 638.077204][T24519] syzkaller1: entered promiscuous mode [ 638.077226][T24519] syzkaller1: entered allmulticast mode [ 638.141963][T24519] bond0: option miimon: invalid value (18446744071829782528) [ 638.141989][T24519] bond0: option miimon: allowed values 0 - 2147483647 [ 638.143672][T24523] netlink: 'syz.3.4758': attribute type 1 has an invalid length. [ 638.143689][T24523] netlink: 'syz.3.4758': attribute type 2 has an invalid length. [ 638.143699][T24523] netlink: 'syz.3.4758': attribute type 3 has an invalid length. [ 638.149296][T24521] syzkaller0: entered promiscuous mode [ 638.149471][T24521] syzkaller0: entered allmulticast mode [ 638.175171][ T7015] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.175309][ T7015] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.175420][ T7015] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.175537][ T7015] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.225496][T24558] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 639.849840][T24583] netlink: 'syz.0.4771': attribute type 21 has an invalid length. [ 639.849864][T24583] IPv6: NLM_F_CREATE should be specified when creating new route [ 640.489167][T24581] ip_tables: iptables: counters copy to user failed while replacing table [ 641.199095][T24618] openvswitch: netlink: IP tunnel dst address not specified [ 641.200066][T24618] openvswitch: netlink: IP tunnel dst address not specified [ 641.200962][T24618] openvswitch: netlink: IP tunnel dst address not specified [ 641.201868][T24618] openvswitch: netlink: IP tunnel dst address not specified [ 641.206973][T24618] openvswitch: netlink: IP tunnel dst address not specified [ 641.207883][T24618] openvswitch: netlink: IP tunnel dst address not specified [ 641.208725][T24618] openvswitch: netlink: IP tunnel dst address not specified [ 641.209602][T24618] openvswitch: netlink: IP tunnel dst address not specified [ 644.185743][T24625] __nla_validate_parse: 6 callbacks suppressed [ 644.185762][T24625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4774'. [ 644.211150][T24635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4776'. [ 644.637179][T24649] IPVS: set_ctl: invalid protocol: 1 172.20.20.22:20001 [ 644.818422][T24656] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4785'. [ 644.973267][T24662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4784'. [ 645.062223][T24663] ip6erspan0: entered allmulticast mode [ 645.790023][T24686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4794'. [ 645.803657][T24691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4794'. [ 646.678678][T24693] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 646.678902][T24693] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 646.830048][T24725] validate_nla: 2 callbacks suppressed [ 646.830094][T24725] netlink: 'syz.1.4799': attribute type 2 has an invalid length. [ 646.869966][T24727] net_ratelimit: 57 callbacks suppressed [ 646.869986][T24727] openvswitch: netlink: IPv6 tunnel dst address is zero [ 646.873909][T24710] syzkaller0: entered promiscuous mode [ 646.873932][T24710] syzkaller0: entered allmulticast mode [ 646.887110][T24727] Cannot find map_set index 135 as target [ 647.999838][T24749] netlink: 'syz.4.4805': attribute type 4 has an invalid length. [ 650.871142][T24762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4806'. [ 650.963355][T24764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.623444][T24807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4818'. [ 651.662468][T24786] bond4 (unregistering): Released all slaves [ 651.710752][T24808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4816'. [ 651.713803][T24808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4816'. [ 651.763424][T24789] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4812'. [ 652.054810][T24816] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 652.216621][T24822] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4823'. [ 652.292710][T24817] netlink: 'syz.1.4822': attribute type 1 has an invalid length. [ 652.292737][T24817] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4822'. [ 652.292750][T24817] netlink: 'syz.1.4822': attribute type 1 has an invalid length. [ 652.411859][T24829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4824'. [ 652.411892][T24829] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 652.505473][T24824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4825'. [ 652.578565][T24837] gre1: entered promiscuous mode [ 652.578588][T24837] gre1: entered allmulticast mode [ 652.620775][T24835] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4826'. [ 652.831898][T24847] ip_tables: iptables: counters copy to user failed while replacing table [ 652.833352][T24847] netlink: 'syz.4.4829': attribute type 10 has an invalid length. [ 653.263317][T24866] netlink: 'syz.2.4835': attribute type 75 has an invalid length. [ 653.532534][T24876] gretap3: entered promiscuous mode [ 653.594600][T24884] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 653.697454][T24882] macvtap0: entered promiscuous mode [ 653.697478][T24882] vlan0: entered promiscuous mode [ 653.698024][T24882] macvtap0: entered allmulticast mode [ 653.698040][T24882] vlan0: entered allmulticast mode [ 653.698051][T24882] veth0_vlan: entered allmulticast mode [ 654.820128][T24922] ip_tables: iptables: counters copy to user failed while replacing table [ 654.880338][T24926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 655.777966][T24961] batman_adv: batadv0: Adding interface: syzkaller0 [ 655.777985][T24961] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.778013][T24961] batman_adv: batadv0: Interface activated: syzkaller0 [ 655.910459][T24960] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 655.940004][T24971] __nla_validate_parse: 11 callbacks suppressed [ 655.940023][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4864'. [ 655.965876][T24960] batman_adv: batadv0: Removing interface: syzkaller0 [ 656.260346][T24985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4866'. [ 656.260379][T24985] netlink: 'syz.3.4866': attribute type 5 has an invalid length. [ 656.260393][T24985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4866'. [ 656.461568][T24993] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 656.461594][T24993] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 656.488909][T24992] ip_tables: iptables: counters copy to user failed while replacing table [ 656.862100][T25005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4873'. [ 656.998318][T25010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4873'. [ 656.998341][T25010] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4873'. [ 656.998386][T25010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 657.729124][T25032] netlink: 'syz.3.4879': attribute type 5 has an invalid length. [ 658.366351][T25065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4891'. [ 659.043882][T25090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4896'. [ 659.597142][T25104] netlink: Failed to add %pB helper -22 [ 659.597193][T25104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.742677][T25110] ip6tnl2: entered promiscuous mode [ 659.742700][T25110] ip6tnl2: entered allmulticast mode [ 659.778372][T25115] batadv0: entered promiscuous mode [ 659.778509][T25115] macsec0: entered promiscuous mode [ 659.781858][T25115] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 659.789563][T25115] batadv0: left promiscuous mode [ 660.039307][T25120] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4907'. [ 660.172766][T25126] sock: sock_set_timeout: `syz.4.4909' (pid 25126) tries to set negative timeout [ 660.678025][T25151] netlink: NAT attribute has 1 unknown bytes [ 660.678058][T25151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.720117][T25154] netlink: NAT attribute has 1 unknown bytes [ 660.720150][T25154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.348614][T25191] netlink: 'syz.1.4926': attribute type 2 has an invalid length. [ 661.358864][T25191] __nla_validate_parse: 1 callbacks suppressed [ 661.358883][T25191] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4926'. [ 661.388584][T25181] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 661.388979][T25181] gretap3: entered promiscuous mode [ 661.388993][T25181] gretap3: entered allmulticast mode [ 661.578434][T25191] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4926'. [ 661.598192][T25202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4927'. [ 661.621051][T25202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4927'. [ 661.805376][T25206] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4929'. [ 662.202318][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4932'. [ 662.285056][T25219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4932'. [ 662.595333][T25233] pimreg: left allmulticast mode [ 662.722920][T25241] syzkaller1: entered promiscuous mode [ 662.722943][T25241] syzkaller1: entered allmulticast mode [ 662.736642][T25238] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 662.736662][T25238] syzkaller1: Linktype set failed because interface is up [ 662.982328][T25246] netlink: 'syz.3.4941': attribute type 34 has an invalid length. [ 662.982351][T25246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4941'. [ 663.087824][T25253] netlink: 'syz.3.4941': attribute type 1 has an invalid length. [ 663.087846][T25253] nbd: error processing sock list [ 663.128439][T25256] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4943'. [ 663.142710][T25254] netlink: 'syz.0.4942': attribute type 4 has an invalid length. [ 663.191140][T25258] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4944'. [ 663.205395][T25258] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.205941][T25258] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.228329][T25258] bridge0: entered allmulticast mode [ 663.455966][ T12] : (slave team0): link status definitely down, disabling slave [ 663.783108][T25269] netlink: 'syz.3.4946': attribute type 2 has an invalid length. [ 663.930941][T25288] sock: sock_set_timeout: `syz.4.4950' (pid 25288) tries to set negative timeout [ 663.993678][T25278] mac80211_hwsim hwsim41 wlan0: left promiscuous mode [ 664.858858][T25306] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 664.967144][T25308] debugfs: '1ùà^!' already exists in 'ieee80211' [ 665.320010][T25318] xt_l2tp: v2 doesn't support IP mode [ 666.288601][T25356] macsec0: entered promiscuous mode [ 666.602551][T25374] __nla_validate_parse: 3 callbacks suppressed [ 666.602570][T25374] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4977'. [ 666.602588][T25374] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4977'. [ 666.650649][T25377] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4977'. [ 666.650676][T25377] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4977'. [ 667.134790][T25399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4982'. [ 667.134811][T25399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4982'. [ 667.166463][T25400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4985'. [ 667.245992][T25397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4983'. [ 667.246872][T25406] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4981'. [ 667.313326][T25390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4981'. [ 667.784602][T25400] bond11: entered promiscuous mode [ 667.784627][T25400] bond11: entered allmulticast mode [ 668.171743][T25451] bridge_slave_1: left allmulticast mode [ 668.171770][T25451] bridge_slave_1: left promiscuous mode [ 668.171988][T25451] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.210247][T25451] bridge_slave_0: left allmulticast mode [ 668.210274][T25451] bridge_slave_0: left promiscuous mode [ 668.210499][T25451] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.264626][T25457] netlink: 'syz.0.4992': attribute type 8 has an invalid length. [ 668.472634][T25477] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 669.031633][T25493] bond5: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 669.159302][T25493] bond5 (unregistering): Released all slaves [ 669.266184][T25498] tc_dump_action: action bad kind [ 669.372465][T25506] netlink: 'syz.2.4997': attribute type 1 has an invalid length. [ 670.090536][T25528] Bluetooth: hci0: unsupported parameter 5135 [ 670.090569][T25528] Bluetooth: hci0: unsupported parameter 8192 [ 670.090580][T25528] Bluetooth: hci0: unsupported parameter 5135 [ 670.090591][T25528] Bluetooth: hci0: unsupported parameter 8192 [ 670.133770][T25531] netlink: 'syz.1.5008': attribute type 8 has an invalid length. [ 670.166213][T25534] ip6t_REJECT: ECHOREPLY is not supported [ 670.602881][T25555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.742586][T25556] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 670.765741][T25556] bond5 (unregistering): Released all slaves [ 671.727331][T25604] __nla_validate_parse: 7 callbacks suppressed [ 671.727349][T25604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5025'. [ 671.727597][T25604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5025'. [ 671.727771][T25604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5025'. [ 671.727964][T25604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5025'. [ 671.728156][T25604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5025'. [ 671.728327][T25604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5025'. [ 671.728509][T25604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5025'. [ 671.728675][T25604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5025'. [ 671.824941][T25604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5025'. [ 671.825160][T25604] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5025'. [ 673.827164][T25678] tipc: Started in network mode [ 673.827194][T25678] tipc: Node identity ac14140f, cluster identity 4711 [ 673.827434][T25678] tipc: New replicast peer: 255.255.255.255 [ 673.827866][T25678] tipc: Enabled bearer , priority 10 [ 674.016627][T25696] netlink: 'syz.3.5043': attribute type 1 has an invalid length. [ 674.024323][T25697] netlink: 'syz.3.5043': attribute type 1 has an invalid length. [ 674.227602][T25704] netlink: 'syz.2.5044': attribute type 2 has an invalid length. [ 674.606771][T25721] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 674.944467][ T1223] tipc: Node number set to 2886997007 [ 675.338129][T25749] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 675.338157][T25749] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 675.997612][T25769] syzkaller1: entered promiscuous mode [ 675.997634][T25769] syzkaller1: entered allmulticast mode [ 676.505148][T25780] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 676.585679][T25790] bridge_slave_1 (unregistering): left allmulticast mode [ 676.585706][T25790] bridge_slave_1 (unregistering): left promiscuous mode [ 676.585776][T25790] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.990118][T25808] netlink: 'syz.1.5073': attribute type 23 has an invalid length. [ 677.419246][T25813] netlink: 'syz.4.5075': attribute type 19 has an invalid length. [ 677.419267][T25813] __nla_validate_parse: 40 callbacks suppressed [ 677.419278][T25813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5075'. [ 677.509177][T25813] netlink: 'syz.4.5075': attribute type 19 has an invalid length. [ 677.509197][T25813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5075'. [ 677.518391][ T7027] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.521243][T21355] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.521310][T21355] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.686337][T25825] dvmrp0: entered allmulticast mode [ 677.708886][T25823] dvmrp0: left allmulticast mode [ 677.885475][T25864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5079'. [ 677.959288][T25847] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5079'. [ 677.996624][T25864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5079'. [ 678.520274][T25901] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5081'. [ 678.663837][T25889] openvswitch: netlink: IP tunnel dst address not specified [ 678.663871][T25889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.006641][T25905] pim6reg: entered allmulticast mode [ 679.147174][T25930] vlan0: entered promiscuous mode [ 679.147787][T25930] vlan0: entered allmulticast mode [ 679.147801][T25930] veth0_vlan: entered allmulticast mode [ 680.061237][T25966] xt_hashlimit: size too large, truncated to 1048576 [ 680.519800][T25986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5097'. [ 680.831906][T25986] syz.3.5097 (25986) used greatest stack depth: 18088 bytes left [ 680.889847][T25994] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 680.923405][T25995] sit0: entered promiscuous mode [ 681.060572][T25995] netlink: 'syz.4.5099': attribute type 1 has an invalid length. [ 681.060593][T25995] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5099'. [ 681.100718][T26000] netlink: 'syz.4.5099': attribute type 1 has an invalid length. [ 681.100738][T26000] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5099'. [ 681.856821][T26023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5105'. [ 681.911295][T26031] tipc: Enabling of bearer rejected, failed to enable media [ 682.568839][T26042] __nla_validate_parse: 2 callbacks suppressed [ 682.568860][T26042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5111'. [ 682.568874][T26042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5111'. [ 682.713378][T26045] [ 682.715766][T26045] ====================================================== [ 682.722872][T26045] WARNING: possible circular locking dependency detected [ 682.729973][T26045] syzkaller #0 Not tainted [ 682.734400][T26045] ------------------------------------------------------ [ 682.741501][T26045] syz.1.5112/26045 is trying to acquire lock: [ 682.747638][T26045] ffff8880277ab418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 682.757303][T26045] [ 682.757303][T26045] but task is already holding lock: [ 682.764750][T26045] ffff8880277aaef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 682.775043][T26045] [ 682.775043][T26045] which lock already depends on the new lock. [ 682.775043][T26045] [ 682.785448][T26045] [ 682.785448][T26045] the existing dependency chain (in reverse order) is: [ 682.794447][T26045] [ 682.794447][T26045] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 682.803146][T26045] blk_alloc_queue+0x544/0x690 [ 682.808544][T26045] __blk_mq_alloc_disk+0x194/0x390 [ 682.814338][T26045] nbd_dev_add+0x494/0xb60 [ 682.819409][T26045] nbd_init+0x168/0x1f0 [ 682.824219][T26045] do_one_initcall+0x250/0x870 [ 682.829577][T26045] do_initcall_level+0x10a/0x1a0 [ 682.835108][T26045] do_initcalls+0x59/0xa0 [ 682.839964][T26045] kernel_init_freeable+0x29d/0x3e0 [ 682.845677][T26045] kernel_init+0x22/0x1d0 [ 682.850657][T26045] ret_from_fork+0x514/0xb70 [ 682.855789][T26045] ret_from_fork_asm+0x1a/0x30 [ 682.861082][T26045] [ 682.861082][T26045] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 682.868282][T26045] fs_reclaim_acquire+0x71/0x100 [ 682.873780][T26045] __kmalloc_cache_node_noprof+0x66/0x620 [ 682.880007][T26045] create_worker+0x112/0x7c0 [ 682.885129][T26045] workqueue_prepare_cpu+0xe4/0x170 [ 682.890834][T26045] cpuhp_invoke_callback+0x434/0x810 [ 682.896651][T26045] _cpu_up+0x2ce/0x5b0 [ 682.901233][T26045] cpu_up+0x1d2/0x220 [ 682.905727][T26045] cpuhp_bringup_mask+0xb2/0x1a0 [ 682.911238][T26045] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 682.917552][T26045] bringup_nonboot_cpus+0x17/0x30 [ 682.923090][T26045] smp_init+0x32/0x110 [ 682.927761][T26045] kernel_init_freeable+0x27f/0x3e0 [ 682.933472][T26045] kernel_init+0x22/0x1d0 [ 682.938316][T26045] ret_from_fork+0x514/0xb70 [ 682.943415][T26045] ret_from_fork_asm+0x1a/0x30 [ 682.948704][T26045] [ 682.948704][T26045] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 682.956421][T26045] cpus_read_lock+0x42/0x160 [ 682.961521][T26045] static_key_slow_inc+0x12/0x30 [ 682.967006][T26045] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 682.973242][T26045] nbd_genl_foreach_sock+0x265/0x450 [ 682.979044][T26045] nbd_genl_reconfigure+0xbbb/0x1040 [ 682.984843][T26045] genl_family_rcv_msg_doit+0x233/0x340 [ 682.991039][T26045] genl_rcv_msg+0x614/0x7a0 [ 682.996069][T26045] netlink_rcv_skb+0x226/0x4a0 [ 683.001408][T26045] genl_rcv+0x28/0x40 [ 683.005901][T26045] netlink_unicast+0x7bd/0x940 [ 683.011202][T26045] netlink_sendmsg+0x813/0xb40 [ 683.016484][T26045] sock_sendmsg_nosec+0x13a/0x180 [ 683.022095][T26045] ____sys_sendmsg+0x54e/0x850 [ 683.027370][T26045] ___sys_sendmsg+0x2a5/0x360 [ 683.032560][T26045] __x64_sys_sendmsg+0x1b1/0x290 [ 683.038014][T26045] do_syscall_64+0x166/0x520 [ 683.043199][T26045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.049630][T26045] [ 683.049630][T26045] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 683.057262][T26045] __mutex_lock+0x19d/0x1550 [ 683.062364][T26045] nbd_queue_rq+0x373/0xff0 [ 683.067385][T26045] blk_mq_dispatch_rq_list+0x499/0x1990 [ 683.073447][T26045] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 683.080364][T26045] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 683.086857][T26045] blk_mq_run_work_fn+0x16c/0x300 [ 683.092396][T26045] process_scheduled_works+0xc3d/0x1630 [ 683.098455][T26045] worker_thread+0xa47/0xfb0 [ 683.103555][T26045] kthread+0x38b/0x480 [ 683.108158][T26045] ret_from_fork+0x514/0xb70 [ 683.113256][T26045] ret_from_fork_asm+0x1a/0x30 [ 683.118540][T26045] [ 683.118540][T26045] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 683.125743][T26045] __mutex_lock+0x19d/0x1550 [ 683.130849][T26045] nbd_queue_rq+0xc1/0xff0 [ 683.135773][T26045] blk_mq_dispatch_rq_list+0x499/0x1990 [ 683.141830][T26045] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 683.148678][T26045] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 683.155200][T26045] blk_mq_run_work_fn+0x16c/0x300 [ 683.160738][T26045] process_scheduled_works+0xc3d/0x1630 [ 683.166799][T26045] worker_thread+0xa47/0xfb0 [ 683.171906][T26045] kthread+0x38b/0x480 [ 683.176500][T26045] ret_from_fork+0x514/0xb70 [ 683.181602][T26045] ret_from_fork_asm+0x1a/0x30 [ 683.186916][T26045] [ 683.186916][T26045] -> #1 (set->srcu){.+.+}-{0:0}: [ 683.194027][T26045] __synchronize_srcu+0xc9/0x2f0 [ 683.199529][T26045] elevator_switch+0x1e8/0x7b0 [ 683.204800][T26045] elevator_change+0x2fa/0x480 [ 683.210086][T26045] elevator_set_default+0x375/0x440 [ 683.215798][T26045] blk_register_queue+0x3f3/0x4e0 [ 683.221466][T26045] __add_disk+0x6b8/0xdb0 [ 683.226314][T26045] add_disk_fwnode+0x100/0x3a0 [ 683.231594][T26045] nbd_dev_add+0x733/0xb60 [ 683.236518][T26045] nbd_init+0x168/0x1f0 [ 683.241188][T26045] do_one_initcall+0x250/0x870 [ 683.246468][T26045] do_initcall_level+0x10a/0x1a0 [ 683.251940][T26045] do_initcalls+0x59/0xa0 [ 683.256778][T26045] kernel_init_freeable+0x29d/0x3e0 [ 683.262493][T26045] kernel_init+0x22/0x1d0 [ 683.267337][T26045] ret_from_fork+0x514/0xb70 [ 683.272437][T26045] ret_from_fork_asm+0x1a/0x30 [ 683.277726][T26045] [ 683.277726][T26045] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 683.285531][T26045] __lock_acquire+0x164c/0x2de0 [ 683.290949][T26045] lock_acquire+0x115/0x350 [ 683.295964][T26045] __mutex_lock+0x19d/0x1550 [ 683.301072][T26045] elevator_change+0x1af/0x480 [ 683.306348][T26045] elevator_set_none+0xb5/0x140 [ 683.311707][T26045] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 683.318030][T26045] nbd_start_device+0x189/0xb30 [ 683.323398][T26045] nbd_genl_connect+0x167d/0x1cd0 [ 683.328938][T26045] genl_family_rcv_msg_doit+0x233/0x340 [ 683.335019][T26045] genl_rcv_msg+0x614/0x7a0 [ 683.340042][T26045] netlink_rcv_skb+0x226/0x4a0 [ 683.345335][T26045] genl_rcv+0x28/0x40 [ 683.349857][T26045] netlink_unicast+0x7bd/0x940 [ 683.355147][T26045] netlink_sendmsg+0x813/0xb40 [ 683.360433][T26045] sock_sendmsg_nosec+0x13a/0x180 [ 683.365964][T26045] ____sys_sendmsg+0x54e/0x850 [ 683.371260][T26045] ___sys_sendmsg+0x2a5/0x360 [ 683.376476][T26045] __x64_sys_sendmsg+0x1b1/0x290 [ 683.381945][T26045] do_syscall_64+0x166/0x520 [ 683.387056][T26045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.393479][T26045] [ 683.393479][T26045] other info that might help us debug this: [ 683.393479][T26045] [ 683.403713][T26045] Chain exists of: [ 683.403713][T26045] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 683.403713][T26045] [ 683.417452][T26045] Possible unsafe locking scenario: [ 683.417452][T26045] [ 683.424978][T26045] CPU0 CPU1 [ 683.430352][T26045] ---- ---- [ 683.435711][T26045] lock(&q->q_usage_counter(io)#51); [ 683.441079][T26045] lock(fs_reclaim); [ 683.447570][T26045] lock(&q->q_usage_counter(io)#51); [ 683.455470][T26045] lock(&q->elevator_lock); [ 683.460047][T26045] [ 683.460047][T26045] *** DEADLOCK *** [ 683.460047][T26045] [ 683.468241][T26045] locks held by syz.1.5112/26045: 6, last CPU#1: [ 683.474610][T26045] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 683.482822][T26045] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 683.491860][T26045] #2: ffff8880277bd1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 683.503256][T26045] #3: ffff8880277bd0d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 683.514211][T26045] #4: ffff8880277aaef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 683.524822][T26045] #5: ffff8880277aaf28 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 683.535693][T26045] [ 683.535693][T26045] stack backtrace: [ 683.541615][T26045] CPU: 1 UID: 0 PID: 26045 Comm: syz.1.5112 Not tainted syzkaller #0 PREEMPT(full) [ 683.551008][T26045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 683.561062][T26045] Call Trace: [ 683.564342][T26045] [ 683.567370][T26045] dump_stack_lvl+0xe8/0x150 [ 683.572018][T26045] print_circular_bug+0x2e2/0x300 [ 683.577036][T26045] check_noncircular+0x12f/0x150 [ 683.581974][T26045] __lock_acquire+0x164c/0x2de0 [ 683.586824][T26045] lock_acquire+0x115/0x350 [ 683.591317][T26045] ? elevator_change+0x1af/0x480 [ 683.596278][T26045] __mutex_lock+0x19d/0x1550 [ 683.600869][T26045] ? elevator_change+0x1af/0x480 [ 683.605797][T26045] ? rcu_is_watching+0x16/0xb0 [ 683.610551][T26045] ? elevator_change+0x1af/0x480 [ 683.615562][T26045] ? __pfx___mutex_lock+0x10/0x10 [ 683.620578][T26045] ? enable_work+0x17f/0x230 [ 683.625164][T26045] ? lockdep_hardirqs_on+0x7b/0x110 [ 683.630356][T26045] ? __cancel_work_sync+0xf8/0x110 [ 683.635461][T26045] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 683.640914][T26045] elevator_change+0x1af/0x480 [ 683.645671][T26045] elevator_set_none+0xb5/0x140 [ 683.650511][T26045] ? __pfx_elevator_set_none+0x10/0x10 [ 683.655963][T26045] ? xa_load+0x1db/0x210 [ 683.660200][T26045] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 683.666001][T26045] ? kernfs_add_one+0xfc/0x6f0 [ 683.670804][T26045] ? nbd_start_device+0x17d/0xb30 [ 683.675819][T26045] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 683.682059][T26045] ? sysfs_add_file_mode_ns+0x258/0x300 [ 683.687632][T26045] nbd_start_device+0x189/0xb30 [ 683.692475][T26045] ? device_create_file+0xf4/0x1b0 [ 683.697684][T26045] nbd_genl_connect+0x167d/0x1cd0 [ 683.702700][T26045] ? __pfx_nbd_genl_connect+0x10/0x10 [ 683.708066][T26045] ? rcu_is_watching+0x16/0xb0 [ 683.712827][T26045] ? __nla_parse+0x40/0x60 [ 683.717324][T26045] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 683.723648][T26045] genl_family_rcv_msg_doit+0x233/0x340 [ 683.729185][T26045] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 683.735245][T26045] ? __lock_acquire+0x747/0x2de0 [ 683.740209][T26045] genl_rcv_msg+0x614/0x7a0 [ 683.744704][T26045] ? __pfx_genl_rcv_msg+0x10/0x10 [ 683.749720][T26045] ? __pfx_nbd_genl_connect+0x10/0x10 [ 683.755087][T26045] netlink_rcv_skb+0x226/0x4a0 [ 683.759847][T26045] ? __pfx_genl_rcv_msg+0x10/0x10 [ 683.764862][T26045] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 683.770148][T26045] ? down_read+0x2be/0x330 [ 683.774631][T26045] genl_rcv+0x28/0x40 [ 683.778603][T26045] netlink_unicast+0x7bd/0x940 [ 683.783391][T26045] netlink_sendmsg+0x813/0xb40 [ 683.788155][T26045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.793439][T26045] ? apparmor_socket_sendmsg+0x98/0x360 [ 683.799055][T26045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.804353][T26045] sock_sendmsg_nosec+0x13a/0x180 [ 683.809372][T26045] ____sys_sendmsg+0x54e/0x850 [ 683.814134][T26045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.819412][T26045] ? import_iovec+0x73/0xa0 [ 683.823989][T26045] ___sys_sendmsg+0x2a5/0x360 [ 683.828661][T26045] ? __lock_acquire+0x747/0x2de0 [ 683.833585][T26045] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.838773][T26045] ? futex_wait+0x2a2/0x390 [ 683.843306][T26045] ? __fget_files+0x2a/0x420 [ 683.847899][T26045] ? __fget_files+0x3a2/0x420 [ 683.852569][T26045] __x64_sys_sendmsg+0x1b1/0x290 [ 683.857498][T26045] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 683.862957][T26045] do_syscall_64+0x166/0x520 [ 683.867553][T26045] ? trace_irq_disable+0x3b/0x140 [ 683.872587][T26045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.878640][T26045] ? clear_bhb_loop+0x70/0xc0 [ 683.883309][T26045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.889187][T26045] RIP: 0033:0x7f795ad9e159 [ 683.893661][T26045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.913295][T26045] RSP: 002b:00007f795bca5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.921765][T26045] RAX: ffffffffffffffda RBX: 00007f795b025fa0 RCX: 00007f795ad9e159 [ 683.929725][T26045] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 000000000000000b [ 683.937681][T26045] RBP: 00007f795ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 683.945635][T26045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.953591][T26045] R13: 00007f795b026038 R14: 00007f795b025fa0 R15: 00007ffffc9b3548 [ 683.961559][T26045] [ 684.358641][T20742] block nbd2: Receive control failed (result -32) [ 684.358700][T20742] block nbd2: Receive control failed (result -32)